This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa File: Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa (raw, json) Hash identifier: KqQ8TKxBYl3JumzrSj+0qt5zeDJPsxKpAnGsc38qwpE= Subject key identifier: 63:E7:89:98:0E:93:0D:52:88:4B:5B:6E:3B:0D:9D:9B:5F:C9:A9:D7 Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8 Certificate serial: 019C0BC958A6477047B8C7108F092A3370BA Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa Signing time: Thu 29 Jan 2026 22:04:30 +0000 ROA not before: Thu 29 Jan 2026 22:04:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 193.110.144.0/24 maxlen: 24 193.110.168.0/24 maxlen: 24 193.110.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0b:c9:58:a6:47:70:47:b8:c7:10:8f:09:2a:33:70:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8 Validity Not Before: Jan 29 22:04:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63e789980e930d52884b5b6e3b0d9d9b5fc9a9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1c:a9:d8:1d:94:fb:f5:96:77:17:b8:35:90: fa:df:27:58:fd:78:1d:90:65:75:87:d7:ce:02:0a: 56:ec:29:78:1d:14:47:ae:e0:92:fe:36:28:79:66: a6:ff:d5:d0:d1:f9:1f:4b:32:8a:84:39:98:32:af: 8a:a9:28:2f:99:a9:aa:11:d4:00:0a:02:7a:87:9b: 02:ca:dd:6f:68:99:a8:f2:f8:9d:dd:ac:b7:25:9f: 9a:73:ec:74:62:9d:ab:a4:d8:fd:e2:0a:1e:ad:bf: ef:c0:37:bc:39:f6:15:03:7e:2e:ed:37:7c:77:2b: ef:4a:35:a9:a9:fc:86:f9:71:07:6f:b0:23:c3:35: e3:80:1f:ed:65:26:10:c4:2f:d9:84:20:4e:96:bd: 6f:3e:12:8c:00:66:7e:ad:53:7f:39:ad:a5:91:3c: 54:67:3e:82:00:04:24:2b:3a:15:cc:a5:8c:38:c9: 37:f4:8a:35:85:65:51:32:4b:82:dc:9f:8d:38:8b: a9:61:5c:79:7b:81:0d:50:9e:d5:a6:b0:cc:b1:6e: 0a:5b:b1:2b:a2:8b:44:4d:cf:c5:ba:6d:21:5e:b6: 6a:5e:c2:cd:c4:21:3a:d6:35:63:87:f9:e9:bf:f0: 5d:e5:6f:f1:2d:36:a6:b5:ff:60:66:ca:52:0a:9f: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E7:89:98:0E:93:0D:52:88:4B:5B:6E:3B:0D:9D:9B:5F:C9:A9:D7 X509v3 Authority Key Identifier: keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.144.0/24 193.110.168.0/23 Signature Algorithm: sha256WithRSAEncryption 96:6c:eb:d0:ec:8e:b4:c7:28:c7:91:e9:25:4b:0d:47:5b:94: 12:41:fe:7d:a3:43:2e:c2:44:f5:cf:e6:3f:d2:46:1a:16:d9: a8:6e:f4:72:86:34:4c:f1:d4:c7:09:b4:32:71:c1:21:e3:d4: 48:27:b0:66:ca:4f:a4:eb:9d:a3:f7:87:8c:53:58:b0:2d:f7: 98:be:6a:b0:75:b0:61:be:be:20:6c:da:6f:c4:d6:28:67:19: 09:a0:5e:0a:06:1f:79:00:fd:90:6c:ea:16:9a:25:91:fd:b6: 3b:48:57:e4:79:62:7a:8e:77:41:c2:3c:29:4f:67:44:a9:de: 09:16:ea:ef:24:08:92:af:94:2c:fe:64:ac:91:84:45:b8:fd: 7f:dd:4f:31:62:d8:d0:25:0b:db:56:6d:60:d1:11:8c:8f:91: d8:aa:ee:0f:0f:72:f6:f0:2c:68:96:ed:42:eb:c6:04:56:c1: ea:2e:8d:bd:49:e5:9a:cf:54:dc:96:84:03:e1:9a:81:b1:83: 2b:9d:ae:be:18:d1:26:0c:25:ef:3f:14:bd:72:6c:7f:ec:33: c4:06:ad:63:06:45:e9:60:c1:84:89:01:de:c3:ba:04:17:77: fb:a8:93:47:1e:20:04:b2:00:3f:32:6f:0a:3a:3e:73:4e:6e: a3:4e:5e:19 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwLyVimR3BHuMcQjwkqM3C6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGQwOTIzZWMxMDY2Nzc2MGFkODgyZTZhZjlhMTU2OTlj MDVlZjgwHhcNMjYwMTI5MjIwNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2U3ODk5ODBlOTMwZDUyODg0YjViNmUzYjBkOWQ5YjVmYzlhOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxyp2B2U+/WWdxe4NZD63ydY/Xgd kGV1h9fOAgpW7Cl4HRRHruCS/jYoeWam/9XQ0fkfSzKKhDmYMq+KqSgvmamqEdQA CgJ6h5sCyt1vaJmo8vid3ay3JZ+ac+x0Yp2rpNj94goerb/vwDe8OfYVA34u7Td8 dyvvSjWpqfyG+XEHb7AjwzXjgB/tZSYQxC/ZhCBOlr1vPhKMAGZ+rVN/Oa2lkTxU Zz6CAAQkKzoVzKWMOMk39Io1hWVRMkuC3J+NOIupYVx5e4ENUJ7VprDMsW4KW7Er ootETc/Fum0hXrZqXsLNxCE61jVjh/npv/Bd5W/xLTamtf9gZspSCp80VwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGPniZgOkw1SiEtbbjsNnZtfyanXMB8GA1UdIwQY MBaAFBpNCSPsEGZ3YK2ILmr5oVaZwF74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNTY0ZTctMTFkNC00ZDdhLThiY2Mt YTk1Mzc2OGZkZTJmLzEvWS1lSm1BNlREVktJUzF0dU93MmRtMV9KcWRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8zNTY0ZTctMTFkNC00ZDdhLThiY2MtYTk1Mzc2OGZkZTJm LzEvR2swSkktd1FabmRncllndWF2bWhWcG5BWHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwW6QAwQB wW6oMA0GCSqGSIb3DQEBCwUAA4IBAQCWbOvQ7I60xyjHkeklSw1HW5QSQf59o0Mu wkT1z+Y/0kYaFtmobvRyhjRM8dTHCbQyccEh49RIJ7Bmyk+k652j94eMU1iwLfeY vmqwdbBhvr4gbNpvxNYoZxkJoF4KBh95AP2QbOoWmiWR/bY7SFfkeWJ6jndBwjwp T2dEqd4JFurvJAiSr5Qs/mSskYRFuP1/3U8xYtjQJQvbVm1g0RGMj5HYqu4PD3L2 8Cxolu1C68YEVsHqLo29SeWaz1TcloQD4ZqBsYMrna6+GNEmDCXvPxS9cmx/7DPE Bq1jBkXpYMGEiQHew7oEF3f7qJNHHiAEsgA/Mm8KOj5zTm6jTl4Z -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:05 2026 by rpki-client