This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/cHz2VTRQ9RWkxftbKU-kXqLP1GE.roa File: cHz2VTRQ9RWkxftbKU-kXqLP1GE.roa (raw, json) Hash identifier: Tjz6f7FaWUDdbc5zyvKrfzNZTUHB4msYRQvxnsJef0Q= Subject key identifier: 70:7C:F6:55:34:50:F5:15:A4:C5:FB:5B:29:4F:A4:5E:A2:CF:D4:61 Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2 Certificate serial: 019B7EA5202232700B7F2AFA0579A55C3C7C Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/cHz2VTRQ9RWkxftbKU-kXqLP1GE.roa Signing time: Fri 02 Jan 2026 12:18:29 +0000 ROA not before: Fri 02 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 193.134.96.0/24 maxlen: 24 193.134.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:20:22:32:70:0b:7f:2a:fa:05:79:a5:5c:3c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2 Validity Not Before: Jan 2 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=707cf6553450f515a4c5fb5b294fa45ea2cfd461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:36:52:75:9b:b1:c3:45:7a:c9:82:e5:9b:88: 90:5b:8f:bd:52:ac:e1:f6:4d:61:eb:f3:d7:65:7a: b0:cc:eb:9c:ba:7d:d0:27:20:ab:3d:46:cc:47:27: aa:dc:c0:50:5b:d4:85:80:80:3f:5c:14:04:e7:9f: 8c:75:b7:e5:8d:4e:94:30:f9:da:1a:7b:f1:ea:25: b6:26:5b:2c:6b:5a:77:1e:51:d5:79:6d:69:b5:0c: 66:e4:45:04:32:a0:97:91:b3:2a:14:b0:ba:85:e3: 94:34:5a:04:3c:82:10:bf:4c:68:a5:99:33:1b:95: 14:88:82:89:ea:a3:d1:8e:11:79:b7:69:4b:fd:06: e3:d6:76:aa:e0:9c:3f:16:da:04:6e:f7:8f:e8:f9: c1:49:3e:13:0a:dc:0b:dd:51:d4:41:3a:26:ef:e4: 58:b6:7d:4e:86:f3:44:1d:ab:48:a6:2a:ce:6a:a2: 3c:b3:27:ea:9e:3b:c7:f4:d5:95:f3:18:f5:7e:01: e5:3b:c9:be:96:3c:aa:79:51:31:a7:14:cd:f4:0e: 83:3e:7a:b6:5a:39:39:ec:12:f7:1b:08:bb:72:45: 23:24:ca:c5:87:17:26:29:d1:ae:53:1c:88:56:bf: cd:5d:6a:cd:92:43:5b:61:93:cb:67:1a:12:32:a9: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7C:F6:55:34:50:F5:15:A4:C5:FB:5B:29:4F:A4:5E:A2:CF:D4:61 X509v3 Authority Key Identifier: keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/cHz2VTRQ9RWkxftbKU-kXqLP1GE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.96.0/24 193.134.98.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:f9:d2:53:3a:30:96:e7:82:29:45:60:6e:a4:77:85:09:88: 8f:c7:03:3c:88:8d:75:4a:c9:25:bf:ee:d5:f5:f9:1f:8f:6f: 3e:56:ff:21:8b:e5:81:6a:fb:ff:59:1f:dd:f8:d8:9f:8d:3d: 44:f1:33:04:49:07:2a:d2:e7:36:35:ec:b1:ee:87:50:73:20: 6a:05:fb:83:1e:fb:ff:30:c6:f6:b1:b5:af:58:a0:63:ff:6e: 3a:6f:d4:12:8d:72:ce:ba:8d:dc:fa:4e:c1:b6:0a:a9:44:cf: 28:c1:72:97:4a:10:9a:9a:60:2d:a0:28:0b:35:16:4a:7f:c9: 60:65:9e:cb:80:ba:4d:1c:2e:30:a1:4f:b2:a8:ba:b5:4a:69: be:2a:97:a3:c8:96:1b:66:49:43:ce:f3:83:58:b0:ae:c4:de: 83:99:f7:e3:06:b2:fb:82:ae:ac:68:b2:d0:f4:1a:3c:b7:b5: b0:de:ec:e4:b8:b8:86:4c:96:c6:04:1a:bb:85:bd:f4:10:86: 3c:b2:14:3a:76:da:65:1b:5c:4d:ff:07:3d:40:61:75:c4:cc: 2c:96:39:c7:a5:6b:7d:a6:37:f5:3e:bc:7b:98:28:63:f0:9d: d8:d3:88:23:4c:96:b9:48:8e:c0:e4:b1:b8:da:33:f8:b9:81: de:e5:53:7c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pSAiMnALfyr6BXmlXDx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzI0NGJlNmIzYWZmYjZkNGU1NDdmMmUxZTNjNWVhYzFi MjZhYjIwHhcNMjYwMTAyMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDdjZjY1NTM0NTBmNTE1YTRjNWZiNWIyOTRmYTQ1ZWEyY2ZkNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jZSdZuxw0V6yYLlm4iQW4+9Uqzh 9k1h6/PXZXqwzOucun3QJyCrPUbMRyeq3MBQW9SFgIA/XBQE55+MdbfljU6UMPna Gnvx6iW2Jlssa1p3HlHVeW1ptQxm5EUEMqCXkbMqFLC6heOUNFoEPIIQv0xopZkz G5UUiIKJ6qPRjhF5t2lL/Qbj1naq4Jw/FtoEbveP6PnBST4TCtwL3VHUQTom7+RY tn1OhvNEHatIpirOaqI8syfqnjvH9NWV8xj1fgHlO8m+ljyqeVExpxTN9A6DPnq2 Wjk57BL3Gwi7ckUjJMrFhxcmKdGuUxyIVr/NXWrNkkNbYZPLZxoSMqldPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHB89lU0UPUVpMX7WylPpF6iz9RhMB8GA1UdIwQY MBaAFJPCRL5rOv+21OVH8uHjxerBsmqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMt NjZkNzRlNzNmMjU0LzEvY0h6MlZUUlE5UldreGZ0YktVLWtYcUxQMUdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMtNjZkNzRlNzNmMjU0 LzEvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwYZgAwQA wYZiMA0GCSqGSIb3DQEBCwUAA4IBAQAa+dJTOjCW54IpRWBupHeFCYiPxwM8iI11 Ssklv+7V9fkfj28+Vv8hi+WBavv/WR/d+NifjT1E8TMESQcq0uc2Neyx7odQcyBq BfuDHvv/MMb2sbWvWKBj/246b9QSjXLOuo3c+k7BtgqpRM8owXKXShCammAtoCgL NRZKf8lgZZ7LgLpNHC4woU+yqLq1Smm+KpejyJYbZklDzvODWLCuxN6DmffjBrL7 gq6saLLQ9Bo8t7Ww3uzkuLiGTJbGBBq7hb30EIY8shQ6dtplG1xN/wc9QGF1xMws ljnHpWt9pjf1Prx7mChj8J3Y04gjTJa5SI7A5LG42jP4uYHe5VN8 -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:44 2026 by rpki-client