This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/49TpwXNTbP9jREpz2sa2Jtt7mT4.roa File: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (raw, json) Hash identifier: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o= Subject key identifier: E3:D4:E9:C1:73:53:6C:FF:63:44:4A:73:DA:C6:B6:26:DB:7B:99:3E Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5 Certificate serial: 019B79110C665EC762E891F47365A05D9D99 Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/49TpwXNTbP9jREpz2sa2Jtt7mT4.roa Signing time: Thu 01 Jan 2026 10:18:39 +0000 ROA not before: Thu 01 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 193.223.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0c:66:5e:c7:62:e8:91:f4:73:65:a0:5d:9d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5 Validity Not Before: Jan 1 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3d4e9c173536cff63444a73dac6b626db7b993e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:32:9a:76:a9:48:31:dd:fa:11:80:7a:31:28: 85:57:db:b6:bf:9a:21:f7:db:8c:dc:d4:8c:10:33: a4:5e:c1:fa:e0:0d:ac:53:f1:52:b2:3a:c3:b6:1f: 73:16:15:cd:21:08:f4:99:d9:ae:b7:38:19:a4:9a: 0a:2d:4f:3b:a4:f5:dc:52:2c:7b:a6:b8:73:ed:21: 75:dd:3f:c2:74:08:6b:0e:e4:9f:90:49:6a:49:70: 81:f0:92:54:83:96:b1:c1:18:13:c0:9c:ba:c5:24: e7:d6:d3:a5:42:4d:40:f6:3b:6d:25:d4:73:5b:63: 8c:45:9a:c2:3b:72:d7:cd:f4:7a:a0:6d:92:71:98: 07:1c:da:9b:29:84:c6:ba:ee:34:fd:67:c5:6c:7c: 65:50:e3:55:6a:cb:1f:8d:79:24:3d:da:b9:bd:6e: 37:5e:bf:7d:ef:0f:f8:21:c7:6e:5a:c4:98:af:c5: 93:0f:1f:e2:9a:5e:f8:2b:05:9a:18:5d:7b:20:ff: 5d:2f:4d:d6:89:82:88:91:65:a7:e5:3c:e5:12:fd: 99:16:cc:3e:31:45:7d:08:0c:04:0e:59:f4:60:33: 3f:a2:1c:aa:09:d6:bf:d3:e2:91:c9:cb:9d:03:6f: da:83:8d:c6:a5:dc:76:f8:a3:87:3a:d3:4d:23:29: 35:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D4:E9:C1:73:53:6C:FF:63:44:4A:73:DA:C6:B6:26:DB:7B:99:3E X509v3 Authority Key Identifier: keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/49TpwXNTbP9jREpz2sa2Jtt7mT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.223.208.0/24 Signature Algorithm: sha256WithRSAEncryption 17:f5:6d:e9:43:25:45:6c:74:ad:02:23:9c:0a:cb:62:43:3c: 70:22:60:58:8e:fc:99:bc:52:be:66:9f:d1:0c:dc:53:b2:60: 3b:22:30:b2:df:a0:95:0f:6a:e6:0e:f9:2b:6a:9f:0c:54:7d: 91:f4:7a:e3:3e:77:35:aa:6a:cb:a8:10:2c:70:3b:60:1f:bb: bf:0c:8c:d5:a4:04:98:a3:e9:eb:1a:44:17:c1:a2:7a:c9:35: 6d:f3:98:a7:1a:36:4e:a2:40:97:5c:ac:19:9b:3c:00:5c:ef: e0:47:49:9c:41:38:2e:b0:3c:72:f2:d5:78:35:33:17:e8:19: 28:79:1c:9d:fb:6a:a6:36:ee:32:54:01:5d:1b:c1:8c:88:bb: c7:93:6f:f7:51:46:dd:0c:33:52:ae:25:a7:fe:08:8f:80:a2: 40:8b:a2:ec:38:1e:92:81:d9:94:1c:10:0a:26:b5:3c:a9:e8: 8e:dc:cf:f1:b8:13:5d:b6:31:53:2b:e7:a3:e2:9c:bb:e0:d3: f1:2f:87:e8:a8:12:5d:11:a9:fc:cf:3a:4b:21:bd:c7:76:50: 1e:5d:22:ca:f5:7d:3d:83:fd:3d:3e:4f:93:d7:ef:20:b2:7d: 16:11:2b:04:8a:54:57:99:67:af:37:91:80:b1:d6:f9:c0:ea: c6:69:6e:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQxmXsdi6JH0c2WgXZ2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh M2NhYTUwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2Q0ZTljMTczNTM2Y2ZmNjM0NDRhNzNkYWM2YjYyNmRiN2I5OTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljKadqlIMd36EYB6MSiFV9u2v5oh 99uM3NSMEDOkXsH64A2sU/FSsjrDth9zFhXNIQj0mdmutzgZpJoKLU87pPXcUix7 prhz7SF13T/CdAhrDuSfkElqSXCB8JJUg5axwRgTwJy6xSTn1tOlQk1A9jttJdRz W2OMRZrCO3LXzfR6oG2ScZgHHNqbKYTGuu40/WfFbHxlUONVassfjXkkPdq5vW43 Xr997w/4IcduWsSYr8WTDx/iml74KwWaGF17IP9dL03WiYKIkWWn5TzlEv2ZFsw+ MUV9CAwEDln0YDM/ohyqCda/0+KRycudA2/ag43Gpdx2+KOHOtNNIyk1wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOPU6cFzU2z/Y0RKc9rGtibbe5k+MB8GA1UdIwQY MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt NDFjM2NmOTA4ZTk3LzEvNDlUcHdYTlRiUDlqUkVwejJzYTJKdHQ3bVQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3 LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd/QMA0G CSqGSIb3DQEBCwUAA4IBAQAX9W3pQyVFbHStAiOcCstiQzxwImBYjvyZvFK+Zp/R DNxTsmA7IjCy36CVD2rmDvkrap8MVH2R9HrjPnc1qmrLqBAscDtgH7u/DIzVpASY o+nrGkQXwaJ6yTVt85inGjZOokCXXKwZmzwAXO/gR0mcQTgusDxy8tV4NTMX6Bko eRyd+2qmNu4yVAFdG8GMiLvHk2/3UUbdDDNSriWn/giPgKJAi6LsOB6SgdmUHBAK JrU8qeiO3M/xuBNdtjFTK+ej4py74NPxL4foqBJdEan8zzpLIb3HdlAeXSLK9X09 g/09Pk+T1+8gsn0WESsEilRXmWevN5GAsdb5wOrGaW6i -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:26 2026 by rpki-client