This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/1cRlTVeHuriEMSuZag34rfiSKZQ.roa File: 1cRlTVeHuriEMSuZag34rfiSKZQ.roa (raw, json) Hash identifier: OlYfnvQCajHgPtwJVq37KeK/wVE1TX6e1PHAiHTVPas= Subject key identifier: D5:C4:65:4D:57:87:BA:B8:84:31:2B:99:6A:0D:F8:AD:F8:92:29:94 Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa Certificate serial: 019B7DCAB5D7DF605ACC06D0B54599BD66F0 Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/1cRlTVeHuriEMSuZag34rfiSKZQ.roa Signing time: Fri 02 Jan 2026 08:19:55 +0000 ROA not before: Fri 02 Jan 2026 08:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6421 IP address blocks: 193.103.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b5:d7:df:60:5a:cc:06:d0:b5:45:99:bd:66:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa Validity Not Before: Jan 2 08:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5c4654d5787bab884312b996a0df8adf8922994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:54:07:6b:9c:7e:15:ae:0e:7c:cd:dd:c6:90: 7b:82:d8:ae:1b:4c:3d:66:35:e5:3f:5a:c1:94:5b: fa:17:39:87:85:6a:09:f4:46:b6:6f:2d:85:d1:73: 3c:a2:30:58:c1:43:d8:c4:15:ca:4d:39:36:3b:0e: e8:76:75:28:e5:1e:50:c8:bc:1d:b7:42:61:f3:7a: ed:cb:d0:07:60:66:6e:1a:75:c3:44:56:a7:a1:37: e9:32:94:b0:56:9c:76:05:74:12:94:73:15:64:80: be:a1:78:58:99:9a:d5:67:93:80:f3:18:64:2d:1c: 93:0e:7f:b3:17:e1:23:a2:cc:b7:a3:f4:e8:9e:8d: 0b:3f:bc:0c:f5:b8:e4:f0:1f:83:f4:9c:e2:6c:58: 0a:60:17:d1:87:e0:45:0f:96:97:cb:b7:e4:1c:53: e6:2a:f4:ae:32:69:59:4f:55:81:16:2a:69:e1:dc: 60:2b:2a:3f:d7:66:06:9e:00:6b:f4:9d:87:dd:b9: 0b:ee:fc:8f:54:12:cb:c0:7d:cf:02:49:a4:c1:82: 43:a2:84:e3:06:74:ae:7f:c6:4f:3f:de:df:dd:bb: 6e:e3:a7:6a:42:7a:e7:a7:18:2b:29:ef:ef:cd:77: 27:2c:86:0c:8d:ed:a1:b3:dd:2f:4f:b8:cd:80:89: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C4:65:4D:57:87:BA:B8:84:31:2B:99:6A:0D:F8:AD:F8:92:29:94 X509v3 Authority Key Identifier: keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/1cRlTVeHuriEMSuZag34rfiSKZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.103.199.0/24 Signature Algorithm: sha256WithRSAEncryption 59:bb:e7:e7:3a:9a:39:4b:ff:0c:cd:8c:ad:71:1d:cf:71:95: 75:5c:61:9f:79:52:f2:45:0a:20:6e:d8:eb:89:96:62:f3:49: a7:60:f8:94:ae:4f:6c:73:88:94:f3:71:99:36:14:06:b2:d7: e9:d2:02:86:5b:ca:41:d6:b7:25:cb:1e:3c:ee:f5:68:f5:0d: ee:ac:ae:0a:e5:4a:ef:4e:e9:2d:9d:5d:e2:12:14:c7:a8:3f: c9:ba:34:87:ce:1f:bf:9a:b1:33:52:b0:db:8d:50:67:b2:c4: 6e:81:30:a8:54:85:4b:3c:6a:ec:51:eb:23:5e:52:61:87:50: 1d:65:ed:64:83:9a:2c:eb:0f:2e:5b:bf:af:e4:96:e5:86:a5: 28:97:50:c6:54:3f:83:66:62:e3:0c:2e:36:72:7a:61:79:e5: 9a:72:4e:3c:57:55:e0:54:ca:8d:87:e2:67:d2:43:c4:b3:c6: d5:47:43:f9:19:fb:3e:ab:3b:b4:d5:63:c9:d4:e5:75:14:46: d6:72:64:75:92:7d:09:be:78:d2:a2:a4:e1:37:b2:bd:c4:80: a9:8d:3b:6d:f5:18:7f:2a:ce:e4:93:85:c4:af:9a:79:10:ae: 22:50:d8:67:58:0c:59:62:1a:1c:6e:c7:53:c8:ff:47:75:93: 03:9c:3b:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yrXX32BazAbQtUWZvWbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNjY0YjkyNGU0ZWEwMjdjMWMzYTA3NzBkZjFmZjgwYjFk NTY4ZmEwHhcNMjYwMTAyMDgxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWM0NjU0ZDU3ODdiYWI4ODQzMTJiOTk2YTBkZjhhZGY4OTIyOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FQHa5x+Fa4OfM3dxpB7gtiuG0w9 ZjXlP1rBlFv6FzmHhWoJ9Ea2by2F0XM8ojBYwUPYxBXKTTk2Ow7odnUo5R5QyLwd t0Jh83rty9AHYGZuGnXDRFanoTfpMpSwVpx2BXQSlHMVZIC+oXhYmZrVZ5OA8xhk LRyTDn+zF+Ejosy3o/Tono0LP7wM9bjk8B+D9JzibFgKYBfRh+BFD5aXy7fkHFPm KvSuMmlZT1WBFipp4dxgKyo/12YGngBr9J2H3bkL7vyPVBLLwH3PAkmkwYJDooTj BnSuf8ZPP97f3btu46dqQnrnpxgrKe/vzXcnLIYMje2hs90vT7jNgImT9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNXEZU1Xh7q4hDErmWoN+K34kimUMB8GA1UdIwQY MBaAFK5mS5JOTqAnwcOgdw3x/4Cx1Wj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMt MDRjNTM5N2ZlNWY4LzEvMWNSbFRWZUh1cmlFTVN1WmFnMzRyZmlTS1pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMtMDRjNTM5N2ZlNWY4 LzEvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWfHMA0G CSqGSIb3DQEBCwUAA4IBAQBZu+fnOpo5S/8MzYytcR3PcZV1XGGfeVLyRQogbtjr iZZi80mnYPiUrk9sc4iU83GZNhQGstfp0gKGW8pB1rclyx487vVo9Q3urK4K5Urv TuktnV3iEhTHqD/JujSHzh+/mrEzUrDbjVBnssRugTCoVIVLPGrsUesjXlJhh1Ad Ze1kg5os6w8uW7+v5JblhqUol1DGVD+DZmLjDC42cnpheeWack48V1XgVMqNh+Jn 0kPEs8bVR0P5Gfs+qzu01WPJ1OV1FEbWcmR1kn0JvnjSoqThN7K9xICpjTtt9Rh/ Ks7kk4XEr5p5EK4iUNhnWAxZYhocbsdTyP9HdZMDnDuA -----END CERTIFICATE-----Generated at Wed Jan 21 17:17:45 2026 by rpki-client