This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/N4PEhgWjKJqRP2AQ7QdUFknY3jc.roa File: N4PEhgWjKJqRP2AQ7QdUFknY3jc.roa (raw, json) Hash identifier: pIzqatQWuAi6HRtGir05ok6akFOjuueWgSLx9RmL4l0= Subject key identifier: 37:83:C4:86:05:A3:28:9A:91:3F:60:10:ED:07:54:16:49:D8:DE:37 Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045 Certificate serial: 019B7F83770A62B98B13F50078188C9D3B95 Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/N4PEhgWjKJqRP2AQ7QdUFknY3jc.roa Signing time: Fri 02 Jan 2026 16:21:20 +0000 ROA not before: Fri 02 Jan 2026 16:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 193.110.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:77:0a:62:b9:8b:13:f5:00:78:18:8c:9d:3b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045 Validity Not Before: Jan 2 16:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3783c48605a3289a913f6010ed07541649d8de37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:06:07:60:50:8c:52:e6:48:92:23:57:67: 7d:0b:e6:c5:8a:37:4d:4c:59:49:3c:37:90:79:23: 5e:82:c0:41:1b:ec:54:ff:e0:ca:98:ac:e9:cf:4b: 0b:31:f5:90:00:32:fb:fa:32:8e:50:87:54:1b:d6: 56:c8:a7:47:37:c7:cf:3c:5f:de:97:91:a7:df:70: b3:5a:1b:c6:13:08:b5:f7:7f:b4:ab:1d:7e:e6:3e: 2b:59:ee:d5:b9:9b:4a:06:f6:e8:78:ea:0d:76:4b: 26:8a:46:89:65:c7:90:7d:9a:c8:81:7a:4b:15:2e: aa:9c:45:48:85:a3:01:cb:3f:57:35:4e:73:05:e7: fa:60:4b:48:32:ab:9d:b2:ff:d0:57:ed:fb:e9:c6: a2:20:36:d4:23:13:bc:ad:50:de:87:2b:d2:a4:81: e5:8f:4f:c4:83:9e:c7:a2:11:01:c0:a7:2e:f6:fc: bf:be:ad:fa:f1:f8:b0:41:15:54:5d:ed:9d:3e:6a: 33:16:1f:83:54:cf:5e:52:3c:2a:05:67:bc:7e:0d: 5f:ec:f5:38:49:06:72:26:37:13:2f:14:f9:7d:31: 01:49:85:09:84:3e:94:fb:a9:b4:0d:b8:f0:0a:22: be:cf:58:45:fe:4a:db:a9:f6:28:b4:42:68:ae:02: 4e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:83:C4:86:05:A3:28:9A:91:3F:60:10:ED:07:54:16:49:D8:DE:37 X509v3 Authority Key Identifier: keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/N4PEhgWjKJqRP2AQ7QdUFknY3jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.152.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:23:0a:fd:1c:86:3a:58:ec:5e:f2:f2:e0:5a:8a:25:bc:4d: fb:80:3f:6f:92:98:69:56:3e:00:38:e8:8a:ff:2c:f6:cb:db: 2e:33:ff:55:98:fe:bf:39:50:87:3d:1e:de:83:86:8b:83:18: 71:5b:f5:ca:b8:3b:a1:4a:cb:11:bd:a2:97:09:be:f6:b8:63: c2:1d:88:97:5d:7b:51:09:d4:0a:1b:50:7f:3a:ef:68:82:7e: 0c:ab:bb:b8:9f:e7:d3:da:8c:5a:9b:67:34:42:8d:b0:ce:61: b7:ee:9f:92:54:2c:b4:e6:d1:0c:1c:ad:53:dd:23:ff:35:59: 6e:a7:21:ee:1f:42:23:08:a7:57:06:f6:af:79:fc:42:d4:d2: 70:72:41:ff:73:c7:e3:67:89:6e:fd:b2:a1:cb:1c:64:ce:4e: e8:6b:39:2e:82:88:87:22:be:c5:bb:38:1b:2d:0c:1b:98:08: 52:9a:ae:a7:fc:25:e2:94:0f:dc:70:ee:7c:d5:fc:c3:de:7d: 45:a2:5c:eb:b3:73:9f:6f:b2:d4:1a:bf:55:8c:93:c7:98:9a: ef:8a:1f:d7:b9:66:4c:77:ac:6a:a5:3d:25:80:41:72:a1:b7: 65:9b:96:70:5c:d8:41:cd:7b:cb:5a:5f:c5:a5:2d:ec:25:03: 3c:9b:3a:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g3cKYrmLE/UAeBiMnTuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNjkzZjFiZTY1N2ZiOGM3MWJjYmI5Yzc3YmU1NGE5Mzcy ZGIwNDUwHhcNMjYwMTAyMTYyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzgzYzQ4NjA1YTMyODlhOTEzZjYwMTBlZDA3NTQxNjQ5ZDhkZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotwGB2BQjFLmSJIjV2d9C+bFijdN TFlJPDeQeSNegsBBG+xU/+DKmKzpz0sLMfWQADL7+jKOUIdUG9ZWyKdHN8fPPF/e l5Gn33CzWhvGEwi193+0qx1+5j4rWe7VuZtKBvboeOoNdksmikaJZceQfZrIgXpL FS6qnEVIhaMByz9XNU5zBef6YEtIMqudsv/QV+376caiIDbUIxO8rVDehyvSpIHl j0/Eg57HohEBwKcu9vy/vq368fiwQRVUXe2dPmozFh+DVM9eUjwqBWe8fg1f7PU4 SQZyJjcTLxT5fTEBSYUJhD6U+6m0DbjwCiK+z1hF/krbqfYotEJorgJOWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDeDxIYFoyiakT9gEO0HVBZJ2N43MB8GA1UdIwQY MBaAFLFpPxvmV/uMcby7nHe+VKk3LbBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84MGY5MWYtMWU0Yi00OWU2LThkMTMt N2NkMTQ2NTAwYjJkLzEvTjRQRWhnV2pLSnFSUDJBUTdRZFVGa25ZM2pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84MGY5MWYtMWU0Yi00OWU2LThkMTMtN2NkMTQ2NTAwYjJk LzEvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW6YMA0G CSqGSIb3DQEBCwUAA4IBAQBbIwr9HIY6WOxe8vLgWoolvE37gD9vkphpVj4AOOiK /yz2y9suM/9VmP6/OVCHPR7eg4aLgxhxW/XKuDuhSssRvaKXCb72uGPCHYiXXXtR CdQKG1B/Ou9ogn4Mq7u4n+fT2oxam2c0Qo2wzmG37p+SVCy05tEMHK1T3SP/NVlu pyHuH0IjCKdXBvavefxC1NJwckH/c8fjZ4lu/bKhyxxkzk7oazkugoiHIr7Fuzgb LQwbmAhSmq6n/CXilA/ccO581fzD3n1Folzrs3Ofb7LUGr9VjJPHmJrvih/XuWZM d6xqpT0lgEFyobdlm5ZwXNhBzXvLWl/FpS3sJQM8mzrn -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:41 2026 by rpki-client