This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/55zpSPIb8yRIbjJpUuTnrKNG7KE.roa File: 55zpSPIb8yRIbjJpUuTnrKNG7KE.roa (raw, json) Hash identifier: h4Ec3W5AoQcpGRKZrj+SMm1p96ZddYSDTRq4GA8UC/E= Subject key identifier: E7:9C:E9:48:F2:1B:F3:24:48:6E:32:69:52:E4:E7:AC:A3:46:EC:A1 Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d Certificate serial: 019B7F82F4671C86B0BC7442DCBA0C2A302A Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/55zpSPIb8yRIbjJpUuTnrKNG7KE.roa Signing time: Fri 02 Jan 2026 16:20:47 +0000 ROA not before: Fri 02 Jan 2026 16:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12732 IP address blocks: 193.34.120.0/22 maxlen: 24 193.34.120.0/24 maxlen: 24 193.34.121.0/24 maxlen: 24 193.34.122.0/24 maxlen: 24 193.34.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:f4:67:1c:86:b0:bc:74:42:dc:ba:0c:2a:30:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d Validity Not Before: Jan 2 16:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e79ce948f21bf324486e326952e4e7aca346eca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:b4:cb:37:f6:f5:c7:3b:f5:30:3c:6a:0b: 84:21:60:bf:a4:89:be:e7:eb:37:c3:20:e3:8d:6d: 47:2d:30:b7:ea:49:ac:94:fb:19:70:54:d5:9f:07: 14:fc:e2:ac:83:14:ba:0d:df:55:88:ec:cb:28:e5: 31:d1:86:95:79:7d:0a:67:62:c0:dd:08:30:da:fb: 43:ec:e8:e1:6f:ef:56:6f:c1:dc:73:38:ae:74:de: 2f:1d:ae:e1:80:be:59:e7:61:f3:8d:ea:bd:a0:f3: c2:80:d0:28:fe:00:7a:c2:e6:39:1f:2c:47:16:bd: 11:de:bb:a7:96:74:f3:4f:c3:15:67:69:30:03:8a: 11:48:3e:38:9f:fb:cf:25:43:1e:e3:8d:4b:2e:c1: 9f:74:75:17:e2:60:b2:4a:a4:69:ef:be:38:b6:84: 98:3d:5d:81:4d:6f:96:86:63:39:9e:01:90:4b:c7: b8:8f:33:ab:53:39:1a:42:a1:fc:56:b4:f8:4d:12: 99:c4:e1:f1:a2:b9:b8:a3:12:d9:ff:fd:a2:5d:60: f3:d0:e0:f8:e6:72:fe:30:d2:7d:ea:51:fc:e5:6b: c6:ee:35:c9:c5:36:32:de:78:ae:8e:3f:8d:ee:6b: 25:61:4c:62:06:ff:2a:c2:b2:06:20:ad:cf:38:9b: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9C:E9:48:F2:1B:F3:24:48:6E:32:69:52:E4:E7:AC:A3:46:EC:A1 X509v3 Authority Key Identifier: keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/55zpSPIb8yRIbjJpUuTnrKNG7KE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.120.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:65:74:f5:38:75:8c:17:78:57:51:2a:5f:9e:1b:3f:aa:19: 83:8c:25:9a:c1:d8:48:78:cd:3c:f7:4d:51:92:ac:63:d8:82: 30:02:06:42:82:e8:0b:c7:56:01:2d:20:5b:20:a9:0d:dd:c7: 0f:1b:a2:35:ca:15:eb:26:b7:23:5c:4c:40:3e:85:ab:7a:d4: cb:34:8f:b4:75:30:1a:32:de:c8:e9:cf:1b:12:c8:93:79:f6: d4:82:a0:e1:8a:e1:ec:c1:fc:f5:b4:b9:16:97:40:b7:5a:10: 8d:2d:39:64:61:cd:1e:00:da:59:f3:b3:c1:c4:96:64:f7:b1: e2:1e:54:46:4c:8a:9e:05:0a:73:e5:e6:e4:08:12:bf:94:ab: 97:dd:a8:14:bc:c5:93:a1:f3:f7:40:52:02:43:e3:a2:0c:6e: e5:3e:60:4a:60:21:30:f4:df:00:98:80:da:15:9e:51:f0:fe: 8a:cd:00:25:63:4a:45:7f:e6:11:d5:5f:a8:7d:f1:1e:5f:91: 4c:76:fd:3b:c9:bc:2d:5a:c8:9d:d8:fd:72:c5:41:1d:7e:eb: 88:90:10:a4:c6:af:14:06:e2:41:08:2d:9f:5e:33:e4:81:42: 94:0d:57:da:61:03:b2:46:08:21:bd:58:62:bd:ca:9a:c4:14: 2a:60:33:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gvRnHIawvHRC3LoMKjAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2IzZGY2ZDc4Mzk5ZjAzMTgyODU1NmZjZDkwZWJmZGY0 ZDBkMmQwHhcNMjYwMTAyMTYyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzljZTk0OGYyMWJmMzI0NDg2ZTMyNjk1MmU0ZTdhY2EzNDZlY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHS0yzf29cc79TA8aguEIWC/pIm+ 5+s3wyDjjW1HLTC36kmslPsZcFTVnwcU/OKsgxS6Dd9ViOzLKOUx0YaVeX0KZ2LA 3Qgw2vtD7Ojhb+9Wb8HccziudN4vHa7hgL5Z52Hzjeq9oPPCgNAo/gB6wuY5HyxH Fr0R3runlnTzT8MVZ2kwA4oRSD44n/vPJUMe441LLsGfdHUX4mCySqRp7744toSY PV2BTW+WhmM5ngGQS8e4jzOrUzkaQqH8VrT4TRKZxOHxorm4oxLZ//2iXWDz0OD4 5nL+MNJ96lH85WvG7jXJxTYy3niujj+N7mslYUxiBv8qwrIGIK3POJst3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOec6UjyG/MkSG4yaVLk56yjRuyhMB8GA1UdIwQY MBaAFAN7PfbXg5nwMYKFVvzZDr/fTQ0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgt YTQ3NWFlYmIwOGQ1LzEvNTV6cFNQSWI4eVJJYmpKcFV1VG5yS05HN0tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgtYTQ3NWFlYmIwOGQ1 LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSJ4MA0G CSqGSIb3DQEBCwUAA4IBAQCaZXT1OHWMF3hXUSpfnhs/qhmDjCWawdhIeM08901R kqxj2IIwAgZCgugLx1YBLSBbIKkN3ccPG6I1yhXrJrcjXExAPoWretTLNI+0dTAa Mt7I6c8bEsiTefbUgqDhiuHswfz1tLkWl0C3WhCNLTlkYc0eANpZ87PBxJZk97Hi HlRGTIqeBQpz5ebkCBK/lKuX3agUvMWTofP3QFICQ+OiDG7lPmBKYCEw9N8AmIDa FZ5R8P6KzQAlY0pFf+YR1V+offEeX5FMdv07ybwtWsid2P1yxUEdfuuIkBCkxq8U BuJBCC2fXjPkgUKUDVfaYQOyRgghvVhivcqaxBQqYDOZ -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:12 2026 by rpki-client