This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa File: ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa (raw, json) Hash identifier: DP27/a5o1Ym+vesDLFqV0Tua4ny+ds0/pH34jhmErS8= Subject key identifier: 10:DC:F4:55:37:04:9C:F4:97:04:4E:59:9E:98:F0:EE:55:1A:03:00 Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8 Certificate serial: 019C0BC957CCDE4351EB87F78082C820B3FF Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa Signing time: Thu 29 Jan 2026 22:04:30 +0000 ROA not before: Thu 29 Jan 2026 22:04:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 193.110.144.0/24 maxlen: 24 193.110.168.0/24 maxlen: 24 193.110.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0b:c9:57:cc:de:43:51:eb:87:f7:80:82:c8:20:b3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8 Validity Not Before: Jan 29 22:04:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10dcf45537049cf497044e599e98f0ee551a0300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d9:ed:2d:f9:f1:e3:a1:18:dc:0a:75:35:9f: db:03:94:80:34:65:40:a3:4e:88:cd:8d:66:06:0e: ec:d1:2f:4a:83:44:60:e3:22:79:d4:6b:08:04:31: a1:2b:30:4b:94:82:50:9a:ca:6d:81:e6:49:32:7a: da:3f:56:c9:14:e7:e7:bc:a7:86:4b:d8:89:42:cf: b6:6a:54:ff:33:51:c0:3a:22:8f:df:cb:10:35:2b: af:9e:2d:3f:e6:98:fa:11:72:15:ad:21:67:43:86: d0:af:03:0d:97:b0:a9:cb:63:ab:ec:cc:d7:af:40: e8:3b:bd:1c:96:8e:8c:4e:c4:39:40:89:73:bc:1d: 66:eb:76:1b:04:19:70:cb:e4:ad:0d:b1:26:aa:af: 41:38:b3:1c:71:69:85:0f:85:d9:be:e9:6b:05:e7: b1:18:5f:11:53:c8:3f:56:be:cc:1c:85:7d:65:eb: fe:f9:84:d7:6a:1a:0b:93:8d:e3:35:67:0a:4d:6d: 91:dc:3d:31:08:dc:c5:ba:49:4a:3f:64:5e:19:ba: ff:00:06:f5:2f:88:d1:bc:19:7c:cf:08:7f:13:99: 09:bb:50:97:93:7f:c3:40:97:b8:58:c7:d2:d4:93: b1:22:3e:73:84:7f:80:c5:50:1c:c0:9b:d7:32:70: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DC:F4:55:37:04:9C:F4:97:04:4E:59:9E:98:F0:EE:55:1A:03:00 X509v3 Authority Key Identifier: keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.144.0/24 193.110.168.0/23 Signature Algorithm: sha256WithRSAEncryption 67:7f:ac:53:4c:11:a1:a3:66:46:9a:76:33:b3:ba:86:37:40: c5:fa:58:e4:2f:88:cd:a0:f3:8c:a2:a3:5f:ec:e8:32:56:3b: de:e5:6c:98:dd:af:c7:36:d3:16:77:57:98:d1:2b:c7:70:f7: d2:d9:00:dd:e7:5f:58:e0:85:3e:e9:b1:db:77:82:ca:18:a0: 7c:80:a7:8b:80:64:76:25:6e:9b:6b:cc:68:79:19:cb:24:76: 1c:31:38:29:3a:2e:ca:04:d1:b9:3f:f3:68:56:93:49:15:e2: 1f:38:9b:be:eb:f9:49:5d:1b:37:fc:95:e5:08:93:f0:7e:68: be:e3:be:ba:fe:eb:ec:0f:f2:6d:62:a5:03:e4:be:33:07:66: b2:47:e6:33:23:4b:67:62:12:f6:1c:e3:ba:77:e7:f6:07:3b: 3a:5b:0b:e6:f8:a9:ea:ac:99:f1:df:04:e9:bd:50:5c:fe:25: 38:7f:33:6b:af:de:0f:de:5e:eb:bc:2e:ba:cc:74:01:f4:65: 96:da:0e:74:38:e8:41:0b:8b:8d:13:88:eb:7b:78:66:41:64: 19:2a:ee:35:6e:d3:53:4c:73:f8:4b:57:7f:58:bc:be:fa:26: b3:1b:fc:ab:00:c2:14:6b:0c:8d:1d:3e:df:8e:77:bf:9e:6d: 6b:e5:91:03 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwLyVfM3kNR64f3gILIILP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGQwOTIzZWMxMDY2Nzc2MGFkODgyZTZhZjlhMTU2OTlj MDVlZjgwHhcNMjYwMTI5MjIwNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGRjZjQ1NTM3MDQ5Y2Y0OTcwNDRlNTk5ZTk4ZjBlZTU1MWEwMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNntLfnx46EY3Ap1NZ/bA5SANGVA o06IzY1mBg7s0S9Kg0Rg4yJ51GsIBDGhKzBLlIJQmsptgeZJMnraP1bJFOfnvKeG S9iJQs+2alT/M1HAOiKP38sQNSuvni0/5pj6EXIVrSFnQ4bQrwMNl7Cpy2Or7MzX r0DoO70clo6MTsQ5QIlzvB1m63YbBBlwy+StDbEmqq9BOLMccWmFD4XZvulrBeex GF8RU8g/Vr7MHIV9Zev++YTXahoLk43jNWcKTW2R3D0xCNzFuklKP2ReGbr/AAb1 L4jRvBl8zwh/E5kJu1CXk3/DQJe4WMfS1JOxIj5zhH+AxVAcwJvXMnCgpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBDc9FU3BJz0lwROWZ6Y8O5VGgMAMB8GA1UdIwQY MBaAFBpNCSPsEGZ3YK2ILmr5oVaZwF74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNTY0ZTctMTFkNC00ZDdhLThiY2Mt YTk1Mzc2OGZkZTJmLzEvRU56MFZUY0VuUFNYQkU1Wm5wanc3bFVhQXdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8zNTY0ZTctMTFkNC00ZDdhLThiY2MtYTk1Mzc2OGZkZTJm LzEvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwW6QAwQB wW6oMA0GCSqGSIb3DQEBCwUAA4IBAQBnf6xTTBGho2ZGmnYzs7qGN0DF+ljkL4jN oPOMoqNf7OgyVjve5WyY3a/HNtMWd1eY0SvHcPfS2QDd519Y4IU+6bHbd4LKGKB8 gKeLgGR2JW6ba8xoeRnLJHYcMTgpOi7KBNG5P/NoVpNJFeIfOJu+6/lJXRs3/JXl CJPwfmi+4766/uvsD/JtYqUD5L4zB2ayR+YzI0tnYhL2HOO6d+f2Bzs6Wwvm+Knq rJnx3wTpvVBc/iU4fzNrr94P3l7rvC66zHQB9GWW2g50OOhBC4uNE4jre3hmQWQZ Ku41btNTTHP4S1d/WLy++iazG/yrAMIUawyNHT7fjne/nm1r5ZED -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:21 2026 by rpki-client