This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/E-mC0iAlIk0BNqElj570L59xiI4.roa File: E-mC0iAlIk0BNqElj570L59xiI4.roa (raw, json) Hash identifier: 11beTDD0KykGX0WoUgJf8Vzp+SRqSq4zspVnh6gtlMQ= Subject key identifier: 13:E9:82:D2:20:25:22:4D:01:36:A1:25:8F:9E:F4:2F:9F:71:88:8E Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019B791083EA1EB1E68986F310A9DF2B52D7 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/E-mC0iAlIk0BNqElj570L59xiI4.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 194.163.69.0/24 maxlen: 24 194.195.101.0/24 maxlen: 24 195.252.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:83:ea:1e:b1:e6:89:86:f3:10:a9:df:2b:52:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13e982d22025224d0136a1258f9ef42f9f71888e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:67:c7:82:0e:0e:4b:26:b4:b7:c7:1a:c3: 0c:b7:96:81:f7:a0:67:2d:a3:f7:a0:c4:7b:12:a6: a4:69:2b:6a:47:52:1f:cc:9d:e1:ee:36:e2:6e:6c: f5:30:07:05:6f:fa:cd:dc:fa:da:25:4d:c4:67:7b: 77:ff:aa:ce:82:64:c8:b4:a4:2d:b5:d7:25:18:8c: f2:41:33:2e:be:f5:9d:ec:ab:aa:86:c1:f9:a0:18: 1d:90:1d:7a:cd:f3:64:8d:77:46:2e:72:95:af:ea: 85:35:71:4b:ca:7a:7f:a6:bb:11:25:2a:2a:54:69: 14:9e:36:45:c0:dd:8f:ab:4e:32:04:60:90:88:ab: 8d:97:d9:4a:59:0e:7c:64:f8:72:16:d4:ee:e3:39: 63:24:a7:28:79:7a:7c:a2:5f:7a:26:09:d2:51:7f: 2d:eb:54:7b:02:fa:4d:d0:e6:d4:6f:2d:e6:9e:c8: c7:06:92:18:a0:47:31:f5:76:c8:9a:9d:ca:df:a2: 0d:2a:b2:0b:30:95:34:b1:b7:cd:13:2c:9c:c9:23: 36:4d:13:ac:b0:64:a9:e5:c4:bb:bd:2a:91:79:16: 34:f2:f1:5f:3b:21:71:51:09:59:0d:c0:3b:55:65: fb:25:46:dd:83:9e:62:4f:83:03:63:29:5e:02:a5: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E9:82:D2:20:25:22:4D:01:36:A1:25:8F:9E:F4:2F:9F:71:88:8E X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/E-mC0iAlIk0BNqElj570L59xiI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.163.69.0/24 194.195.101.0/24 195.252.172.0/24 Signature Algorithm: sha256WithRSAEncryption b4:72:b6:b7:d0:9a:e6:be:0e:9a:b6:bb:fd:fb:ca:6b:d0:ea: 2d:b3:f2:af:ed:7f:7a:de:bf:f8:19:52:80:23:3b:4b:f6:4b: 2c:a2:a8:27:e7:3f:eb:98:ce:af:9c:6b:59:9c:b2:22:84:2d: 09:c8:96:87:3f:39:46:b8:a2:41:86:d4:ec:0f:ae:80:2a:94: 19:ac:1f:62:4e:fb:b9:ce:72:58:d9:f8:39:0f:34:68:7b:d7: a2:2b:82:d0:3c:3f:ba:ca:16:50:e7:1c:0c:20:a3:e7:13:c7: 71:47:66:20:b8:d0:e5:4e:13:84:cf:79:15:f2:02:5f:67:04: 15:cc:c9:64:fa:be:af:75:2f:02:72:fe:db:31:80:30:39:02: c3:00:a8:81:2a:c2:7a:74:7f:48:eb:ec:95:64:62:14:92:78: 8f:7c:ff:99:28:cf:1a:e8:54:ee:81:ff:27:49:24:95:88:7b: fe:b0:53:cf:fa:98:c3:c2:36:0c:a0:1b:0b:4f:7b:52:46:64: ff:09:97:2e:b9:a9:eb:06:2c:eb:52:17:bf:c2:38:19:af:83: 1e:ce:b4:d3:41:37:c5:d0:5c:e4:75:ad:90:22:c1:9a:29:cf: db:36:59:86:7c:af:00:df:92:c3:44:2e:bf:e8:32:c2:bb:cb: a2:12:9f:3a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EIPqHrHmiYbzEKnfK1LXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2U5ODJkMjIwMjUyMjRkMDEzNmExMjU4ZjllZjQyZjlmNzE4ODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZdnx4IODksmtLfHGsMMt5aB96Bn LaP3oMR7EqakaStqR1IfzJ3h7jbibmz1MAcFb/rN3PraJU3EZ3t3/6rOgmTItKQt tdclGIzyQTMuvvWd7KuqhsH5oBgdkB16zfNkjXdGLnKVr+qFNXFLynp/prsRJSoq VGkUnjZFwN2Pq04yBGCQiKuNl9lKWQ58ZPhyFtTu4zljJKcoeXp8ol96JgnSUX8t 61R7AvpN0ObUby3mnsjHBpIYoEcx9XbImp3K36INKrILMJU0sbfNEyycySM2TROs sGSp5cS7vSqReRY08vFfOyFxUQlZDcA7VWX7JUbdg55iT4MDYyleAqXGewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBPpgtIgJSJNATahJY+e9C+fcYiOMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvRS1tQzBpQWxJazBCTnFFbGo1NzBMNTl4aUk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwqNFAwQA wsNlAwQAw/ysMA0GCSqGSIb3DQEBCwUAA4IBAQC0cra30Jrmvg6atrv9+8pr0Oot s/Kv7X963r/4GVKAIztL9kssoqgn5z/rmM6vnGtZnLIihC0JyJaHPzlGuKJBhtTs D66AKpQZrB9iTvu5znJY2fg5DzRoe9eiK4LQPD+6yhZQ5xwMIKPnE8dxR2YguNDl ThOEz3kV8gJfZwQVzMlk+r6vdS8Ccv7bMYAwOQLDAKiBKsJ6dH9I6+yVZGIUkniP fP+ZKM8a6FTugf8nSSSViHv+sFPP+pjDwjYMoBsLT3tSRmT/CZcuuanrBizrUhe/ wjgZr4MezrTTQTfF0Fzkda2QIsGaKc/bNlmGfK8A35LDRC6/6DLCu8uiEp86 -----END CERTIFICATE-----Generated at Fri Jan 9 17:07:00 2026 by rpki-client