This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/dNE3IpmpgpJoxxb7fF4vedmnBj8.roa File: dNE3IpmpgpJoxxb7fF4vedmnBj8.roa (raw, json) Hash identifier: qOFeCi7ARkIaRrB0ciIOcij/4wVRPx8UsUEgfrsP7Nw= Subject key identifier: 74:D1:37:22:99:A9:82:92:68:C7:16:FB:7C:5E:2F:79:D9:A7:06:3F Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac Certificate serial: 019B7A59C43A9B42F88100355633DE6B83B4 Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/dNE3IpmpgpJoxxb7fF4vedmnBj8.roa Signing time: Thu 01 Jan 2026 16:17:41 +0000 ROA not before: Thu 01 Jan 2026 16:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200252 IP address blocks: 193.107.48.0/24 maxlen: 24 2a01:f200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:c4:3a:9b:42:f8:81:00:35:56:33:de:6b:83:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac Validity Not Before: Jan 1 16:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74d1372299a9829268c716fb7c5e2f79d9a7063f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:dd:d7:9f:70:f2:db:d7:d3:7f:d9:b6:84: 22:c4:72:a0:65:b3:cf:0c:23:e0:0e:99:7f:4d:5c: 6c:64:9c:20:6b:d4:9d:5b:68:8b:34:94:82:ed:30: 24:ee:75:fb:d2:94:7e:1f:7c:4a:03:58:18:26:1b: bf:11:32:0a:62:f3:b5:f7:81:51:6e:94:b1:83:13: 24:91:56:94:e5:c1:55:09:b1:4d:99:04:5e:d9:1d: b6:19:5c:09:3b:cd:52:fe:ca:4b:be:3f:f1:e9:56: 31:1f:ae:38:99:af:3b:0c:4a:13:bd:1f:80:72:fa: 6e:a8:ca:16:94:52:f0:ac:ba:0b:d8:da:a3:f6:cc: 40:6e:03:62:ce:1e:75:b8:60:80:1e:66:14:ff:7d: f8:a6:fb:85:06:ec:37:0a:16:54:82:df:99:4c:fb: b0:16:7a:11:21:98:b8:93:12:fe:5d:1e:52:7e:cb: d4:62:9e:12:a1:c0:bd:16:f1:3e:8c:b9:6c:c9:72: bd:d0:be:33:d3:a6:0d:10:12:23:77:c3:e1:d7:23: 10:37:41:e3:7c:8f:5f:e9:6f:2a:41:b6:2e:9b:5c: 4c:50:e2:35:5f:44:da:50:f8:9a:87:bd:43:a2:0a: ae:6f:45:1c:fd:5a:64:5c:22:4f:21:2a:d1:69:c0: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D1:37:22:99:A9:82:92:68:C7:16:FB:7C:5E:2F:79:D9:A7:06:3F X509v3 Authority Key Identifier: keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/dNE3IpmpgpJoxxb7fF4vedmnBj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.48.0/24 IPv6: 2a01:f200::/29 Signature Algorithm: sha256WithRSAEncryption 20:8e:43:b8:0f:73:5d:d0:b0:a8:f8:8d:be:e2:46:91:93:ee: 15:37:ce:f6:39:5b:3b:7f:7d:f7:3e:f5:4a:0a:97:1f:af:4f: c8:b1:40:2e:8b:6b:98:82:48:ed:4f:b3:11:48:31:41:f8:dc: 65:6e:b7:0f:54:48:ca:3e:44:89:a2:ad:9d:34:88:9d:d7:16: 37:83:77:46:b8:d7:22:1a:5f:07:11:bb:37:e4:f0:1b:a1:e1: c6:d0:88:2a:66:ef:15:0d:ca:58:78:9d:b7:13:9c:a0:88:b3: a1:21:dc:c2:ae:15:1b:98:17:4b:17:5f:dc:71:bd:48:f1:c3: 17:a7:1f:99:e8:02:b1:b9:bd:2f:99:02:01:99:5c:d7:6b:98: 3e:3a:ac:6c:a4:b4:f7:f1:54:dc:2b:6d:73:5b:94:f8:84:b7: 60:f6:e3:53:b6:ab:64:11:17:d8:58:5e:82:e8:77:0f:ab:ed: 4d:b4:e4:e8:3c:94:de:00:43:1a:07:5e:74:d3:dc:ad:3c:c2: 45:95:7d:9f:a4:8f:b5:ed:a5:b3:7e:29:e0:15:6b:67:39:89: 73:74:25:4d:8f:b7:ec:b4:be:fb:80:31:f4:e0:0c:fb:e3:33: 43:d3:38:20:cd:53:31:3c:72:1b:e2:7a:b1:ac:25:9e:28:69: e7:ba:fd:4e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WcQ6m0L4gQA1VjPea4O0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTU2Nzk0YTdiOTg5MTExNWFkM2FmOTQ1NzNlNzk2MWIx NjRiYWMwHhcNMjYwMTAxMTYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGQxMzcyMjk5YTk4MjkyNjhjNzE2ZmI3YzVlMmY3OWQ5YTcwNjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZzd159w8tvX03/ZtoQixHKgZbPP DCPgDpl/TVxsZJwga9SdW2iLNJSC7TAk7nX70pR+H3xKA1gYJhu/ETIKYvO194FR bpSxgxMkkVaU5cFVCbFNmQRe2R22GVwJO81S/spLvj/x6VYxH644ma87DEoTvR+A cvpuqMoWlFLwrLoL2Nqj9sxAbgNizh51uGCAHmYU/334pvuFBuw3ChZUgt+ZTPuw FnoRIZi4kxL+XR5SfsvUYp4SocC9FvE+jLlsyXK90L4z06YNEBIjd8Ph1yMQN0Hj fI9f6W8qQbYum1xMUOI1X0TaUPiah71Dogqub0Uc/VpkXCJPISrRacBjuwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHTRNyKZqYKSaMcW+3xeL3nZpwY/MB8GA1UdIwQY MBaAFMOVZ5SnuYkRFa06+UVz55YbFkusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVWbmxLZTVpUkVWclRyNVJYUG5saHNXUzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lODkzNWItZTk1OS00NjI5LWJlZWYt NTAwNGZiMjg4ODRlLzEvZE5FM0lwbXBncEpveHhiN2ZGNHZlZG1uQmo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9lODkzNWItZTk1OS00NjI5LWJlZWYtNTAwNGZiMjg4ODRl LzEvdzVWbmxLZTVpUkVWclRyNVJYUG5saHNXUzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwWswMA0E AgACMAcDBQMqAfIAMA0GCSqGSIb3DQEBCwUAA4IBAQAgjkO4D3Nd0LCo+I2+4kaR k+4VN872OVs7f333PvVKCpcfr0/IsUAui2uYgkjtT7MRSDFB+NxlbrcPVEjKPkSJ oq2dNIid1xY3g3dGuNciGl8HEbs35PAboeHG0IgqZu8VDcpYeJ23E5ygiLOhIdzC rhUbmBdLF1/ccb1I8cMXpx+Z6AKxub0vmQIBmVzXa5g+OqxspLT38VTcK21zW5T4 hLdg9uNTtqtkERfYWF6C6HcPq+1NtOToPJTeAEMaB15009ytPMJFlX2fpI+17aWz fingFWtnOYlzdCVNj7fstL77gDH04Az74zND0zggzVMxPHIb4nqxrCWeKGnnuv1O -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:07 2026 by rpki-client