This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/2E_5c2tZgKxgYVqHOgF9pIGzE74.roa File: 2E_5c2tZgKxgYVqHOgF9pIGzE74.roa (raw, json) Hash identifier: 7EiMkIUV539Sj9o+RaFXH20bjjKdD7ng/M7VyVmG8mw= Subject key identifier: D8:4F:F9:73:6B:59:80:AC:60:61:5A:87:3A:01:7D:A4:81:B3:13:BE Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77 Certificate serial: 019B7F8518D893BCDE6702D33BF05CA02C9A Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/2E_5c2tZgKxgYVqHOgF9pIGzE74.roa Signing time: Fri 02 Jan 2026 16:23:07 +0000 ROA not before: Fri 02 Jan 2026 16:23:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 194.153.76.0/24 maxlen: 24 194.153.77.0/24 maxlen: 24 194.153.102.0/24 maxlen: 24 194.153.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:18:d8:93:bc:de:67:02:d3:3b:f0:5c:a0:2c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77 Validity Not Before: Jan 2 16:23:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d84ff9736b5980ac60615a873a017da481b313be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:28:28:88:61:d4:bb:12:f5:42:18:ea:da: c9:d2:aa:b4:94:b6:6f:b0:0a:20:5c:ce:2e:3c:ed: 85:e1:9b:82:80:1e:d2:90:7e:7e:60:8c:ef:65:e5: 42:ac:43:b9:a1:ff:c5:e1:86:0c:1c:41:e4:ba:7c: 06:02:96:cc:a5:55:05:e9:ef:78:2f:93:86:8f:3b: 80:52:13:ef:67:d2:72:ba:b5:8e:4d:16:d8:d3:66: 85:6c:54:b7:26:fb:1f:0e:5c:61:cf:53:fa:0a:30: 47:83:27:5d:db:3e:c2:38:84:6f:85:d1:f9:1b:e2: c5:8a:c1:75:d5:d8:b6:f0:b3:f5:da:40:46:1a:18: cc:f0:1d:e1:b8:11:51:6e:96:3b:41:06:48:1e:60: e4:c0:c1:fc:0d:92:7a:d1:fb:35:6e:66:2e:9d:db: 04:2e:96:bb:1a:22:bf:a3:f9:e6:49:25:34:d2:ed: 59:be:82:32:01:36:e4:d5:35:06:1b:a9:8a:fb:14: ac:0e:11:01:78:ad:6e:93:c8:d5:0b:82:f3:4b:f8: 97:d3:2d:38:b9:27:18:ff:1a:59:0d:79:e2:34:fe: 10:a8:57:89:08:96:a3:1d:02:8b:eb:56:a6:fe:fe: df:8c:76:4d:7b:44:e7:b5:a3:0a:95:1b:22:bc:b4: ac:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4F:F9:73:6B:59:80:AC:60:61:5A:87:3A:01:7D:A4:81:B3:13:BE X509v3 Authority Key Identifier: keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/2E_5c2tZgKxgYVqHOgF9pIGzE74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.76.0/23 194.153.102.0/23 Signature Algorithm: sha256WithRSAEncryption 60:67:bb:43:de:b3:a1:30:bc:4e:20:6b:9d:cd:25:10:70:60: 1b:98:5a:0e:f4:65:ac:70:02:a6:30:cc:bd:17:08:0f:bb:36: 43:4f:2e:24:b0:07:7a:a3:f5:8e:56:ea:34:d4:72:11:59:2c: 9e:a6:22:42:c4:52:04:20:0f:2b:a2:c5:06:1f:3b:4e:0f:f0: 2f:b2:be:e8:4d:60:bc:9e:32:24:de:d1:65:f1:7a:cc:d1:73: 70:a6:5b:85:09:50:99:43:1a:d5:7c:28:60:6e:54:08:01:08: c5:84:75:b4:3b:5e:51:6c:7c:f6:35:8e:a9:b2:ee:77:df:d5: d6:1c:c3:e9:a0:35:12:49:ba:4e:8d:9c:48:f7:01:7d:9b:b7: 8c:31:44:96:ce:12:4c:f7:b0:09:7c:66:67:ac:3b:fd:d7:70: cf:3c:84:81:f0:af:2f:8b:de:8b:92:19:f6:b4:4c:ff:38:ba: ba:ef:16:53:ad:ba:d2:46:f0:89:7b:a6:bf:21:df:1b:dc:da: d7:0b:8b:46:78:eb:f9:18:06:6e:53:6f:6c:5f:e8:ac:b0:bf: 05:da:0e:f8:1f:c8:43:ad:9e:56:1d:e2:bd:e4:a4:a7:7a:c0: da:9a:da:79:17:ba:ec:2b:a2:de:24:da:2b:44:fa:8e:46:07: a5:a9:e2:19 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hRjYk7zeZwLTO/BcoCyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOTMwNjk4NzMzYmFkMzNjMDgxNzE5YzdiNjhiZDE5NzIz YTVhNzcwHhcNMjYwMTAyMTYyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODRmZjk3MzZiNTk4MGFjNjA2MTVhODczYTAxN2RhNDgxYjMxM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOQoKIhh1LsS9UIY6trJ0qq0lLZv sAogXM4uPO2F4ZuCgB7SkH5+YIzvZeVCrEO5of/F4YYMHEHkunwGApbMpVUF6e94 L5OGjzuAUhPvZ9JyurWOTRbY02aFbFS3JvsfDlxhz1P6CjBHgydd2z7COIRvhdH5 G+LFisF11di28LP12kBGGhjM8B3huBFRbpY7QQZIHmDkwMH8DZJ60fs1bmYundsE Lpa7GiK/o/nmSSU00u1ZvoIyATbk1TUGG6mK+xSsDhEBeK1uk8jVC4LzS/iX0y04 uScY/xpZDXniNP4QqFeJCJajHQKL61am/v7fjHZNe0TntaMKlRsivLSsTwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNhP+XNrWYCsYGFahzoBfaSBsxO+MB8GA1UdIwQY MBaAFG+TBphzO60zwIFxnHtovRlyOlp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQt ZmUxMDNmZDM4NTdjLzEvMkVfNWMydFpnS3hnWVZxSE9nRjlwSUd6RTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQtZmUxMDNmZDM4NTdj LzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwplMAwQB wplmMA0GCSqGSIb3DQEBCwUAA4IBAQBgZ7tD3rOhMLxOIGudzSUQcGAbmFoO9GWs cAKmMMy9FwgPuzZDTy4ksAd6o/WOVuo01HIRWSyepiJCxFIEIA8rosUGHztOD/Av sr7oTWC8njIk3tFl8XrM0XNwpluFCVCZQxrVfChgblQIAQjFhHW0O15RbHz2NY6p su5339XWHMPpoDUSSbpOjZxI9wF9m7eMMUSWzhJM97AJfGZnrDv913DPPISB8K8v i96Lkhn2tEz/OLq67xZTrbrSRvCJe6a/Id8b3NrXC4tGeOv5GAZuU29sX+issL8F 2g74H8hDrZ5WHeK95KSnesDamtp5F7rsK6LeJNorRPqORgelqeIZ -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:14 2026 by rpki-client