This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/53Y6HNT6PybZ5fv0RIq3VzI1Ero.roa File: 53Y6HNT6PybZ5fv0RIq3VzI1Ero.roa (raw, json) Hash identifier: gfRH81Dg27dQ3kodzezmL1Q0yfGmr/Pdqe1spxmMPZE= Subject key identifier: E7:76:3A:1C:D4:FA:3F:26:D9:E5:FB:F4:44:8A:B7:57:32:35:12:BA Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 019B7E391B19C05665162C6E7017B736707B Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/53Y6HNT6PybZ5fv0RIq3VzI1Ero.roa Signing time: Fri 02 Jan 2026 10:20:30 +0000 ROA not before: Fri 02 Jan 2026 10:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50043 IP address blocks: 193.228.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1b:19:c0:56:65:16:2c:6e:70:17:b7:36:70:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jan 2 10:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7763a1cd4fa3f26d9e5fbf4448ab757323512ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:1c:5a:20:f4:bb:1c:df:b4:86:f5:23:e4: 2f:4b:34:f2:14:60:d2:55:c1:31:ae:8d:13:f7:e3: 89:01:dd:c0:82:54:56:ed:74:e2:9d:c6:c7:db:a7: ed:da:22:57:31:72:0b:5f:8f:3e:1e:71:57:f1:dd: d3:13:6a:d3:38:63:57:c6:6e:68:20:56:32:3f:f0: 8d:1e:d4:88:25:f8:07:1e:45:04:c4:7f:d3:5e:78: 37:1b:a6:19:f9:5f:c8:76:27:c0:9e:37:04:02:e7: 0f:b6:7d:fb:1d:9f:ec:53:0f:d5:5a:9e:79:c4:fb: 2d:8f:71:1b:c6:af:4b:9c:4d:13:7f:14:5c:31:f7: 8a:79:d8:16:7f:0d:0e:71:6c:66:ef:ec:f3:8d:00: 0f:6d:85:84:95:5e:2b:d4:07:60:30:65:4f:63:bf: 64:f7:55:80:e8:01:11:58:a7:c4:71:3a:66:bb:db: c8:e9:cc:71:c5:5c:30:48:79:74:0e:d4:63:be:33: b3:d3:79:74:b5:c6:11:64:2a:07:c9:c8:70:40:d1: 51:8a:86:ea:18:dc:09:f2:05:fd:0f:03:f8:4d:b1: f3:90:78:70:bc:9d:c6:3c:aa:a4:0f:8d:5a:24:58: 3e:4c:c6:b6:43:fe:ba:77:1a:49:6c:a7:07:79:d2: 2a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:76:3A:1C:D4:FA:3F:26:D9:E5:FB:F4:44:8A:B7:57:32:35:12:BA X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/53Y6HNT6PybZ5fv0RIq3VzI1Ero.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.125.0/24 Signature Algorithm: sha256WithRSAEncryption a3:c4:07:9e:61:58:c4:79:0d:b0:bf:26:95:6c:be:af:c7:b6: 11:29:82:be:84:5a:93:31:ba:de:8f:2e:e4:6d:73:29:7a:96: a0:82:12:4c:00:18:6f:1a:ba:02:27:26:e9:64:c1:27:9e:b5: 63:e5:f1:a8:ff:54:39:1c:66:59:80:2e:fa:60:9b:98:fd:1d: 13:7e:80:7c:f3:3a:ea:6e:15:f8:cd:81:78:7f:13:8e:4f:10: 53:2e:b8:37:a1:d7:76:38:8e:63:f4:2e:16:6f:43:90:6d:42: b5:8d:1f:80:ef:d8:71:7f:7f:cc:ce:d3:f9:87:ff:65:13:13: 12:e7:04:5e:8c:75:1f:73:a6:44:a1:f7:87:d2:63:5d:4a:19: f5:e2:9a:29:53:21:2b:3e:96:c3:9a:46:2e:bf:98:e1:38:ca: 57:6d:ef:40:23:df:41:5b:e4:6c:f9:d6:ac:65:b7:0c:1d:48: a7:8a:15:80:b4:53:c1:d1:21:e2:91:35:00:e6:b7:ed:7d:43: eb:a5:1e:a8:22:45:35:26:19:46:1f:a4:4e:92:f7:40:13:bf: 1b:96:bc:74:9c:ab:3e:f4:22:bc:b6:f4:78:b5:d4:0d:4d:f1: 3a:29:cc:42:f9:f7:77:cd:3f:40:85:8f:dd:fb:a2:eb:0c:c2: b9:9b:b1:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORsZwFZlFixucBe3NnB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYwMTAyMTAyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzc2M2ExY2Q0ZmEzZjI2ZDllNWZiZjQ0NDhhYjc1NzMyMzUxMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXscWiD0uxzftIb1I+QvSzTyFGDS VcExro0T9+OJAd3AglRW7XTincbH26ft2iJXMXILX48+HnFX8d3TE2rTOGNXxm5o IFYyP/CNHtSIJfgHHkUExH/TXng3G6YZ+V/IdifAnjcEAucPtn37HZ/sUw/VWp55 xPstj3Ebxq9LnE0TfxRcMfeKedgWfw0OcWxm7+zzjQAPbYWElV4r1AdgMGVPY79k 91WA6AERWKfEcTpmu9vI6cxxxVwwSHl0DtRjvjOz03l0tcYRZCoHychwQNFRiobq GNwJ8gX9DwP4TbHzkHhwvJ3GPKqkD41aJFg+TMa2Q/66dxpJbKcHedIq8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOd2OhzU+j8m2eX79ESKt1cyNRK6MB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvNTNZNkhOVDZQeWJaNWZ2MFJJcTNWekkxRXJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweR9MA0G CSqGSIb3DQEBCwUAA4IBAQCjxAeeYVjEeQ2wvyaVbL6vx7YRKYK+hFqTMbrejy7k bXMpepagghJMABhvGroCJybpZMEnnrVj5fGo/1Q5HGZZgC76YJuY/R0TfoB88zrq bhX4zYF4fxOOTxBTLrg3odd2OI5j9C4Wb0OQbUK1jR+A79hxf3/MztP5h/9lExMS 5wRejHUfc6ZEofeH0mNdShn14popUyErPpbDmkYuv5jhOMpXbe9AI99BW+Rs+das ZbcMHUinihWAtFPB0SHikTUA5rftfUPrpR6oIkU1JhlGH6ROkvdAE78blrx0nKs+ 9CK8tvR4tdQNTfE6KcxC+fd3zT9AhY/d+6LrDMK5m7EX -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:34 2026 by rpki-client