This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/COlPjvzoiLOPREU6Xl4JmzPhARs.roa File: COlPjvzoiLOPREU6Xl4JmzPhARs.roa (raw, json) Hash identifier: 5C49uxVNsaO0/i4gZlUTQ3BJ2tqns4mMti2FLTSC2o4= Subject key identifier: 08:E9:4F:8E:FC:E8:88:B3:8F:44:45:3A:5E:5E:09:9B:33:E1:01:1B Certificate issuer: /CN=7b06870c91f540cdd30aa59598b77bf2938d84d4 Certificate serial: 019B935104FE7FF9C1B9C0B055029780DDF6 Authority key identifier: 7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/COlPjvzoiLOPREU6Xl4JmzPhARs.roa Signing time: Tue 06 Jan 2026 12:38:38 +0000 ROA not before: Tue 06 Jan 2026 12:38:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39804 IP address blocks: 193.53.216.0/24 maxlen: 24 193.53.217.0/24 maxlen: 24 193.53.224.0/23 maxlen: 23 193.53.226.0/23 maxlen: 23 193.53.235.0/24 maxlen: 24 193.53.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:51:04:fe:7f:f9:c1:b9:c0:b0:55:02:97:80:dd:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b06870c91f540cdd30aa59598b77bf2938d84d4 Validity Not Before: Jan 6 12:38:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08e94f8efce888b38f44453a5e5e099b33e1011b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:95:49:55:2b:23:43:f5:f0:0e:ad:9e:3b: 8c:0f:37:e5:40:c6:a2:b2:de:b2:90:9a:46:c1:70: 75:9b:b5:c2:54:6d:60:d0:09:03:70:bf:3d:23:33: e0:eb:1b:b3:f6:62:af:17:91:0e:6e:73:60:44:69: 94:da:31:86:c3:5b:fd:52:d5:ff:c3:13:6f:98:5b: ac:da:f0:08:01:7e:63:56:10:a4:b7:c4:79:29:eb: 0a:e3:e2:41:6f:cc:f2:60:47:68:1f:4c:f7:23:3c: 42:b5:8e:94:3e:27:7a:94:2d:7b:97:46:7e:09:0d: 32:26:c8:f6:ae:2c:72:44:3d:65:7b:71:97:05:6e: 70:7c:ef:18:5e:02:a8:9b:e9:e2:be:43:76:43:87: 33:38:16:b6:5a:5b:b9:31:cc:45:a3:a8:43:e8:a1: d8:50:e6:16:89:b0:b1:f9:78:9c:7d:94:74:ce:bb: 85:00:05:70:9b:a5:01:d6:23:30:8a:80:35:e7:a8: 1f:d9:14:bc:5c:93:c8:db:e4:3b:3b:0e:e4:eb:f5: 85:f5:28:6e:cd:23:f0:a5:ad:2a:04:58:92:60:d6: 21:3e:06:f0:3e:19:11:19:17:d4:1d:dd:56:f1:cb: 46:61:0e:2c:7f:df:c6:f1:4e:bf:51:93:ca:9d:da: 7a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E9:4F:8E:FC:E8:88:B3:8F:44:45:3A:5E:5E:09:9B:33:E1:01:1B X509v3 Authority Key Identifier: keyid:7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/COlPjvzoiLOPREU6Xl4JmzPhARs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.53.216.0/23 193.53.224.0/22 193.53.235.0/24 193.53.238.