This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/u2N7udWHL38xXKaM9zlWB4W-ME4.roa File: u2N7udWHL38xXKaM9zlWB4W-ME4.roa (raw, json) Hash identifier: SRPpRQyERN5FsdBAYlcVxUC95a7rxraNn372ElkInaA= Subject key identifier: BB:63:7B:B9:D5:87:2F:7F:31:5C:A6:8C:F7:39:56:07:85:BE:30:4E Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe Certificate serial: 019B7BA4C977D20CDA655D783875A6B6F4E1 Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/u2N7udWHL38xXKaM9zlWB4W-ME4.roa Signing time: Thu 01 Jan 2026 22:19:15 +0000 ROA not before: Thu 01 Jan 2026 22:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 193.200.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c9:77:d2:0c:da:65:5d:78:38:75:a6:b6:f4:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb637bb9d5872f7f315ca68cf739560785be304e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:44:0e:30:10:89:6b:ec:c1:be:aa:a9:0e: ff:78:d7:1c:30:5c:26:54:f1:69:b1:d0:1a:c6:7f: de:93:22:e5:0a:ad:fd:65:de:35:f1:e7:57:2f:3e: 55:63:3b:f7:23:22:28:a4:48:e7:18:8f:d9:53:8e: cd:d1:d2:03:be:85:a8:3f:3b:b8:63:49:b6:5a:56: 40:06:1d:a8:a6:d9:27:37:d1:c0:7d:85:4b:01:44: a0:a4:a8:92:72:12:ed:8e:be:d5:93:6d:a5:fd:93: cd:09:9d:d5:32:63:2d:32:1f:58:b8:f7:41:17:03: 32:35:92:9b:38:47:ad:23:38:6a:b1:20:bf:6c:6e: 25:d4:b9:13:5c:f6:b2:06:f0:ef:05:4a:82:7c:68: 2f:6c:ef:81:a7:bd:18:85:1c:6e:43:81:c9:6e:73: e4:14:3c:d3:49:aa:be:38:b2:43:75:4b:c0:ec:dd: 69:b7:b8:f0:27:d9:b0:03:2c:b5:56:d9:84:5e:f5: cd:b7:41:58:61:0d:d6:93:d4:20:7b:23:90:55:59: 9c:29:d4:17:ab:40:3e:a1:05:9c:73:ad:74:80:6a: 77:a4:80:89:3d:cf:00:4d:86:cd:6e:59:55:c7:a5: 12:e6:98:88:51:b0:2e:17:f1:eb:37:23:7d:7a:6a: 57:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:63:7B:B9:D5:87:2F:7F:31:5C:A6:8C:F7:39:56:07:85:BE:30:4E X509v3 Authority Key Identifier: keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/u2N7udWHL38xXKaM9zlWB4W-ME4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.191.0/24 Signature Algorithm: sha256WithRSAEncryption 44:ca:f5:16:fb:4d:8f:99:7a:d9:d4:49:24:70:02:f1:26:41: 2a:29:71:5f:dd:b8:06:b0:82:f5:bf:4c:a5:cc:30:a7:c4:67: 77:30:34:10:fe:0d:81:ba:c0:0f:15:fb:df:1e:c8:5b:29:cb: ea:d9:61:84:16:56:33:28:75:ab:a6:34:9f:2a:91:39:c0:92: 59:3e:22:b5:02:91:e9:5d:42:e7:7e:be:ed:b5:5e:6a:aa:dd: 3e:2d:66:d0:79:a2:f4:9f:42:1f:27:c8:fe:b2:01:c3:d3:b0: f0:eb:88:eb:70:77:58:96:da:95:1c:ed:6c:75:1e:a2:8b:70: 90:e3:ea:18:0b:9b:fe:76:9a:5b:64:cd:8b:54:e3:8b:14:82: 49:cf:b7:d2:44:4c:cf:22:7f:51:83:53:60:d7:a8:d7:2a:f6: 88:29:09:0a:31:9e:36:0a:77:c3:c8:23:fa:74:2c:e3:11:83: 61:7d:24:91:2b:19:f2:67:71:c7:69:be:61:8b:78:14:45:71: 9d:73:84:f6:d9:50:2b:26:6a:3c:d2:c5:1f:b6:92:fc:c4:ca: 0a:12:a2:bb:41:42:b6:09:cd:5c:aa:6f:92:a1:1b:46:43:c8: 06:bb:8e:77:0c:57:81:4e:e5:92:96:37:a7:94:70:b8:aa:b8: ca:6e:4e:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pMl30gzaZV14OHWmtvThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4 NTBhYmUwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjYzN2JiOWQ1ODcyZjdmMzE1Y2E2OGNmNzM5NTYwNzg1YmUzMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYZEDjAQiWvswb6qqQ7/eNccMFwm VPFpsdAaxn/ekyLlCq39Zd418edXLz5VYzv3IyIopEjnGI/ZU47N0dIDvoWoPzu4 Y0m2WlZABh2optknN9HAfYVLAUSgpKiSchLtjr7Vk22l/ZPNCZ3VMmMtMh9YuPdB FwMyNZKbOEetIzhqsSC/bG4l1LkTXPayBvDvBUqCfGgvbO+Bp70YhRxuQ4HJbnPk FDzTSaq+OLJDdUvA7N1pt7jwJ9mwAyy1VtmEXvXNt0FYYQ3Wk9QgeyOQVVmcKdQX q0A+oQWcc610gGp3pICJPc8ATYbNbllVx6US5piIUbAuF/HrNyN9empX6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLtje7nVhy9/MVymjPc5VgeFvjBOMB8GA1UdIwQY MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt YmJmNzE5YzNjYTc0LzEvdTJON3VkV0hMMzh4WEthTTl6bFdCNFctTUU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0 LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwci/MA0G CSqGSIb3DQEBCwUAA4IBAQBEyvUW+02PmXrZ1EkkcALxJkEqKXFf3bgGsIL1v0yl zDCnxGd3MDQQ/g2BusAPFfvfHshbKcvq2WGEFlYzKHWrpjSfKpE5wJJZPiK1ApHp XULnfr7ttV5qqt0+LWbQeaL0n0IfJ8j+sgHD07Dw64jrcHdYltqVHO1sdR6ii3CQ 4+oYC5v+dppbZM2LVOOLFIJJz7fSREzPIn9Rg1Ng16jXKvaIKQkKMZ42CnfDyCP6 dCzjEYNhfSSRKxnyZ3HHab5hi3gURXGdc4T22VArJmo80sUftpL8xMoKEqK7QUK2 Cc1cqm+SoRtGQ8gGu453DFeBTuWSljenlHC4qrjKbk6j -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:02 2026 by rpki-client