This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/d55MmSSrMOAa7YboXbvWTauB-vE.roa File: d55MmSSrMOAa7YboXbvWTauB-vE.roa (raw, json) Hash identifier: u/wjI69y9HM6cDlahIXVWn271sSNYCBmkSyoOi+8hS4= Subject key identifier: 77:9E:4C:99:24:AB:30:E0:1A:ED:86:E8:5D:BB:D6:4D:AB:81:FA:F1 Certificate issuer: /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b Certificate serial: 019B76EB51485164F0E51354A39EA9A76F71 Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/d55MmSSrMOAa7YboXbvWTauB-vE.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210255 IP address blocks: 193.22.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:51:48:51:64:f0:e5:13:54:a3:9e:a9:a7:6f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=779e4c9924ab30e01aed86e85dbbd64dab81faf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:43:39:66:56:8f:c7:6e:4b:62:be:9b:c0: 8e:e0:70:e6:26:8c:19:84:f1:5d:38:15:97:d3:49: 4c:be:51:a8:51:b4:e7:9b:f6:81:bb:31:44:3d:12: 2c:68:3d:ad:b4:71:1b:2d:67:2a:e2:b9:26:bf:06: d1:85:e2:0d:ce:ab:ef:04:5a:3b:73:88:04:81:0c: b4:ae:1f:ce:70:b2:54:ac:e8:f1:b2:5a:fd:4b:08: 3e:73:d0:c0:01:6b:1c:41:c4:f8:31:d5:76:e9:ef: 3d:bf:25:4c:a0:d1:31:47:fb:d4:c0:a3:d1:9f:9f: e8:f5:52:38:7c:f5:7a:6b:d7:f2:90:b8:62:52:04: 37:8c:54:c4:7a:0b:f2:c2:be:0c:a1:1e:e9:69:b3: 68:b1:9c:6e:33:12:5a:c0:39:fd:d4:e8:86:c2:60: 1f:59:73:9a:ea:ce:e8:48:17:ee:a1:ea:3d:94:4d: fe:a7:9a:3f:16:8a:b6:ed:3b:8a:ed:61:60:a0:97: 2d:f5:a3:ae:af:02:b6:77:1e:c0:f3:bb:bd:ed:98: 70:66:1f:52:9e:57:0c:fa:47:7b:8c:c9:9d:4a:c5: a6:1f:61:a6:47:b7:1b:63:b8:90:fd:e5:b9:05:0f: 1e:00:64:27:93:28:ff:cf:34:e0:cf:ab:e5:b1:24: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9E:4C:99:24:AB:30:E0:1A:ED:86:E8:5D:BB:D6:4D:AB:81:FA:F1 X509v3 Authority Key Identifier: keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/d55MmSSrMOAa7YboXbvWTauB-vE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.224.0/24 Signature Algorithm: sha256WithRSAEncryption 84:b0:46:07:65:3b:46:37:18:d2:50:94:97:5e:d1:a7:db:9b: b7:16:5b:30:89:db:40:ff:a1:d0:67:b6:65:79:84:24:96:24: cf:54:bf:58:78:be:d2:6d:91:30:12:64:0c:8b:83:48:ce:45: 93:11:28:51:94:bd:f9:2c:5b:d6:48:4a:48:e7:d8:ad:29:5f: 6a:e1:27:98:28:f5:bd:aa:6a:fb:ed:94:21:ef:de:d5:bb:e5: 99:f7:a8:17:0a:e5:b5:3f:3b:5b:57:ff:2a:31:61:da:73:a2: 74:5d:cd:03:81:3c:fe:22:a1:0e:e5:46:4d:68:2f:34:b7:96: 31:bb:59:75:c8:da:86:87:09:94:1b:bc:54:7c:25:29:a4:5d: ef:9a:c0:43:97:85:1d:a3:28:45:70:cc:cb:32:00:ff:c4:26: c9:5e:7b:46:48:9a:65:3a:3f:ca:f0:15:40:c7:00:7b:db:74: 96:fb:c0:05:02:11:ed:40:47:24:ea:63:1e:3d:12:49:b3:0f: 30:99:c5:32:60:f0:20:48:e8:39:60:e6:53:35:72:c4:88:8e: 60:cc:e8:34:4c:2d:41:f4:f3:8d:07:f9:ee:ae:ba:ee:55:fa: 96:c4:fd:f1:ad:8b:10:1e:45:c9:d7:da:f0:74:8f:32:94:ff: f6:63:b1:b0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt261FIUWTw5RNUo56pp29xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MDM1ZWM5ZGUyNTcwYzFlN2E3ZGI0MGUyNzJlNDU1NDhj OTIwMmIwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzllNGM5OTI0YWIzMGUwMWFlZDg2ZTg1ZGJiZDY0ZGFiODFmYWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcRDOWZWj8duS2K+m8CO4HDmJowZ hPFdOBWX00lMvlGoUbTnm/aBuzFEPRIsaD2ttHEbLWcq4rkmvwbRheINzqvvBFo7 c4gEgQy0rh/OcLJUrOjxslr9Swg+c9DAAWscQcT4MdV26e89vyVMoNExR/vUwKPR n5/o9VI4fPV6a9fykLhiUgQ3jFTEegvywr4MoR7pabNosZxuMxJawDn91OiGwmAf WXOa6s7oSBfuoeo9lE3+p5o/Foq27TuK7WFgoJct9aOurwK2dx7A87u97ZhwZh9S nlcM+kd7jMmdSsWmH2GmR7cbY7iQ/eW5BQ8eAGQnkyj/zzTgz6vlsSSq4QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHeeTJkkqzDgGu2G6F271k2rgfrxMB8GA1UdIwQY MBaAFPgDXsneJXDB56fbQOJy5FVIySArMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BTmV5ZDRsY01IbnA5dEE0bkxrVlVqSklDcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvMTAxMTI2LTFkMzItNDJhNi04N2Zl LTkyMjM4NDZmZjMwYi8xL2Q1NU1tU1NyTU9BYTdZYm9YYnZXVGF1Qi12RS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDAvMTAxMTI2LTFkMzItNDJhNi04N2ZlLTkyMjM4NDZmZjMw Yi8xLzEtQU5leWQ0bGNNSG5wOXRBNG5Ma1ZVakpJQ3MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBFuAw DQYJKoZIhvcNAQELBQADggEBAISwRgdlO0Y3GNJQlJde0afbm7cWWzCJ20D/odBn tmV5hCSWJM9Uv1h4vtJtkTASZAyLg0jORZMRKFGUvfksW9ZISkjn2K0pX2rhJ5go 9b2qavvtlCHv3tW75Zn3qBcK5bU/O1tX/yoxYdpzonRdzQOBPP4ioQ7lRk1oLzS3 ljG7WXXI2oaHCZQbvFR8JSmkXe+awEOXhR2jKEVwzMsyAP/EJslee0ZImmU6P8rw FUDHAHvbdJb7wAUCEe1ARyTqYx49EkmzDzCZxTJg8CBI6Dlg5lM1csSIjmDM6DRM LUH0840H+e6uuu5V+pbE/fGtixAeRcnX2vB0jzKU//ZjsbA= -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:48 2026 by rpki-client