This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/tN946_fedyvYqjcv1qVNuCe5qL8.roa File: tN946_fedyvYqjcv1qVNuCe5qL8.roa (raw, json) Hash identifier: e0nnRcrz2HzfnayUkxVdyx09YiT6CY4cb9MRimDfgbw= Subject key identifier: B4:DF:78:EB:F7:DE:77:2B:D8:AA:37:2F:D6:A5:4D:B8:27:B9:A8:BF Certificate issuer: /CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c Certificate serial: 019B7C80820D2DD01A46CC8A04962902E679 Authority key identifier: E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/tN946_fedyvYqjcv1qVNuCe5qL8.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210949 IP address blocks: 193.42.101.0/24 maxlen: 24 193.42.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.mft rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:82:0d:2d:d0:1a:46:cc:8a:04:96:29:02:e6:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4df78ebf7de772bd8aa372fd6a54db827b9a8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:0f:a1:3a:2b:b6:74:f2:1d:32:ac:67:83: 3c:fe:4d:50:38:7a:11:06:d5:2f:02:3f:ad:26:1b: 7d:5c:73:f8:c8:8a:1e:61:b0:e0:a2:ff:5f:be:fb: 1d:3e:81:b4:bb:eb:a5:23:7e:6c:f1:1f:81:7e:d6: 0c:be:49:26:fa:57:a3:ce:2b:b2:57:6d:98:d6:e7: 64:2b:c5:ad:32:cf:7f:92:dd:f5:36:bc:be:99:46: 2e:ea:bc:c4:63:40:8e:27:27:02:d9:cd:2c:49:16: 8a:af:6a:8e:d1:69:f8:96:4e:e0:78:14:ce:2f:7e: 19:0a:d4:7e:c3:31:f6:72:98:c5:7b:30:2b:e0:26: aa:4c:17:63:e4:6f:7a:cb:dd:15:19:7a:15:75:52: b8:05:bd:76:57:5b:6d:49:12:68:b2:18:e7:ff:2a: 5f:83:1d:f1:94:c1:37:91:b3:87:c4:dc:b8:2c:5f: 38:b3:a1:c3:78:e9:66:da:2c:f2:7c:dd:8a:a6:a1: 91:36:6e:8d:b6:f0:c8:5b:b3:69:0b:6d:ea:87:ff: 58:90:f5:55:bf:d1:e8:b0:0f:84:cf:dc:b4:71:7d: 6a:ae:15:08:c5:a2:61:79:ae:3c:6e:96:91:4a:e5: f2:4a:8b:ae:e8:9e:96:30:a1:3d:76:24:6c:75:7d: 88:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DF:78:EB:F7:DE:77:2B:D8:AA:37:2F:D6:A5:4D:B8:27:B9:A8:BF X509v3 Authority Key Identifier: keyid:E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/tN946_fedyvYqjcv1qVNuCe5qL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.101.0/24 193.42.103.0/24 Signature Algorithm: sha256WithRSAEncryption 69:d5:9d:0b:b7:26:6a:f4:71:d3:ff:0e:93:d9:06:f1:a6:9b: 1b:74:ac:82:1f:ff:37:a2:5a:96:e9:47:ba:68:fc:a2:2c:38: 52:46:6c:ca:48:04:79:fd:40:2e:3b:f1:2b:4a:b8:70:3c:73: 2d:9e:f6:c8:d4:aa:35:65:99:a2:cc:98:f9:da:2f:84:68:88: b9:b3:f7:af:8a:5c:83:f4:7d:40:b6:73:51:26:aa:9b:30:d1: c0:9a:6d:d6:74:a5:41:4a:a9:62:99:74:bc:5d:ac:0f:46:75: 14:c3:52:58:d6:32:16:e5:32:2e:36:22:0e:7e:f6:86:d7:ef: 54:e5:8b:3a:04:dc:1c:d1:18:f2:5c:8d:9c:c3:10:85:57:54: 19:77:53:b3:1f:43:32:d2:c1:ca:5e:73:88:60:78:fa:82:6c: d2:10:20:e5:c3:62:06:0e:db:60:cb:00:bc:33:fa:48:fb:43: d1:69:be:64:38:9e:0e:29:d4:c3:e6:1e:d6:e4:dc:17:ac:c9: 4e:d6:f0:4d:1d:ab:77:41:92:d3:e5:86:3f:24:6f:61:53:65: 9c:d7:f4:5f:22:6a:f3:44:5d:11:ad:b6:36:ec:d6:9d:06:dd: df:6e:da:0b:71:19:ae:f9:3d:ab:e9:9f:d8:13:8c:ec:9c:3e: 69:db:b9:a3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gIINLdAaRsyKBJYpAuZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YjZlODQ5OWZmZTMxZTFmNmQ2NzgwZDAzMDE3ZTgzNDcz ZjJkM2MwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGRmNzhlYmY3ZGU3NzJiZDhhYTM3MmZkNmE1NGRiODI3YjlhOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqIPoTortnTyHTKsZ4M8/k1QOHoR BtUvAj+tJht9XHP4yIoeYbDgov9fvvsdPoG0u+ulI35s8R+BftYMvkkm+lejziuy V22Y1udkK8WtMs9/kt31Nry+mUYu6rzEY0COJycC2c0sSRaKr2qO0Wn4lk7geBTO L34ZCtR+wzH2cpjFezAr4CaqTBdj5G96y90VGXoVdVK4Bb12V1ttSRJoshjn/ypf gx3xlME3kbOHxNy4LF84s6HDeOlm2izyfN2KpqGRNm6NtvDIW7NpC23qh/9YkPVV v9HosA+Ez9y0cX1qrhUIxaJhea48bpaRSuXySouu6J6WMKE9diRsdX2IkwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLTfeOv33ncr2Ko3L9alTbgnuai/MB8GA1UdIwQY MBaAFOi26Emf/jHh9tZ4DQMBfoNHPy08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkxib1NaXy1NZUgyMW5nTkF3Ri1nMGNfTFR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lNWI1MjAtOGQ0Yy00Y2Q4LWE1NGMt NjgxYzRhNWQ1Yjc0LzEvdE45NDZfZmVkeXZZcWpjdjFxVk51Q2U1cUw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9lNWI1MjAtOGQ0Yy00Y2Q4LWE1NGMtNjgxYzRhNWQ1Yjc0 LzEvNkxib1NaXy1NZUgyMW5nTkF3Ri1nMGNfTFR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSplAwQA wSpnMA0GCSqGSIb3DQEBCwUAA4IBAQBp1Z0LtyZq9HHT/w6T2QbxppsbdKyCH/83 olqW6Ue6aPyiLDhSRmzKSAR5/UAuO/ErSrhwPHMtnvbI1Ko1ZZmizJj52i+EaIi5 s/evilyD9H1AtnNRJqqbMNHAmm3WdKVBSqlimXS8XawPRnUUw1JY1jIW5TIuNiIO fvaG1+9U5Ys6BNwc0RjyXI2cwxCFV1QZd1OzH0My0sHKXnOIYHj6gmzSECDlw2IG DttgywC8M/pI+0PRab5kOJ4OKdTD5h7W5NwXrMlO1vBNHat3QZLT5YY/JG9hU2Wc 1/RfImrzRF0RrbY27NadBt3fbtoLcRmu+T2r6Z/YE4zsnD5p27mj -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:20 2026 by rpki-client