This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/ExsHE4JND829crxsW7zedd1gI4E.roa File: ExsHE4JND829crxsW7zedd1gI4E.roa (raw, json) Hash identifier: PwF0kYYWy9VG4ZuDcqRgCgPtqUp4IvaWx84Jor85iVQ= Subject key identifier: 13:1B:07:13:82:4D:0F:CD:BD:72:BC:6C:5B:BC:DE:75:DD:60:23:81 Certificate issuer: /CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d Certificate serial: 019B7A5B99A8ACB75239106DD0F79B668BF8 Authority key identifier: B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/ExsHE4JND829crxsW7zedd1gI4E.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208475 IP address blocks: 195.226.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:99:a8:ac:b7:52:39:10:6d:d0:f7:9b:66:8b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=131b0713824d0fcdbd72bc6c5bbcde75dd602381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9a:7c:99:14:61:5f:4c:9c:11:4c:73:29:27: 10:69:2c:65:f4:99:13:71:7c:c8:1e:76:ce:91:bf: 60:48:00:dc:ef:7c:52:d7:17:a3:be:c4:dc:06:b9: ea:aa:ca:b4:1b:6a:6f:22:71:c9:fe:0c:cb:6b:4e: 08:d8:2f:eb:bd:80:5c:bd:37:37:c6:32:08:3f:b6: 5c:2e:b8:98:9d:70:bc:85:4b:7f:78:47:ff:54:92: 37:73:22:dc:09:98:9b:f8:99:23:aa:fd:a4:85:f4: 3a:5f:a8:9e:31:ba:3c:74:c7:72:90:d2:12:db:a3: b0:3a:77:29:47:68:55:2f:36:d3:57:2e:f8:e9:42: 9e:7a:f4:11:f6:0f:ac:f6:a2:98:3e:35:a2:fe:0c: a2:3f:a9:f2:37:ed:a5:36:ab:da:3e:1a:ea:f9:ff: 2d:4d:ab:82:e7:2a:99:95:bd:9a:47:90:7e:91:10: f6:0c:96:bf:ea:fb:01:80:dc:f1:07:cf:1a:f8:0f: c3:08:94:8c:65:f9:4a:6f:56:74:7d:b0:93:11:67: c5:cc:27:1a:5d:a4:2c:35:c8:90:38:ab:96:a5:3b: b1:4e:f5:9a:df:5b:a8:ea:17:f4:db:f2:0a:ab:52: e4:42:73:ee:3f:45:90:c6:e7:0c:48:d9:08:c2:68: 87:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1B:07:13:82:4D:0F:CD:BD:72:BC:6C:5B:BC:DE:75:DD:60:23:81 X509v3 Authority Key Identifier: keyid:B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/ExsHE4JND829crxsW7zedd1gI4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.219.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:a3:c9:fd:33:40:a4:e0:70:2b:70:7b:ef:d9:35:c9:ab:c1: 15:92:3a:d0:82:e2:9d:4a:bc:c5:14:5f:ee:cb:03:da:9c:d3: ed:5e:e5:fc:f9:20:e9:bd:38:ae:86:70:7e:60:91:bf:a9:b7: 63:6f:8f:13:22:78:66:f9:c7:20:00:ef:42:95:26:03:3b:8a: a7:e3:fe:f3:03:b5:25:0a:c9:06:4c:92:e9:31:d9:41:81:55: c7:19:d4:71:d9:41:be:5d:d6:66:4c:2d:87:12:7c:8e:27:f7: c7:8b:64:27:76:9b:3f:9e:1f:cc:5e:47:55:a9:ce:21:a3:b8: 15:a2:fc:15:b4:43:0b:88:23:9c:42:53:34:96:6a:f7:4f:58: 8c:88:b5:1b:f5:f0:c5:d5:79:2c:e1:31:c7:18:9c:e4:40:41: 6d:d8:69:d4:4e:14:5f:d0:14:19:e6:b5:e0:a7:e4:07:ff:00: 57:a8:e0:d3:cd:f4:39:48:b5:67:c3:27:33:40:33:0f:13:93: 59:4c:c5:1a:38:f1:43:93:24:36:b1:93:e4:b4:4a:41:81:2d: 02:a5:9e:61:d5:06:68:94:fd:9e:64:71:4b:1e:19:78:74:00: 3d:e8:dc:ad:b3:f1:82:3f:80:df:a5:8e:61:2f:09:52:59:9d: b2:33:20:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5morLdSORBt0PebZov4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMWUzYjJhYzUwOTcwZmIxMjZjYmRmMTlkN2ZiMzE1ZGNj MWM0NWQwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzFiMDcxMzgyNGQwZmNkYmQ3MmJjNmM1YmJjZGU3NWRkNjAyMzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJp8mRRhX0ycEUxzKScQaSxl9JkT cXzIHnbOkb9gSADc73xS1xejvsTcBrnqqsq0G2pvInHJ/gzLa04I2C/rvYBcvTc3 xjIIP7ZcLriYnXC8hUt/eEf/VJI3cyLcCZib+Jkjqv2khfQ6X6ieMbo8dMdykNIS 26OwOncpR2hVLzbTVy746UKeevQR9g+s9qKYPjWi/gyiP6nyN+2lNqvaPhrq+f8t TauC5yqZlb2aR5B+kRD2DJa/6vsBgNzxB88a+A/DCJSMZflKb1Z0fbCTEWfFzCca XaQsNciQOKuWpTuxTvWa31uo6hf02/IKq1LkQnPuP0WQxucMSNkIwmiHrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMbBxOCTQ/NvXK8bFu83nXdYCOBMB8GA1UdIwQY MBaAFLIeOyrFCXD7Emy98Z1/sxXcwcRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81MmExZTUtODZmMS00OWY3LWE3NzMt Y2IzZTI5YjZhZDMyLzEvRXhzSEU0Sk5EODI5Y3J4c1c3emVkZDFnSTRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81MmExZTUtODZmMS00OWY3LWE3NzMtY2IzZTI5YjZhZDMy LzEvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+LbMA0G CSqGSIb3DQEBCwUAA4IBAQB6o8n9M0Ck4HArcHvv2TXJq8EVkjrQguKdSrzFFF/u ywPanNPtXuX8+SDpvTiuhnB+YJG/qbdjb48TInhm+ccgAO9ClSYDO4qn4/7zA7Ul CskGTJLpMdlBgVXHGdRx2UG+XdZmTC2HEnyOJ/fHi2Qndps/nh/MXkdVqc4ho7gV ovwVtEMLiCOcQlM0lmr3T1iMiLUb9fDF1Xks4THHGJzkQEFt2GnUThRf0BQZ5rXg p+QH/wBXqODTzfQ5SLVnwyczQDMPE5NZTMUaOPFDkyQ2sZPktEpBgS0CpZ5h1QZo lP2eZHFLHhl4dAA96Nyts/GCP4DfpY5hLwlSWZ2yMyDr -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:20 2026 by rpki-client