This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/hEk7NXMz_9tjphRF_f-2BiYVxl4.roa File: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (raw, json) Hash identifier: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg= Subject key identifier: 84:49:3B:35:73:33:FF:DB:63:A6:14:45:FD:FF:B6:06:26:15:C6:5E Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77 Certificate serial: 019B7F8453B3653C745281D3B8ADE276F55D Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/hEk7NXMz_9tjphRF_f-2BiYVxl4.roa Signing time: Fri 02 Jan 2026 16:22:17 +0000 ROA not before: Fri 02 Jan 2026 16:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 193.134.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:53:b3:65:3c:74:52:81:d3:b8:ad:e2:76:f5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77 Validity Not Before: Jan 2 16:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84493b357333ffdb63a61445fdffb6062615c65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ea:fe:49:56:38:2f:77:ea:56:3f:34:ef:40: b3:5f:17:38:48:04:78:77:ec:d6:dd:43:c7:90:44: a8:8b:04:d7:84:96:a4:e2:45:73:27:9b:44:d5:e6: ad:11:f9:67:b8:a0:81:db:00:a8:c6:1a:ad:4b:e6: fb:1d:3c:47:83:70:f5:be:df:38:dd:1f:0f:63:80: d9:c1:9c:3a:d8:df:4c:9d:fe:2e:42:9c:cb:e2:44: 4d:6d:6d:15:05:e3:da:38:5e:f6:1b:4f:7f:37:a5: fe:6d:f7:71:95:c7:23:18:01:79:0f:50:63:eb:73: 9a:28:86:d2:18:19:59:f4:2a:84:2f:3c:25:b4:0b: cc:63:d7:be:4b:f7:45:d3:5e:ea:de:76:44:6f:d3: 56:ff:b6:d1:b9:d8:3a:9a:d8:48:a8:c5:81:fa:41: 84:92:cf:c7:a2:d8:32:be:4f:98:92:8d:cb:7b:24: a1:56:38:f5:be:83:03:b2:e7:8e:4d:ff:5f:37:d7: 3c:07:64:e3:7b:df:aa:51:3b:57:ef:2e:33:a6:5f: 3f:96:e7:bb:d5:ba:e1:f7:10:19:48:f3:73:2b:b6: ba:c4:69:40:4a:57:8a:64:da:74:0a:4b:3f:e2:29: a9:b2:33:4e:e7:98:1d:30:57:40:f4:e5:f4:3c:2c: 12:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:49:3B:35:73:33:FF:DB:63:A6:14:45:FD:FF:B6:06:26:15:C6:5E X509v3 Authority Key Identifier: keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/hEk7NXMz_9tjphRF_f-2BiYVxl4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.200.0/21 Signature Algorithm: sha256WithRSAEncryption 24:45:bf:85:e5:e8:ff:16:71:71:e9:64:43:d4:0e:d1:0e:26: 29:0c:a8:dc:d4:01:70:2e:d6:ce:f1:23:b6:4d:c3:e5:6f:03: a7:ee:0f:ce:d7:15:31:35:18:3f:b7:15:25:e3:7c:80:7e:cf: 4c:c1:66:b4:6e:6a:50:60:91:86:39:38:e4:11:20:63:96:d5: 7c:44:d2:3f:d4:c8:7a:95:bc:40:ff:0b:91:7b:3f:88:58:cc: e7:61:9c:50:0a:69:81:80:20:8c:97:d5:46:95:12:87:96:ba: 3a:b9:89:4b:61:21:81:81:37:ff:d9:2e:ca:2b:23:4d:d5:75: 81:81:61:bc:bf:88:8b:51:5f:08:09:a7:33:11:eb:73:91:92: a6:9c:4c:8a:24:0d:fd:83:31:32:96:08:19:c7:60:6f:4f:b0: 6a:f7:ae:45:59:54:5f:2f:5d:48:01:c0:23:04:dd:25:ee:e3: b1:e2:ac:13:bc:3b:29:9b:43:29:1c:29:24:0a:f0:47:ec:0a: 84:cd:10:64:38:95:47:ec:bc:ed:8d:00:eb:75:ba:df:a5:00: 30:18:0e:03:96:7c:a9:4b:6b:5d:4c:91:8a:d2:56:a0:51:1d: 51:4d:3b:08:34:9e:42:18:2c:08:37:f6:fb:8b:ab:3c:4a:83: b1:f8:36:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFOzZTx0UoHTuK3idvVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy MDNmNzcwHhcNMjYwMTAyMTYyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDQ5M2IzNTczMzNmZmRiNjNhNjE0NDVmZGZmYjYwNjI2MTVjNjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOr+SVY4L3fqVj8070CzXxc4SAR4 d+zW3UPHkESoiwTXhJak4kVzJ5tE1eatEflnuKCB2wCoxhqtS+b7HTxHg3D1vt84 3R8PY4DZwZw62N9Mnf4uQpzL4kRNbW0VBePaOF72G09/N6X+bfdxlccjGAF5D1Bj 63OaKIbSGBlZ9CqELzwltAvMY9e+S/dF017q3nZEb9NW/7bRudg6mthIqMWB+kGE ks/Hotgyvk+Yko3LeyShVjj1voMDsueOTf9fN9c8B2Tje9+qUTtX7y4zpl8/lue7 1brh9xAZSPNzK7a6xGlASleKZNp0Cks/4impsjNO55gdMFdA9OX0PCwSnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIRJOzVzM//bY6YURf3/tgYmFcZeMB8GA1UdIwQY MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt NzA1MjBlYTc2MzY5LzEvaEVrN05YTXpfOXRqcGhSRl9mLTJCaVlWeGw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5 LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwYbIMA0G CSqGSIb3DQEBCwUAA4IBAQAkRb+F5ej/FnFx6WRD1A7RDiYpDKjc1AFwLtbO8SO2 TcPlbwOn7g/O1xUxNRg/txUl43yAfs9MwWa0bmpQYJGGOTjkESBjltV8RNI/1Mh6 lbxA/wuRez+IWMznYZxQCmmBgCCMl9VGlRKHlro6uYlLYSGBgTf/2S7KKyNN1XWB gWG8v4iLUV8ICaczEetzkZKmnEyKJA39gzEylggZx2BvT7Bq965FWVRfL11IAcAj BN0l7uOx4qwTvDspm0MpHCkkCvBH7AqEzRBkOJVH7LztjQDrdbrfpQAwGA4Dlnyp S2tdTJGK0lagUR1RTTsINJ5CGCwIN/b7i6s8SoOx+DYo -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:19 2026 by rpki-client