This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/49yUcJ2HrJ4qRDn5rbzkoDjcvUQ.roa File: 49yUcJ2HrJ4qRDn5rbzkoDjcvUQ.roa (raw, json) Hash identifier: IqQZ7gHcOeE0Db8lI3xRukuCfh3vIaO+P9++Aa+7V3I= Subject key identifier: E3:DC:94:70:9D:87:AC:9E:2A:44:39:F9:AD:BC:E4:A0:38:DC:BD:44 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B7910739A41265DA413E1B4350B410835 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/49yUcJ2HrJ4qRDn5rbzkoDjcvUQ.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214907 IP address blocks: 188.132.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:73:9a:41:26:5d:a4:13:e1:b4:35:0b:41:08:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3dc94709d87ac9e2a4439f9adbce4a038dcbd44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:f6:9a:16:2f:a6:26:b5:b2:fd:3f:63:90: 07:d5:37:ac:6c:9b:03:f2:57:4f:97:7f:ad:90:14: 1b:7e:13:d6:db:14:8a:db:b3:87:27:1b:ff:5c:22: 2b:ba:67:b8:bc:9e:25:17:bb:4f:23:f2:61:bd:a3: 16:b4:5a:88:58:5b:de:ad:83:da:c0:46:9c:75:e9: 77:f1:5d:5d:4a:e0:3f:f4:d4:5c:97:47:a8:53:da: e2:ce:45:28:95:17:7c:ac:58:fb:d6:43:98:32:f5: 1a:68:02:0d:95:13:93:48:92:77:f7:09:8d:38:8a: f7:6e:d6:ca:cf:97:65:eb:bb:f6:99:27:3f:03:8c: a7:61:7a:b4:1b:00:f0:28:0b:d2:18:df:fe:5d:47: 6e:e7:ae:7e:db:f2:07:c5:22:43:eb:ee:5f:0b:65: 4d:68:ba:ec:62:b1:ab:0a:36:b5:18:1f:d0:3e:d6: f5:f4:a6:ae:fc:e3:f0:bd:12:3e:a3:ba:6e:69:d3: 04:c8:d2:71:59:d3:7c:8b:9e:ba:fd:9f:a9:ca:84: 4f:22:19:f7:68:d3:8c:8c:17:d5:66:94:9b:a1:fb: 1d:c1:fc:dd:b6:b0:84:da:dc:26:98:3b:85:04:52: bb:60:87:bc:b5:be:e4:3e:61:7b:ad:7c:a5:3a:51: d6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DC:94:70:9D:87:AC:9E:2A:44:39:F9:AD:BC:E4:A0:38:DC:BD:44 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/49yUcJ2HrJ4qRDn5rbzkoDjcvUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.208.0/24 Signature Algorithm: sha256WithRSAEncryption 43:6f:49:dd:bd:fa:16:ca:9e:cb:47:86:d2:a8:a2:82:a2:01: 5f:42:b0:b0:1d:c3:c6:7e:44:37:a5:99:3d:cb:6e:d8:e2:46: 09:df:03:34:6a:4d:ee:6a:02:cf:93:e1:a4:5f:a4:da:6d:f1: c7:d7:c9:91:c3:07:86:6f:e4:3d:1b:99:04:6e:7a:39:82:31: f4:d8:06:19:22:ff:a7:59:d9:b4:79:8a:4f:05:71:d9:76:e1: 8c:d1:19:2a:57:bb:f9:a1:dc:bf:60:24:12:af:1e:e6:c6:95: 90:ff:c3:38:cd:dc:a8:7d:94:59:7e:b5:4a:77:ae:99:1f:f0: e2:31:19:24:8a:34:e2:bf:90:f1:d6:05:11:e5:ce:f0:59:aa: 67:18:94:ae:58:de:67:b0:42:38:86:d6:7b:d6:c3:8a:db:c9: b7:17:30:df:1d:5d:ac:dc:f7:c6:0b:49:67:42:15:01:47:e9: 6a:0c:4a:00:bd:f6:23:72:28:5e:83:75:78:70:ff:5a:70:b6: e6:f2:f1:2a:9f:cd:45:43:73:9b:c8:18:5c:6d:de:9c:c4:74: ae:cc:c7:49:79:67:b5:3b:08:e5:ef:51:b6:22:0f:d0:eb:5d: 83:c2:b3:ff:e2:78:d6:b6:03:3e:90:06:6b:b3:96:5e:75:ce: f0:0b:7b:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHOaQSZdpBPhtDULQQg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2RjOTQ3MDlkODdhYzllMmE0NDM5ZjlhZGJjZTRhMDM4ZGNiZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVr2mhYvpia1sv0/Y5AH1TesbJsD 8ldPl3+tkBQbfhPW2xSK27OHJxv/XCIrume4vJ4lF7tPI/JhvaMWtFqIWFverYPa wEacdel38V1dSuA/9NRcl0eoU9rizkUolRd8rFj71kOYMvUaaAINlROTSJJ39wmN OIr3btbKz5dl67v2mSc/A4ynYXq0GwDwKAvSGN/+XUdu565+2/IHxSJD6+5fC2VN aLrsYrGrCja1GB/QPtb19Kau/OPwvRI+o7puadMEyNJxWdN8i566/Z+pyoRPIhn3 aNOMjBfVZpSbofsdwfzdtrCE2twmmDuFBFK7YIe8tb7kPmF7rXylOlHWXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOPclHCdh6yeKkQ5+a285KA43L1EMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvNDl5VWNKMkhySjRxUkRuNXJiemtvRGpjdlVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvITQMA0G CSqGSIb3DQEBCwUAA4IBAQBDb0ndvfoWyp7LR4bSqKKCogFfQrCwHcPGfkQ3pZk9 y27Y4kYJ3wM0ak3uagLPk+GkX6TabfHH18mRwweGb+Q9G5kEbno5gjH02AYZIv+n Wdm0eYpPBXHZduGM0RkqV7v5ody/YCQSrx7mxpWQ/8M4zdyofZRZfrVKd66ZH/Di MRkkijTiv5Dx1gUR5c7wWapnGJSuWN5nsEI4htZ71sOK28m3FzDfHV2s3PfGC0ln QhUBR+lqDEoAvfYjciheg3V4cP9acLbm8vEqn81FQ3ObyBhcbd6cxHSuzMdJeWe1 Owjl71G2Ig/Q612DwrP/4njWtgM+kAZrs5Zedc7wC3tF -----END CERTIFICATE-----Generated at Wed Jan 21 13:34:25 2026 by rpki-client