This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa File: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (raw, json) Hash identifier: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ= Subject key identifier: 13:89:3F:18:B0:75:8E:1E:CC:3D:5B:3E:83:2A:7E:60:7F:62:D5:50 Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019B7CED60A009C04C3FAB56CA6C1F6C095C Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa Signing time: Fri 02 Jan 2026 04:18:10 +0000 ROA not before: Fri 02 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207412 IP address blocks: 193.108.206.0/23 maxlen: 24 212.102.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:60:a0:09:c0:4c:3f:ab:56:ca:6c:1f:6c:09:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Jan 2 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13893f18b0758e1ecc3d5b3e832a7e607f62d550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:db:b4:07:b0:06:f4:a4:09:a6:26:4d:17:5f: 51:2d:f3:8c:44:a0:0c:34:6c:7c:0d:3d:1d:0e:00: fc:83:45:b4:a7:17:86:c6:e6:bc:29:70:70:75:00: 68:aa:c4:70:32:0a:e7:f5:99:b0:c0:c4:c1:27:64: 69:d6:63:94:45:56:a5:fb:3d:b1:f9:6c:fd:31:d9: 45:29:23:c9:ab:51:eb:53:e9:3a:da:74:dc:7b:2f: 58:a8:fe:02:d3:50:6e:d5:23:6c:32:8a:3c:ff:b7: 1f:fd:76:51:5f:1e:13:6d:4d:dc:d4:09:ce:27:cb: 68:c4:a4:99:c1:9e:15:26:78:04:f3:70:7f:d3:48: da:49:9a:56:c2:2a:04:25:d4:f9:1e:bd:a0:8d:28: 0d:85:e2:7b:26:9d:71:57:d2:8a:92:84:eb:7a:58: 05:eb:bb:4e:08:c8:ad:1c:f3:46:e9:25:57:a8:e6: df:65:0d:17:8a:28:03:01:bf:7a:cc:ac:22:6f:72: bb:03:07:9e:a4:a9:1f:8b:a4:3b:a2:49:6d:0d:58: 1b:ce:22:2d:22:0f:c1:b2:fc:cf:3b:65:45:79:e3: 56:e6:8c:49:fd:d0:5f:1f:80:a2:cd:80:82:04:54: 18:5a:33:01:9a:87:83:3c:7b:5d:d8:1d:0a:e9:ef: 3d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:89:3F:18:B0:75:8E:1E:CC:3D:5B:3E:83:2A:7E:60:7F:62:D5:50 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.206.0/23 212.102.111.0/24 Signature Algorithm: sha256WithRSAEncryption bb:73:97:0d:58:7f:e5:80:5c:12:b2:4f:96:ad:89:3c:d8:0e: fb:82:c7:b4:ab:6a:ae:3f:67:91:a8:62:50:73:b5:a2:e6:b2: 34:ac:a4:fa:8f:a9:8a:a3:e7:76:67:30:40:69:53:b3:49:50: c1:b2:71:0f:06:b1:ab:f7:71:cb:4e:10:e6:ea:fd:a0:c0:ae: 6b:d3:7d:77:b0:9b:c8:c8:86:a7:3a:a9:e1:8c:9c:e5:e1:d5: ff:e2:cb:4c:97:e1:27:44:09:ab:a3:e7:0d:82:e7:ac:a2:07: ce:e1:97:d7:14:71:47:3a:91:98:ac:4d:8b:a8:32:96:a2:3c: 35:95:4e:1f:84:52:16:09:f5:30:5c:69:6b:9f:29:39:17:0b: d8:b2:92:22:4b:77:45:d3:95:46:82:1d:26:5e:51:f5:29:0f: 15:5f:32:c2:96:3a:8e:8f:19:f6:28:dc:29:88:9c:e2:9d:90: d7:be:86:a3:0b:d9:74:56:bf:d3:f7:8c:15:d0:d9:be:cd:ea: 96:42:96:82:ac:f0:30:50:a3:23:de:79:59:45:52:6c:f9:d3: b8:e3:9c:99:6a:60:29:35:66:96:bb:d9:a4:62:34:5b:80:60: 82:f7:f8:38:90:4d:11:0b:03:79:05:52:4d:72:30:ba:45:88: 61:14:4b:f5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87WCgCcBMP6tWymwfbAlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwMTAyMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzg5M2YxOGIwNzU4ZTFlY2MzZDViM2U4MzJhN2U2MDdmNjJkNTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Nu0B7AG9KQJpiZNF19RLfOMRKAM NGx8DT0dDgD8g0W0pxeGxua8KXBwdQBoqsRwMgrn9ZmwwMTBJ2Rp1mOURVal+z2x +Wz9MdlFKSPJq1HrU+k62nTcey9YqP4C01Bu1SNsMoo8/7cf/XZRXx4TbU3c1AnO J8toxKSZwZ4VJngE83B/00jaSZpWwioEJdT5Hr2gjSgNheJ7Jp1xV9KKkoTrelgF 67tOCMitHPNG6SVXqObfZQ0XiigDAb96zKwib3K7AweepKkfi6Q7okltDVgbziIt Ig/BsvzPO2VFeeNW5oxJ/dBfH4CizYCCBFQYWjMBmoeDPHtd2B0K6e890wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBOJPxiwdY4ezD1bPoMqfmB/YtVQMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvRTRrX0dMQjFqaDdNUFZzLWd5cC1ZSDlpMVZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwWzOAwQA 1GZvMA0GCSqGSIb3DQEBCwUAA4IBAQC7c5cNWH/lgFwSsk+WrYk82A77gse0q2qu P2eRqGJQc7Wi5rI0rKT6j6mKo+d2ZzBAaVOzSVDBsnEPBrGr93HLThDm6v2gwK5r 0313sJvIyIanOqnhjJzl4dX/4stMl+EnRAmro+cNguesogfO4ZfXFHFHOpGYrE2L qDKWojw1lU4fhFIWCfUwXGlrnyk5FwvYspIiS3dF05VGgh0mXlH1KQ8VXzLCljqO jxn2KNwpiJzinZDXvoajC9l0Vr/T94wV0Nm+zeqWQpaCrPAwUKMj3nlZRVJs+dO4 45yZamApNWaWu9mkYjRbgGCC9/g4kE0RCwN5BVJNcjC6RYhhFEv1 -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:55 2026 by rpki-client