This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/ISzoHWBHuetmLQLrWc6n51rZYYg.roa File: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (raw, json) Hash identifier: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0= Subject key identifier: 21:2C:E8:1D:60:47:B9:EB:66:2D:02:EB:59:CE:A7:E7:5A:D9:61:88 Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0 Certificate serial: 019B7C1351FEB5DCD052D8B7B1B8AAA4839A Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/ISzoHWBHuetmLQLrWc6n51rZYYg.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9211 IP address blocks: 193.28.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:51:fe:b5:dc:d0:52:d8:b7:b1:b8:aa:a4:83:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0 Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=212ce81d6047b9eb662d02eb59cea7e75ad96188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d2:f6:be:a5:cc:0b:f9:69:89:45:13:2b:e1: 7f:68:97:3a:03:f2:dd:82:75:11:ba:af:0a:47:c6: 34:9e:c3:b3:d1:6c:e0:6f:fd:61:15:d1:06:42:e8: 57:3c:66:0c:8b:50:4c:d8:e0:ae:10:f9:9d:99:ee: c6:55:15:ed:d5:3b:30:12:29:f2:9b:b4:3d:1d:e4: 4e:dc:b3:1a:91:4f:98:a3:fa:91:d7:df:fc:1f:98: b2:3c:2c:a8:e3:f4:c1:41:d4:d8:dc:c8:91:f7:d9: 03:36:16:9a:b5:68:93:99:be:49:38:d9:c3:7a:eb: 45:3f:33:f0:a1:2f:b2:43:08:2d:d4:d6:38:d9:22: c3:d4:d0:e9:ed:3a:a3:1f:95:1d:85:68:be:1a:d0: 58:9d:96:4c:03:12:89:4e:cb:b5:d4:31:4f:fa:17: df:cc:af:6d:b6:68:a5:53:8a:3a:16:71:2f:83:14: 0d:6c:b4:96:99:fa:66:41:87:b2:5d:24:53:91:47: ba:ab:5a:2d:60:01:a0:4a:c7:02:0a:34:b1:8d:41: 85:05:a2:07:6b:85:14:a7:5d:53:a5:3a:e9:a0:ff: 35:bd:d4:31:92:3f:ff:1b:98:1e:77:e1:93:58:b1: 19:16:eb:44:50:72:a5:df:d3:04:88:34:8c:6e:9a: f6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2C:E8:1D:60:47:B9:EB:66:2D:02:EB:59:CE:A7:E7:5A:D9:61:88 X509v3 Authority Key Identifier: keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/ISzoHWBHuetmLQLrWc6n51rZYYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.52.0/23 Signature Algorithm: sha256WithRSAEncryption b7:0b:9d:1e:93:e6:b0:56:32:8f:5c:21:20:78:f0:41:4c:fd: 1e:0d:60:f5:1b:b9:a7:70:fd:a9:7e:c0:6f:e3:5f:38:aa:0d: b1:53:10:10:5f:42:09:70:1b:8a:f2:1f:c8:16:b2:c8:29:83: 61:13:2a:28:12:1a:a8:bf:3d:2d:ad:a3:21:8c:15:a8:9c:1c: 2c:6f:93:9e:75:9f:4f:07:ae:34:66:f6:9a:88:41:f6:64:4e: 51:2e:38:5f:88:cd:bb:4b:71:cd:b2:2e:ba:d1:31:e8:ce:70: a4:07:98:15:4d:5f:47:0e:51:a9:fd:2e:04:81:32:7a:eb:62: e0:81:df:da:8b:58:41:98:ab:69:00:1c:d6:04:37:d6:7f:af: 4d:18:5f:83:f9:6b:57:8a:ca:d8:c0:dd:b1:e5:7d:ca:d3:1f: 0c:bc:1e:58:77:1b:63:a4:1b:dd:e0:dc:16:fd:77:0d:ad:69: a4:dc:b6:bf:b2:bd:ea:dd:4c:bd:44:ac:cf:31:48:94:aa:3c: 1d:75:b8:b1:61:d3:0c:3b:a2:a8:c2:17:9a:36:dc:f8:72:30: fb:98:de:36:25:fa:01:2d:fe:02:ef:02:6b:fb:5a:bd:10:a9: 2a:2f:17:e0:29:8a:6a:a2:f5:e4:77:d7:eb:31:01:34:28:4f: fc:8a:c9:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1H+tdzQUti3sbiqpIOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx ZDNkZjAwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTJjZTgxZDYwNDdiOWViNjYyZDAyZWI1OWNlYTdlNzVhZDk2MTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NL2vqXMC/lpiUUTK+F/aJc6A/Ld gnURuq8KR8Y0nsOz0Wzgb/1hFdEGQuhXPGYMi1BM2OCuEPmdme7GVRXt1TswEiny m7Q9HeRO3LMakU+Yo/qR19/8H5iyPCyo4/TBQdTY3MiR99kDNhaatWiTmb5JONnD eutFPzPwoS+yQwgt1NY42SLD1NDp7TqjH5UdhWi+GtBYnZZMAxKJTsu11DFP+hff zK9ttmilU4o6FnEvgxQNbLSWmfpmQYeyXSRTkUe6q1otYAGgSscCCjSxjUGFBaIH a4UUp11TpTrpoP81vdQxkj//G5ged+GTWLEZFutEUHKl39MEiDSMbpr2jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCEs6B1gR7nrZi0C61nOp+da2WGIMB8GA1UdIwQY MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct ODRiNTc2OTNjN2E4LzEvSVN6b0hXQkh1ZXRtTFFMcldjNm41MXJaWVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4 LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRw0MA0G CSqGSIb3DQEBCwUAA4IBAQC3C50ek+awVjKPXCEgePBBTP0eDWD1G7mncP2pfsBv 4184qg2xUxAQX0IJcBuK8h/IFrLIKYNhEyooEhqovz0traMhjBWonBwsb5OedZ9P B640ZvaaiEH2ZE5RLjhfiM27S3HNsi660THoznCkB5gVTV9HDlGp/S4EgTJ662Lg gd/ai1hBmKtpABzWBDfWf69NGF+D+WtXisrYwN2x5X3K0x8MvB5YdxtjpBvd4NwW /XcNrWmk3La/sr3q3Uy9RKzPMUiUqjwddbixYdMMO6KowheaNtz4cjD7mN42JfoB Lf4C7wJr+1q9EKkqLxfgKYpqovXkd9frMQE0KE/8ismy -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:43 2026 by rpki-client