This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sHxE2Dgf89P1VOZ96d3_PFs0Wz4.roa File: sHxE2Dgf89P1VOZ96d3_PFs0Wz4.roa (raw, json) Hash identifier: 4AyHY95Qaj02m+nGCu92Fkig5DkgZHFqD6re0hi3ivo= Subject key identifier: B0:7C:44:D8:38:1F:F3:D3:F5:54:E6:7D:E9:DD:FF:3C:5B:34:5B:3E Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C130C36568A1808F2C9875D1AE9AD93 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sHxE2Dgf89P1VOZ96d3_PFs0Wz4.roa Signing time: Fri 02 Jan 2026 00:19:41 +0000 ROA not before: Fri 02 Jan 2026 00:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215254 IP address blocks: 193.5.63.0/24 maxlen: 24 193.247.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0c:36:56:8a:18:08:f2:c9:87:5d:1a:e9:ad:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b07c44d8381ff3d3f554e67de9ddff3c5b345b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:5d:ea:bb:fc:87:57:ab:d3:fc:34:42:69: 00:26:a1:94:ca:25:c5:2d:3e:c5:82:0c:2d:7f:68: 66:15:45:42:96:ae:69:53:02:ea:1e:04:51:1b:3b: 66:7f:cb:82:60:eb:05:5f:3d:5c:24:d5:7f:9e:e4: 4d:9b:af:ad:73:45:eb:b4:7a:9c:6d:c8:5f:2f:d4: 60:d5:94:93:1a:f6:17:18:55:a9:e7:3e:2a:6e:1b: 6f:bd:4c:e3:bf:db:02:05:b8:b7:e3:09:ff:a5:0b: 80:e8:25:18:f8:d1:5a:34:1d:eb:33:a3:03:fd:d2: 6e:4c:27:36:13:ca:aa:26:f2:c2:14:b9:c9:8b:c7: f9:bd:db:67:c0:3a:7d:21:26:4c:6a:99:fa:83:fa: 44:8c:3e:81:a5:b1:d7:35:8d:17:35:34:6a:be:96: 13:33:cc:9a:1a:b5:b8:61:8a:87:ee:7c:44:6f:a6: a6:2b:c6:26:10:73:03:ae:75:07:6b:98:32:6b:99: d0:83:ea:77:bb:d6:1c:21:33:2f:4b:03:70:87:81: bd:9d:bc:74:e0:05:58:75:5e:0d:cf:82:ab:9e:3a: d7:08:72:a2:49:3c:f2:7b:00:56:5e:7d:02:30:bb: 8d:f6:a9:7e:ff:c8:f8:ab:f6:e0:c9:a3:47:ee:f3: 60:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7C:44:D8:38:1F:F3:D3:F5:54:E6:7D:E9:DD:FF:3C:5B:34:5B:3E X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sHxE2Dgf89P1VOZ96d3_PFs0Wz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.63.0/24 193.247.90.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:ce:99:6f:9a:a2:37:63:21:5e:32:e4:a1:6f:81:2a:85:e1: 94:e4:21:c0:c3:cb:51:41:eb:67:c1:18:54:50:7f:c3:23:d8: b4:87:62:2d:a1:1a:11:4a:6b:29:50:d4:ed:c0:50:f2:29:3f: 6f:0c:57:c4:c2:2b:46:6a:04:e2:0b:85:18:88:65:9a:3e:5c: 30:0f:b3:37:1b:cf:49:91:c5:f0:6a:ce:ea:da:71:2c:3c:0a: 44:03:bc:3b:a4:80:4b:26:99:10:23:86:34:b1:5d:0d:15:4b: 32:85:83:d1:b4:4e:36:61:6b:97:15:ad:00:67:cb:3e:4c:25: 86:10:ee:75:98:ae:c7:0a:93:5f:82:97:21:4d:89:c0:38:e4: 3a:9f:21:67:73:22:a0:ff:fe:53:ef:9a:23:32:fc:38:d7:13: 08:ae:f3:41:7a:48:fb:78:59:34:11:2a:ab:35:40:c0:a6:41: 47:60:93:46:64:7e:c4:3e:bd:52:56:77:1c:f7:d8:65:df:2a: c0:3f:1c:3b:77:0e:d8:5a:5d:8b:27:b5:f0:a0:7a:2d:80:fa: c2:57:d4:13:82:e1:c9:a7:de:da:0c:f5:59:cc:f8:39:98:3a: 52:a0:e2:ca:8f:29:98:2e:1d:3b:bd:44:59:0a:29:d4:79:be: 41:0f:05:85 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Eww2VooYCPLJh10a6a2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDdjNDRkODM4MWZmM2QzZjU1NGU2N2RlOWRkZmYzYzViMzQ1YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcZd6rv8h1er0/w0QmkAJqGUyiXF LT7Fggwtf2hmFUVClq5pUwLqHgRRGztmf8uCYOsFXz1cJNV/nuRNm6+tc0XrtHqc bchfL9Rg1ZSTGvYXGFWp5z4qbhtvvUzjv9sCBbi34wn/pQuA6CUY+NFaNB3rM6MD /dJuTCc2E8qqJvLCFLnJi8f5vdtnwDp9ISZMapn6g/pEjD6BpbHXNY0XNTRqvpYT M8yaGrW4YYqH7nxEb6amK8YmEHMDrnUHa5gya5nQg+p3u9YcITMvSwNwh4G9nbx0 4AVYdV4Nz4KrnjrXCHKiSTzyewBWXn0CMLuN9ql+/8j4q/bgyaNH7vNgsQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLB8RNg4H/PT9VTmfend/zxbNFs+MB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvc0h4RTJEZ2Y4OVAxVk9aOTZkM19QRnMwV3o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwQU/AwQA wfdaMA0GCSqGSIb3DQEBCwUAA4IBAQBczplvmqI3YyFeMuShb4EqheGU5CHAw8tR QetnwRhUUH/DI9i0h2ItoRoRSmspUNTtwFDyKT9vDFfEwitGagTiC4UYiGWaPlww D7M3G89JkcXwas7q2nEsPApEA7w7pIBLJpkQI4Y0sV0NFUsyhYPRtE42YWuXFa0A Z8s+TCWGEO51mK7HCpNfgpchTYnAOOQ6nyFncyKg//5T75ojMvw41xMIrvNBekj7 eFk0ESqrNUDApkFHYJNGZH7EPr1SVncc99hl3yrAPxw7dw7YWl2LJ7XwoHotgPrC V9QTguHJp97aDPVZzPg5mDpSoOLKjymYLh07vURZCinUeb5BDwWF -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:22 2026 by rpki-client