This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/4sCYyQmEU1Sq8f1W6ryTKwuuvdg.roa File: 4sCYyQmEU1Sq8f1W6ryTKwuuvdg.roa (raw, json) Hash identifier: 2lxkG3YL7+9vZVcECvVaZ5CE5FtQl5mtCa5QwI9Iq8k= Subject key identifier: E2:C0:98:C9:09:84:53:54:AA:F1:FD:56:EA:BC:93:2B:0B:AE:BD:D8 Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef Certificate serial: 019B77591A9E7CCA7C288C8700EAAB635379 Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/4sCYyQmEU1Sq8f1W6ryTKwuuvdg.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29551 IP address blocks: 193.25.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1a:9e:7c:ca:7c:28:8c:87:00:ea:ab:63:53:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2c098c909845354aaf1fd56eabc932b0baebdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:f6:f9:2b:0f:e1:e4:c4:42:86:3b:89:b7: 01:ad:8c:ea:8c:0f:32:34:a4:b1:e1:f7:50:bc:e3: a1:c3:e7:39:b4:52:80:55:8a:04:3e:9e:9f:12:26: 3c:ba:12:c1:e1:ab:69:48:d9:7d:1e:c5:64:0c:02: 3a:b2:75:b6:d0:31:5c:02:a5:ea:b2:c7:98:2e:e8: e6:17:9c:fe:c6:a7:ba:03:0c:fa:42:3a:dd:9b:7e: a4:c6:d5:98:15:d8:2f:75:0f:ed:ca:01:af:ec:0e: 4e:5f:9a:db:91:82:aa:59:b7:a5:55:c4:43:a0:3e: 62:f0:f0:87:87:2b:18:27:fc:2b:94:24:65:16:24: b0:f0:d1:8a:0c:94:fc:5e:96:6a:a2:e7:c7:63:6c: ae:2a:93:b7:04:6f:18:d2:03:e0:f2:83:3f:84:26: 13:c0:8a:93:78:f9:9a:4b:09:f6:6f:dd:eb:af:bd: d6:30:3b:d3:41:35:c4:90:ba:27:7d:83:cc:10:22: c7:34:32:6b:26:7b:a7:cc:e2:83:86:62:2c:3f:67: 21:17:f7:d9:fb:be:a1:bd:43:f0:49:e7:d3:ef:03: 9b:53:77:cc:b4:57:4b:12:a5:8c:c0:10:6a:1a:0d: b6:d7:bb:3c:25:9c:40:28:2b:e4:26:a3:36:0a:f7: 73:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C0:98:C9:09:84:53:54:AA:F1:FD:56:EA:BC:93:2B:0B:AE:BD:D8 X509v3 Authority Key Identifier: keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/4sCYyQmEU1Sq8f1W6ryTKwuuvdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.173.0/24 Signature Algorithm: sha256WithRSAEncryption ae:61:75:a9:24:65:fd:8f:d6:d9:1a:f4:d5:9a:ae:a4:c6:bf: 7a:82:18:82:18:6f:4c:7e:14:70:2b:5f:da:57:0d:15:e7:bf: 1b:b8:2f:4e:00:a1:b1:ed:9d:e5:27:63:02:b0:a0:25:8f:8e: d0:19:73:f1:04:45:f7:93:ea:27:a5:bc:7f:a8:f6:b8:7f:30: 56:6a:1e:30:51:ac:70:04:90:91:85:e6:e6:74:f0:62:6f:42: e9:c6:4a:64:0c:32:c4:2e:c6:b2:e4:17:64:1a:23:5f:e0:45: 96:40:e5:87:3c:9d:a2:9c:a7:b5:c6:d8:c1:8a:64:2f:9d:32: f2:0e:13:d1:18:11:f4:16:3c:53:79:3d:21:b5:1f:94:ce:b8: 68:ba:70:a6:e3:ca:95:56:8e:ac:18:ca:42:ea:9c:c3:f9:c0: d8:e7:88:cd:f4:b8:35:30:22:f3:79:d0:b2:ed:f5:47:2f:46: d9:1c:90:64:2f:61:50:51:f5:4c:c7:ea:c1:dd:3e:18:db:73: b3:a8:27:19:07:c4:af:15:15:68:59:2f:a4:7d:c8:b6:3b:db: a0:c0:40:6b:b6:77:c3:36:42:75:23:dc:01:f2:61:1c:22:eb: 26:43:78:1f:1b:c6:65:3e:3d:85:98:f6:5f:04:3b:37:47:b8: 35:dc:c6:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRqefMp8KIyHAOqrY1N5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTgzZDYxZjJlNTdhNmIxNmVhNGIxYTljYTI3YmIyNTBk NzQ4ZWYwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmMwOThjOTA5ODQ1MzU0YWFmMWZkNTZlYWJjOTMyYjBiYWViZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGP2+SsP4eTEQoY7ibcBrYzqjA8y NKSx4fdQvOOhw+c5tFKAVYoEPp6fEiY8uhLB4atpSNl9HsVkDAI6snW20DFcAqXq sseYLujmF5z+xqe6Awz6Qjrdm36kxtWYFdgvdQ/tygGv7A5OX5rbkYKqWbelVcRD oD5i8PCHhysYJ/wrlCRlFiSw8NGKDJT8XpZqoufHY2yuKpO3BG8Y0gPg8oM/hCYT wIqTePmaSwn2b93rr73WMDvTQTXEkLonfYPMECLHNDJrJnunzOKDhmIsP2chF/fZ +76hvUPwSefT7wObU3fMtFdLEqWMwBBqGg2217s8JZxAKCvkJqM2CvdzIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOLAmMkJhFNUqvH9Vuq8kysLrr3YMB8GA1UdIwQY MBaAFOpYPWHy5XprFupLGpyie7JQ10jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZjUxMjgtN2NiYS00OWM1LTliMjUt OTljMWIwY2ZjM2E4LzEvNHNDWXlRbUVVMVNxOGYxVzZyeVRLd3V1dmRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ZjUxMjgtN2NiYS00OWM1LTliMjUtOTljMWIwY2ZjM2E4 LzEvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRmtMA0G CSqGSIb3DQEBCwUAA4IBAQCuYXWpJGX9j9bZGvTVmq6kxr96ghiCGG9MfhRwK1/a Vw0V578buC9OAKGx7Z3lJ2MCsKAlj47QGXPxBEX3k+onpbx/qPa4fzBWah4wUaxw BJCRhebmdPBib0LpxkpkDDLELsay5BdkGiNf4EWWQOWHPJ2inKe1xtjBimQvnTLy DhPRGBH0FjxTeT0htR+UzrhounCm48qVVo6sGMpC6pzD+cDY54jN9Lg1MCLzedCy 7fVHL0bZHJBkL2FQUfVMx+rB3T4Y23OzqCcZB8SvFRVoWS+kfci2O9ugwEBrtnfD NkJ1I9wB8mEcIusmQ3gfG8ZlPj2FmPZfBDs3R7g13MYG -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:29 2026 by rpki-client