This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/rRVCY9deulKKnDF9lQIosJo2pBo.roa File: rRVCY9deulKKnDF9lQIosJo2pBo.roa (raw, json) Hash identifier: z9eK7nmNMxVcT62wFywjBLXRE4xnhMoPZGziMsFutWo= Subject key identifier: AD:15:42:63:D7:5E:BA:52:8A:9C:31:7D:95:02:28:B0:9A:36:A4:1A Certificate issuer: /CN=c691f345a503cb8c8a9de427e8812efff21b22b5 Certificate serial: 019B7EA475290F7ED9655A1F7ADB828677A9 Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/rRVCY9deulKKnDF9lQIosJo2pBo.roa Signing time: Fri 02 Jan 2026 12:17:45 +0000 ROA not before: Fri 02 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399641 IP address blocks: 188.93.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:75:29:0f:7e:d9:65:5a:1f:7a:db:82:86:77:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5 Validity Not Before: Jan 2 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad154263d75eba528a9c317d950228b09a36a41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:c9:f5:b8:da:e4:fd:d8:23:0b:d7:d3:bb: 30:22:94:ce:20:20:0c:4f:2e:8d:40:87:4a:61:d0: 58:46:6f:d7:73:af:a7:16:cb:e3:89:a8:3a:50:ea: 29:f7:69:42:18:97:fc:d9:10:5f:7d:b4:84:ec:b5: 47:f4:a8:47:74:ce:7d:f7:c2:58:37:26:1e:9f:33: 28:b5:92:cd:64:9b:db:31:a1:4c:c0:d0:69:30:7e: 3d:bd:e4:31:80:47:89:bf:6c:e5:fe:50:c6:e5:fd: a9:9d:f6:ea:54:8e:7a:16:aa:25:d3:f8:06:62:d1: 12:5a:b5:1f:f3:ec:6b:28:d4:0e:6a:2b:27:bb:cb: bd:56:86:67:5c:e5:b0:1c:d2:3a:06:c3:dd:65:74: 81:eb:d7:73:07:96:9d:ad:0e:e9:b2:be:93:8f:e9: 5b:ae:74:93:d4:e8:06:4a:62:16:cc:fd:70:95:02: db:bb:61:31:84:4d:f5:1c:a8:4f:2e:1b:fb:c0:f0: 6a:45:2c:d5:75:73:53:cb:97:4c:52:0d:e4:d3:70: c6:7e:c9:7e:d2:01:e3:4b:fb:05:05:19:48:8c:8e: 53:d6:b6:56:6c:1e:fe:72:d9:c7:97:e6:40:0a:0a: 58:97:1e:06:fe:e1:48:c1:9d:e9:2d:09:14:a9:8e: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:15:42:63:D7:5E:BA:52:8A:9C:31:7D:95:02:28:B0:9A:36:A4:1A X509v3 Authority Key Identifier: keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/rRVCY9deulKKnDF9lQIosJo2pBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.93.119.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:84:78:82:45:6f:c9:f8:5b:a4:23:04:c2:b2:de:ca:f3:2e: 5d:4f:63:f0:8f:97:17:ec:6b:f7:40:0e:8e:33:86:3b:3b:01: 70:61:bf:a0:7d:6d:93:7d:1e:6c:04:ac:73:8b:51:e1:4f:28: 1e:49:68:8b:2c:96:63:a4:4e:c2:34:93:1a:22:5b:b9:89:d3: 48:f8:a0:02:eb:ad:1a:3c:65:92:57:7a:5e:64:c6:73:d9:54: 19:24:02:2e:e8:1b:0a:c0:19:da:7e:46:d9:8d:0b:32:91:14: 4d:e3:e4:76:40:68:db:11:f5:be:2a:b5:d5:f6:a3:ff:6f:d2: 9d:39:89:1c:ad:ff:7d:e5:74:9c:6b:95:d0:25:33:80:83:34: 65:bf:54:38:74:ef:d6:02:4d:37:52:e1:b0:a1:20:44:b8:f1: 17:38:4d:f2:81:aa:7d:be:bf:e9:ff:cc:f4:41:e3:d4:50:41: 14:6f:cb:69:84:64:57:72:ef:4f:ac:fd:bc:c4:13:e2:dc:31: 12:c8:a6:43:54:67:6e:6f:79:c2:9e:ec:4c:af:eb:f7:65:89: 7f:2d:a7:0b:12:49:a6:df:42:5a:ef:b2:fd:08:3f:c9:cb:c0: 8a:a3:f6:36:b0:a8:f3:c6:1c:9a:91:66:47:5b:63:46:fa:65: 87:a6:96:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pHUpD37ZZVofetuChnepMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTFmMzQ1YTUwM2NiOGM4YTlkZTQyN2U4ODEyZWZmZjIx YjIyYjUwHhcNMjYwMTAyMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDE1NDI2M2Q3NWViYTUyOGE5YzMxN2Q5NTAyMjhiMDlhMzZhNDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKPJ9bja5P3YIwvX07swIpTOICAM Ty6NQIdKYdBYRm/Xc6+nFsvjiag6UOop92lCGJf82RBffbSE7LVH9KhHdM5998JY NyYenzMotZLNZJvbMaFMwNBpMH49veQxgEeJv2zl/lDG5f2pnfbqVI56Fqol0/gG YtESWrUf8+xrKNQOaisnu8u9VoZnXOWwHNI6BsPdZXSB69dzB5adrQ7psr6Tj+lb rnST1OgGSmIWzP1wlQLbu2ExhE31HKhPLhv7wPBqRSzVdXNTy5dMUg3k03DGfsl+ 0gHjS/sFBRlIjI5T1rZWbB7+ctnHl+ZACgpYlx4G/uFIwZ3pLQkUqY5YfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK0VQmPXXrpSipwxfZUCKLCaNqQaMB8GA1UdIwQY MBaAFMaR80WlA8uMip3kJ+iBLv/yGyK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEt ZTdjYWY1ZTViY2JhLzEvclJWQ1k5ZGV1bEtLbkRGOWxRSW9zSm8ycEJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEtZTdjYWY1ZTViY2Jh LzEveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF13MA0G CSqGSIb3DQEBCwUAA4IBAQAOhHiCRW/J+FukIwTCst7K8y5dT2Pwj5cX7Gv3QA6O M4Y7OwFwYb+gfW2TfR5sBKxzi1HhTygeSWiLLJZjpE7CNJMaIlu5idNI+KAC660a PGWSV3peZMZz2VQZJAIu6BsKwBnafkbZjQsykRRN4+R2QGjbEfW+KrXV9qP/b9Kd OYkcrf995XSca5XQJTOAgzRlv1Q4dO/WAk03UuGwoSBEuPEXOE3ygap9vr/p/8z0 QePUUEEUb8tphGRXcu9PrP28xBPi3DESyKZDVGdub3nCnuxMr+v3ZYl/LacLEkmm 30Ja77L9CD/Jy8CKo/Y2sKjzxhyakWZHW2NG+mWHppYR -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:56 2026 by rpki-client