This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RapEJvh3bF71xvXptImSS2_Etrw.roa File: RapEJvh3bF71xvXptImSS2_Etrw.roa (raw, json) Hash identifier: 49y2hwJ9UxstabFeMucIMnmGqJVffqMeZdL4n6qAhww= Subject key identifier: 45:AA:44:26:F8:77:6C:5E:F5:C6:F5:E9:B4:89:92:4B:6F:C4:B6:BC Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12C55C5FE9A8ACC8AF3B13DE0554EC Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RapEJvh3bF71xvXptImSS2_Etrw.roa Signing time: Fri 02 Jan 2026 00:19:23 +0000 ROA not before: Fri 02 Jan 2026 00:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 193.189.82.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c5:5c:5f:e9:a8:ac:c8:af:3b:13:de:05:54:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45aa4426f8776c5ef5c6f5e9b489924b6fc4b6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:2a:bb:da:e2:84:ea:bf:c2:f9:45:39:fa: ea:d6:5a:d9:4d:c5:58:df:76:54:be:6c:c6:92:bb: 77:36:da:c9:4c:c5:2f:78:03:68:f1:de:cf:86:94: 75:4a:2c:d8:e0:03:60:aa:9f:2e:03:73:0f:84:d5: 8a:3d:06:5d:1d:a2:37:dc:ab:68:c6:6b:4a:b2:97: 2c:1b:88:38:3d:bc:51:e3:43:0f:de:71:9f:28:44: 44:62:57:93:09:5a:8f:fc:b9:2a:32:a9:b1:d4:dd: 3f:48:f8:f9:66:01:fc:cb:5b:95:6a:dd:b3:5b:3e: cc:dd:54:01:da:62:8f:1f:e8:be:ea:99:58:4d:b9: 71:a4:f1:8f:03:39:59:a5:83:63:13:b8:f4:a9:1d: c8:e6:de:ff:02:de:34:00:10:e6:ef:6a:88:5e:2a: 73:a0:5f:db:ba:6b:07:ca:c5:09:67:e4:2f:28:34: cc:7c:b9:d2:85:24:68:07:9e:77:a2:97:72:d4:39: 04:61:70:16:10:c0:6a:74:68:40:46:c3:81:01:b8: 30:1d:16:7e:1d:2e:e8:40:36:c9:8f:2c:8a:65:4f: 7c:f5:5c:e6:48:c8:fc:44:fc:d7:94:0e:b8:43:b5: c0:c3:ce:ac:6e:cb:a8:22:d2:69:d9:6a:35:65:02: 2d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AA:44:26:F8:77:6C:5E:F5:C6:F5:E9:B4:89:92:4B:6F:C4:B6:BC X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RapEJvh3bF71xvXptImSS2_Etrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.82.0/23 Signature Algorithm: sha256WithRSAEncryption 32:d8:88:70:df:ec:e9:e6:09:0e:81:74:fc:e4:5d:25:13:98: a1:25:65:2a:d8:ab:d4:8a:ab:0c:8b:24:74:6b:35:0e:c6:c8: 0b:87:65:a2:ef:fe:7d:4f:94:2e:96:45:f8:89:b6:14:d6:48: 2d:e2:18:4a:95:e7:77:a0:4c:71:f2:6a:bf:a7:d2:b7:00:c5: e2:64:7d:56:9a:67:48:ce:10:e2:c6:24:e0:04:44:c8:dc:2d: 7d:f4:3c:9f:70:e8:64:b8:19:11:f0:db:69:9a:d7:0b:25:5b: 6a:cb:0f:b6:b0:44:a0:2c:94:16:b7:86:5b:63:6d:c8:3c:70: cd:c5:9a:4b:48:c4:6f:22:39:93:3f:f5:53:ec:a4:0e:91:b1: ff:eb:6a:0b:d7:af:74:ae:b5:ec:05:6b:a7:b2:c2:1e:f8:c2: bb:ed:7b:50:78:c0:1d:a1:db:5e:95:de:5e:77:28:d5:ac:f8: 20:27:f5:d9:da:ec:8e:df:f1:a6:c7:40:6c:f6:b5:1f:be:28: b4:7e:a3:ff:c0:f7:df:09:27:12:53:f7:ab:d5:7d:f8:60:0b: 72:f9:b6:0e:7d:b0:7e:ff:30:94:44:57:c0:9e:f2:43:1a:24: 12:df:af:3e:fe:32:22:74:c8:fd:d1:23:e5:9b:43:dc:39:30: a3:f1:4e:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsVcX+morMivOxPeBVTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWFhNDQyNmY4Nzc2YzVlZjVjNmY1ZTliNDg5OTI0YjZmYzRiNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww0qu9rihOq/wvlFOfrq1lrZTcVY 33ZUvmzGkrt3NtrJTMUveANo8d7PhpR1SizY4ANgqp8uA3MPhNWKPQZdHaI33Kto xmtKspcsG4g4PbxR40MP3nGfKEREYleTCVqP/LkqMqmx1N0/SPj5ZgH8y1uVat2z Wz7M3VQB2mKPH+i+6plYTblxpPGPAzlZpYNjE7j0qR3I5t7/At40ABDm72qIXipz oF/bumsHysUJZ+QvKDTMfLnShSRoB553opdy1DkEYXAWEMBqdGhARsOBAbgwHRZ+ HS7oQDbJjyyKZU989VzmSMj8RPzXlA64Q7XAw86sbsuoItJp2Wo1ZQItGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEWqRCb4d2xe9cb16bSJkktvxLa8MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvUmFwRUp2aDNiRjcxeHZYcHRJbVNTMl9FdHJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwb1SMA0G CSqGSIb3DQEBCwUAA4IBAQAy2Ihw3+zp5gkOgXT85F0lE5ihJWUq2KvUiqsMiyR0 azUOxsgLh2Wi7/59T5QulkX4ibYU1kgt4hhKled3oExx8mq/p9K3AMXiZH1WmmdI zhDixiTgBETI3C199DyfcOhkuBkR8NtpmtcLJVtqyw+2sESgLJQWt4ZbY23IPHDN xZpLSMRvIjmTP/VT7KQOkbH/62oL1690rrXsBWunssIe+MK77XtQeMAdodteld5e dyjVrPggJ/XZ2uyO3/Gmx0Bs9rUfvii0fqP/wPffCScSU/er1X34YAty+bYOfbB+ /zCURFfAnvJDGiQS368+/jIidMj90SPlm0PcOTCj8U7/ -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:30 2026 by rpki-client