This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/En5Rx9q0qO7unPONCeYGr0E8Ypo.roa File: En5Rx9q0qO7unPONCeYGr0E8Ypo.roa (raw, json) Hash identifier: m4mIVNNksRXGC54BCyZfvQgPVP3myy6JZj2rGnHsmaQ= Subject key identifier: 12:7E:51:C7:DA:B4:A8:EE:EE:9C:F3:8D:09:E6:06:AF:41:3C:62:9A Certificate issuer: /CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a Certificate serial: 019B76EAA95C2FFF19A7DC1C24AB88B6E119 Authority key identifier: F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/En5Rx9q0qO7unPONCeYGr0E8Ypo.roa Signing time: Thu 01 Jan 2026 00:17:28 +0000 ROA not before: Thu 01 Jan 2026 00:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42491 IP address blocks: 193.72.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:a9:5c:2f:ff:19:a7:dc:1c:24:ab:88:b6:e1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a Validity Not Before: Jan 1 00:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=127e51c7dab4a8eeee9cf38d09e606af413c629a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:e3:bf:ea:c2:4f:4c:77:c1:d4:f4:9c:9a: 02:51:4a:a9:ba:a7:04:88:72:ca:ac:24:1e:d0:ef: 01:c9:09:c6:8f:0a:c1:a6:dd:73:73:e3:23:50:ca: 80:98:1c:0b:19:fa:99:c4:c0:63:69:48:a6:5a:53: 81:d8:33:6c:8e:b6:4d:48:86:84:f6:ed:7e:5c:ff: 97:63:e8:bf:e6:38:8a:58:92:b7:62:78:d1:dc:b2: 3a:c0:b0:aa:44:2e:ae:d2:dc:b6:47:32:2c:94:45: 14:39:95:87:2f:60:2a:12:e4:13:e0:30:d2:64:f3: f3:a1:0b:9a:53:24:83:fd:21:19:be:61:1e:c7:43: 84:2a:62:c5:3b:70:c6:a8:bb:36:3d:4a:4b:5e:60: dc:d6:fe:ef:8c:de:27:1c:47:4a:9c:17:a5:c7:6b: 03:fa:7e:75:ed:94:c7:c1:99:57:31:4a:0e:41:e4: 43:ef:eb:8d:34:a1:64:42:24:fd:4b:42:6d:65:d7: 20:6d:a3:10:71:bc:d2:b7:42:01:eb:d9:09:26:71: 7b:99:df:01:23:be:02:59:e0:6d:c1:68:5d:84:b3: d0:7a:39:53:1d:fd:eb:16:96:fb:55:46:ac:6b:81: 37:75:5a:9b:da:0a:e3:a0:8f:0a:a4:fa:c6:cf:2c: 4c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7E:51:C7:DA:B4:A8:EE:EE:9C:F3:8D:09:E6:06:AF:41:3C:62:9A X509v3 Authority Key Identifier: keyid:F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/En5Rx9q0qO7unPONCeYGr0E8Ypo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.72.166.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:a9:f1:39:b9:28:11:87:b4:fa:3b:d5:c0:da:11:35:85:e0: 66:22:94:a9:2c:44:ff:87:06:0a:d6:59:b6:25:84:3a:09:a2: 0d:71:b1:7e:31:3a:52:7c:13:d7:52:68:0d:10:28:5d:35:a1: 24:37:ab:52:7f:e6:a9:43:5f:1a:1a:7b:52:02:45:d1:3c:88: de:0e:22:e1:ee:2a:da:15:9d:92:d2:3b:df:1a:83:a4:8a:41: 01:a9:5c:b5:9a:4d:bd:00:a7:76:1d:2d:91:cd:55:89:4d:f8: 7f:f0:60:13:d3:9d:7d:9c:8a:d0:f5:0d:08:bb:66:1c:b8:5b: 1f:ce:79:ed:9a:96:04:69:c0:10:22:7d:9a:9f:4b:6f:66:b8: 64:6c:75:ba:a9:fb:66:44:82:2b:6f:23:88:e7:3a:e6:67:df: 6d:00:99:ba:8c:82:bf:3d:17:f8:a3:29:27:b8:c2:7e:c5:a8: c7:46:60:a1:73:3f:14:d4:e7:10:f1:47:36:09:f3:30:fc:9d: e9:f4:5a:c7:c7:c0:40:7c:26:10:be:01:4d:27:73:36:c2:2c: 6c:cb:07:a8:28:88:12:4a:f9:ec:34:56:87:30:92:90:4f:93: 12:8a:e3:d8:81:09:17:c7:18:48:1d:10:16:ab:a5:d0:4b:ed: 33:c4:a3:06 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt26qlcL/8Zp9wcJKuItuEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NzUzZTJmNzIzMGRkYjdiYzBlNjRlMzU4YWY5N2MzMThk ODhiNmEwHhcNMjYwMTAxMDAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjdlNTFjN2RhYjRhOGVlZWU5Y2YzOGQwOWU2MDZhZjQxM2M2MjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpDjv+rCT0x3wdT0nJoCUUqpuqcE iHLKrCQe0O8ByQnGjwrBpt1zc+MjUMqAmBwLGfqZxMBjaUimWlOB2DNsjrZNSIaE 9u1+XP+XY+i/5jiKWJK3YnjR3LI6wLCqRC6u0ty2RzIslEUUOZWHL2AqEuQT4DDS ZPPzoQuaUySD/SEZvmEex0OEKmLFO3DGqLs2PUpLXmDc1v7vjN4nHEdKnBelx2sD +n517ZTHwZlXMUoOQeRD7+uNNKFkQiT9S0JtZdcgbaMQcbzSt0IB69kJJnF7md8B I74CWeBtwWhdhLPQejlTHf3rFpb7VUasa4E3dVqb2grjoI8KpPrGzyxMfwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBJ+UcfatKju7pzzjQnmBq9BPGKaMB8GA1UdIwQY MBaAFPh1Pi9yMN23vA5k41ivl8MY2ItqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IVS1MM0l3M2JlOERtVGpXSy1Yd3hqWWkyby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvNmY5NjA0LTQ4MGMtNDgzNy1hZmYy LWQ1YzFhYTVhZTM5OC8xL0VuNVJ4OXEwcU83dW5QT05DZVlHcjBFOFlwby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGMvNmY5NjA0LTQ4MGMtNDgzNy1hZmYyLWQ1YzFhYTVhZTM5 OC8xLzEtSFUtTDNJdzNiZThEbVRqV0stWHd4allpMm8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBSKYw DQYJKoZIhvcNAQELBQADggEBAJyp8Tm5KBGHtPo71cDaETWF4GYilKksRP+HBgrW WbYlhDoJog1xsX4xOlJ8E9dSaA0QKF01oSQ3q1J/5qlDXxoae1ICRdE8iN4OIuHu KtoVnZLSO98ag6SKQQGpXLWaTb0Ap3YdLZHNVYlN+H/wYBPTnX2citD1DQi7Zhy4 Wx/Oee2algRpwBAifZqfS29muGRsdbqp+2ZEgitvI4jnOuZn320AmbqMgr89F/ij KSe4wn7FqMdGYKFzPxTU5xDxRzYJ8zD8nen0WsfHwEB8JhC+AU0nczbCLGzLB6go iBJK+ew0VocwkpBPkxKK49iBCRfHGEgdEBarpdBL7TPEowY= -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:22 2026 by rpki-client