This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/pTe6RHaftrnnJqcuO_8R-de4Nnk.roa File: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (raw, json) Hash identifier: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M= Subject key identifier: A5:37:BA:44:76:9F:B6:B9:E7:26:A7:2E:3B:FF:11:F9:D7:B8:36:79 Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52 Certificate serial: 019B7EA6CB3DD5B8D472B85D48733D93A4DA Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/pTe6RHaftrnnJqcuO_8R-de4Nnk.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 193.143.128.0/24 maxlen: 24 193.143.129.0/24 maxlen: 24 195.234.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cb:3d:d5:b8:d4:72:b8:5d:48:73:3d:93:a4:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a537ba44769fb6b9e726a72e3bff11f9d7b83679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bf:af:de:5b:c5:fa:58:5b:07:d4:cb:bf:e6: 2a:01:88:2c:19:db:6e:6f:41:d8:57:60:be:38:50: d0:f0:70:89:24:bc:55:db:14:24:19:09:dd:90:d2: 74:46:b9:e1:35:95:03:10:d9:c1:21:f3:1c:3f:cb: e2:01:47:f1:4e:38:ec:50:f4:03:ca:7c:14:31:cc: bf:34:a1:0e:e9:0c:24:56:a9:bd:fa:ee:1b:26:1d: 24:02:0f:ba:6a:89:5c:e1:02:42:11:f7:d2:56:cc: 52:aa:8b:5d:8f:ac:c3:c9:26:6f:b4:9c:94:c2:73: f0:eb:a0:cd:27:36:1b:c6:1a:04:cd:f3:00:fd:54: 09:a4:c2:c3:ec:34:2a:9f:45:61:98:eb:b5:0c:0c: 68:cf:8b:73:6a:d2:10:2f:08:bf:09:8a:2c:87:f9: d9:b0:2e:38:d2:b0:64:83:8f:04:82:3e:2b:f6:98: 8b:d8:ee:c5:5e:3d:7c:df:7d:ee:31:a0:c1:09:8b: 9b:22:e4:a9:0a:93:2f:f4:21:62:a6:e3:8d:0f:3d: ac:be:0f:53:2f:05:c8:02:f7:4b:98:4b:d7:76:ab: 3d:96:cc:ba:13:b1:db:f1:3b:65:27:7b:32:d7:f9: a7:86:15:71:72:7f:83:30:62:43:89:83:28:92:a0: 17:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:37:BA:44:76:9F:B6:B9:E7:26:A7:2E:3B:FF:11:F9:D7:B8:36:79 X509v3 Authority Key Identifier: keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/pTe6RHaftrnnJqcuO_8R-de4Nnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.143.128.0/23 195.234.135.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:f3:80:cf:b2:31:a0:b7:e3:16:d6:03:e0:f9:81:e2:46:98: ea:73:ff:15:77:8d:b0:2c:ef:73:84:e1:c8:f7:22:fc:29:ff: 7e:d5:61:c2:d2:19:f5:9e:33:43:75:da:f3:fa:2d:1c:90:e3: 30:6d:5c:6d:2f:46:13:93:87:a3:d3:6d:ae:88:9f:56:22:04: ca:ed:0a:bd:fe:b6:e6:d5:08:7b:86:eb:a6:7f:ca:d2:fc:01: c4:34:a7:18:96:83:d3:f3:cd:3b:2a:11:1c:04:44:b6:9c:4f: 09:3c:4b:cd:fc:04:ef:78:21:c1:72:63:23:1c:10:c8:76:c2: 18:f3:11:72:4b:b4:d7:9a:90:1a:00:f4:c3:08:9d:a3:46:fc: ba:da:b6:20:25:99:73:57:3f:5e:be:1a:b5:98:e5:c4:05:fd: fa:e9:46:af:1e:fd:53:14:73:b4:b5:0d:01:07:59:82:ec:c2: a0:de:23:2c:c8:6a:ef:b1:bd:58:9b:07:10:c6:5b:95:ce:0c: f7:e1:8b:14:d8:a0:15:13:aa:3b:24:af:80:7f:87:c3:36:f9: c2:fc:c3:ca:ba:97:72:e9:aa:97:4d:be:5e:0f:39:5a:f7:de: da:c5:91:62:45:5b:1b:3a:92:58:5a:ef:03:5a:f9:b9:f1:44: 8a:4c:d0:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pss91bjUcrhdSHM9k6TaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjllODU1NDAyMGJkZWZhMTdjNTU2MTQzOGZiNGJhZjU4 MzFmNTIwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTM3YmE0NDc2OWZiNmI5ZTcyNmE3MmUzYmZmMTFmOWQ3YjgzNjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL+v3lvF+lhbB9TLv+YqAYgsGdtu b0HYV2C+OFDQ8HCJJLxV2xQkGQndkNJ0RrnhNZUDENnBIfMcP8viAUfxTjjsUPQD ynwUMcy/NKEO6QwkVqm9+u4bJh0kAg+6aolc4QJCEffSVsxSqotdj6zDySZvtJyU wnPw66DNJzYbxhoEzfMA/VQJpMLD7DQqn0VhmOu1DAxoz4tzatIQLwi/CYosh/nZ sC440rBkg48Egj4r9piL2O7FXj18333uMaDBCYubIuSpCpMv9CFipuONDz2svg9T LwXIAvdLmEvXdqs9lsy6E7Hb8TtlJ3sy1/mnhhVxcn+DMGJDiYMokqAXGQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKU3ukR2n7a55yanLjv/EfnXuDZ5MB8GA1UdIwQY MBaAFJ8p6FVAIL3voXxVYUOPtLr1gx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYt M2ZlOGY4OTZlNTUxLzEvcFRlNlJIYWZ0cm5uSnFjdU9fOFItZGU0Tm5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYtM2ZlOGY4OTZlNTUx LzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwY+AAwQA w+qHMA0GCSqGSIb3DQEBCwUAA4IBAQAt84DPsjGgt+MW1gPg+YHiRpjqc/8Vd42w LO9zhOHI9yL8Kf9+1WHC0hn1njNDddrz+i0ckOMwbVxtL0YTk4ej022uiJ9WIgTK 7Qq9/rbm1Qh7huumf8rS/AHENKcYloPT8807KhEcBES2nE8JPEvN/ATveCHBcmMj HBDIdsIY8xFyS7TXmpAaAPTDCJ2jRvy62rYgJZlzVz9evhq1mOXEBf366UavHv1T FHO0tQ0BB1mC7MKg3iMsyGrvsb1YmwcQxluVzgz34YsU2KAVE6o7JK+Af4fDNvnC /MPKupdy6aqXTb5eDzla997axZFiRVsbOpJYWu8DWvm58USKTNBe -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:19 2026 by rpki-client