This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/s4zfP5M5ixHM0io4R4b8vQvBBRE.roa File: s4zfP5M5ixHM0io4R4b8vQvBBRE.roa (raw, json) Hash identifier: 0ue6Xjy56CWWSYgGKAmOR06jAHQ/Ll3csIoDlLbyHlc= Subject key identifier: B3:8C:DF:3F:93:39:8B:11:CC:D2:2A:38:47:86:FC:BD:0B:C1:05:11 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB65F510C33F7A2594871089F8F3AF Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/s4zfP5M5ixHM0io4R4b8vQvBBRE.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48347 IP address blocks: 193.104.57.0/24 maxlen: 24 195.43.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:65:f5:10:c3:3f:7a:25:94:87:10:89:f8:f3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b38cdf3f93398b11ccd22a384786fcbd0bc10511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:0b:1e:b0:96:18:1a:13:70:57:23:a7:d2: 8c:96:21:43:ca:11:f3:e8:a9:b1:5f:1c:94:d2:87: 27:fc:99:0f:c2:d8:72:33:a2:54:78:d2:b9:dd:65: f2:74:73:a1:d5:9e:c3:bb:81:a1:f0:d9:5c:68:e0: 74:e7:d9:71:90:b3:84:2e:fe:4f:7a:6e:9f:dc:4a: fe:43:e5:22:b1:fe:67:69:43:49:ac:31:45:f0:2c: be:44:78:4c:4e:94:7a:e2:13:7e:c0:70:f0:d1:e8: b5:ae:ee:9a:cd:35:d5:fd:5b:7f:63:7e:45:26:bc: 41:b4:2f:e2:72:6b:39:50:40:00:3f:55:7f:5c:da: 2a:65:3b:7e:ab:f5:c1:09:43:ca:15:c3:3f:f2:03: 2b:ba:6a:37:e5:e3:19:62:27:0d:22:67:5f:ad:be: 6c:ad:ff:78:b9:5b:79:b5:49:9c:e7:cd:f8:ed:36: 9a:e0:35:01:7f:fa:82:c7:1b:5d:b3:37:8c:16:ef: 87:53:4a:cb:a2:d4:89:00:7e:38:b4:41:6d:78:5d: 41:0a:91:27:18:db:a3:63:94:c4:93:f4:ab:3f:da: 2e:b6:a7:87:ff:73:41:ed:8d:26:8a:fd:d7:30:86: 4a:50:16:43:44:6b:0b:ac:0c:45:c4:91:f3:af:b3: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8C:DF:3F:93:39:8B:11:CC:D2:2A:38:47:86:FC:BD:0B:C1:05:11 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/s4zfP5M5ixHM0io4R4b8vQvBBRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.57.0/24 195.43.142.0/24 Signature Algorithm: sha256WithRSAEncryption 84:e0:d4:24:e5:d3:7c:bb:95:0a:a5:65:1a:7d:84:68:8b:84: 09:8f:69:c0:d8:25:45:eb:b6:07:a0:9b:99:f4:99:6f:43:5c: fe:58:22:33:e0:5e:8a:9c:a2:4d:21:88:e4:f5:6d:dc:d0:15: 59:3e:8e:e4:f2:a2:80:38:30:59:da:ae:63:31:64:0a:47:b9: 69:4a:5e:8d:34:09:7f:f3:f7:1e:40:45:31:04:9a:f2:a8:8a: df:0d:2e:1c:64:48:61:fc:61:3a:31:c6:8a:f3:56:b5:62:4d: cb:7c:a9:dd:d3:02:53:3d:e3:54:63:bc:89:66:2b:9f:ed:c2: 01:3c:57:1a:97:4b:da:c8:d3:94:27:61:a2:a1:98:f0:58:ae: cc:fa:43:0c:26:5c:46:7e:de:89:1f:6a:c2:6f:69:c9:2d:3d: e2:d7:24:7b:a7:69:4c:6e:64:00:43:61:ec:b8:77:93:a4:0c: 5c:f8:30:05:55:81:56:78:ae:3e:49:1f:0a:08:aa:04:e4:98: 8a:81:ab:3f:0d:9f:21:b1:c3:a5:c4:e3:6e:4e:2b:66:e8:17: de:bf:63:2f:a6:0f:65:8e:67:5c:64:ae:98:44:0e:03:25:25: f8:67:0b:25:9a:3d:de:f1:b6:7a:5a:95:6f:92:45:1f:f1:20: 4f:94:eb:21 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y2X1EMM/eiWUhxCJ+POvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzhjZGYzZjkzMzk4YjExY2NkMjJhMzg0Nzg2ZmNiZDBiYzEwNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2sLHrCWGBoTcFcjp9KMliFDyhHz 6KmxXxyU0ocn/JkPwthyM6JUeNK53WXydHOh1Z7Du4Gh8NlcaOB059lxkLOELv5P em6f3Er+Q+Uisf5naUNJrDFF8Cy+RHhMTpR64hN+wHDw0ei1ru6azTXV/Vt/Y35F JrxBtC/icms5UEAAP1V/XNoqZTt+q/XBCUPKFcM/8gMrumo35eMZYicNImdfrb5s rf94uVt5tUmc58347Taa4DUBf/qCxxtdszeMFu+HU0rLotSJAH44tEFteF1BCpEn GNujY5TEk/SrP9outqeH/3NB7Y0miv3XMIZKUBZDRGsLrAxFxJHzr7P3rQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLOM3z+TOYsRzNIqOEeG/L0LwQURMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvczR6ZlA1TTVpeEhNMGlvNFI0Yjh2UXZCQlJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWg5AwQA wyuOMA0GCSqGSIb3DQEBCwUAA4IBAQCE4NQk5dN8u5UKpWUafYRoi4QJj2nA2CVF 67YHoJuZ9JlvQ1z+WCIz4F6KnKJNIYjk9W3c0BVZPo7k8qKAODBZ2q5jMWQKR7lp Sl6NNAl/8/ceQEUxBJryqIrfDS4cZEhh/GE6McaK81a1Yk3LfKnd0wJTPeNUY7yJ Ziuf7cIBPFcal0vayNOUJ2GioZjwWK7M+kMMJlxGft6JH2rCb2nJLT3i1yR7p2lM bmQAQ2HsuHeTpAxc+DAFVYFWeK4+SR8KCKoE5JiKgas/DZ8hscOlxONuTitm6Bfe v2Mvpg9ljmdcZK6YRA4DJSX4Zwslmj3e8bZ6WpVvkkUf8SBPlOsh -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:18 2026 by rpki-client