This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/4MZHtrPduvwWZu0hq-_oUYNM5w8.roa File: 4MZHtrPduvwWZu0hq-_oUYNM5w8.roa (raw, json) Hash identifier: AxdxJvWatT200gvs4axM5PIkBFxSpInVyc3mGSKp8vU= Subject key identifier: E0:C6:47:B6:B3:DD:BA:FC:16:66:ED:21:AB:EF:E8:51:83:4C:E7:0F Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28 Certificate serial: 019B7E37C7252127E271DCF5E3AC0340FA98 Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/4MZHtrPduvwWZu0hq-_oUYNM5w8.roa Signing time: Fri 02 Jan 2026 10:19:03 +0000 ROA not before: Fri 02 Jan 2026 10:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 193.34.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c7:25:21:27:e2:71:dc:f5:e3:ac:03:40:fa:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28 Validity Not Before: Jan 2 10:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0c647b6b3ddbafc1666ed21abefe851834ce70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:2c:a3:04:a0:94:dc:85:35:58:42:11:3e: 29:f4:11:c8:2d:46:2c:1b:31:43:ce:fa:e6:89:2f: 28:2b:94:6f:69:b9:fd:8f:f0:18:b4:46:bd:c4:31: d8:d0:8e:45:f2:cb:0f:4e:8d:40:58:25:33:6a:d9: 01:d6:2e:18:06:f4:3a:29:8a:1c:61:fc:75:9c:fc: bc:bf:a0:b3:f5:27:b3:0c:2b:34:c6:8a:2e:44:92: 73:21:08:1c:4e:b1:ac:4b:e5:4e:57:fc:48:56:b9: d6:52:a9:4f:b6:b2:77:14:47:c1:ed:dc:2e:ac:47: bc:bc:07:de:ae:dd:b9:bd:ba:62:f0:59:99:42:50: b2:4d:2a:94:3b:84:8a:68:32:85:5d:40:cd:e9:72: 7c:69:b4:29:c9:41:b0:4f:aa:48:0c:11:84:4e:e2: 9a:20:ae:ac:03:38:1e:f5:b8:8c:26:a5:19:e1:21: b8:1b:6a:0a:8e:e6:13:11:f1:69:02:9a:c4:75:cf: c4:a9:76:13:f3:b2:e0:f6:2c:96:a9:e9:9d:a1:d3: 80:2c:e6:10:68:83:bb:be:61:23:92:e5:29:ed:38: ed:6c:3b:a2:45:79:ba:87:b2:ed:a2:8a:a4:ac:47: 72:36:38:18:8b:f3:8d:c3:38:8f:47:0c:43:cf:d5: 69:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C6:47:B6:B3:DD:BA:FC:16:66:ED:21:AB:EF:E8:51:83:4C:E7:0F X509v3 Authority Key Identifier: keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/4MZHtrPduvwWZu0hq-_oUYNM5w8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.48.0/24 Signature Algorithm: sha256WithRSAEncryption ad:85:00:73:21:0e:e9:e1:36:76:fd:cb:db:28:e1:96:a4:5d: e2:ff:66:33:77:c0:c6:de:ad:12:b1:3e:37:61:61:9d:82:38: 79:f4:e5:73:5e:6c:1c:c2:8a:71:13:85:47:2b:5a:80:7f:8a: eb:6c:ad:c9:1d:4e:d6:d5:45:e0:c2:39:cd:9a:b9:ce:c9:35: 20:33:11:7c:68:dc:36:ee:46:40:bb:0a:e7:4f:7d:6c:ff:08: bc:c3:b6:47:4e:de:73:fe:64:79:ab:aa:89:3b:9e:94:28:6e: 11:27:d6:eb:b1:23:8a:7b:f2:d5:0b:df:dd:69:59:ce:43:89: 43:92:21:01:42:8d:46:14:13:2f:1e:b6:3c:48:77:9c:50:25: c9:2b:07:5a:87:4f:e3:7e:2f:aa:59:37:0b:4e:03:ac:9f:48: 22:2a:71:4f:e6:0e:43:a2:3c:8b:c3:d9:e9:7c:30:8f:92:40: c3:fa:36:5a:88:44:67:bd:47:5c:1c:28:31:cd:23:93:4a:bc: ec:93:b9:a0:8b:61:14:72:00:f9:f8:a1:1f:5b:ae:05:7e:17: ba:c5:0d:e5:ab:b0:ef:94:da:18:b3:d6:53:53:52:6f:48:f1: 06:94:23:7f:af:f1:2d:2a:01:40:6b:0b:be:ec:66:4d:5a:f6: 15:bd:31:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8clISficdz146wDQPqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzUzM2Q2NjJjM2YwZDZiYjFlNjkyZjNmYWI2ZDdiYTM4 MjRjMjgwHhcNMjYwMTAyMTAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGM2NDdiNmIzZGRiYWZjMTY2NmVkMjFhYmVmZTg1MTgzNGNlNzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcwsowSglNyFNVhCET4p9BHILUYs GzFDzvrmiS8oK5Rvabn9j/AYtEa9xDHY0I5F8ssPTo1AWCUzatkB1i4YBvQ6KYoc Yfx1nPy8v6Cz9SezDCs0xoouRJJzIQgcTrGsS+VOV/xIVrnWUqlPtrJ3FEfB7dwu rEe8vAfert25vbpi8FmZQlCyTSqUO4SKaDKFXUDN6XJ8abQpyUGwT6pIDBGETuKa IK6sAzge9biMJqUZ4SG4G2oKjuYTEfFpAprEdc/EqXYT87Lg9iyWqemdodOALOYQ aIO7vmEjkuUp7TjtbDuiRXm6h7LtooqkrEdyNjgYi/ONwziPRwxDz9VpOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFODGR7az3br8FmbtIavv6FGDTOcPMB8GA1UdIwQY MBaAFJ41M9Ziw/DWux5pLz+rbXujgkwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUt YTc4MzQxMzA5OWQzLzEvNE1aSHRyUGR1dndXWnUwaHEtX29VWU5NNXc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUtYTc4MzQxMzA5OWQz LzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSIwMA0G CSqGSIb3DQEBCwUAA4IBAQCthQBzIQ7p4TZ2/cvbKOGWpF3i/2Yzd8DG3q0SsT43 YWGdgjh59OVzXmwcwopxE4VHK1qAf4rrbK3JHU7W1UXgwjnNmrnOyTUgMxF8aNw2 7kZAuwrnT31s/wi8w7ZHTt5z/mR5q6qJO56UKG4RJ9brsSOKe/LVC9/daVnOQ4lD kiEBQo1GFBMvHrY8SHecUCXJKwdah0/jfi+qWTcLTgOsn0giKnFP5g5DojyLw9np fDCPkkDD+jZaiERnvUdcHCgxzSOTSrzsk7mgi2EUcgD5+KEfW64Ffhe6xQ3lq7Dv lNoYs9ZTU1JvSPEGlCN/r/EtKgFAawu+7GZNWvYVvTF7 -----END CERTIFICATE-----Generated at Thu Jan 8 00:11:50 2026 by rpki-client