This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/sNbxwr_VlMceIOoORfjNh48fthg.roa File: sNbxwr_VlMceIOoORfjNh48fthg.roa (raw, json) Hash identifier: og1IfOlO+B5tux3x/JdwIjbchpmcSQUOsvTa4SrXgws= Subject key identifier: B0:D6:F1:C2:BF:D5:94:C7:1E:20:EA:0E:45:F8:CD:87:8F:1F:B6:18 Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Certificate serial: 019B7DCB479A8C57E83F4EF6825B0D58327B Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/sNbxwr_VlMceIOoORfjNh48fthg.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29310 IP address blocks: 193.223.252.0/23 maxlen: 24 213.244.115.0/24 maxlen: 24 213.244.116.0/24 maxlen: 24 213.244.117.0/24 maxlen: 24 213.244.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:47:9a:8c:57:e8:3f:4e:f6:82:5b:0d:58:32:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0d6f1c2bfd594c71e20ea0e45f8cd878f1fb618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7b:9d:24:93:c7:9e:84:b9:66:51:5a:aa:6f: 92:70:ed:9b:5f:ce:b8:df:f4:70:d0:01:68:e1:ee: e8:f9:5a:28:69:27:0e:1b:3f:49:f8:2c:48:5f:d9: 8b:e6:5c:d1:a7:97:17:c6:71:34:2d:4f:c2:1b:0a: 30:93:6f:2b:f0:ab:66:ef:bd:2c:53:53:2f:ef:83: de:d4:0b:d7:a1:9a:2f:e2:f4:05:12:00:eb:ff:e5: 82:c2:14:c5:e8:b1:0f:2f:97:e6:10:4b:7c:74:5d: d2:ef:97:82:65:b7:03:0a:c6:29:ef:1f:81:17:34: 56:e0:f5:58:29:0a:12:e9:59:6c:7d:9e:39:81:33: ed:0e:c3:c8:20:24:17:54:62:da:7d:f4:63:13:b3: b0:6b:aa:c2:8d:4b:5d:05:2c:67:ca:9d:95:e7:15: 43:1c:e6:f2:83:e7:9c:a3:83:bf:1f:84:09:0d:43: 61:90:62:c0:8b:9e:f6:62:fe:02:42:bf:f2:47:95: 32:e6:76:25:6c:4c:2b:73:07:f9:6a:b3:7c:b9:cd: a1:c1:77:7c:95:42:9d:bd:cd:81:8e:d7:bc:bd:fb: 04:e0:5a:cb:7b:35:6d:62:b7:a1:00:34:eb:a3:36: 24:8a:3a:b5:57:df:6c:dc:c4:d6:ae:a3:f9:71:f0: 9f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D6:F1:C2:BF:D5:94:C7:1E:20:EA:0E:45:F8:CD:87:8F:1F:B6:18 X509v3 Authority Key Identifier: keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/sNbxwr_VlMceIOoORfjNh48fthg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.223.252.0/23 213.244.115.0-213.244.117.255 213.244.122.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:46:62:94:3d:4c:89:b1:60:2f:ad:2a:77:35:4b:1d:49:58: cb:e1:67:32:71:36:c4:fd:14:fd:55:8c:69:c3:fe:4f:71:c9: a9:2a:84:e6:b2:f3:aa:4a:d6:34:bc:e9:27:42:85:57:5b:ca: de:a2:41:ef:3b:8a:4f:f0:03:86:cb:c9:8b:f2:01:68:f2:d2: 6c:5b:52:3a:3d:4b:9f:47:c9:2d:1e:59:6f:f6:10:c3:21:67: aa:34:5c:1f:9f:65:e3:0f:aa:df:99:60:1c:c6:a1:6e:93:4c: 8c:75:68:e6:80:c4:af:d9:36:db:b7:fe:f6:63:c0:a6:4b:64: ca:9e:30:34:da:15:20:f3:4c:61:25:90:44:ff:ac:47:41:2d: f6:81:41:2c:16:83:bd:44:d6:90:57:92:ba:a3:4c:86:85:7d: 0f:58:6d:f2:38:86:b5:4c:1e:49:3f:16:75:da:04:64:8b:9c: 19:06:60:46:41:16:b1:5d:f0:3d:c9:1d:ad:29:b3:d9:58:71: c1:44:f9:43:3f:e3:f2:ae:71:4e:97:bf:ff:95:63:a4:8f:c0: bf:a0:09:90:60:89:21:e0:2b:02:43:13:31:0f:c3:b2:3b:f3: 81:47:62:04:6e:3f:48:27:de:25:3b:2b:c6:d6:23:e4:aa:c2: 25:87:4b:1b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9y0eajFfoP072glsNWDJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm ZTc0ZjkwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGQ2ZjFjMmJmZDU5NGM3MWUyMGVhMGU0NWY4Y2Q4NzhmMWZiNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XudJJPHnoS5ZlFaqm+ScO2bX864 3/Rw0AFo4e7o+VooaScOGz9J+CxIX9mL5lzRp5cXxnE0LU/CGwowk28r8Ktm770s U1Mv74Pe1AvXoZov4vQFEgDr/+WCwhTF6LEPL5fmEEt8dF3S75eCZbcDCsYp7x+B FzRW4PVYKQoS6VlsfZ45gTPtDsPIICQXVGLaffRjE7Owa6rCjUtdBSxnyp2V5xVD HObyg+eco4O/H4QJDUNhkGLAi572Yv4CQr/yR5Uy5nYlbEwrcwf5arN8uc2hwXd8 lUKdvc2Bjte8vfsE4FrLezVtYrehADTrozYkijq1V99s3MTWrqP5cfCfywIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLDW8cK/1ZTHHiDqDkX4zYePH7YYMB8GA1UdIwQY MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt ZWI1YTYyN2U3NmEzLzEvc05ieHdyX1ZsTWNlSU9vT1Jmak5oNDhmdGhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBwd/8MAwD BADV9HMDBAHV9HQDBADV9HowDQYJKoZIhvcNAQELBQADggEBAG5GYpQ9TImxYC+t Knc1Sx1JWMvhZzJxNsT9FP1VjGnD/k9xyakqhOay86pK1jS86SdChVdbyt6iQe87 ik/wA4bLyYvyAWjy0mxbUjo9S59HyS0eWW/2EMMhZ6o0XB+fZeMPqt+ZYBzGoW6T TIx1aOaAxK/ZNtu3/vZjwKZLZMqeMDTaFSDzTGElkET/rEdBLfaBQSwWg71E1pBX krqjTIaFfQ9YbfI4hrVMHkk/FnXaBGSLnBkGYEZBFrFd8D3JHa0ps9lYccFE+UM/ 4/KucU6Xv/+VY6SPwL+gCZBgiSHgKwJDEzEPw7I784FHYgRuP0gn3iU7K8bWI+Sq wiWHSxs= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:25 2026 by rpki-client