This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/a4e-5HcXuyyRW82YjyXKassrVo8.roa File: a4e-5HcXuyyRW82YjyXKassrVo8.roa (raw, json) Hash identifier: LjIo0mjkPTCoI0owtR5lNhwGCbcbFzLDlXxT76bUTMg= Subject key identifier: 6B:87:BE:E4:77:17:BB:2C:91:5B:CD:98:8F:25:CA:6A:CB:2B:56:8F Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019B775897F15F8014775CFB0F15977023D5 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/a4e-5HcXuyyRW82YjyXKassrVo8.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204755 IP address blocks: 193.142.147.0/24 maxlen: 24 2a0f:ca80:616::/48 maxlen: 48 2a0f:ca80:666::/48 maxlen: 48 2a0f:ca80:fe0::/44 maxlen: 44 2a0f:ca80:1339::/48 maxlen: 48 2a0f:ca80:b00b::/48 maxlen: 48 2a0f:ca80:beef::/48 maxlen: 48 2a0f:ca80:deed::/48 maxlen: 48 2a0f:ca81:deed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:97:f1:5f:80:14:77:5c:fb:0f:15:97:70:23:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b87bee47717bb2c915bcd988f25ca6acb2b568f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:be:c3:99:40:f5:15:df:14:65:df:9e:32: 00:b3:34:b8:ca:f6:f7:81:18:29:f1:04:f3:35:96: e5:fc:00:55:8a:16:26:bd:26:09:ea:03:91:8e:3c: d6:72:6c:b7:a7:f1:b5:5e:e0:ae:b7:ba:cf:f2:26: 8c:02:ad:d1:a8:1e:47:f3:a7:db:b7:98:ed:05:94: 13:24:4c:04:ce:0c:3d:4f:96:fe:d8:34:86:24:e5: 97:33:89:de:6e:b8:06:7c:87:e3:47:98:5a:91:d4: 4f:50:c2:8a:b7:12:0a:c3:d7:dd:71:55:c6:f4:51: f3:fe:62:b6:ff:47:8f:05:08:5f:0e:9f:44:db:cd: bf:c2:6a:bc:e1:af:f0:77:c1:72:de:20:9c:90:2c: 32:3b:00:82:e0:18:c6:4e:7a:f0:55:30:5c:ed:ef: 61:2f:10:f1:78:61:e2:79:b4:6b:ec:b0:4a:2b:fe: 5c:6f:24:c2:97:fd:5b:ac:52:26:9a:76:41:c6:53: 98:0c:97:6b:cc:2e:fb:0f:9d:c4:df:e9:45:9c:2f: 28:4d:30:47:d9:d2:2d:c1:c6:02:f0:f1:5b:95:bf: 1b:fc:da:a7:cd:bb:ea:7a:47:27:65:b4:94:90:5c: 81:23:75:de:f8:4b:bc:d4:99:51:ad:7d:28:df:35: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:87:BE:E4:77:17:BB:2C:91:5B:CD:98:8F:25:CA:6A:CB:2B:56:8F X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/a4e-5HcXuyyRW82YjyXKassrVo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.147.0/24 IPv6: 2a0f:ca80:616::/48 2a0f:ca80:666::/48 2a0f:ca80:fe0::/44 2a0f:ca80:1339::/48 2a0f:ca80:b00b::/48 2a0f:ca80:beef::/48 2a0f:ca80:deed::/48 2a0f:ca81:deed::/48 Signature Algorithm: sha256WithRSAEncryption 96:06:3a:9d:47:16:57:dc:95:e5:6f:dc:f1:48:2f:8b:e5:fd: d6:8e:f5:64:d1:96:7c:2a:83:62:bc:41:70:b8:d0:4c:14:1e: 84:ef:64:af:99:46:97:6f:b3:f5:b1:04:7a:01:7c:68:10:08: 95:87:fc:b7:52:07:39:1c:7c:dd:a4:e5:ae:81:aa:da:1a:ed: 6d:d6:14:fc:b2:d7:9d:e6:aa:67:1f:e7:24:64:97:67:74:1b: 68:26:6b:0c:8e:dd:63:ba:0f:9e:aa:e0:b8:74:4e:45:96:b6: be:03:04:53:58:76:bd:63:f4:de:95:f5:d0:9e:28:bd:4b:5f: 86:20:0f:12:d4:78:b4:46:28:43:fb:82:e0:1e:d9:62:0b:fd: f1:cc:0f:c5:1f:06:5f:5f:3f:03:b2:0a:00:d0:40:69:e8:3e: d2:10:02:5c:97:cf:17:6e:75:94:14:f4:cc:19:fb:95:7e:ba: e4:ef:42:9d:92:bb:75:21:ff:e5:10:d9:aa:cb:0d:ac:df:77: a4:e9:66:d0:47:a2:e8:a8:8f:59:5a:c7:da:fc:8e:e6:e5:79: 3e:7b:48:ad:42:8a:f1:3c:d6:31:d3:6f:64:59:48:4a:58:27: 56:f0:fb:bc:c1:42:45:f8:4b:7a:ad:a5:c8:31:3e:4c:e6:89: 5c:59:10:cb -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZt3WJfxX4AUd1z7DxWXcCPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Yjg3YmVlNDc3MTdiYjJjOTE1YmNkOTg4ZjI1Y2E2YWNiMmI1NjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBq+w5lA9RXfFGXfnjIAszS4yvb3 gRgp8QTzNZbl/ABVihYmvSYJ6gORjjzWcmy3p/G1XuCut7rP8iaMAq3RqB5H86fb t5jtBZQTJEwEzgw9T5b+2DSGJOWXM4nebrgGfIfjR5hakdRPUMKKtxIKw9fdcVXG 9FHz/mK2/0ePBQhfDp9E282/wmq84a/wd8Fy3iCckCwyOwCC4BjGTnrwVTBc7e9h LxDxeGHiebRr7LBKK/5cbyTCl/1brFImmnZBxlOYDJdrzC77D53E3+lFnC8oTTBH 2dItwcYC8PFblb8b/NqnzbvqekcnZbSUkFyBI3Xe+Eu81JlRrX0o3zVHHwIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFGuHvuR3F7sskVvNmI8lymrLK1aPMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvYTRlLTVIY1h1eXlSVzgyWWp5WEthc3NyVm84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjAMBAIAATAGAwQAwY6TME4E AgACMEgDBwAqD8qABhYDBwAqD8qABmYDBwQqD8qAD+ADBwAqD8qAEzkDBwAqD8qA sAsDBwAqD8qAvu8DBwAqD8qA3u0DBwAqD8qB3u0wDQYJKoZIhvcNAQELBQADggEB AJYGOp1HFlfcleVv3PFIL4vl/daO9WTRlnwqg2K8QXC40EwUHoTvZK+ZRpdvs/Wx BHoBfGgQCJWH/LdSBzkcfN2k5a6Bqtoa7W3WFPyy153mqmcf5yRkl2d0G2gmawyO 3WO6D56q4Lh0TkWWtr4DBFNYdr1j9N6V9dCeKL1LX4YgDxLUeLRGKEP7guAe2WIL /fHMD8UfBl9fPwOyCgDQQGnoPtIQAlyXzxdudZQU9MwZ+5V+uuTvQp2Su3Uh/+UQ 2arLDazfd6TpZtBHouioj1lax9r8jubleT57SK1CivE81jHTb2RZSEpYJ1bw+7zB QkX4S3qtpcgxPkzmiVxZEMs= -----END CERTIFICATE-----Generated at Sun Jan 25 16:15:01 2026 by rpki-client