This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/RzEThPJeooo6cusTAakJi0BfatI.roa File: RzEThPJeooo6cusTAakJi0BfatI.roa (raw, json) Hash identifier: BuJD8GqKUSjqTc/jeGntv9vl69R6B2QGUK/w/YWbh6Q= Subject key identifier: 47:31:13:84:F2:5E:A2:8A:3A:72:EB:13:01:A9:09:8B:40:5F:6A:D2 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCABA2F2F803A10474494A9CC0B32ED Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/RzEThPJeooo6cusTAakJi0BfatI.roa Signing time: Fri 02 Jan 2026 08:19:56 +0000 ROA not before: Fri 02 Jan 2026 08:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35285 IP address blocks: 193.189.122.0/24 maxlen: 24 193.189.123.0/24 maxlen: 24 194.225.70.0/24 maxlen: 24 2001:678:b1::/48 maxlen: 48 2001:14e8:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ba:2f:2f:80:3a:10:47:44:94:a9:cc:0b:32:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47311384f25ea28a3a72eb1301a9098b405f6ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bf:30:6e:17:12:f0:29:4f:ee:72:4e:1e:01: 81:b5:4b:2b:ac:3a:98:54:e8:e4:64:34:ac:c6:72: 0a:47:a7:be:99:69:94:b5:66:6f:6f:53:8a:17:f3: 74:5a:20:18:49:b1:6e:2a:34:a4:51:b4:d4:e0:c5: 7f:a6:78:f2:96:92:e3:7b:4a:8a:4b:e1:1f:49:b2: ac:3f:3d:9e:88:64:eb:14:6c:fa:f5:60:16:9a:18: 8d:9b:3d:ef:3b:bb:4e:de:e5:0b:7b:f7:0e:7a:b0: 78:2c:95:d6:b7:67:83:10:39:56:0f:ec:10:8c:f0: aa:37:2d:68:54:9a:b7:22:10:ff:70:13:20:1e:ad: 5d:16:62:a2:8f:88:63:d9:cf:9f:c9:2d:1c:80:b8: e3:a3:ed:d5:c9:25:c1:c5:64:fb:84:3d:f8:f7:d3: cc:b7:af:3d:08:68:e1:3a:07:b3:93:f0:e6:28:af: ca:77:b3:c5:63:7f:4b:ca:4e:4b:0e:e7:0c:63:bb: 06:61:8b:7a:58:98:bb:bd:a0:99:cc:a1:38:3f:1c: 37:61:fe:62:84:3d:b8:38:de:24:26:6d:7e:3f:b0: e7:46:56:ad:bc:ee:cf:69:a5:02:52:b1:62:a8:ed: 47:c5:9e:84:54:47:d9:c5:89:d3:33:16:1c:83:34: 0b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:31:13:84:F2:5E:A2:8A:3A:72:EB:13:01:A9:09:8B:40:5F:6A:D2 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/RzEThPJeooo6cusTAakJi0BfatI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.122.0/23 194.225.70.0/24 IPv6: 2001:678:b1::/48 2001:14e8:c::/48 Signature Algorithm: sha256WithRSAEncryption 2f:d8:4e:10:33:67:ce:d1:ca:4d:d9:d6:41:93:aa:cf:7a:59: 62:aa:7d:3a:e0:bf:86:d5:7c:f1:a5:ca:da:80:d9:61:b7:62: 3a:27:4c:1c:14:79:de:33:f9:c4:ef:05:e0:bc:b3:06:97:cd: ad:60:a4:50:8b:57:c9:6a:be:ce:79:ee:e3:4f:c8:ec:af:da: 0a:60:ac:12:9b:0b:74:0a:13:2a:34:db:73:e5:1c:38:80:ee: 52:fc:c2:1b:d7:33:14:03:a3:af:82:27:81:5c:ac:56:8e:f9: cf:bb:fc:bd:bc:bb:0f:f4:fd:b3:f6:0f:89:93:d2:fa:6e:c8: 68:4b:10:5d:89:b1:98:8e:a9:bc:b6:33:09:d3:62:16:3f:55: 53:95:31:08:c8:7b:cd:ed:70:2a:13:62:1f:5a:48:c5:a5:ab: f9:5d:f7:a6:e4:b6:0d:93:91:79:b5:18:40:a6:8b:fa:95:7a: e3:4d:a1:d7:db:52:a7:49:aa:8d:72:e0:e0:24:87:d2:7c:ac: 1f:12:a5:53:25:c6:71:e2:80:54:d1:34:67:76:03:bf:9e:af: cb:ee:91:70:43:66:f9:3c:1e:13:4d:9f:1d:5b:bd:eb:76:5b: 51:80:bc:8c:19:92:04:a1:af:17:7a:04:4e:99:9a:fd:da:c3: 10:30:51:fc -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9yrovL4A6EEdElKnMCzLtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzMxMTM4NGYyNWVhMjhhM2E3MmViMTMwMWE5MDk4YjQwNWY2YWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib8wbhcS8ClP7nJOHgGBtUsrrDqY VOjkZDSsxnIKR6e+mWmUtWZvb1OKF/N0WiAYSbFuKjSkUbTU4MV/pnjylpLje0qK S+EfSbKsPz2eiGTrFGz69WAWmhiNmz3vO7tO3uULe/cOerB4LJXWt2eDEDlWD+wQ jPCqNy1oVJq3IhD/cBMgHq1dFmKij4hj2c+fyS0cgLjjo+3VySXBxWT7hD3499PM t689CGjhOgezk/DmKK/Kd7PFY39Lyk5LDucMY7sGYYt6WJi7vaCZzKE4Pxw3Yf5i hD24ON4kJm1+P7DnRlatvO7PaaUCUrFiqO1HxZ6EVEfZxYnTMxYcgzQLMwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFEcxE4TyXqKKOnLrEwGpCYtAX2rSMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvUnpFVGhQSmVvb282Y3VzVEFha0ppMEJmYXRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBwb16AwQA wuFGMBgEAgACMBIDBwAgAQZ4ALEDBwAgARToAAwwDQYJKoZIhvcNAQELBQADggEB AC/YThAzZ87Ryk3Z1kGTqs96WWKqfTrgv4bVfPGlytqA2WG3YjonTBwUed4z+cTv BeC8swaXza1gpFCLV8lqvs557uNPyOyv2gpgrBKbC3QKEyo023PlHDiA7lL8whvX MxQDo6+CJ4FcrFaO+c+7/L28uw/0/bP2D4mT0vpuyGhLEF2JsZiOqby2MwnTYhY/ VVOVMQjIe83tcCoTYh9aSMWlq/ld96bktg2TkXm1GECmi/qVeuNNodfbUqdJqo1y 4OAkh9J8rB8SpVMlxnHigFTRNGd2A7+er8vukXBDZvk8HhNNnx1bvet2W1GAvIwZ kgShrxd6BE6Zmv3awxAwUfw= -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:24 2026 by rpki-client