This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/hEpkfnbvGtcIxWjUlVdPllfE-cY.roa File: hEpkfnbvGtcIxWjUlVdPllfE-cY.roa (raw, json) Hash identifier: QTunkkr+hN3fQscxIyK1dz5yS0xr1F0v7DcnxHiOT/w= Subject key identifier: 84:4A:64:7E:76:EF:1A:D7:08:C5:68:D4:95:57:4F:96:57:C4:F9:C6 Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959 Certificate serial: 019B797DE711C08F829A9991F40CA8DB5F3D Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/hEpkfnbvGtcIxWjUlVdPllfE-cY.roa Signing time: Thu 01 Jan 2026 12:17:32 +0000 ROA not before: Thu 01 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209999 IP address blocks: 193.41.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e7:11:c0:8f:82:9a:99:91:f4:0c:a8:db:5f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=844a647e76ef1ad708c568d495574f9657c4f9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:65:90:67:05:63:6a:57:cb:68:eb:29:0f:4b: 18:c2:99:33:a1:9f:2e:6c:04:1a:98:38:c0:3d:6d: 32:96:0d:41:de:b1:3b:d2:72:24:e8:7f:67:3e:3f: 63:e7:cc:25:02:54:d4:85:ac:85:51:fe:15:ff:24: 16:df:0f:5b:34:64:52:f8:4b:d1:39:36:e3:28:17: 58:7a:0e:6d:5f:76:00:29:6f:97:01:36:fd:ec:50: 5a:a4:b3:3e:16:5f:0e:a4:4c:5f:c4:55:b2:27:ea: 94:82:9a:cc:a9:d0:82:04:f9:f3:ac:e4:78:f7:f0: 86:61:29:e9:95:81:95:05:57:a7:21:b2:d6:a7:6e: d3:3f:44:30:cc:f4:66:4d:b4:c9:eb:b6:ca:e7:61: e5:0f:7f:29:a9:65:4a:8c:a8:ef:a7:10:08:d3:8b: 0e:b9:d8:04:79:10:a1:15:44:fc:2b:2c:92:41:f7: 49:f4:90:f5:c8:eb:73:e9:23:71:74:b7:f0:f2:a4: bf:ae:b7:4f:0e:ac:4e:12:4d:83:55:c1:16:0c:1a: 84:2a:f3:57:a5:ca:c3:08:6a:68:41:47:9f:f2:65: 60:57:e1:cc:aa:79:84:ec:27:4d:30:79:50:ca:db: 20:86:4e:6e:8e:3d:5e:75:72:8a:ab:ce:b5:7a:3a: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4A:64:7E:76:EF:1A:D7:08:C5:68:D4:95:57:4F:96:57:C4:F9:C6 X509v3 Authority Key Identifier: keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/hEpkfnbvGtcIxWjUlVdPllfE-cY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.56.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:d8:e7:02:c4:71:1c:df:fe:90:2d:b4:67:e8:65:90:73:c5: 1c:ff:2c:15:a9:b0:8f:a1:ad:66:9b:2f:d4:b1:07:e7:eb:94: f4:4f:7f:9f:d5:16:7d:a1:df:d7:3e:be:2e:34:0f:8b:1e:3b: b4:c3:27:02:27:ba:cb:32:98:bf:0f:0d:d4:9c:f8:e2:3f:a1: 0c:8a:42:5e:cd:90:b7:0e:b9:7f:b5:3a:4d:dc:b6:4b:04:48: 8b:3d:b6:3f:a3:f7:38:7c:28:ed:db:2a:3c:d3:2e:ae:48:35: ae:e9:25:82:02:58:b1:f2:e5:a3:71:72:9f:98:75:1a:86:aa: b5:d4:21:85:d5:8f:15:38:b4:da:92:fb:5c:34:6e:cc:f9:df: 63:ea:d5:ad:4e:94:db:da:9b:ee:a7:ad:ee:54:15:95:5c:97: 8f:f7:d0:97:18:1b:a8:71:f2:38:0c:3a:ea:10:b1:e0:b2:95: b0:6a:00:61:f4:70:5a:3a:d1:a3:71:6d:94:44:7f:d0:b4:f8: 2d:d3:89:55:bf:e6:c0:a9:f5:e2:2e:23:fe:0b:06:44:05:0b: e2:4c:6f:de:75:65:a9:24:79:a6:96:9d:3c:09:7f:33:b5:92: 7c:42:30:b3:b1:d4:a3:9c:3b:31:ce:3c:9c:c8:f8:ba:00:f3: 11:52:cb:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fecRwI+CmpmR9Ayo2189MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWM4ZjMyYTFmNDI4MWY3MTQ2Mzg5NWQ1NDNjNzE3OWNm N2Y5NTkwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDRhNjQ3ZTc2ZWYxYWQ3MDhjNTY4ZDQ5NTU3NGY5NjU3YzRmOWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWWQZwVjalfLaOspD0sYwpkzoZ8u bAQamDjAPW0ylg1B3rE70nIk6H9nPj9j58wlAlTUhayFUf4V/yQW3w9bNGRS+EvR OTbjKBdYeg5tX3YAKW+XATb97FBapLM+Fl8OpExfxFWyJ+qUgprMqdCCBPnzrOR4 9/CGYSnplYGVBVenIbLWp27TP0QwzPRmTbTJ67bK52HlD38pqWVKjKjvpxAI04sO udgEeRChFUT8KyySQfdJ9JD1yOtz6SNxdLfw8qS/rrdPDqxOEk2DVcEWDBqEKvNX pcrDCGpoQUef8mVgV+HMqnmE7CdNMHlQytsghk5ujj1edXKKq861ejo7UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIRKZH527xrXCMVo1JVXT5ZXxPnGMB8GA1UdIwQY MBaAFFCcjzKh9CgfcUY4ldVDxxec9/lZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUp5UE1xSDBLQjl4UmppVjFVUEhGNXozLVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZjBhN2QtZGNjZC00N2NlLWIyMWQt MTQ4MDljOTM4Yjc2LzEvaEVwa2ZuYnZHdGNJeFdqVWxWZFBsbGZFLWNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZjBhN2QtZGNjZC00N2NlLWIyMWQtMTQ4MDljOTM4Yjc2 LzEvVUp5UE1xSDBLQjl4UmppVjFVUEhGNXozLVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSk4MA0G CSqGSIb3DQEBCwUAA4IBAQAK2OcCxHEc3/6QLbRn6GWQc8Uc/ywVqbCPoa1mmy/U sQfn65T0T3+f1RZ9od/XPr4uNA+LHju0wycCJ7rLMpi/Dw3UnPjiP6EMikJezZC3 Drl/tTpN3LZLBEiLPbY/o/c4fCjt2yo80y6uSDWu6SWCAlix8uWjcXKfmHUahqq1 1CGF1Y8VOLTakvtcNG7M+d9j6tWtTpTb2pvup63uVBWVXJeP99CXGBuocfI4DDrq ELHgspWwagBh9HBaOtGjcW2URH/QtPgt04lVv+bAqfXiLiP+CwZEBQviTG/edWWp JHmmlp08CX8ztZJ8QjCzsdSjnDsxzjycyPi6APMRUsum -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:04 2026 by rpki-client