This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa File: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (raw, json) Hash identifier: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY= Subject key identifier: BB:43:C4:5C:DC:C6:F8:BC:F5:49:64:4C:8D:A7:EB:D6:74:B9:F9:3C Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52 Certificate serial: 019B7EA6CB058F48223422F59A26D5DFF4D8 Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29093 IP address blocks: 193.143.128.0/23 maxlen: 24 195.234.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cb:05:8f:48:22:34:22:f5:9a:26:d5:df:f4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb43c45cdcc6f8bcf549644c8da7ebd674b9f93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:98:ed:ef:45:38:e3:2a:2c:d7:bb:a8:47:bc: 85:57:60:70:f2:e6:17:30:0f:cf:5a:54:4c:8a:1f: d0:41:22:ba:3b:66:b6:af:9e:0a:f5:19:dd:dc:8c: 25:74:41:d4:42:14:13:bf:38:cb:fe:9e:0f:e5:f1: 6e:38:6d:b1:04:3c:ab:41:0e:6a:86:bb:7a:6c:37: 30:24:0c:46:68:b8:0d:35:2b:24:9e:f2:7b:62:93: 1d:d2:62:df:e1:ad:b6:92:75:f6:3e:ad:ea:3b:01: 86:9c:d5:a3:8e:a6:03:fd:6b:be:e2:c1:ff:fe:82: 94:60:71:83:c0:26:c7:de:c2:53:80:14:63:4c:a1: e1:f5:94:8a:09:5e:c4:a4:61:77:2d:55:24:6d:46: cf:c5:57:41:ee:69:70:a1:2e:ff:4b:9c:5a:2f:da: 46:a9:87:33:fc:1a:ee:c9:73:68:56:da:a3:91:90: 87:30:92:1e:6c:a5:27:d1:cd:be:8c:e2:ce:6e:da: 7e:be:48:0f:54:40:a3:33:53:3f:8a:60:89:76:35: 42:e1:fb:04:f2:c8:68:07:f0:f2:aa:88:b5:e1:c6: 7a:bb:4c:ba:9a:5a:76:9b:3b:e7:a0:65:94:77:48: 0c:2e:e2:fe:7b:9a:13:3d:91:80:c1:33:5d:be:ad: 6a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:43:C4:5C:DC:C6:F8:BC:F5:49:64:4C:8D:A7:EB:D6:74:B9:F9:3C X509v3 Authority Key Identifier: keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.143.128.0/23 195.234.135.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:79:a3:05:10:75:d3:be:12:02:df:d2:89:56:60:20:5a:37: d0:eb:af:75:29:05:71:9d:7e:a3:7e:39:f1:60:82:73:4e:a0: 1a:d3:04:29:6c:84:18:8e:71:82:12:3a:e7:94:9e:06:b6:d7: 12:24:b0:9d:9a:cd:1b:aa:5e:70:30:4e:e9:c9:89:8f:62:f8: f9:1f:06:b4:bb:8f:53:68:96:1e:c3:dc:5f:61:cc:70:44:47: 45:36:6b:09:a3:81:cd:e6:dc:e6:3d:7d:f3:53:3a:13:dc:32: 08:ea:78:76:47:93:69:a0:05:9d:b9:a5:e3:52:55:92:56:6c: 33:e2:39:c7:4b:2e:0a:a3:08:14:36:2e:9e:f5:b1:ab:1c:76: 3d:5b:37:59:49:fb:0c:a9:47:fe:ff:f1:13:c0:bd:17:fa:7d: 15:cd:50:6c:57:06:ac:11:e7:5e:c8:01:80:b8:4c:9a:84:f8: 76:ec:35:06:69:b8:4b:25:a4:32:ac:6e:84:0e:e6:9c:4d:72: 8a:a3:91:53:d6:43:ec:51:d9:5e:7d:bb:92:61:16:37:b6:f0: 60:8e:dd:45:5e:76:2c:3a:d9:f8:8b:4d:86:4e:6e:c6:fe:d7: 2a:d9:b9:e7:b6:61:7d:7f:4a:ee:e3:8e:ae:82:09:a5:06:76: 80:50:d9:85 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pssFj0giNCL1mibV3/TYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjllODU1NDAyMGJkZWZhMTdjNTU2MTQzOGZiNGJhZjU4 MzFmNTIwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjQzYzQ1Y2RjYzZmOGJjZjU0OTY0NGM4ZGE3ZWJkNjc0YjlmOTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJjt70U44yos17uoR7yFV2Bw8uYX MA/PWlRMih/QQSK6O2a2r54K9Rnd3IwldEHUQhQTvzjL/p4P5fFuOG2xBDyrQQ5q hrt6bDcwJAxGaLgNNSsknvJ7YpMd0mLf4a22knX2Pq3qOwGGnNWjjqYD/Wu+4sH/ /oKUYHGDwCbH3sJTgBRjTKHh9ZSKCV7EpGF3LVUkbUbPxVdB7mlwoS7/S5xaL9pG qYcz/BruyXNoVtqjkZCHMJIebKUn0c2+jOLObtp+vkgPVECjM1M/imCJdjVC4fsE 8shoB/Dyqoi14cZ6u0y6mlp2mzvnoGWUd0gMLuL+e5oTPZGAwTNdvq1q4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLtDxFzcxvi89UlkTI2n69Z0ufk8MB8GA1UdIwQY MBaAFJ8p6FVAIL3voXxVYUOPtLr1gx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYt M2ZlOGY4OTZlNTUxLzEvdTBQRVhOekctTHoxU1dSTWphZnIxblM1LVR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYtM2ZlOGY4OTZlNTUx LzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwY+AAwQA w+qHMA0GCSqGSIb3DQEBCwUAA4IBAQCeeaMFEHXTvhIC39KJVmAgWjfQ6691KQVx nX6jfjnxYIJzTqAa0wQpbIQYjnGCEjrnlJ4GttcSJLCdms0bql5wME7pyYmPYvj5 Hwa0u49TaJYew9xfYcxwREdFNmsJo4HN5tzmPX3zUzoT3DII6nh2R5NpoAWduaXj UlWSVmwz4jnHSy4KowgUNi6e9bGrHHY9WzdZSfsMqUf+//ETwL0X+n0VzVBsVwas EedeyAGAuEyahPh27DUGabhLJaQyrG6EDuacTXKKo5FT1kPsUdlefbuSYRY3tvBg jt1FXnYsOtn4i02GTm7G/tcq2bnntmF9f0ru446uggmlBnaAUNmF -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:45 2026 by rpki-client