This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/ED4SThrzQXYcrC-AEArSen9tJXk.roa File: ED4SThrzQXYcrC-AEArSen9tJXk.roa (raw, json) Hash identifier: 7Cm2n+7edQ/TSDNLB06WjyawgEuLOZa4VST/mcq8bUM= Subject key identifier: 10:3E:12:4E:1A:F3:41:76:1C:AC:2F:80:10:0A:D2:7A:7F:6D:25:79 Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439 Certificate serial: 019B7C7F772C22E9110B8A4D83CAB0A9C824 Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/ED4SThrzQXYcrC-AEArSen9tJXk.roa Signing time: Fri 02 Jan 2026 02:18:06 +0000 ROA not before: Fri 02 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198128 IP address blocks: 193.207.32.0/21 maxlen: 22 193.207.40.0/22 maxlen: 22 193.207.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:77:2c:22:e9:11:0b:8a:4d:83:ca:b0:a9:c8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439 Validity Not Before: Jan 2 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=103e124e1af341761cac2f80100ad27a7f6d2579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a1:29:25:28:4a:54:b9:4f:45:a7:56:ba:16: ae:5b:a6:f6:41:88:c0:ff:98:97:c7:2e:ac:29:fb: 32:48:02:3e:f1:83:23:45:4b:04:0b:7d:3c:ed:26: 04:01:84:4e:29:8e:f3:40:10:fa:d3:8b:a3:37:06: f4:71:3a:7c:5c:36:0c:ae:91:cc:bf:3a:c9:e6:d8: 61:67:a1:fe:96:44:15:cf:ea:c3:88:e3:74:95:72: 03:aa:c6:86:02:3b:02:e1:d8:cf:98:9d:64:8a:c1: b5:f2:50:e3:32:58:4f:fa:88:57:cf:46:80:64:b5: 78:fd:b4:3b:b4:47:7a:dd:e0:63:4c:ba:24:8d:9a: 3f:1c:08:df:f8:13:3e:bb:eb:90:2f:f4:b3:87:13: 16:7d:f9:12:81:f2:2f:f2:7b:f9:b6:9e:9c:7a:a6: 4a:c7:aa:e9:83:f1:9b:f7:13:f0:c8:e1:b1:d2:84: 6b:a7:2e:b9:88:39:f5:1b:5c:05:00:73:b9:f4:b1: 27:ab:c9:b9:5a:ae:4c:7e:2a:63:1d:1f:98:6c:6f: 84:61:e1:3c:56:29:47:49:92:36:13:53:85:1d:78: fb:bf:2b:cb:11:89:75:ac:90:1c:8b:7b:7a:65:ca: 87:bd:c9:a6:1f:c4:73:60:97:d1:aa:4e:39:ae:f2: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3E:12:4E:1A:F3:41:76:1C:AC:2F:80:10:0A:D2:7A:7F:6D:25:79 X509v3 Authority Key Identifier: keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/ED4SThrzQXYcrC-AEArSen9tJXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.207.32.0/20 Signature Algorithm: sha256WithRSAEncryption 70:17:a8:7d:b9:99:37:5b:13:6a:4b:12:fc:95:bc:96:6d:29: c7:09:f1:47:06:e0:c4:29:41:b8:d5:25:00:86:0f:c6:11:b6: 05:02:f7:5e:dc:7d:7d:09:dd:f6:8d:14:3b:c2:c7:c5:2a:4d: e0:27:3b:3a:57:1c:50:a2:32:ef:8f:d8:9d:45:8c:a3:65:64: b5:c6:23:3d:b3:5d:f7:92:ad:50:24:3e:7c:42:c6:e9:99:51: 47:d4:d5:55:b7:b7:bc:ed:cd:b9:df:09:43:31:f4:c9:75:3d: 6b:d2:d1:6b:fe:87:f7:a4:54:90:cf:5f:be:4c:77:d6:e4:d5: bd:4a:8a:92:bb:cb:d9:bc:65:c0:38:f6:b5:3c:4f:1d:85:14: 04:11:56:e4:93:4e:fe:ba:7c:8a:55:9a:01:0b:22:8a:6d:ce: 21:6e:1c:cb:11:66:23:82:b9:bb:1c:31:e1:52:57:34:76:1d: 8b:93:3c:59:18:50:3d:b2:29:4e:05:7e:1b:94:36:ed:55:cd: ba:27:0f:8c:04:35:6b:1e:b8:a5:61:18:7f:60:51:60:2f:43: 39:e2:66:f0:83:d7:f0:b1:d4:0b:ef:06:90:29:15:89:a8:5a: bb:00:4f:6d:60:8d:21:75:de:56:7a:76:42:ab:e5:11:8e:ca: 91:90:f7:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3csIukRC4pNg8qwqcgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYjg2OTgzNTQ3MTEzMzU5YmFkZTFmM2YzODEwNDA5MWUz YTY0MzkwHhcNMjYwMTAyMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDNlMTI0ZTFhZjM0MTc2MWNhYzJmODAxMDBhZDI3YTdmNmQyNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qEpJShKVLlPRadWuhauW6b2QYjA /5iXxy6sKfsySAI+8YMjRUsEC3087SYEAYROKY7zQBD604ujNwb0cTp8XDYMrpHM vzrJ5thhZ6H+lkQVz+rDiON0lXIDqsaGAjsC4djPmJ1kisG18lDjMlhP+ohXz0aA ZLV4/bQ7tEd63eBjTLokjZo/HAjf+BM+u+uQL/SzhxMWffkSgfIv8nv5tp6ceqZK x6rpg/Gb9xPwyOGx0oRrpy65iDn1G1wFAHO59LEnq8m5Wq5MfipjHR+YbG+EYeE8 VilHSZI2E1OFHXj7vyvLEYl1rJAci3t6ZcqHvcmmH8RzYJfRqk45rvIFTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBA+Ek4a80F2HKwvgBAK0np/bSV5MB8GA1UdIwQY MBaAFM64aYNUcRM1m63h8/OBBAkeOmQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2Qt ZGVlMmY2NTBkZDg2LzEvRUQ0U1RocnpRWFljckMtQUVBclNlbjl0SlhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2QtZGVlMmY2NTBkZDg2 LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwc8gMA0G CSqGSIb3DQEBCwUAA4IBAQBwF6h9uZk3WxNqSxL8lbyWbSnHCfFHBuDEKUG41SUA hg/GEbYFAvde3H19Cd32jRQ7wsfFKk3gJzs6VxxQojLvj9idRYyjZWS1xiM9s133 kq1QJD58QsbpmVFH1NVVt7e87c253wlDMfTJdT1r0tFr/of3pFSQz1++THfW5NW9 SoqSu8vZvGXAOPa1PE8dhRQEEVbkk07+unyKVZoBCyKKbc4hbhzLEWYjgrm7HDHh Ulc0dh2LkzxZGFA9silOBX4blDbtVc26Jw+MBDVrHrilYRh/YFFgL0M54mbwg9fw sdQL7waQKRWJqFq7AE9tYI0hdd5WenZCq+URjsqRkPf7 -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:02 2026 by rpki-client