This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa File: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (raw, json) Hash identifier: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og= Subject key identifier: B1:8B:61:D0:2E:60:35:30:38:36:7D:19:56:58:F6:BC:5B:BE:AD:C0 Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417 Certificate serial: 019B7C802B3C74C8BAB5848B8F8556068170 Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133861 IP address blocks: 193.134.208.0/24 maxlen: 24 193.134.209.0/24 maxlen: 24 193.134.210.0/24 maxlen: 24 193.134.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2b:3c:74:c8:ba:b5:84:8b:8f:85:56:06:81:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417 Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b18b61d02e60353038367d195658f6bc5bbeadc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7c:61:43:87:78:c6:e1:8f:81:bb:89:74:db: 58:1a:93:7b:fb:ce:6f:87:a5:e4:79:de:15:e1:fc: 18:31:a9:a6:ea:7a:6f:8f:8f:c5:b3:e9:bf:0a:51: 91:be:e7:5f:0c:fd:cb:a7:d1:de:72:f9:82:06:95: 68:c7:e4:05:6c:d5:5e:10:3a:11:45:d4:07:33:1d: 6e:fb:59:56:b3:ae:e7:d8:eb:1a:58:99:a9:06:d9: 6f:05:75:07:fa:24:bb:83:57:b8:1a:1d:96:a5:ad: 22:e9:d9:e1:37:49:69:35:67:13:4a:55:ba:4c:c3: 89:71:f4:57:27:47:70:9f:eb:13:25:a6:6e:4c:cb: 0b:58:fe:c9:a8:1c:f0:40:9b:11:33:9a:4a:3b:13: 31:8b:e9:35:36:37:0c:f7:a2:fb:d0:fc:86:63:32: 1a:93:fa:6f:87:84:8b:eb:4b:27:3d:09:68:a2:30: 6e:d4:a2:aa:00:64:97:64:07:98:2b:27:4d:67:a3: 62:e8:3b:3d:b0:9a:12:58:7f:51:a6:7c:4c:8a:02: 95:af:52:59:dd:78:76:7c:31:4c:0a:62:37:f9:9f: 83:20:9d:cf:07:28:9a:80:f3:a3:64:87:79:c7:68: 4e:67:73:ff:14:3b:fa:75:1b:d1:68:2c:41:52:9d: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8B:61:D0:2E:60:35:30:38:36:7D:19:56:58:F6:BC:5B:BE:AD:C0 X509v3 Authority Key Identifier: keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.208.0/22 Signature Algorithm: sha256WithRSAEncryption 87:43:2e:14:56:0e:64:d1:8c:0c:b8:df:e9:77:47:a2:db:04: ce:4a:31:c6:f2:a4:c8:4f:ff:54:2c:87:40:de:16:14:ca:e9: 03:cc:6f:2d:2d:c3:45:27:15:6f:4e:30:63:53:60:d2:58:e1: fc:02:01:1c:b5:12:27:75:41:b1:fc:bd:29:0f:57:06:c8:1a: 4a:e4:76:c2:e6:91:b2:3f:43:e4:dd:7a:ee:21:db:63:12:d7: f6:c4:3c:a4:d8:4f:98:f4:15:89:4e:e8:22:e1:53:cc:d3:b2: 66:f0:ec:f9:22:9b:1b:ff:d1:1d:4e:2a:94:86:64:69:79:b8: 96:30:31:a3:b1:f5:10:4c:1b:61:2c:70:49:38:ac:bb:da:4f: 70:9e:5f:dc:46:d1:e5:24:4f:8e:26:95:41:82:43:e8:a5:54: db:15:50:99:ff:90:ef:1c:c8:37:d1:e4:8c:cc:5e:0e:f8:05: 7a:bf:c5:5f:32:9e:7a:8b:1a:36:a2:7e:84:63:c5:00:12:d9: 0a:17:28:44:4b:91:6e:ef:4a:3d:61:c3:a1:0a:25:4e:24:3e: 95:a4:60:4e:ed:3e:d6:0a:5d:31:90:56:cb:9e:38:a1:2e:6e: 06:77:77:12:c9:66:e3:29:31:85:7c:58:e3:35:e7:c7:dc:c1: 97:76:95:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCs8dMi6tYSLj4VWBoFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx YmM0MTcwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMThiNjFkMDJlNjAzNTMwMzgzNjdkMTk1NjU4ZjZiYzViYmVhZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnxhQ4d4xuGPgbuJdNtYGpN7+85v h6Xked4V4fwYMamm6npvj4/Fs+m/ClGRvudfDP3Lp9HecvmCBpVox+QFbNVeEDoR RdQHMx1u+1lWs67n2OsaWJmpBtlvBXUH+iS7g1e4Gh2Wpa0i6dnhN0lpNWcTSlW6 TMOJcfRXJ0dwn+sTJaZuTMsLWP7JqBzwQJsRM5pKOxMxi+k1NjcM96L70PyGYzIa k/pvh4SL60snPQloojBu1KKqAGSXZAeYKydNZ6Ni6Ds9sJoSWH9RpnxMigKVr1JZ 3Xh2fDFMCmI3+Z+DIJ3PByiagPOjZId5x2hOZ3P/FDv6dRvRaCxBUp2+GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLGLYdAuYDUwODZ9GVZY9rxbvq3AMB8GA1UdIwQY MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt YzQ0MmExOGYxZWZjLzEvc1l0aDBDNWdOVEE0Tm4wWlZsajJ2RnUtcmNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwYbQMA0G CSqGSIb3DQEBCwUAA4IBAQCHQy4UVg5k0YwMuN/pd0ei2wTOSjHG8qTIT/9ULIdA 3hYUyukDzG8tLcNFJxVvTjBjU2DSWOH8AgEctRIndUGx/L0pD1cGyBpK5HbC5pGy P0Pk3XruIdtjEtf2xDyk2E+Y9BWJTugi4VPM07Jm8Oz5Ipsb/9EdTiqUhmRpebiW MDGjsfUQTBthLHBJOKy72k9wnl/cRtHlJE+OJpVBgkPopVTbFVCZ/5DvHMg30eSM zF4O+AV6v8VfMp56ixo2on6EY8UAEtkKFyhES5Fu70o9YcOhCiVOJD6VpGBO7T7W Cl0xkFbLnjihLm4Gd3cSyWbjKTGFfFjjNefH3MGXdpVo -----END CERTIFICATE-----Generated at Wed Feb 4 12:59:12 2026 by rpki-client