This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/49d3lo0t_8Ax5cbwJrY_Tha0ERQ.roa File: 49d3lo0t_8Ax5cbwJrY_Tha0ERQ.roa (raw, json) Hash identifier: qoFvjnjBe3Z9lf3XdiqiaeG3oM6pWV6dcIPmH4VpFRw= Subject key identifier: E3:D7:77:96:8D:2D:FF:C0:31:E5:C6:F0:26:B6:3F:4E:16:B4:11:14 Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c Certificate serial: 019B77C69DCA679A05598B9B0E9EAE9874FC Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/49d3lo0t_8Ax5cbwJrY_Tha0ERQ.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21239 IP address blocks: 193.109.126.0/24 maxlen: 24 194.0.6.0/24 maxlen: 24 195.22.138.0/23 maxlen: 24 2a02:6e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9d:ca:67:9a:05:59:8b:9b:0e:9e:ae:98:74:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3d777968d2dffc031e5c6f026b63f4e16b41114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:60:f4:f5:b3:7c:b0:0c:82:ed:0d:88:d1: 57:84:bd:77:2a:a4:e4:cc:88:78:a1:47:dd:90:ca: 2e:d4:bb:4c:65:9d:40:fd:57:dd:1a:62:cb:7b:36: 75:c2:80:d7:d4:09:21:25:8c:43:b9:d7:04:91:77: 62:cc:d1:bf:d4:d1:bc:16:01:19:fc:bb:5e:75:7c: e5:6f:c6:43:43:02:a8:cb:14:af:d9:c7:11:3d:c6: 92:80:86:38:cb:9d:1f:26:aa:3a:62:d9:fb:2e:f9: 3a:57:ae:1e:42:3f:ae:ad:0a:1f:4e:03:52:52:b6: 1a:d8:31:0e:d7:c1:b3:1b:2a:82:09:37:64:11:ef: 3f:5a:df:74:a1:6c:52:95:3d:0a:19:11:31:22:be: 06:d9:3f:81:df:2b:48:cf:b3:7f:cb:ce:34:3c:d4: 52:d1:e7:f9:b4:3c:eb:9e:93:27:8d:26:1a:22:75: 80:2d:f4:30:09:1f:71:0f:78:08:71:b1:26:c1:03: fe:54:a0:96:cb:63:ca:c5:48:bc:37:3f:59:ad:e4: 7d:10:01:ee:b4:be:c8:53:75:cd:f4:bd:15:ad:05: 60:62:c2:8b:6f:11:14:15:43:c9:33:ac:b6:f2:16: 76:f8:2d:e1:16:0e:5d:a4:9a:cb:cc:ba:73:fd:08: 29:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D7:77:96:8D:2D:FF:C0:31:E5:C6:F0:26:B6:3F:4E:16:B4:11:14 X509v3 Authority Key Identifier: keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/49d3lo0t_8Ax5cbwJrY_Tha0ERQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.126.0/24 194.0.6.0/24 195.22.138.0/23 IPv6: 2a02:6e0::/32 Signature Algorithm: sha256WithRSAEncryption 1e:6a:dc:92:bf:4d:92:f3:11:6c:02:0e:e5:2b:84:7b:8e:3b: 1f:82:05:4b:87:a3:70:cc:99:dd:10:4e:04:37:82:5a:c5:4d: 68:73:fc:60:fb:3d:5f:ea:33:53:ba:7c:f2:91:ca:fc:f4:18: 8f:b4:3f:83:6c:d0:a8:f5:28:f7:dd:90:5d:83:ef:af:cc:86: ab:d9:eb:c6:a5:ea:97:cc:64:d2:f3:d0:f7:0b:fe:65:cb:06: f5:37:61:70:8c:c4:83:b4:95:2b:0e:41:d6:d6:60:29:c8:67: f6:ba:23:dd:4c:bd:9f:a2:20:16:ed:12:29:20:0c:9d:44:d8: dc:bf:94:58:d7:6b:d8:f4:9e:10:c8:b9:3d:61:31:37:ee:be: a9:e8:36:bb:76:21:91:db:67:b7:1b:36:a8:20:ac:d6:c1:b6: b5:6e:54:9a:7c:07:75:4b:62:87:44:ea:0d:98:ac:2b:03:70: bd:ea:6a:fd:b5:31:c2:20:88:81:99:98:16:37:91:32:c1:ad: ef:a1:e4:39:30:9c:6f:ca:27:47:0d:03:e1:bf:b1:08:46:7d: e1:8f:ed:ce:5e:12:27:ae:15:8b:52:71:7d:e4:1e:b4:95:40: 2b:e8:0b:56:9a:9e:2f:5d:64:e6:ac:97:94:67:6a:c4:46:db: fa:ba:29:fe -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3xp3KZ5oFWYubDp6umHT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDM5MTRhNDhlNWRhZTVhNzU2YjFlM2I4ZmJlNDM3ZWUw ZDhiMGMwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2Q3Nzc5NjhkMmRmZmMwMzFlNWM2ZjAyNmI2M2Y0ZTE2YjQxMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Fg9PWzfLAMgu0NiNFXhL13KqTk zIh4oUfdkMou1LtMZZ1A/VfdGmLLezZ1woDX1AkhJYxDudcEkXdizNG/1NG8FgEZ /LtedXzlb8ZDQwKoyxSv2ccRPcaSgIY4y50fJqo6Ytn7Lvk6V64eQj+urQofTgNS UrYa2DEO18GzGyqCCTdkEe8/Wt90oWxSlT0KGRExIr4G2T+B3ytIz7N/y840PNRS 0ef5tDzrnpMnjSYaInWALfQwCR9xD3gIcbEmwQP+VKCWy2PKxUi8Nz9ZreR9EAHu tL7IU3XN9L0VrQVgYsKLbxEUFUPJM6y28hZ2+C3hFg5dpJrLzLpz/QgppQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOPXd5aNLf/AMeXG8Ca2P04WtBEUMB8GA1UdIwQY MBaAFLRDkUpI5drlp1ax47j75DfuDYsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAt MzE0ZWY3NDZkOGE2LzEvNDlkM2xvMHRfOEF4NWNid0pyWV9UaGEwRVJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAtMzE0ZWY3NDZkOGE2 LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAwW1+AwQA wgAGAwQBwxaKMA0EAgACMAcDBQAqAgbgMA0GCSqGSIb3DQEBCwUAA4IBAQAeatyS v02S8xFsAg7lK4R7jjsfggVLh6NwzJndEE4EN4JaxU1oc/xg+z1f6jNTunzykcr8 9BiPtD+DbNCo9Sj33ZBdg++vzIar2evGpeqXzGTS89D3C/5lywb1N2FwjMSDtJUr DkHW1mApyGf2uiPdTL2foiAW7RIpIAydRNjcv5RY12vY9J4QyLk9YTE37r6p6Da7 diGR22e3GzaoIKzWwba1blSafAd1S2KHROoNmKwrA3C96mr9tTHCIIiBmZgWN5Ey wa3voeQ5MJxvyidHDQPhv7EIRn3hj+3OXhInrhWLUnF95B60lUAr6AtWmp4vXWTm rJeUZ2rERtv6uin+ -----END CERTIFICATE-----Generated at Sun Jan 25 10:30:50 2026 by rpki-client