This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/40PEkc-tm16gXqeqAbwomk4v-Yk.roa File: 40PEkc-tm16gXqeqAbwomk4v-Yk.roa (raw, json) Hash identifier: kAK1M/TYnJhlmuxrKwwSccKl4wPc1ihYIyT7lVRZWKM= Subject key identifier: E3:43:C4:91:CF:AD:9B:5E:A0:5E:A7:AA:01:BC:28:9A:4E:2F:F9:89 Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Certificate serial: 019B797E03975A47EB451D8FDE084148A393 Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/40PEkc-tm16gXqeqAbwomk4v-Yk.roa Signing time: Thu 01 Jan 2026 12:17:40 +0000 ROA not before: Thu 01 Jan 2026 12:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33965 IP address blocks: 193.228.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:03:97:5a:47:eb:45:1d:8f:de:08:41:48:a3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Validity Not Before: Jan 1 12:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e343c491cfad9b5ea05ea7aa01bc289a4e2ff989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:da:ba:d0:79:93:2d:aa:55:86:07:e2:e4: a1:c7:ee:09:d3:f5:1d:82:96:77:4d:fd:62:61:9e: b3:f0:e6:13:b1:76:02:4b:85:70:e1:a4:04:96:34: 13:a5:b0:b6:67:44:ff:e0:49:ee:df:e6:b3:1c:e5: 7f:7e:15:a6:ef:56:41:c0:68:34:16:26:cb:b9:fc: 68:22:2e:3e:13:4a:b3:3e:a9:5e:ba:59:95:6a:1f: a4:a8:48:bf:4b:6e:74:c0:75:83:72:ae:7e:d5:0f: 45:33:bc:78:e7:c3:92:79:5d:db:64:c1:18:df:5f: 8e:4f:54:00:b9:c3:fc:37:d1:9d:2b:89:67:87:96: 26:4d:c1:2f:6b:4c:a4:aa:ac:b2:c2:fd:40:37:19: 5a:f1:bf:c0:ac:c4:76:f7:24:d7:36:5a:6e:d8:ec: 85:87:db:d6:00:b5:48:4e:66:12:c7:cf:08:42:cc: 11:0a:37:5c:99:93:32:e0:3c:fd:5c:7f:33:aa:63: 3e:fa:06:03:63:0b:35:b8:50:b4:e5:b5:4b:47:7e: 58:cb:04:66:a4:22:08:21:51:0d:b0:0b:6e:99:95: 44:02:f0:1a:19:1d:1d:d8:eb:25:1a:7a:ed:f8:f2: bc:76:ab:de:80:74:68:d5:ef:b0:1b:c6:75:e1:8c: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:43:C4:91:CF:AD:9B:5E:A0:5E:A7:AA:01:BC:28:9A:4E:2F:F9:89 X509v3 Authority Key Identifier: keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/40PEkc-tm16gXqeqAbwomk4v-Yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.197.0/24 Signature Algorithm: sha256WithRSAEncryption 61:49:84:c1:84:1e:f4:17:7d:60:4c:c5:9c:14:71:69:7d:ca: 15:21:6a:56:37:3c:a8:df:56:23:bf:ae:5c:98:44:b3:1c:1a: 7d:92:09:a2:23:58:86:13:42:48:93:86:8f:02:14:54:29:0f: 66:b7:65:40:1f:dd:21:42:95:90:52:81:bf:ce:0c:65:9b:d7: 3c:52:1e:82:a2:93:56:6f:aa:05:9c:71:6e:72:88:94:6e:6b: c3:53:4a:11:c2:e5:2c:63:ed:6b:b3:b7:7f:c3:f9:a2:a7:5e: 85:30:9d:c2:f3:e3:bf:39:5f:92:ea:94:a4:89:21:d2:1f:90: 88:b3:5a:dc:0c:11:14:bc:a5:20:17:3c:e1:dc:8e:7b:f3:12: 4d:f9:0f:bc:17:e0:9c:cf:8e:57:a2:46:0a:fb:10:f6:1a:91: c1:cf:cf:79:90:7c:e7:eb:b8:7a:2a:64:00:fc:3b:51:25:ed: 75:4f:4c:fe:a0:d1:b4:62:4b:dc:36:d5:20:d5:ad:0c:45:ad: 90:40:87:ee:f8:ce:14:7b:4d:5d:de:20:93:ab:73:af:0a:cb: 48:b4:5b:4b:18:92:54:69:a9:a0:2f:c6:e6:65:be:cd:7c:37: b2:4f:ae:b9:ce:f0:fd:d5:c1:2c:be:cf:90:c4:d4:40:31:1a: bd:03:e7:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fgOXWkfrRR2P3ghBSKOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4 ZDFlZTIwHhcNMjYwMTAxMTIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzQzYzQ5MWNmYWQ5YjVlYTA1ZWE3YWEwMWJjMjg5YTRlMmZmOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wvautB5ky2qVYYH4uShx+4J0/Ud gpZ3Tf1iYZ6z8OYTsXYCS4Vw4aQEljQTpbC2Z0T/4Enu3+azHOV/fhWm71ZBwGg0 FibLufxoIi4+E0qzPqleulmVah+kqEi/S250wHWDcq5+1Q9FM7x458OSeV3bZMEY 31+OT1QAucP8N9GdK4lnh5YmTcEva0ykqqyywv1ANxla8b/ArMR29yTXNlpu2OyF h9vWALVITmYSx88IQswRCjdcmZMy4Dz9XH8zqmM++gYDYws1uFC05bVLR35YywRm pCIIIVENsAtumZVEAvAaGR0d2OslGnrt+PK8dqvegHRo1e+wG8Z14YxK8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFONDxJHPrZteoF6nqgG8KJpOL/mJMB8GA1UdIwQY MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt N2JmYjQzODFhYjU0LzEvNDBQRWtjLXRtMTZnWHFlcUFid29tazR2LVlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0 LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweTFMA0G CSqGSIb3DQEBCwUAA4IBAQBhSYTBhB70F31gTMWcFHFpfcoVIWpWNzyo31Yjv65c mESzHBp9kgmiI1iGE0JIk4aPAhRUKQ9mt2VAH90hQpWQUoG/zgxlm9c8Uh6CopNW b6oFnHFucoiUbmvDU0oRwuUsY+1rs7d/w/mip16FMJ3C8+O/OV+S6pSkiSHSH5CI s1rcDBEUvKUgFzzh3I578xJN+Q+8F+Ccz45XokYK+xD2GpHBz895kHzn67h6KmQA /DtRJe11T0z+oNG0YkvcNtUg1a0MRa2QQIfu+M4Ue01d3iCTq3OvCstItFtLGJJU aamgL8bmZb7NfDeyT665zvD91cEsvs+QxNRAMRq9A+fq -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:25 2026 by rpki-client