This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa File: EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa (raw, json) Hash identifier: X80Gqz0nE+6UFtGApp5Wktmc8Oc2CPQtKl4rwvAFscI= Subject key identifier: 12:76:3C:8B:58:7B:20:83:A2:24:13:5F:ED:25:51:63:03:B3:48:BC Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689 Certificate serial: 019B7910DC939AC83E9C4A81D46D9161ED53 Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa Signing time: Thu 01 Jan 2026 10:18:26 +0000 ROA not before: Thu 01 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44207 IP address blocks: 193.111.108.0/22 maxlen: 22 193.111.112.0/23 maxlen: 23 194.9.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:dc:93:9a:c8:3e:9c:4a:81:d4:6d:91:61:ed:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689 Validity Not Before: Jan 1 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12763c8b587b2083a224135fed25516303b348bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:49:c4:73:6e:dd:de:07:21:01:01:ef:20:bd: ce:d0:a2:c1:cc:2f:e5:12:51:81:58:12:2d:8d:1a: c7:86:d8:b9:f2:18:5d:a5:55:f2:84:89:0e:95:58: 99:cd:e3:68:0f:57:94:67:8b:0b:dd:51:78:84:56: bf:4b:6a:05:87:95:d4:c7:7c:92:dc:39:a9:bf:ef: 47:05:94:86:c2:90:78:c4:55:0a:96:4d:be:f2:7f: 10:0f:f9:ca:5c:a2:60:9c:07:59:12:c8:76:1d:f6: 99:1a:bd:bb:50:6c:02:fa:1c:56:fc:04:ad:a9:43: dc:80:a0:b1:9b:8e:29:c1:84:be:5f:1e:d3:9e:7b: bf:24:d0:f9:2b:ee:13:48:46:fe:26:87:64:e3:b8: f9:6a:d7:2a:d6:d6:ed:e6:2c:1d:c0:1f:aa:5b:f6: c4:33:ca:ee:a0:23:5c:e1:e9:3f:b2:e1:cb:18:c8: 95:ec:24:88:96:32:39:d7:90:18:b9:6f:74:24:35: e5:93:2a:8f:fa:02:ba:8a:90:dd:54:ef:06:ce:e8: 29:bb:73:6b:4c:3b:7a:9b:b2:e2:79:90:28:25:a1: 3f:62:36:84:a7:54:21:5d:31:da:f8:80:8c:7c:0d: f9:2d:cf:be:bb:1b:85:c3:6b:eb:2e:6a:01:e2:b9: 6d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:76:3C:8B:58:7B:20:83:A2:24:13:5F:ED:25:51:63:03:B3:48:BC X509v3 Authority Key Identifier: keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.108.0-193.111.113.255 194.9.168.0/23 Signature Algorithm: sha256WithRSAEncryption 33:cd:15:df:8b:b7:68:98:39:0c:55:05:14:99:1e:a0:8b:13: 71:9f:a9:25:68:e0:9a:0a:c6:1c:f2:16:24:de:e9:69:80:a1: d8:07:73:f2:85:54:43:50:e9:c7:be:79:b3:85:36:73:3a:cd: 87:2c:87:4b:48:dd:7e:28:94:bd:ce:ed:40:ae:7e:4a:18:fd: f2:5f:b9:0f:ca:ac:05:50:75:b8:41:8e:05:4e:35:f9:0b:0d: 16:ae:a6:fc:a6:78:a8:c3:9c:b9:83:52:18:6a:8f:03:13:ed: 07:1c:65:dd:4e:cc:e1:e1:18:1f:97:b1:d4:13:55:c2:aa:76: 38:2c:54:e6:8c:c1:bc:42:4a:c7:41:1b:d4:00:9e:88:33:95: fc:28:2f:c4:ba:99:fd:e8:35:9a:19:70:a2:84:c9:00:45:87: 24:8c:fc:5a:8f:ad:d0:9b:94:c4:b0:eb:c5:d9:0c:07:72:34: fd:4a:31:18:70:fa:ea:f3:21:ab:f8:1e:28:d1:b5:a7:48:af: ff:2a:06:a4:33:94:4d:49:4a:88:cc:b9:21:4f:b2:9e:6f:d3: 02:be:c8:45:a9:37:c5:97:7b:94:b5:84:12:74:43:27:a4:8b: ab:bd:dd:93:d4:83:cc:90:34:df:60:02:2f:5f:bd:f4:a1:c8: c1:f2:2c:56 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5ENyTmsg+nEqB1G2RYe1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFjODNhMjdjYTg3MjNjNjFiMTQ0NmMzZTY3ODExMGM2 NTA2ODkwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjc2M2M4YjU4N2IyMDgzYTIyNDEzNWZlZDI1NTE2MzAzYjM0OGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEnEc27d3gchAQHvIL3O0KLBzC/l ElGBWBItjRrHhti58hhdpVXyhIkOlViZzeNoD1eUZ4sL3VF4hFa/S2oFh5XUx3yS 3Dmpv+9HBZSGwpB4xFUKlk2+8n8QD/nKXKJgnAdZEsh2HfaZGr27UGwC+hxW/ASt qUPcgKCxm44pwYS+Xx7Tnnu/JND5K+4TSEb+Jodk47j5atcq1tbt5iwdwB+qW/bE M8ruoCNc4ek/suHLGMiV7CSIljI515AYuW90JDXlkyqP+gK6ipDdVO8Gzugpu3Nr TDt6m7LieZAoJaE/YjaEp1QhXTHa+ICMfA35Lc++uxuFw2vrLmoB4rltawIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBJ2PItYeyCDoiQTX+0lUWMDs0i8MB8GA1UdIwQY MBaAFEEqyDonyocjxhsURsPmeBEMZQaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5Mzct MWY4NTZjMDkzYWU4LzEvRW5ZOGkxaDdJSU9pSkJOZjdTVlJZd096U0x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5MzctMWY4NTZjMDkzYWU4 LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBALBb2wD BAHBb3ADBAHCCagwDQYJKoZIhvcNAQELBQADggEBADPNFd+Lt2iYOQxVBRSZHqCL E3GfqSVo4JoKxhzyFiTe6WmAodgHc/KFVENQ6ce+ebOFNnM6zYcsh0tI3X4olL3O 7UCufkoY/fJfuQ/KrAVQdbhBjgVONfkLDRaupvymeKjDnLmDUhhqjwMT7QccZd1O zOHhGB+XsdQTVcKqdjgsVOaMwbxCSsdBG9QAnogzlfwoL8S6mf3oNZoZcKKEyQBF hySM/FqPrdCblMSw68XZDAdyNP1KMRhw+urzIav4HijRtadIr/8qBqQzlE1JSojM uSFPsp5v0wK+yEWpN8WXe5S1hBJ0Qyeki6u93ZPUg8yQNN9gAi9fvfShyMHyLFY= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:25 2026 by rpki-client