This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/61ugHkbatEiWTW_1eKYKqCu8qbY.roa File: 61ugHkbatEiWTW_1eKYKqCu8qbY.roa (raw, json) Hash identifier: 8Ns+XB7ZudJ9zzWr083jFxqXZ3ELplfe29YSHWs6xj0= Subject key identifier: EB:5B:A0:1E:46:DA:B4:48:96:4D:6F:F5:78:A6:0A:A8:2B:BC:A9:B6 Certificate issuer: /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4 Certificate serial: 019B7AC8357CBB6B5A629F856F64D6AEAC48 Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/61ugHkbatEiWTW_1eKYKqCu8qbY.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207470 IP address blocks: 193.104.98.0/24 maxlen: 24 193.104.110.0/24 maxlen: 24 193.104.130.0/24 maxlen: 24 193.104.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:35:7c:bb:6b:5a:62:9f:85:6f:64:d6:ae:ac:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4 Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb5ba01e46dab448964d6ff578a60aa82bbca9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:5c:2d:10:9a:c0:41:91:c0:87:e9:08:98: 67:db:3b:e7:c1:12:b8:fc:2b:a9:bf:dd:8e:4a:4e: 3f:3b:be:c1:55:9e:a9:c4:91:ea:3a:1b:99:7b:6c: ad:73:2d:bc:ae:af:52:a4:c2:19:c1:1d:6a:55:09: 80:e3:1f:a3:3c:71:26:71:58:90:48:45:6c:a1:d7: 06:72:b6:31:04:95:1e:92:e0:45:db:cd:4c:f4:ba: 37:40:43:18:08:b0:95:f8:8e:08:9f:e8:81:64:90: 47:2c:74:fe:d9:71:4e:16:c4:45:87:fd:92:f3:9c: 47:50:51:f6:6d:59:6c:92:ac:0c:26:71:d0:94:98: 1a:cf:38:e1:22:32:e3:90:0d:70:83:ac:91:30:fc: 3d:1e:f8:e7:35:1a:ce:e9:fc:10:c6:2c:3c:61:0d: 89:69:e5:e8:23:d9:7e:37:d8:51:c1:97:fd:1e:40: 8b:d3:5f:7c:c8:d5:98:37:ac:3e:39:a7:8e:9b:5a: 33:06:c8:e9:5c:bb:d5:34:f1:a3:ad:d4:2e:37:21: e5:ac:c5:df:0e:a4:08:95:c9:64:42:48:38:99:9e: 99:f6:66:46:10:e4:59:e0:01:b9:78:be:3f:99:6e: 15:77:38:64:52:57:1d:32:8b:02:2c:0f:a9:54:1b: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5B:A0:1E:46:DA:B4:48:96:4D:6F:F5:78:A6:0A:A8:2B:BC:A9:B6 X509v3 Authority Key Identifier: keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/61ugHkbatEiWTW_1eKYKqCu8qbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.98.0/24 193.104.110.0/24 193.104.130.0/24 193.104.141.0/24 Signature Algorithm: sha256WithRSAEncryption 45:1c:dc:91:4f:5b:b5:0b:ad:c9:b1:58:ce:13:79:12:f5:53: 36:e0:64:28:fa:0a:8b:b1:dc:0a:39:f5:a1:67:1c:bb:eb:e6: fd:b2:4f:f3:65:07:11:5b:31:e8:91:b5:29:7b:b1:a3:98:93: fc:92:a0:76:a6:55:6f:36:f8:cb:78:2f:4f:52:a3:88:fe:bc: b8:88:67:b5:6a:00:28:25:18:1b:a0:30:f1:42:6f:fd:b8:e4: 33:dc:03:cd:40:9a:ff:6d:da:11:68:c0:98:2e:ef:f7:c0:32: 36:cd:bf:79:89:db:42:3f:a7:40:42:1b:e4:6f:95:42:b9:89: 29:dc:04:8a:f0:64:3a:e3:e3:2d:7d:2e:44:60:52:cb:b3:3a: 08:82:da:32:66:1f:ff:4c:d4:e3:47:58:e5:7c:de:39:b0:49: 13:98:0a:02:1d:c1:85:54:a4:bf:55:ed:d4:41:12:5a:e7:89: c7:1a:14:43:f4:ca:42:23:45:5c:1b:13:3c:eb:ac:31:6d:13: 6a:e6:2b:fb:ad:0c:aa:f0:49:3c:04:57:67:20:03:b1:f5:d6: 65:3b:78:c8:ab:0a:cb:e5:d4:82:d1:4f:76:11:a1:57:63:f7: c5:04:2c:17:c0:47:26:a5:e5:f5:3e:86:ef:ef:e3:a7:ce:7f: 0e:3e:ee:c7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yDV8u2taYp+Fb2TWrqxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYjcxZTQyNjRjZTYyYzM1ZTFjZWU2NGQxODc2NWQzMzI5 MGYyYTQwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjViYTAxZTQ2ZGFiNDQ4OTY0ZDZmZjU3OGE2MGFhODJiYmNhOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP5cLRCawEGRwIfpCJhn2zvnwRK4 /Cupv92OSk4/O77BVZ6pxJHqOhuZe2ytcy28rq9SpMIZwR1qVQmA4x+jPHEmcViQ SEVsodcGcrYxBJUekuBF281M9Lo3QEMYCLCV+I4In+iBZJBHLHT+2XFOFsRFh/2S 85xHUFH2bVlskqwMJnHQlJgazzjhIjLjkA1wg6yRMPw9HvjnNRrO6fwQxiw8YQ2J aeXoI9l+N9hRwZf9HkCL0198yNWYN6w+OaeOm1ozBsjpXLvVNPGjrdQuNyHlrMXf DqQIlclkQkg4mZ6Z9mZGEORZ4AG5eL4/mW4VdzhkUlcdMosCLA+pVBuWjQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOtboB5G2rRIlk1v9XimCqgrvKm2MB8GA1UdIwQY MBaAFAu3HkJkzmLDXhzuZNGHZdMykPKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMt Y2E1NDU4MzhhZmMwLzEvNjF1Z0hrYmF0RWlXVFdfMWVLWUtxQ3U4cWJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMtY2E1NDU4MzhhZmMw LzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwWhiAwQA wWhuAwQAwWiCAwQAwWiNMA0GCSqGSIb3DQEBCwUAA4IBAQBFHNyRT1u1C63JsVjO E3kS9VM24GQo+gqLsdwKOfWhZxy76+b9sk/zZQcRWzHokbUpe7GjmJP8kqB2plVv NvjLeC9PUqOI/ry4iGe1agAoJRgboDDxQm/9uOQz3APNQJr/bdoRaMCYLu/3wDI2 zb95idtCP6dAQhvkb5VCuYkp3ASK8GQ64+MtfS5EYFLLszoIgtoyZh//TNTjR1jl fN45sEkTmAoCHcGFVKS/Ve3UQRJa54nHGhRD9MpCI0VcGxM866wxbRNq5iv7rQyq 8Ek8BFdnIAOx9dZlO3jIqwrL5dSC0U92EaFXY/fFBCwXwEcmpeX1Pobv7+Onzn8O Pu7H -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:48 2026 by rpki-client