This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa File: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (raw, json) Hash identifier: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE= Subject key identifier: FB:32:9E:6F:E2:1E:5F:CB:7D:AE:0D:63:8C:D1:65:FF:14:C0:7F:C9 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019B7E381C8D685AAB2926FEFBE5CB7669E0 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49127 IP address blocks: 193.37.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1c:8d:68:5a:ab:29:26:fe:fb:e5:cb:76:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb329e6fe21e5fcb7dae0d638cd165ff14c07fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:3b:a3:a9:fc:ed:30:2c:cd:87:c4:65:11: 8f:bd:e7:42:06:bf:91:9d:5a:6f:91:12:4d:be:01: d8:90:12:eb:71:c2:ff:00:ef:ff:ac:8a:42:40:ef: 7f:e3:79:e1:01:8f:51:1a:61:13:10:af:3e:a9:f5: 62:c4:3d:a8:9a:98:e0:7a:f9:48:28:6b:17:12:04: f9:40:63:f6:fd:c5:7e:d0:9e:ef:1a:69:7f:80:40: c7:6b:3b:a5:5f:40:61:c1:07:b5:50:21:ec:5f:4c: ed:18:41:7a:8c:f8:b6:eb:71:c3:a9:75:bd:1b:31: a7:7a:b1:f5:58:ff:38:6b:25:51:57:20:30:2d:15: 9c:e3:15:5a:42:0a:d3:d6:40:68:ab:43:17:ba:4d: 01:b4:a4:b3:58:83:b8:bf:d5:22:9a:78:c7:4c:87: dd:16:ff:d7:6e:de:32:6c:35:fe:63:44:70:73:1d: 31:b5:e3:b0:0d:94:2f:77:e7:4f:2d:17:32:0f:b3: 2e:ba:f1:6f:f8:8d:e4:5a:49:4f:bd:ae:6b:f5:ae: 4e:94:75:76:7e:03:c1:49:31:89:9e:be:d9:9c:33: 39:2f:3d:a3:9f:5f:38:da:1b:8a:5d:93:16:99:72: 8c:c4:94:72:cf:8f:fe:4b:76:7f:4f:30:9b:c3:6c: 98:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:32:9E:6F:E2:1E:5F:CB:7D:AE:0D:63:8C:D1:65:FF:14:C0:7F:C9 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.216.0/22 Signature Algorithm: sha256WithRSAEncryption ba:e9:80:57:fd:46:83:14:ea:46:4b:cc:45:75:55:41:a8:0d: 8f:f7:c9:89:05:23:fa:2f:09:69:2b:cc:03:4c:d5:a8:af:91: 9a:a2:d8:cb:65:9b:8b:a7:6e:63:07:94:4d:6a:e5:43:0e:da: 7a:76:40:2a:6d:ae:95:96:4d:32:58:c0:ba:a1:01:98:20:b1: 47:ba:f2:c0:79:b8:09:ad:40:6e:96:b7:e8:2d:6a:e1:9c:4e: 3c:e4:b6:90:43:26:8b:2e:1b:33:62:78:b8:03:af:66:ae:a2: 1c:fe:af:08:c8:b7:6e:4a:76:47:a9:b0:ea:41:6d:90:52:c1: 1d:e3:7f:9c:73:e8:88:90:b7:4b:e4:4b:ac:5f:bc:45:39:fd: 77:87:19:a6:e3:67:bc:b7:b9:1f:bc:56:21:f8:6c:38:50:ee: e4:1c:4e:51:07:d6:59:40:59:bd:24:8a:e9:5e:65:1d:b9:67: ee:4b:a4:86:06:29:4c:22:59:6a:f3:3d:d4:f4:f1:c1:74:9c: ed:3f:f1:7a:12:ef:11:56:f5:53:ae:8d:b7:5c:f3:15:48:0f: 31:08:ec:40:ce:d2:33:cc:0a:15:7d:cc:2c:c0:37:06:8d:05: e3:10:27:82:3a:0b:d0:d9:42:8d:cb:11:92:62:e5:6e:83:af: 38:72:8b:08 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OByNaFqrKSb+++XLdmngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjMyOWU2ZmUyMWU1ZmNiN2RhZTBkNjM4Y2QxNjVmZjE0YzA3ZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTM7o6n87TAszYfEZRGPvedCBr+R nVpvkRJNvgHYkBLrccL/AO//rIpCQO9/43nhAY9RGmETEK8+qfVixD2ompjgevlI KGsXEgT5QGP2/cV+0J7vGml/gEDHazulX0BhwQe1UCHsX0ztGEF6jPi263HDqXW9 GzGnerH1WP84ayVRVyAwLRWc4xVaQgrT1kBoq0MXuk0BtKSzWIO4v9UimnjHTIfd Fv/Xbt4ybDX+Y0Rwcx0xteOwDZQvd+dPLRcyD7MuuvFv+I3kWklPva5r9a5OlHV2 fgPBSTGJnr7ZnDM5Lz2jn1842huKXZMWmXKMxJRyz4/+S3Z/TzCbw2yYQwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsynm/iHl/Lfa4NY4zRZf8UwH/JMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvMS16S2ViLUllWDh0OXJnMWpqTkZsX3hUQWY4ay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTUvNDUyMmZiLWMxZGEtNGNjYy1hN2M3LWEwNDNlMWI2N2I5 NC8xL1FwSzEya3RQX3E5eUJrbFJqN3FxRU1YTEtCRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsEl2DAN BgkqhkiG9w0BAQsFAAOCAQEAuumAV/1GgxTqRkvMRXVVQagNj/fJiQUj+i8JaSvM A0zVqK+RmqLYy2Wbi6duYweUTWrlQw7aenZAKm2ulZZNMljAuqEBmCCxR7rywHm4 Ca1Abpa36C1q4ZxOPOS2kEMmiy4bM2J4uAOvZq6iHP6vCMi3bkp2R6mw6kFtkFLB HeN/nHPoiJC3S+RLrF+8RTn9d4cZpuNnvLe5H7xWIfhsOFDu5BxOUQfWWUBZvSSK 6V5lHbln7kukhgYpTCJZavM91PTxwXSc7T/xehLvEVb1U66Nt1zzFUgPMQjsQM7S M8wKFX3MLMA3Bo0F4xAngjoL0NlCjcsRkmLlboOvOHKLCA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:46 2026 by rpki-client