This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/S4jlTESNKuERIhzvefthxqxMjFE.roa File: S4jlTESNKuERIhzvefthxqxMjFE.roa (raw, json) Hash identifier: yLIrF9eIEj+kTPaOF2RFGKsApZoPXCZlHEXSS6Q4GZY= Subject key identifier: 4B:88:E5:4C:44:8D:2A:E1:11:22:1C:EF:79:FB:61:C6:AC:4C:8C:51 Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28 Certificate serial: 019B7E37C6A682A37244AC749F332F51A9B1 Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/S4jlTESNKuERIhzvefthxqxMjFE.roa Signing time: Fri 02 Jan 2026 10:19:03 +0000 ROA not before: Fri 02 Jan 2026 10:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 251 IP address blocks: 193.34.48.0/22 maxlen: 24 195.13.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c6:a6:82:a3:72:44:ac:74:9f:33:2f:51:a9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28 Validity Not Before: Jan 2 10:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b88e54c448d2ae111221cef79fb61c6ac4c8c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:0a:4a:7e:cf:5e:75:c0:20:9d:89:b1:34: 58:ec:dc:92:ba:4c:00:0d:f3:e5:b5:94:50:80:4b: ac:a3:e5:90:31:ec:ac:6e:f8:cd:7a:ab:a1:27:5c: b0:a0:6e:03:7b:54:0a:56:37:1c:a5:18:f8:b6:7a: a7:0f:06:e8:b4:e0:68:c0:93:6d:6e:2b:a3:11:42: a1:5a:04:b9:c2:8d:fd:8b:4f:e2:d8:38:2a:b5:d0: 93:83:1c:7d:2e:75:d7:e8:04:09:3a:df:ac:43:23: 13:70:a9:3f:12:69:53:80:b0:22:9e:15:8f:ef:77: 9c:31:e1:d0:35:ad:5e:58:b4:95:a4:b3:15:92:85: 8f:09:7b:22:96:b4:ec:75:cd:8f:7a:a8:8f:a7:cd: 4b:b3:4b:c4:d4:0f:d3:85:10:58:7e:fe:8a:91:2d: 01:d7:db:11:bb:38:bd:11:e0:44:35:01:53:1d:b1: f9:a7:ec:b5:48:f0:1d:3c:73:d2:57:dd:b9:b5:ff: d7:76:fa:af:3e:d1:ce:d7:79:2b:6f:96:f5:4b:f8: bb:5b:5d:13:d3:25:58:3b:8b:b9:06:82:29:09:30: 3a:e5:f6:59:15:a8:a0:77:a2:76:de:42:43:44:fe: 9b:79:2b:67:93:00:0b:5e:20:a4:4e:6c:65:90:20: 6d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:88:E5:4C:44:8D:2A:E1:11:22:1C:EF:79:FB:61:C6:AC:4C:8C:51 X509v3 Authority Key Identifier: keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/S4jlTESNKuERIhzvefthxqxMjFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.48.0/22 195.13.60.0/22 Signature Algorithm: sha256WithRSAEncryption 54:a0:22:2b:42:31:d9:12:52:32:80:f7:e5:5d:c1:82:d8:8d: 65:d0:ab:0f:4a:f4:f1:53:34:f4:c9:72:83:a5:91:6a:80:7a: fe:0e:cd:4a:57:91:95:66:c8:37:4e:06:b4:75:65:b2:5f:3d: 06:de:09:d8:94:74:05:e2:34:65:9c:be:1d:ff:8d:85:0e:17: af:7a:46:c4:0a:a6:96:93:20:b0:5b:33:9d:5f:fa:a4:4d:55: 7d:ba:9f:06:b5:c7:cd:9b:9f:07:8e:cc:48:7f:1e:52:6e:a6: b8:d7:15:ad:5f:96:df:53:ba:01:8c:e5:26:11:42:84:e0:22: f4:5c:a9:93:2f:96:4b:1c:81:09:db:f8:85:15:a7:d2:3f:59: 40:bf:28:65:89:09:44:54:22:36:ea:b3:06:21:a7:df:c0:a9: a4:e8:96:45:95:c5:8f:f2:90:a7:43:c2:91:08:0b:e6:74:cf: b2:5e:ae:cd:69:bf:8f:70:8e:a3:d7:67:ba:72:d9:ab:ce:99: 1c:87:be:bd:9a:06:a0:4c:85:de:41:17:9d:a9:87:03:e7:ed: 81:00:a8:7c:80:58:8b:0a:72:8f:a4:4c:41:2a:4c:98:bb:5a: 99:d2:36:af:a5:d0:6b:7e:2e:29:8c:b4:e3:1a:5b:86:29:58: ca:d9:90:33 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N8amgqNyRKx0nzMvUamxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzUzM2Q2NjJjM2YwZDZiYjFlNjkyZjNmYWI2ZDdiYTM4 MjRjMjgwHhcNMjYwMTAyMTAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjg4ZTU0YzQ0OGQyYWUxMTEyMjFjZWY3OWZiNjFjNmFjNGM4YzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubsKSn7PXnXAIJ2JsTRY7NySukwA DfPltZRQgEuso+WQMeysbvjNequhJ1ywoG4De1QKVjccpRj4tnqnDwbotOBowJNt biujEUKhWgS5wo39i0/i2DgqtdCTgxx9LnXX6AQJOt+sQyMTcKk/EmlTgLAinhWP 73ecMeHQNa1eWLSVpLMVkoWPCXsilrTsdc2PeqiPp81Ls0vE1A/ThRBYfv6KkS0B 19sRuzi9EeBENQFTHbH5p+y1SPAdPHPSV925tf/XdvqvPtHO13krb5b1S/i7W10T 0yVYO4u5BoIpCTA65fZZFaigd6J23kJDRP6beStnkwALXiCkTmxlkCBtRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEuI5UxEjSrhESIc73n7YcasTIxRMB8GA1UdIwQY MBaAFJ41M9Ziw/DWux5pLz+rbXujgkwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUt YTc4MzQxMzA5OWQzLzEvUzRqbFRFU05LdUVSSWh6dmVmdGh4cXhNakZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUtYTc4MzQxMzA5OWQz LzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwSIwAwQC ww08MA0GCSqGSIb3DQEBCwUAA4IBAQBUoCIrQjHZElIygPflXcGC2I1l0KsPSvTx UzT0yXKDpZFqgHr+Ds1KV5GVZsg3Tga0dWWyXz0G3gnYlHQF4jRlnL4d/42FDhev ekbECqaWkyCwWzOdX/qkTVV9up8GtcfNm58HjsxIfx5Sbqa41xWtX5bfU7oBjOUm EUKE4CL0XKmTL5ZLHIEJ2/iFFafSP1lAvyhliQlEVCI26rMGIaffwKmk6JZFlcWP 8pCnQ8KRCAvmdM+yXq7Nab+PcI6j12e6ctmrzpkch769mgagTIXeQRedqYcD5+2B AKh8gFiLCnKPpExBKkyYu1qZ0javpdBrfi4pjLTjGluGKVjK2ZAz -----END CERTIFICATE-----Generated at Sat Jan 10 15:21:55 2026 by rpki-client