This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/E50tmVkqcKJ8hvkMgzElVUsN-nk.roa File: E50tmVkqcKJ8hvkMgzElVUsN-nk.roa (raw, json) Hash identifier: v6/X+2RH7lba53xOm7erhTp0p/yhNOGtKRcVvRlqm6o= Subject key identifier: 13:9D:2D:99:59:2A:70:A2:7C:86:F9:0C:83:31:25:55:4B:0D:FA:79 Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4 Certificate serial: 019B7CED486F8FAE0B59FDCBA1799362CDFE Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/E50tmVkqcKJ8hvkMgzElVUsN-nk.roa Signing time: Fri 02 Jan 2026 04:18:03 +0000 ROA not before: Fri 02 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202 IP address blocks: 193.19.196.0/24 maxlen: 24 193.19.197.0/24 maxlen: 24 194.125.246.0/24 maxlen: 24 194.125.247.0/24 maxlen: 24 195.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:48:6f:8f:ae:0b:59:fd:cb:a1:79:93:62:cd:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4 Validity Not Before: Jan 2 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=139d2d99592a70a27c86f90c833125554b0dfa79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:27:b3:60:9b:60:ac:e0:55:2e:2a:6a:98:95: 26:f6:55:24:22:48:49:19:21:0f:a6:34:fd:6e:59: 39:61:7c:97:80:e8:8c:92:9c:1a:51:4c:6d:30:f8: 15:17:22:31:94:3f:56:31:3f:96:50:d0:2e:1d:d8: e7:a7:59:4e:93:c8:97:c6:0d:b8:f4:44:b8:76:f9: 01:f9:92:a2:e2:4c:0f:42:81:20:24:60:83:25:b5: 6d:69:17:9e:44:2e:1b:fa:97:4b:f1:3c:6c:ae:31: b2:32:ca:04:be:5d:1c:93:d7:5b:71:ed:03:b5:df: a7:10:58:5c:82:34:db:f3:65:3b:ab:09:15:9c:36: ce:8c:84:ba:09:06:d8:53:fa:a5:36:28:4c:45:8a: c3:c7:34:59:e4:db:04:f0:3c:d0:53:5c:14:d6:71: b1:e5:97:13:19:7e:58:d2:e1:a3:d2:37:ae:cd:43: b2:ea:c2:13:57:51:c4:55:0d:da:45:47:34:08:0d: b7:c4:8f:75:ec:39:6b:af:31:7e:a2:8b:9a:22:55: 3f:ec:8d:b5:57:ef:74:28:0f:e4:a3:a4:84:92:f7: 44:e6:9e:d5:1d:db:e7:92:0c:0f:b7:2c:c8:82:9c: 3a:66:a4:5e:7c:60:9a:01:4b:c1:92:5e:15:6f:59: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9D:2D:99:59:2A:70:A2:7C:86:F9:0C:83:31:25:55:4B:0D:FA:79 X509v3 Authority Key Identifier: keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/E50tmVkqcKJ8hvkMgzElVUsN-nk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.196.0/23 194.125.246.0/23 195.22.158.0/24 Signature Algorithm: sha256WithRSAEncryption 15:7f:bc:fb:61:5b:d8:f8:a6:de:c1:bf:28:f9:b4:41:bd:80: 2a:cf:63:42:f6:b5:ae:89:30:d3:c7:ac:f7:f8:c3:aa:6d:56: 1c:7d:74:09:54:92:64:07:5d:f2:14:a5:42:16:0c:54:c5:f2: b8:12:e1:7b:07:6f:47:a7:2b:3f:44:7b:ab:03:32:e4:8e:84: 5c:b7:7d:77:cc:23:c8:84:68:a4:f7:9e:62:e3:19:20:dd:22: e3:b1:ff:83:9f:be:7f:8a:ce:f3:ab:52:66:e2:0e:3a:8a:83: 17:30:72:fd:ef:bb:20:7b:11:c0:8a:91:34:00:ff:42:7a:51: 67:68:16:22:35:d3:84:ba:59:c4:18:21:42:e2:a0:b1:c2:b2: 38:5b:d5:e0:6f:6d:ae:ef:62:2f:3e:45:9d:ce:29:38:67:f4: 88:f2:9b:3e:67:dd:be:ec:e7:7c:ba:38:66:f3:f9:b0:d9:e8: d1:ea:5b:24:e1:41:c8:e8:98:52:23:7f:1a:9c:1c:bb:09:d3: fc:f4:fd:59:5e:08:0e:70:6c:76:ec:40:57:bb:86:e8:79:fa: 7b:58:cf:ad:ff:43:5a:15:b5:f7:c8:9d:ac:1c:69:60:c2:d6: 10:32:bd:94:68:2d:4e:b5:94:47:f3:7e:2b:d5:1d:b2:a6:2e: ef:5a:e0:ca -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87Uhvj64LWf3LoXmTYs3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNzlhZmNiYTVhODc2MmZiNzlmNGU1ZTBkN2EzNWVlODRj ZDNkZjQwHhcNMjYwMTAyMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzlkMmQ5OTU5MmE3MGEyN2M4NmY5MGM4MzMxMjU1NTRiMGRmYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSezYJtgrOBVLipqmJUm9lUkIkhJ GSEPpjT9blk5YXyXgOiMkpwaUUxtMPgVFyIxlD9WMT+WUNAuHdjnp1lOk8iXxg24 9ES4dvkB+ZKi4kwPQoEgJGCDJbVtaReeRC4b+pdL8TxsrjGyMsoEvl0ck9dbce0D td+nEFhcgjTb82U7qwkVnDbOjIS6CQbYU/qlNihMRYrDxzRZ5NsE8DzQU1wU1nGx 5ZcTGX5Y0uGj0jeuzUOy6sITV1HEVQ3aRUc0CA23xI917DlrrzF+oouaIlU/7I21 V+90KA/ko6SEkvdE5p7VHdvnkgwPtyzIgpw6ZqRefGCaAUvBkl4Vb1n0ZQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBOdLZlZKnCifIb5DIMxJVVLDfp5MB8GA1UdIwQY MBaAFIB5r8ulqHYvt59OXg16Ne6EzT30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kNWViNmYtYjc4MS00ZDUyLTgyODMt ZDJlMTBjOTc2NDVmLzEvRTUwdG1Wa3FjS0o4aHZrTWd6RWxWVXNOLW5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kNWViNmYtYjc4MS00ZDUyLTgyODMtZDJlMTBjOTc2NDVm LzEvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwRPEAwQB wn32AwQAwxaeMA0GCSqGSIb3DQEBCwUAA4IBAQAVf7z7YVvY+Kbewb8o+bRBvYAq z2NC9rWuiTDTx6z3+MOqbVYcfXQJVJJkB13yFKVCFgxUxfK4EuF7B29Hpys/RHur AzLkjoRct313zCPIhGik955i4xkg3SLjsf+Dn75/is7zq1Jm4g46ioMXMHL977sg exHAipE0AP9CelFnaBYiNdOEulnEGCFC4qCxwrI4W9Xgb22u72IvPkWdzik4Z/SI 8ps+Z92+7Od8ujhm8/mw2ejR6lsk4UHI6JhSI38anBy7CdP89P1ZXggOcGx27EBX u4boefp7WM+t/0NaFbX3yJ2sHGlgwtYQMr2UaC1OtZRH834r1R2ypi7vWuDK -----END CERTIFICATE-----Generated at Tue Jan 20 23:14:22 2026 by rpki-client