This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/CaBEFYDtaQzQxhyXo4MA7Dtx2rE.roa File: CaBEFYDtaQzQxhyXo4MA7Dtx2rE.roa (raw, json) Hash identifier: knYWc/a4bI5GtK7g0Qth1pZAN74E2q8jYjqFwaqxRKI= Subject key identifier: 09:A0:44:15:80:ED:69:0C:D0:C6:1C:97:A3:83:00:EC:3B:71:DA:B1 Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b Certificate serial: 019B7E37B9F0270DFA6E4B772984793FEF78 Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/CaBEFYDtaQzQxhyXo4MA7Dtx2rE.roa Signing time: Fri 02 Jan 2026 10:18:59 +0000 ROA not before: Fri 02 Jan 2026 10:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216054 IP address blocks: 193.84.255.0/24 maxlen: 24 2a14:4f80::/29 maxlen: 39 2a14:4f80:400::/38 maxlen: 38 2a14:4f85::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b9:f0:27:0d:fa:6e:4b:77:29:84:79:3f:ef:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b Validity Not Before: Jan 2 10:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09a0441580ed690cd0c61c97a38300ec3b71dab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:43:8f:2c:de:98:20:b0:e4:68:c8:ba:8f: f9:27:b3:cc:02:a7:e3:25:51:f9:7c:42:e9:d0:7f: 80:50:ac:2c:e2:2e:75:22:d9:45:1b:20:a1:19:47: c4:5f:90:79:61:20:4f:f2:df:b4:2d:45:2c:4c:17: 8d:e9:9e:ac:83:9b:5d:0a:19:96:98:6d:37:1c:d3: b0:cd:08:b8:7f:f7:c7:95:f0:13:0b:8b:d5:af:d5: 35:c9:14:86:7a:94:fd:53:d3:f1:6f:7e:df:16:b0: 7d:79:6d:a5:94:9b:e5:c4:a8:f5:e0:c6:1e:0e:8c: a5:9f:b9:60:a0:04:c8:e3:0b:e1:07:e1:64:4c:3a: 02:f4:3f:a0:92:f9:fe:e2:ea:c1:f1:0c:09:e2:ef: 9d:02:67:97:2c:0b:11:19:1c:d3:6d:cc:77:e5:fb: 39:a6:c6:37:c3:fc:59:24:98:ee:85:00:90:2e:e8: f6:0c:95:23:9e:8b:47:a5:c7:03:36:d3:2d:49:76: 5d:c3:36:1e:a7:b0:ad:97:84:08:7e:70:31:3b:04: ab:09:91:aa:a3:36:14:3e:4b:89:1b:b7:9d:5d:5e: 16:0c:bf:4f:32:f9:db:a1:13:f6:7e:63:2b:25:18: 92:06:06:eb:d0:1d:95:ef:58:e0:ca:63:9e:10:e0: 44:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A0:44:15:80:ED:69:0C:D0:C6:1C:97:A3:83:00:EC:3B:71:DA:B1 X509v3 Authority Key Identifier: keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/CaBEFYDtaQzQxhyXo4MA7Dtx2rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.255.0/24 IPv6: 2a14:4f80::/29 Signature Algorithm: sha256WithRSAEncryption 2e:bc:3a:51:5a:54:18:2c:ba:3c:6f:2c:f8:7c:d2:4e:82:d9: b2:df:35:f3:d1:2c:76:17:49:62:e8:59:1a:ff:62:94:fc:83: 6f:6e:1f:75:7d:d7:bb:41:c4:50:a5:eb:b5:76:4a:50:69:88: 52:10:6e:bd:c5:27:07:a4:f8:96:07:85:ec:d6:51:84:b4:39: 3d:3d:e7:9e:33:e2:1d:6e:3a:87:95:4b:62:b0:36:8c:bf:57: 67:ec:ee:4f:bf:8f:95:ad:62:71:c4:c2:16:5e:be:bc:a4:4d: ca:42:64:30:00:b0:b9:b6:0d:29:73:16:f1:76:34:2b:f8:fd: 71:d2:5c:31:2a:b2:3c:e2:be:ea:f6:72:e7:a9:7e:6f:e8:13: 51:13:5a:1b:88:9d:1e:00:e5:fc:43:a5:26:57:81:c5:47:ee: 78:c9:51:40:c9:53:a5:db:d7:a2:4d:f7:89:fe:25:03:44:7b: 3a:73:6f:bc:5f:fe:82:db:04:dd:a9:a3:bb:e7:85:89:c2:cb: 37:9d:35:ec:eb:f2:a5:24:cc:3c:56:f1:7a:a3:e1:6b:3b:e7: 26:23:16:2a:f1:bc:f2:c2:b6:90:7d:37:19:65:91:6b:99:15: a0:c4:d4:53:f1:c3:6d:b0:14:fe:5b:38:9d:0e:bc:c6:db:e3: 3b:66:2a:21 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N7nwJw36bkt3KYR5P+94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZDA4NzVjZDAwNTFkMGMwOTI1YWNhMDQxMDM0ZTc4NDBh Njc3MGIwHhcNMjYwMTAyMTAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWEwNDQxNTgwZWQ2OTBjZDBjNjFjOTdhMzgzMDBlYzNiNzFkYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQhDjyzemCCw5GjIuo/5J7PMAqfj JVH5fELp0H+AUKws4i51ItlFGyChGUfEX5B5YSBP8t+0LUUsTBeN6Z6sg5tdChmW mG03HNOwzQi4f/fHlfATC4vVr9U1yRSGepT9U9Pxb37fFrB9eW2llJvlxKj14MYe Doyln7lgoATI4wvhB+FkTDoC9D+gkvn+4urB8QwJ4u+dAmeXLAsRGRzTbcx35fs5 psY3w/xZJJjuhQCQLuj2DJUjnotHpccDNtMtSXZdwzYep7Ctl4QIfnAxOwSrCZGq ozYUPkuJG7edXV4WDL9PMvnboRP2fmMrJRiSBgbr0B2V71jgymOeEOBEDQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAmgRBWA7WkM0MYcl6ODAOw7cdqxMB8GA1UdIwQY MBaAFB/Qh1zQBR0MCSWsoEEDTnhApncLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMt ZTA4MDJmNDc0NDQ0LzEvQ2FCRUZZRHRhUXpReGh5WG80TUE3RHR4MnJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMtZTA4MDJmNDc0NDQ0 LzEvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwVT/MA0E AgACMAcDBQMqFE+AMA0GCSqGSIb3DQEBCwUAA4IBAQAuvDpRWlQYLLo8byz4fNJO gtmy3zXz0Sx2F0li6Fka/2KU/INvbh91fde7QcRQpeu1dkpQaYhSEG69xScHpPiW B4Xs1lGEtDk9PeeeM+IdbjqHlUtisDaMv1dn7O5Pv4+VrWJxxMIWXr68pE3KQmQw ALC5tg0pcxbxdjQr+P1x0lwxKrI84r7q9nLnqX5v6BNRE1obiJ0eAOX8Q6UmV4HF R+54yVFAyVOl29eiTfeJ/iUDRHs6c2+8X/6C2wTdqaO754WJwss3nTXs6/KlJMw8 VvF6o+FrO+cmIxYq8bzywraQfTcZZZFrmRWgxNRT8cNtsBT+WzidDrzG2+M7Zioh -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:29 2026 by rpki-client