This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa File: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (raw, json) Hash identifier: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU= Subject key identifier: 8A:F4:47:2F:04:16:23:D7:15:B0:1C:F0:D1:71:83:14:EB:6B:38:1B Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa Certificate serial: 019BE6515EAA8373F3837C6317CDB42290B2 Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa Signing time: Thu 22 Jan 2026 15:27:30 +0000 ROA not before: Thu 22 Jan 2026 15:27:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206032 IP address blocks: 193.5.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:51:5e:aa:83:73:f3:83:7c:63:17:cd:b4:22:90:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa Validity Not Before: Jan 22 15:27:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8af4472f041623d715b01cf0d1718314eb6b381b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:76:85:27:81:41:75:b6:87:1e:16:b2:5f:d6: df:a9:2c:fc:26:07:fd:43:49:3e:1f:dd:a9:9d:ae: 2a:99:c7:1c:e6:2e:73:3f:21:0b:3b:68:aa:b5:2b: 27:1f:e6:c1:7b:f0:e0:1b:f6:fb:a0:55:21:a2:c8: da:ae:5a:9b:de:d6:ee:f0:3d:05:89:95:42:cf:74: 9b:7f:38:d7:cb:e9:73:c9:88:9d:a0:0c:f9:42:1b: c4:27:51:dd:e9:fd:ca:86:de:1c:52:2a:e7:57:4c: 8a:56:39:bc:7a:18:e3:cd:e5:d8:74:36:d0:b7:8e: a4:d0:04:15:3e:4a:bd:2f:a1:3a:5c:67:41:30:29: 48:dd:5f:bd:40:d9:73:20:92:df:24:a7:fd:d9:24: b4:6e:2a:e2:fa:90:bc:4f:39:68:15:42:6a:ba:29: 12:e1:7f:2d:0f:96:d9:f8:43:ed:13:b3:00:c3:4b: e5:b8:b5:89:ee:c7:1b:af:4b:96:7c:4b:4a:ca:5c: 8d:34:81:b1:a7:9b:de:bd:11:4d:12:24:81:00:55: 2c:90:f4:55:d9:73:36:16:b8:ac:f7:bc:a5:d2:5c: 7a:ab:c5:65:83:91:a4:32:f4:81:0f:d0:19:b2:63: 9f:97:ce:f5:62:3c:44:90:d4:90:2b:41:66:e8:60: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F4:47:2F:04:16:23:D7:15:B0:1C:F0:D1:71:83:14:EB:6B:38:1B X509v3 Authority Key Identifier: keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.123.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:7e:c4:e2:20:eb:5b:89:17:5a:12:b4:0c:59:c7:a1:1b:a6: d9:01:bd:cb:7c:e8:98:82:b9:65:67:fe:b5:20:1d:a3:58:a1: 64:ca:90:bd:18:1d:7e:81:7a:29:81:db:d7:76:cf:42:6d:f5: 49:d8:33:a2:58:ee:2d:1d:c9:40:95:8b:39:c4:9f:1c:49:92: b2:25:63:da:82:c9:d1:5a:78:a6:21:46:2f:d2:92:a2:57:aa: 6a:71:d7:02:fb:47:06:30:8a:6b:4c:83:ba:b0:a1:50:7d:c9: 13:0c:17:37:80:4d:02:34:de:64:ce:da:fa:93:55:38:83:5a: 94:5e:e7:20:74:7e:65:3b:27:9a:b3:31:a3:ad:18:92:6d:3a: d4:f8:28:76:74:69:cc:ec:2e:4e:05:b7:0d:5d:03:00:91:97: 7b:51:54:94:3f:18:31:01:f8:bc:52:a6:f1:8d:b7:e8:27:ce: 37:55:61:73:7e:c1:a5:7e:a8:ec:cd:1c:ef:a0:ca:53:db:1a: 91:b9:c2:09:8e:6a:75:e0:20:9d:f4:90:35:97:ad:ab:9a:40: cf:ca:88:b2:16:87:f5:6b:71:a9:a4:cf:0f:63:44:43:27:2d: 82:21:ce:f8:72:0f:a3:d1:9f:cc:f4:31:9a:04:03:1f:4c:1e: ef:da:13:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvmUV6qg3Pzg3xjF820IpCyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTcxNzQ5ZjgwMjkyNTM5MDFmNzFkNDY0MTAzOWU5MGYx YTk3ZmEwHhcNMjYwMTIyMTUyNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWY0NDcyZjA0MTYyM2Q3MTViMDFjZjBkMTcxODMxNGViNmIzODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13aFJ4FBdbaHHhayX9bfqSz8Jgf9 Q0k+H92pna4qmccc5i5zPyELO2iqtSsnH+bBe/DgG/b7oFUhosjarlqb3tbu8D0F iZVCz3SbfzjXy+lzyYidoAz5QhvEJ1Hd6f3Kht4cUirnV0yKVjm8ehjjzeXYdDbQ t46k0AQVPkq9L6E6XGdBMClI3V+9QNlzIJLfJKf92SS0biri+pC8TzloFUJquikS 4X8tD5bZ+EPtE7MAw0vluLWJ7scbr0uWfEtKylyNNIGxp5vevRFNEiSBAFUskPRV 2XM2Fris97yl0lx6q8Vlg5GkMvSBD9AZsmOfl871YjxEkNSQK0Fm6GBf7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIr0Ry8EFiPXFbAc8NFxgxTrazgbMB8GA1UdIwQY MBaAFOLnF0n4ApJTkB9x1GQQOekPGpf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAt OGFkMjMwMThhNWFkLzEvaXZSSEx3UVdJOWNWc0J6dzBYR0RGT3RyT0JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAtOGFkMjMwMThhNWFk LzEvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQV7MA0G CSqGSIb3DQEBCwUAA4IBAQAufsTiIOtbiRdaErQMWcehG6bZAb3LfOiYgrllZ/61 IB2jWKFkypC9GB1+gXopgdvXds9CbfVJ2DOiWO4tHclAlYs5xJ8cSZKyJWPagsnR WnimIUYv0pKiV6pqcdcC+0cGMIprTIO6sKFQfckTDBc3gE0CNN5kztr6k1U4g1qU XucgdH5lOyeaszGjrRiSbTrU+Ch2dGnM7C5OBbcNXQMAkZd7UVSUPxgxAfi8Uqbx jbfoJ843VWFzfsGlfqjszRzvoMpT2xqRucIJjmp14CCd9JA1l62rmkDPyoiyFof1 a3GppM8PY0RDJy2CIc74cg+j0Z/M9DGaBAMfTB7v2hNw -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:20 2026 by rpki-client