This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/u5edTuljBCCJBf9W6EAHQV2CNPw.roa File: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (raw, json) Hash identifier: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0= Subject key identifier: BB:97:9D:4E:E9:63:04:20:89:05:FF:56:E8:40:07:41:5D:82:34:FC Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c Certificate serial: 019B797EACE69D679CFFF682158DF9434FB6 Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/u5edTuljBCCJBf9W6EAHQV2CNPw.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33885 IP address blocks: 193.178.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ac:e6:9d:67:9c:ff:f6:82:15:8d:f9:43:4f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb979d4ee96304208905ff56e84007415d8234fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:b6:f6:b7:fe:92:ff:6a:bc:27:28:ac:9c: 4f:d3:cc:51:f1:06:74:59:eb:a8:c9:47:47:4e:4a: 66:ee:da:6f:13:9b:4b:f0:bf:8d:17:b2:d7:28:c5: d9:54:64:31:d5:d2:cf:e8:b8:c0:ae:d7:4f:14:14: 34:6a:e0:1b:c1:10:97:b9:a8:3e:7f:63:11:0a:ea: ed:cb:79:72:84:c4:01:69:bf:4d:b0:82:0e:e5:1a: 7c:e4:63:cf:74:90:1a:c7:11:74:b4:6b:c3:5a:4d: 14:c0:4d:e6:86:d3:97:24:cf:92:1f:16:fe:d2:97: 2f:ab:5d:bb:3b:41:6f:15:18:06:9e:7d:33:93:e7: 12:0d:bd:e1:f7:4b:9e:3c:be:de:04:00:46:16:f6: 76:19:fa:0a:ff:18:7b:da:49:8f:21:07:5d:9b:67: a7:a0:35:7b:8d:a5:8e:24:26:ba:ff:b7:1a:bf:e4: b4:78:78:fc:24:7c:4d:3b:4e:a9:c5:57:24:dd:a7: 24:4f:67:6a:39:83:e2:9c:a5:11:12:5b:fe:50:c9: c2:a7:72:93:66:8c:52:5e:2d:87:e6:e1:14:6f:5f: 94:fd:d2:7b:2d:d0:31:16:3f:5d:79:97:6b:0d:c5: a9:d3:16:8a:ed:60:ac:ab:e8:92:85:11:60:35:93: 69:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:97:9D:4E:E9:63:04:20:89:05:FF:56:E8:40:07:41:5D:82:34:FC X509v3 Authority Key Identifier: keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/u5edTuljBCCJBf9W6EAHQV2CNPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.130.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:3a:c3:a3:e2:70:ad:21:94:1b:63:06:4b:4d:b0:ed:8d:67: 07:a1:7a:d9:56:77:e7:3b:c2:5d:57:d3:f1:17:8a:ab:14:48: 4e:fe:ea:c6:9c:dc:d4:d8:22:fe:f9:af:b6:3c:1c:16:2b:5d: a4:d6:49:f1:d1:74:02:4b:7b:90:08:e1:40:63:f9:c7:03:52: 0d:69:d0:15:76:9a:2e:bf:88:6a:2f:5e:95:43:f1:8e:11:d7: 4d:ee:ed:cd:d8:f8:d8:c1:71:d7:d8:dd:e9:4d:59:35:06:48: 72:76:86:ab:6d:fb:7b:8c:ce:ca:2b:49:de:34:e7:66:02:bc: 32:72:57:a1:99:be:3d:6e:02:94:2a:af:5a:12:f2:7f:a3:76: 29:93:a0:c3:36:a3:2e:bb:24:d3:56:a4:4c:f3:dd:fd:bd:ab: 47:96:ed:0d:bd:61:3e:44:cb:b3:c8:fa:c4:15:80:69:b9:b9: 2d:e3:a3:98:8b:dc:4e:84:97:7f:01:81:83:ff:76:57:35:e5: 12:4b:a0:1a:9f:2c:d6:58:18:e6:c4:fc:63:ca:f1:cf:5c:74: 39:b5:87:fe:95:78:d1:2c:a3:08:dc:cd:4a:f6:c9:92:f0:15: dd:f7:74:e4:ec:6e:19:ad:2d:60:1d:99:b8:47:6a:81:dc:ce: c7:5d:a9:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqzmnWec//aCFY35Q0+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTE1NTkwY2E2ZjZiNTQ0MGM2ZTI1MzQzY2Q4NDAxODY4 ZTNhMWMwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjk3OWQ0ZWU5NjMwNDIwODkwNWZmNTZlODQwMDc0MTVkODIzNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvri29rf+kv9qvCcorJxP08xR8QZ0 WeuoyUdHTkpm7tpvE5tL8L+NF7LXKMXZVGQx1dLP6LjArtdPFBQ0auAbwRCXuag+ f2MRCurty3lyhMQBab9NsIIO5Rp85GPPdJAaxxF0tGvDWk0UwE3mhtOXJM+SHxb+ 0pcvq127O0FvFRgGnn0zk+cSDb3h90uePL7eBABGFvZ2GfoK/xh72kmPIQddm2en oDV7jaWOJCa6/7cav+S0eHj8JHxNO06pxVck3ackT2dqOYPinKURElv+UMnCp3KT ZoxSXi2H5uEUb1+U/dJ7LdAxFj9deZdrDcWp0xaK7WCsq+iShRFgNZNpDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLuXnU7pYwQgiQX/VuhAB0FdgjT8MB8GA1UdIwQY MBaAFNkRVZDKb2tUQMbiU0PNhAGGjjocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNDU1MjAtZDljYy00NWYyLTg2NDUt M2ZmYTM5YjRkYzBiLzEvdTVlZFR1bGpCQ0NKQmY5VzZFQUhRVjJDTlB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hNDU1MjAtZDljYy00NWYyLTg2NDUtM2ZmYTM5YjRkYzBi LzEvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbKCMA0G CSqGSIb3DQEBCwUAA4IBAQBrOsOj4nCtIZQbYwZLTbDtjWcHoXrZVnfnO8JdV9Px F4qrFEhO/urGnNzU2CL++a+2PBwWK12k1knx0XQCS3uQCOFAY/nHA1INadAVdpou v4hqL16VQ/GOEddN7u3N2PjYwXHX2N3pTVk1Bkhydoarbft7jM7KK0neNOdmArwy clehmb49bgKUKq9aEvJ/o3Ypk6DDNqMuuyTTVqRM8939vatHlu0NvWE+RMuzyPrE FYBpubkt46OYi9xOhJd/AYGD/3ZXNeUSS6AanyzWWBjmxPxjyvHPXHQ5tYf+lXjR LKMI3M1K9smS8BXd93Tk7G4ZrS1gHZm4R2qB3M7HXanm -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:53 2026 by rpki-client