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:b4:db:d2:78:39:71:78:68:19:6a:fc:6d:36:3b:39:89:54: c4:cc:53:47:d8:3b:29:34:81:94:15:a2:cf:fb:6d:f3:2f:28: 98:10:af:0c:9c:9c:a0:fa:0a:f1:e7:f6:b8:f1:e9:90:6d:94: 5e:7d:29:41:96:1d:cd:8c:6c:b9:4e:ec:ef:da:03:ef:df:d3: 58:db:5d:21:19:07:a0:08:28:e1:2f:cc:cc:f5:b9:8f:7b:fe: 23:19:63:1f:f1:02:12:a4:6e:01:14:60:06:32:81:4f:42:ce: 58:97:6d:cf:6c:f1:8e:71:e8:45:bf:bc:1a:1b:dd:d2:31:e5: 6c:3e:3b:8b:f6:5a:21:05:cd:25:99:32:a9:50:3f:0d:49:78: ae:d9:dc:ce:7b:08:34:7a:5e:e1:30:80:3f:96:cc:c4:bd:75: a4:97:73:81:96:0a:a3:71:d2:da:1d:dd:95:47:4b:e0:0b:a6: 9e:8b:16:0f:ee:36:56:eb:62:f6:71:56:fd:d2:91:94:6a:11: 84:cf:c5:0c:de:8f:0a:bd:38:43:e7:80:95:8b:cb:86:b3:58: b0:f5:82:7e:59:1d:8f:ce:ef:eb:11:5f:e2:7b:a5:6d:8d:0e: 62:18:94:f7:a1:68:42:41:dd:7c:83:61:bf:a5:29:ca:17:fb: 3b:ac:6e:d7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuTUQT+f/nBucCwVQKXgN32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMDY4NzBjOTFmNTQwY2RkMzBhYTU5NTk4Yjc3YmYyOTM4 ZDg0ZDQwHhcNMjYwMTA2MTIzODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGU5NGY4ZWZjZTg4OGIzOGY0NDQ1M2E1ZTVlMDk5YjMzZTEwMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3iVSVUrI0P18A6tnjuMDzflQMai st6ykJpGwXB1m7XCVG1g0AkDcL89IzPg6xuz9mKvF5EObnNgRGmU2jGGw1v9UtX/ wxNvmFus2vAIAX5jVhCkt8R5KesK4+JBb8zyYEdoH0z3IzxCtY6UPid6lC17l0Z+ CQ0yJsj2rixyRD1le3GXBW5wfO8YXgKom+nivkN2Q4czOBa2Wlu5McxFo6hD6KHY UOYWibCx+XicfZR0zruFAAVwm6UB1iMwioA156gf2RS8XJPI2+Q7Ow7k6/WF9Shu zSPwpa0qBFiSYNYhPgbwPhkRGRfUHd1W8ctGYQ4sf9/G8U6/UZPKndp6DQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAjpT4786Iizj0RFOl5eCZsz4QEbMB8GA1UdIwQY MBaAFHsGhwyR9UDN0wqllZi3e/KTjYTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdhSERKSDFRTTNUQ3FXVm1MZDc4cE9OaE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83NzQ3YjAtMmY5NS00NzhhLWIyZTMt Njc3Y2I2MDQ0NTYzLzEvQ09sUGp2em9pTE9QUkVVNlhsNEptelBoQVJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy83NzQ3YjAtMmY5NS00NzhhLWIyZTMtNjc3Y2I2MDQ0NTYz LzEvZXdhSERKSDFRTTNUQ3FXVm1MZDc4cE9OaE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBwTXYAwQC wTXgAwQAwTXrAwQAwTXuMA0GCSqGSIb3DQEBCwUAA4IBAQBvtNvSeDlxeGgZavxt Njs5iVTEzFNH2DspNIGUFaLP+23zLyiYEK8MnJyg+grx5/a48emQbZRefSlBlh3N jGy5Tuzv2gPv39NY210hGQegCCjhL8zM9bmPe/4jGWMf8QISpG4BFGAGMoFPQs5Y l23PbPGOcehFv7waG93SMeVsPjuL9lohBc0lmTKpUD8NSXiu2dzOewg0el7hMIA/ lszEvXWkl3OBlgqjcdLaHd2VR0vgC6aeixYP7jZW62L2cVb90pGUahGEz8UM3o8K vThD54CVi8uGs1iw9YJ+WR2Pzu/rEV/ie6VtjQ5iGJT3oWhCQd18g2G/pSnKF/s7 rG7X -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:26 2026 by rpki-client