This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/irsd6se3UI4Vehs4kcliozefsFU.roa File: irsd6se3UI4Vehs4kcliozefsFU.roa (raw, json) Hash identifier: fTkE3KDW/GsXrLu5wWzp0YdBO44h0Y6GslfTVrGJEkU= Subject key identifier: 8A:BB:1D:EA:C7:B7:50:8E:15:7A:1B:38:91:C9:62:A3:37:9F:B0:55 Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48 Certificate serial: 019B7B35CFEE1A9F1DEA27751A8EAE6D0AA4 Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/irsd6se3UI4Vehs4kcliozefsFU.roa Signing time: Thu 01 Jan 2026 20:18:02 +0000 ROA not before: Thu 01 Jan 2026 20:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44246 IP address blocks: 193.34.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cf:ee:1a:9f:1d:ea:27:75:1a:8e:ae:6d:0a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48 Validity Not Before: Jan 1 20:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8abb1deac7b7508e157a1b3891c962a3379fb055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:ea:b5:8e:65:7f:ae:af:a2:7d:e5:fd:b3: d8:67:f6:0d:a3:d2:1d:d2:c1:de:ad:00:a5:0c:a0: 4e:ba:02:b5:80:2b:5e:9e:ce:74:b4:94:b7:a4:1b: 65:43:b3:e2:bd:6a:52:3d:b4:3d:4f:3e:4e:b3:8f: 61:f3:ed:f7:ec:ae:34:02:dc:95:57:ad:ab:b7:67: 56:19:8c:a8:99:7f:de:55:dd:52:b1:31:e5:8a:83: 55:cc:ec:c1:96:cd:50:18:98:94:9d:07:ec:95:f7: 60:c2:58:34:4e:32:31:95:76:2d:18:e1:ef:be:ee: b1:4c:6f:c6:7a:10:b1:9e:3c:4d:cf:a5:ce:6d:56: da:d9:f7:e9:47:78:21:d7:80:8b:54:8f:1e:19:8e: 88:1d:b8:17:43:a6:32:79:f4:73:fa:d8:fd:a5:8c: 27:1c:ee:10:5c:26:a4:b6:06:ec:08:0e:1f:30:cd: 81:e4:29:11:74:0a:fe:c0:67:b7:de:76:85:1c:ef: 15:cc:9f:20:97:18:53:32:45:e5:65:c9:5f:1d:6c: cd:31:c3:3a:e9:f5:f9:40:fb:10:4f:e2:d1:3d:77: c7:a9:50:b7:ec:9a:18:ef:4a:c1:a1:7f:f6:b8:64: 27:6d:b6:b6:3a:ac:60:8e:2e:0b:20:a7:c8:08:e0: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BB:1D:EA:C7:B7:50:8E:15:7A:1B:38:91:C9:62:A3:37:9F:B0:55 X509v3 Authority Key Identifier: keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/irsd6se3UI4Vehs4kcliozefsFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.84.0/22 Signature Algorithm: sha256WithRSAEncryption 97:0f:ed:af:ea:76:29:e4:a1:71:88:d3:a9:7d:9a:72:ed:b2: ec:49:17:d4:26:e0:fe:94:3d:4f:64:f3:46:10:0d:26:dc:ab: 27:95:11:23:5f:c6:3e:05:25:65:3c:fc:18:d9:16:ee:c3:7a: 62:06:66:c3:5f:97:38:c3:eb:c7:a6:55:75:86:4d:ba:24:d7: d9:a5:47:df:33:b1:7b:16:d5:ef:5b:ec:20:9a:10:05:e2:84: 3f:42:c1:45:6d:88:5d:a6:73:86:e2:c8:f6:3b:30:5a:d4:ff: 50:5a:89:2f:a9:8d:a6:21:ad:86:44:fe:15:26:e5:5d:04:c5: 0e:85:f9:9f:21:95:39:1c:5f:e7:a1:0d:2b:55:8e:10:4f:ef: be:ef:a5:8f:d7:cf:22:1f:eb:3e:d4:cb:d4:83:a3:86:37:80: 90:b4:45:cd:0d:e2:59:f2:e7:1b:26:43:a2:03:d4:dc:78:6b: 81:1e:6d:8b:b4:68:2a:b0:12:b2:6e:c0:e9:56:bd:21:47:62: cf:46:a8:4c:54:2e:d6:14:55:ef:52:d7:63:49:24:3a:a4:25: 75:0e:62:7e:de:57:32:83:2d:84:5f:e2:37:9c:d5:9b:8d:0b: c1:ec:9b:43:69:c8:8a:e7:8c:ba:39:2e:36:9c:0d:bf:91:6c: cb:e6:dd:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nc/uGp8d6id1Go6ubQqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MjE5MjgxM2QyMmVmYTA0YmNiYjI0ZTBiZjBmZTM0ZDhk ZmJhNDgwHhcNMjYwMTAxMjAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWJiMWRlYWM3Yjc1MDhlMTU3YTFiMzg5MWM5NjJhMzM3OWZiMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrHqtY5lf66von3l/bPYZ/YNo9Id 0sHerQClDKBOugK1gCtens50tJS3pBtlQ7PivWpSPbQ9Tz5Os49h8+337K40AtyV V62rt2dWGYyomX/eVd1SsTHlioNVzOzBls1QGJiUnQfslfdgwlg0TjIxlXYtGOHv vu6xTG/GehCxnjxNz6XObVba2ffpR3gh14CLVI8eGY6IHbgXQ6YyefRz+tj9pYwn HO4QXCaktgbsCA4fMM2B5CkRdAr+wGe33naFHO8VzJ8glxhTMkXlZclfHWzNMcM6 6fX5QPsQT+LRPXfHqVC37JoY70rBoX/2uGQnbba2Oqxgji4LIKfICOA0OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIq7HerHt1COFXobOJHJYqM3n7BVMB8GA1UdIwQY MBaAFNUhkoE9Iu+gS8uyTgvw/jTY37pIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hZjQ4NzktMDVkZS00MjY4LTlhZDIt ZDhjNDRkNjA0YmMyLzEvaXJzZDZzZTNVSTRWZWhzNGtjbGlvemVmc0ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hZjQ4NzktMDVkZS00MjY4LTlhZDItZDhjNDRkNjA0YmMy LzEvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSJUMA0G CSqGSIb3DQEBCwUAA4IBAQCXD+2v6nYp5KFxiNOpfZpy7bLsSRfUJuD+lD1PZPNG EA0m3KsnlREjX8Y+BSVlPPwY2Rbuw3piBmbDX5c4w+vHplV1hk26JNfZpUffM7F7 FtXvW+wgmhAF4oQ/QsFFbYhdpnOG4sj2OzBa1P9QWokvqY2mIa2GRP4VJuVdBMUO hfmfIZU5HF/noQ0rVY4QT+++76WP188iH+s+1MvUg6OGN4CQtEXNDeJZ8ucbJkOi A9TceGuBHm2LtGgqsBKybsDpVr0hR2LPRqhMVC7WFFXvUtdjSSQ6pCV1DmJ+3lcy gy2EX+I3nNWbjQvB7JtDaciK54y6OS42nA2/kWzL5t1o -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:26 2026 by rpki-client