This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa File: v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa (raw, json) Hash identifier: x4aNx2jmSAXUPJWnM7IfmYiwoUK7G3tuxZu7KLeQ7ms= Subject key identifier: BF:7C:68:BD:9E:9E:C7:54:52:F3:25:E9:BE:34:F1:9C:C1:7F:6B:EE Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c Certificate serial: 019B79EBAF39D8BBABB486AF0AC197DD2CD0 Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa Signing time: Thu 01 Jan 2026 14:17:27 +0000 ROA not before: Thu 01 Jan 2026 14:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 193.24.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:af:39:d8:bb:ab:b4:86:af:0a:c1:97:dd:2c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c Validity Not Before: Jan 1 14:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf7c68bd9e9ec75452f325e9be34f19cc17f6bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:c7:52:be:31:2e:23:09:7e:88:2d:c4:59: 3c:6a:f5:4b:40:fc:03:a6:1b:d3:e0:59:b4:9c:7e: e3:40:2d:8f:17:6b:3c:46:5e:64:49:25:e2:de:5c: f7:92:1d:aa:c4:c4:53:4d:d8:8d:da:f3:3e:f9:a8: 50:71:69:45:f0:e6:5c:d5:c0:05:ef:4c:23:75:e7: 2c:eb:28:c0:ef:b6:d1:3b:df:8a:d6:d1:61:70:ff: 87:5d:2f:c7:05:75:94:0f:1e:63:05:d5:6c:79:17: 70:e2:56:99:d7:21:63:12:a8:45:e5:e1:69:7b:8f: 58:cd:a4:99:67:a5:3f:3c:b6:7c:36:29:be:bb:4e: 67:a3:a8:4e:09:8b:d9:27:d4:2d:d1:2f:fb:20:f9: b5:cf:56:4e:65:92:22:df:ae:b5:17:c7:e1:6b:6a: e9:24:12:1b:90:53:04:9d:ee:be:dd:a5:b6:6a:bc: a5:11:a2:85:59:2b:7c:f1:ea:8a:cc:ea:46:54:36: 37:83:47:31:a6:f4:8b:68:24:4a:0b:ce:2b:52:63: 98:6a:62:a1:9c:fb:f1:ca:61:9e:19:f7:4b:a3:f6: 03:aa:2f:78:d9:a9:75:8e:ef:13:2a:bd:59:bf:bd: a9:b8:e0:09:3e:3f:69:50:e4:f5:6f:01:9f:a3:2f: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7C:68:BD:9E:9E:C7:54:52:F3:25:E9:BE:34:F1:9C:C1:7F:6B:EE X509v3 Authority Key Identifier: keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.105.0/24 Signature Algorithm: sha256WithRSAEncryption ba:be:ff:9a:76:0d:8b:70:17:60:4c:28:36:99:73:bd:a0:b1: cf:18:85:07:56:87:90:5f:cf:31:78:8a:9b:07:f9:3b:77:c6: 44:4f:80:59:c2:54:be:8f:21:ac:9f:d1:a2:c2:18:57:2b:72: 43:52:d0:2e:e3:4d:3b:b1:83:df:1d:f2:68:7b:4f:b0:99:a0: 0c:4c:e0:a7:34:d4:e5:21:a6:ff:cb:78:17:f2:e7:c9:a2:21: d9:10:88:fd:b6:1d:13:8a:4a:7b:0c:17:39:c5:df:27:b7:e9: 8e:87:48:44:4c:6f:fc:2e:c8:d0:8e:ed:a0:f0:41:66:4f:2b: dc:14:d3:05:8e:0b:e3:f9:8a:d0:4e:54:35:67:5f:4e:12:57: 4b:95:80:cd:fe:b7:51:7b:96:2b:94:04:b9:29:8f:6d:fb:4e: 23:cf:bc:c3:65:27:55:7b:9d:63:e6:2a:48:4a:82:8e:9e:ee: 52:31:d0:ce:9e:92:85:44:d7:c1:c8:58:03:d2:e6:dc:9e:90: bc:ac:3b:d5:4d:a4:9d:b4:13:9d:1d:96:4f:9b:cf:f5:6f:79: 3e:a2:83:10:3f:43:89:a6:d5:38:ea:59:b8:b1:0c:db:f7:de: 44:65:4f:86:a6:ba:d2:e0:fa:a9:8d:b7:65:c5:98:94:ac:00: 0f:73:f0:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt566852LurtIavCsGX3SzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjVmNWRjNzg0M2Y1Yjc2Njg5ZjM2YWI5MTZhMGQ5OTRi OTk3OWMwHhcNMjYwMTAxMTQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjdjNjhiZDllOWVjNzU0NTJmMzI1ZTliZTM0ZjE5Y2MxN2Y2YmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKfHUr4xLiMJfogtxFk8avVLQPwD phvT4Fm0nH7jQC2PF2s8Rl5kSSXi3lz3kh2qxMRTTdiN2vM++ahQcWlF8OZc1cAF 70wjdecs6yjA77bRO9+K1tFhcP+HXS/HBXWUDx5jBdVseRdw4laZ1yFjEqhF5eFp e49YzaSZZ6U/PLZ8Nim+u05no6hOCYvZJ9Qt0S/7IPm1z1ZOZZIi3661F8fha2rp JBIbkFMEne6+3aW2arylEaKFWSt88eqKzOpGVDY3g0cxpvSLaCRKC84rUmOYamKh nPvxymGeGfdLo/YDqi942al1ju8TKr1Zv72puOAJPj9pUOT1bwGfoy8b0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL98aL2ensdUUvMl6b408ZzBf2vuMB8GA1UdIwQY MBaAFC1l9dx4Q/W3ZonzarkWoNmUuZecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84NTBhZjgtNDhkNS00Mjk3LTlkYmUt OGU2MzNlMGYwNzlkLzEvdjN4b3ZaNmV4MVJTOHlYcHZqVHhuTUZfYS00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni84NTBhZjgtNDhkNS00Mjk3LTlkYmUtOGU2MzNlMGYwNzlk LzEvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRhpMA0G CSqGSIb3DQEBCwUAA4IBAQC6vv+adg2LcBdgTCg2mXO9oLHPGIUHVoeQX88xeIqb B/k7d8ZET4BZwlS+jyGsn9GiwhhXK3JDUtAu4007sYPfHfJoe0+wmaAMTOCnNNTl Iab/y3gX8ufJoiHZEIj9th0Tikp7DBc5xd8nt+mOh0hETG/8LsjQju2g8EFmTyvc FNMFjgvj+YrQTlQ1Z19OEldLlYDN/rdRe5YrlAS5KY9t+04jz7zDZSdVe51j5ipI SoKOnu5SMdDOnpKFRNfByFgD0ubcnpC8rDvVTaSdtBOdHZZPm8/1b3k+ooMQP0OJ ptU46lm4sQzb995EZU+GprrS4PqpjbdlxZiUrAAPc/Ay -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:34 2026 by rpki-client