This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/slyTkpHxsHHbymiBgxBnw2OM_JE.roa File: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (raw, json) Hash identifier: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y= Subject key identifier: B2:5C:93:92:91:F1:B0:71:DB:CA:68:81:83:10:67:C3:63:8C:FC:91 Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb Certificate serial: 019B78353D1F6369CBDB21E0FE41AC62FC10 Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/slyTkpHxsHHbymiBgxBnw2OM_JE.roa Signing time: Thu 01 Jan 2026 06:18:33 +0000 ROA not before: Thu 01 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202494 IP address blocks: 193.148.40.0/22 maxlen: 24 193.148.40.0/24 maxlen: 24 193.148.41.0/24 maxlen: 24 193.148.42.0/24 maxlen: 24 193.148.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3d:1f:63:69:cb:db:21:e0:fe:41:ac:62:fc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b25c939291f1b071dbca6881831067c3638cfc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:2c:19:1b:7c:b1:e9:61:7b:ac:21:a4:c4: 95:88:0a:cb:18:6f:dc:58:f8:e4:27:56:9c:5c:29: 55:7f:0e:ee:1a:ae:c3:96:df:ad:c8:fc:25:e6:7c: 16:0c:66:e2:af:5f:2d:89:e9:e8:08:11:54:ae:59: da:40:f3:e9:5b:1b:96:b3:08:ad:4f:eb:c7:ff:e1: 76:eb:ba:d7:37:8b:e8:b2:97:8f:d2:ce:33:be:2d: 38:4a:3c:b9:53:be:c3:68:b9:f3:80:f5:d2:be:37: e3:6a:71:15:39:7c:c0:f5:49:c8:4f:e9:10:8f:ff: ef:0e:61:e7:a1:17:da:24:6f:e9:93:36:83:a6:e9: a5:39:ee:ac:80:95:b4:f3:e3:8b:7a:58:e8:b0:81: 20:c7:8f:b0:45:ec:86:5d:51:be:68:f3:62:ca:ab: 23:66:46:1b:a7:40:35:c1:8a:64:db:9c:fc:8a:3c: 59:a4:e2:55:30:db:01:fd:7c:19:41:2a:ec:b5:8e: 7f:41:89:b5:82:ff:c2:dd:84:cd:a5:25:2d:ec:95: d3:8a:45:24:bf:01:41:50:47:99:43:73:6a:29:cd: 0c:9b:da:2b:3b:93:b2:55:a1:28:3e:15:a4:42:70: 35:59:0b:fb:80:d2:de:bf:b9:df:4c:63:b0:36:58: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5C:93:92:91:F1:B0:71:DB:CA:68:81:83:10:67:C3:63:8C:FC:91 X509v3 Authority Key Identifier: keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/slyTkpHxsHHbymiBgxBnw2OM_JE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.148.40.0/22 Signature Algorithm: sha256WithRSAEncryption ac:f0:4f:33:e2:24:d2:c0:11:15:bb:05:68:e4:6f:ba:94:39: 90:55:29:d8:e9:d1:f9:5a:9d:e9:76:38:eb:b7:dc:7a:62:ee: 39:c0:30:45:8e:75:17:7b:d1:b7:f2:ca:a0:94:b1:fd:f4:c1: d9:0a:b9:10:da:a8:c9:e4:b6:95:2c:0b:fa:0e:c5:03:5a:a6: 04:97:60:c1:94:47:f2:5d:33:e6:46:8b:14:5a:5b:85:51:68: 20:22:1f:16:e7:fb:05:70:9a:d0:b2:21:ca:05:93:09:0f:7e: 28:55:29:cb:df:81:0b:d9:84:4b:f1:fc:09:c9:42:32:11:6f: 2b:08:1e:4f:22:cb:bf:aa:78:11:20:26:83:7e:e5:e3:c2:87: af:d6:7a:5e:ed:44:d8:cf:d5:e0:8c:af:31:15:03:ea:97:75: 3e:ed:37:a7:85:ca:7e:29:ab:11:bb:76:4b:fd:8e:b4:de:47: f2:70:a2:9f:8e:c5:82:6a:2c:51:d6:05:52:eb:26:b3:31:be: c9:ed:2b:6e:94:ef:a1:c4:89:d9:0d:d5:6c:a3:00:78:af:3f: 2d:b1:08:cf:50:76:99:c2:36:0c:bc:82:56:45:0f:4d:40:8c: 0f:ab:0d:01:b3:f0:75:69:fd:fc:55:08:31:7c:91:80:db:0c: bd:51:bc:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NT0fY2nL2yHg/kGsYvwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMjBiZGJhNDZjZTUwYzBhYTBjNDFmMGIxYjQ5ZmE3ZWQ2 ODEwY2IwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjVjOTM5MjkxZjFiMDcxZGJjYTY4ODE4MzEwNjdjMzYzOGNmYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEEsGRt8selhe6whpMSViArLGG/c WPjkJ1acXClVfw7uGq7Dlt+tyPwl5nwWDGbir18tienoCBFUrlnaQPPpWxuWswit T+vH/+F267rXN4vospeP0s4zvi04Sjy5U77DaLnzgPXSvjfjanEVOXzA9UnIT+kQ j//vDmHnoRfaJG/pkzaDpumlOe6sgJW08+OLeljosIEgx4+wReyGXVG+aPNiyqsj ZkYbp0A1wYpk25z8ijxZpOJVMNsB/XwZQSrstY5/QYm1gv/C3YTNpSUt7JXTikUk vwFBUEeZQ3NqKc0Mm9orO5OyVaEoPhWkQnA1WQv7gNLev7nfTGOwNljxHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLJck5KR8bBx28pogYMQZ8NjjPyRMB8GA1UdIwQY MBaAFGAgvbpGzlDAqgxB8LG0n6ftaBDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83Njk1OTYtMmM0YS00YWQ4LTg2Y2Yt YjMwOTExMmQyZWVjLzEvc2x5VGtwSHhzSEhieW1pQmd4Qm53Mk9NX0pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83Njk1OTYtMmM0YS00YWQ4LTg2Y2YtYjMwOTExMmQyZWVj LzEvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwZQoMA0G CSqGSIb3DQEBCwUAA4IBAQCs8E8z4iTSwBEVuwVo5G+6lDmQVSnY6dH5Wp3pdjjr t9x6Yu45wDBFjnUXe9G38sqglLH99MHZCrkQ2qjJ5LaVLAv6DsUDWqYEl2DBlEfy XTPmRosUWluFUWggIh8W5/sFcJrQsiHKBZMJD34oVSnL34EL2YRL8fwJyUIyEW8r CB5PIsu/qngRICaDfuXjwoev1npe7UTYz9XgjK8xFQPql3U+7Tenhcp+KasRu3ZL /Y603kfycKKfjsWCaixR1gVS6yazMb7J7StulO+hxInZDdVsowB4rz8tsQjPUHaZ wjYMvIJWRQ9NQIwPqw0Bs/B1af38VQgxfJGA2wy9Ubyv -----END CERTIFICATE-----Generated at Mon Jan 26 05:06:12 2026 by rpki-client