This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/In4EzW4PifpkipDj7qZT5AtFRqI.roa File: In4EzW4PifpkipDj7qZT5AtFRqI.roa (raw, json) Hash identifier: 7ol6yCYPKNd+spUojNfO6UXZVpdbeZk6ckVx301HrIA= Subject key identifier: 22:7E:04:CD:6E:0F:89:FA:64:8A:90:E3:EE:A6:53:E4:0B:45:46:A2 Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225 Certificate serial: 019B7C125904CAE76CA1580708CB0F947B58 Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/In4EzW4PifpkipDj7qZT5AtFRqI.roa Signing time: Fri 02 Jan 2026 00:18:55 +0000 ROA not before: Fri 02 Jan 2026 00:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51200 IP address blocks: 193.176.156.0/24 maxlen: 24 193.242.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:59:04:ca:e7:6c:a1:58:07:08:cb:0f:94:7b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225 Validity Not Before: Jan 2 00:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=227e04cd6e0f89fa648a90e3eea653e40b4546a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:40:c8:b2:c2:77:96:d5:9c:8b:71:b4:76: c7:54:e6:f9:c9:e3:b0:1a:ca:ae:a3:fa:69:15:8a: 58:50:62:dc:8a:1d:99:44:a3:7b:bb:82:6a:1c:a7: bf:9c:7e:3f:8d:59:f6:cb:7d:6a:ce:6c:50:5f:a9: 42:89:c0:40:d6:90:10:9c:3b:69:ce:82:a8:07:c1: 43:35:f4:26:3a:f2:ad:34:7d:99:d0:8b:30:86:8a: eb:0f:a1:51:02:d4:a2:bd:68:19:25:63:45:e0:0f: c3:cb:09:2c:d9:03:75:83:11:7f:c4:58:b4:24:1f: a1:c3:66:16:de:be:db:60:ad:33:00:57:28:02:fb: b7:fb:20:e5:27:9f:88:5d:4d:47:d5:8f:aa:e8:21: 3e:d3:ed:62:4d:04:fb:5a:b7:a7:32:3d:93:bd:35: 33:17:c6:81:5c:d8:2f:cd:61:2b:71:8c:5b:cf:64: 41:21:32:80:f5:1f:18:74:f9:6e:70:a1:d1:18:51: 26:a0:a5:39:7f:ed:20:35:b1:12:16:3b:34:07:fe: 56:4e:06:f3:09:95:4c:01:7d:db:69:88:b4:1a:c0: b3:b3:21:90:56:82:f9:c9:a0:bc:a4:e1:8f:32:1c: 50:15:42:3c:6b:a7:b3:9a:42:3b:a5:30:16:25:59: ca:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7E:04:CD:6E:0F:89:FA:64:8A:90:E3:EE:A6:53:E4:0B:45:46:A2 X509v3 Authority Key Identifier: keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/In4EzW4PifpkipDj7qZT5AtFRqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.156.0/24 193.242.105.0/24 Signature Algorithm: sha256WithRSAEncryption 73:cf:74:2e:cf:5e:8e:43:4d:f2:bb:4e:31:6a:9b:51:c4:5c: 26:bf:71:16:0d:f0:92:41:3b:31:2c:be:c9:ac:56:b0:0f:8d: 1a:45:76:a9:1f:6e:24:d0:9c:b8:5b:93:d2:c8:05:75:a0:f8: b3:05:e3:5b:c6:f9:06:c1:da:6b:94:90:a9:e2:44:53:1f:d8: 3f:65:91:82:c7:52:8d:b3:02:8e:ba:50:f8:66:7f:97:1b:8a: d2:2d:be:37:96:87:59:1d:14:46:ab:fc:6b:22:4a:2f:c1:e1: e1:38:9b:62:f9:a9:e7:05:d5:cd:64:cd:65:e6:60:d0:d7:04: df:1c:67:0f:0a:f4:5b:b1:7c:04:71:59:da:45:79:43:25:06: ab:c6:54:41:6c:36:00:0c:4f:1c:81:5a:09:32:69:28:65:8d: 6f:0e:ad:be:18:bc:4e:23:ed:fe:79:91:2b:ef:70:2d:77:c3: 7c:76:c1:31:aa:a7:1d:f7:08:79:38:9a:75:e9:3e:b7:b3:96: c0:2f:72:0f:a5:37:08:09:b3:ed:3e:8e:15:9a:3a:75:01:31: 2f:e2:3b:37:ab:7a:1b:58:09:e8:1e:6d:d9:60:6d:23:9b:7e: 64:ae:36:d6:fe:3a:8d:64:45:8d:74:3c:44:a1:17:62:5a:2b: 53:74:4f:b0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8ElkEyudsoVgHCMsPlHtYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MWJiMWNkZDViODZiZTc3ODA2ODg5ZDJlMWIyMDJhY2My N2IyMjUwHhcNMjYwMTAyMDAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjdlMDRjZDZlMGY4OWZhNjQ4YTkwZTNlZWE2NTNlNDBiNDU0NmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS9AyLLCd5bVnItxtHbHVOb5yeOw Gsquo/ppFYpYUGLcih2ZRKN7u4JqHKe/nH4/jVn2y31qzmxQX6lCicBA1pAQnDtp zoKoB8FDNfQmOvKtNH2Z0IswhorrD6FRAtSivWgZJWNF4A/Dywks2QN1gxF/xFi0 JB+hw2YW3r7bYK0zAFcoAvu3+yDlJ5+IXU1H1Y+q6CE+0+1iTQT7WrenMj2TvTUz F8aBXNgvzWErcYxbz2RBITKA9R8YdPlucKHRGFEmoKU5f+0gNbESFjs0B/5WTgbz CZVMAX3baYi0GsCzsyGQVoL5yaC8pOGPMhxQFUI8a6ezmkI7pTAWJVnKkQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCJ+BM1uD4n6ZIqQ4+6mU+QLRUaiMB8GA1UdIwQY MBaAFLQbsc3VuGvneAaInS4bICrMJ7IlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xOGM4ZDUtMDg5YS00NzBlLTkwNmQt ZGM0ZTc5ODhhMjhhLzEvSW40RXpXNFBpZnBraXBEajdxWlQ1QXRGUnFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xOGM4ZDUtMDg5YS00NzBlLTkwNmQtZGM0ZTc5ODhhMjhh LzEvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbCcAwQA wfJpMA0GCSqGSIb3DQEBCwUAA4IBAQBzz3Quz16OQ03yu04xaptRxFwmv3EWDfCS QTsxLL7JrFawD40aRXapH24k0Jy4W5PSyAV1oPizBeNbxvkGwdprlJCp4kRTH9g/ ZZGCx1KNswKOulD4Zn+XG4rSLb43lodZHRRGq/xrIkovweHhOJti+annBdXNZM1l 5mDQ1wTfHGcPCvRbsXwEcVnaRXlDJQarxlRBbDYADE8cgVoJMmkoZY1vDq2+GLxO I+3+eZEr73Atd8N8dsExqqcd9wh5OJp16T63s5bAL3IPpTcICbPtPo4Vmjp1ATEv 4js3q3obWAnoHm3ZYG0jm35krjbW/jqNZEWNdDxEoRdiWitTdE+w -----END CERTIFICATE-----Generated at Tue Jan 20 07:29:39 2026 by rpki-client