This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa File: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (raw, json) Hash identifier: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM= Subject key identifier: 11:9D:D0:62:E3:B5:6A:A3:D9:26:32:C7:4F:46:18:54:69:0D:0A:84 Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 019B7AC7B632D06BBA70901DB77E061EBFC9 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa Signing time: Thu 01 Jan 2026 18:17:47 +0000 ROA not before: Thu 01 Jan 2026 18:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215140 IP address blocks: 193.22.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b6:32:d0:6b:ba:70:90:1d:b7:7e:06:1e:bf:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Jan 1 18:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=119dd062e3b56aa3d92632c74f461854690d0a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:6e:6f:e3:5f:31:e4:85:85:34:9a:74:85: b4:c7:ad:be:a3:7c:18:16:16:62:19:78:85:7d:f6: 68:b5:50:de:84:a6:d5:5a:30:5e:ec:d0:ee:e6:08: ba:77:a7:d4:4c:88:83:b9:12:4b:d4:c9:18:aa:ca: 68:48:51:86:22:f6:0b:d6:75:c2:9c:cd:42:22:bb: 01:4b:1a:28:34:79:76:f7:68:a9:30:bc:e9:0e:43: 42:05:23:a7:6a:f9:e2:2e:dd:0d:5c:62:f4:96:ce: ce:9d:05:aa:da:03:c0:05:04:08:40:ce:e2:d9:b0: 30:bd:dd:e3:8c:06:29:25:aa:a3:57:6d:57:88:98: c3:0d:94:77:9e:9f:98:1f:33:99:25:8d:bb:07:92: 8d:93:79:2a:98:60:1f:8b:7e:63:c3:5b:83:da:3e: 75:05:83:ae:bf:0d:df:d6:66:7e:1b:ac:e4:dd:ce: 00:1b:d3:55:0b:f1:50:12:94:0b:18:10:e3:34:c9: e2:52:95:38:d6:21:8f:e6:cc:d7:1a:27:32:74:fe: 84:ee:55:e6:b1:0a:a1:59:df:9f:31:34:12:68:31: d0:d2:fb:36:1a:88:bf:4a:9c:d2:53:61:9c:f0:83: 06:4a:7f:6d:ea:3f:f8:d0:ff:a8:b9:20:4b:13:26: 2f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9D:D0:62:E3:B5:6A:A3:D9:26:32:C7:4F:46:18:54:69:0D:0A:84 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.129.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:29:d7:ac:3d:11:9e:49:d5:2e:88:aa:7c:ed:ef:16:e2:bb: b5:10:29:d4:c7:19:86:7f:4d:d7:dd:c6:ff:d5:5e:1b:74:66: 0d:12:df:d9:0b:6b:b7:c5:84:5a:45:61:46:90:ce:9b:ff:d9: 29:f9:63:4c:5a:67:89:c6:08:e2:1a:ec:f1:7d:fb:39:02:bc: 85:4a:f3:1e:9f:43:60:05:b0:38:a6:e9:6e:40:f2:b4:fb:7e: 4a:94:77:4c:f8:82:ed:f4:af:ef:ce:29:d2:23:3d:2d:00:ea: e3:56:91:9e:c8:6a:82:12:89:7f:ec:14:38:18:5f:3c:75:cc: 84:62:02:da:c0:8e:17:a4:b6:da:f7:b1:71:67:e6:57:2b:31: 7d:54:65:d5:a5:d9:cc:ad:d1:fa:3f:c8:dc:9b:fb:2f:0a:36: e1:35:b5:8c:f2:37:4d:a3:e7:cf:ad:52:5a:e8:5d:4d:ef:66: bc:27:5b:62:82:62:db:fb:92:0d:e7:6a:86:c9:89:54:1b:be: 66:a7:50:df:91:dc:e3:9c:f1:3b:15:2f:b4:91:4b:a5:f8:69: c4:6a:1c:56:01:f0:8b:8e:86:c7:3d:1b:06:5f:9b:f2:ec:20: fc:32:0b:78:da:d1:12:09:0b:ee:33:0e:7d:3f:f4:38:07:57: a1:fc:a5:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x7Yy0Gu6cJAdt34GHr/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjYwMTAxMTgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTlkZDA2MmUzYjU2YWEzZDkyNjMyYzc0ZjQ2MTg1NDY5MGQwYTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FFub+NfMeSFhTSadIW0x62+o3wY FhZiGXiFffZotVDehKbVWjBe7NDu5gi6d6fUTIiDuRJL1MkYqspoSFGGIvYL1nXC nM1CIrsBSxooNHl292ipMLzpDkNCBSOnavniLt0NXGL0ls7OnQWq2gPABQQIQM7i 2bAwvd3jjAYpJaqjV21XiJjDDZR3np+YHzOZJY27B5KNk3kqmGAfi35jw1uD2j51 BYOuvw3f1mZ+G6zk3c4AG9NVC/FQEpQLGBDjNMniUpU41iGP5szXGicydP6E7lXm sQqhWd+fMTQSaDHQ0vs2Goi/SpzSU2Gc8IMGSn9t6j/40P+ouSBLEyYvwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBGd0GLjtWqj2SYyx09GGFRpDQqEMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvRVozUVl1TzFhcVBaSmpMSFQwWVlWR2tOQ29RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRaBMA0G CSqGSIb3DQEBCwUAA4IBAQAtKdesPRGeSdUuiKp87e8W4ru1ECnUxxmGf03X3cb/ 1V4bdGYNEt/ZC2u3xYRaRWFGkM6b/9kp+WNMWmeJxgjiGuzxffs5AryFSvMen0Ng BbA4puluQPK0+35KlHdM+ILt9K/vzinSIz0tAOrjVpGeyGqCEol/7BQ4GF88dcyE YgLawI4XpLba97FxZ+ZXKzF9VGXVpdnMrdH6P8jcm/svCjbhNbWM8jdNo+fPrVJa 6F1N72a8J1tigmLb+5IN52qGyYlUG75mp1DfkdzjnPE7FS+0kUul+GnEahxWAfCL jobHPRsGX5vy7CD8Mgt42tESCQvuMw59P/Q4B1eh/KWt -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:56 2026 by rpki-client