This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/d0LecfURWAP1Kd5yMlBKRHrXszA.roa File: d0LecfURWAP1Kd5yMlBKRHrXszA.roa (raw, json) Hash identifier: SeQ46ddcXmZrpSmBr04z47vzrirNug3nWjIEQHhxkrE= Subject key identifier: 77:42:DE:71:F5:11:58:03:F5:29:DE:72:32:50:4A:44:7A:D7:B3:30 Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096 Certificate serial: 019B7A5B43BB5CC7D7569B06C04FA7707D39 Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/d0LecfURWAP1Kd5yMlBKRHrXszA.roa Signing time: Thu 01 Jan 2026 16:19:19 +0000 ROA not before: Thu 01 Jan 2026 16:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197688 IP address blocks: 193.142.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:43:bb:5c:c7:d7:56:9b:06:c0:4f:a7:70:7d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096 Validity Not Before: Jan 1 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7742de71f5115803f529de7232504a447ad7b330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:56:2c:b4:86:b6:50:86:8d:07:b4:18:d5: 42:c9:a8:79:47:41:cc:ba:fe:5f:5b:0b:23:cc:bf: c4:13:20:95:02:cc:5c:8a:f8:c0:c8:d9:99:60:b3: 68:fd:cb:3d:6b:a2:d3:af:81:6e:cb:11:74:25:bd: db:ec:1c:ab:69:7c:12:96:4f:83:2c:e1:45:36:22: 63:b8:55:5c:d5:84:03:28:7c:22:de:cf:01:bf:51: 23:76:f4:4c:db:4f:8e:6a:54:d3:e9:4c:de:2f:8b: 06:bc:5c:dd:f2:ac:a2:bd:e3:9a:77:9b:e8:f5:8a: 37:15:7f:68:e5:cb:ba:76:d8:ba:0e:25:24:1b:04: f6:71:22:65:a6:a4:1e:57:4c:bd:50:1d:c0:96:a0: 93:c0:6d:04:35:88:00:ab:17:5d:9e:af:d1:fd:70: 0c:7a:3e:c5:05:0d:12:be:74:7b:7b:36:21:59:45: 8e:5a:51:04:e3:87:a9:07:6c:38:2e:f6:57:d6:8c: ea:23:53:94:3b:f2:28:eb:51:96:b6:08:c6:10:45: 7b:67:46:6b:b2:26:14:40:9f:f5:44:83:d3:67:c9: 7c:92:77:bc:66:0d:e1:47:d3:d8:02:48:0b:24:c5: f5:1d:fa:a7:71:d2:15:4a:03:d3:8d:e3:46:95:36: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:42:DE:71:F5:11:58:03:F5:29:DE:72:32:50:4A:44:7A:D7:B3:30 X509v3 Authority Key Identifier: keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/d0LecfURWAP1Kd5yMlBKRHrXszA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.159.0/24 Signature Algorithm: sha256WithRSAEncryption 72:1f:29:8c:f9:88:0d:fb:e7:b0:d3:aa:f7:36:59:b0:39:fe: 5e:46:d4:24:6f:a8:12:65:8f:eb:d2:17:0c:fb:ec:ad:67:ce: 83:cd:9e:39:d9:50:b2:2a:07:9e:d6:54:aa:f0:bd:ab:71:8e: 51:38:39:11:40:32:c3:6c:77:c9:50:ac:4e:b9:ab:09:8f:b4: c9:5c:be:7b:b0:b7:ed:fc:b8:bd:48:d0:f7:21:51:a8:bf:46: ab:4e:ac:48:be:45:66:de:31:2f:9f:88:da:b3:e6:b7:7d:f7: 86:27:94:00:4f:be:61:02:24:50:e1:cf:af:2b:cc:e9:43:f0: 41:96:a9:67:3d:60:c8:6a:97:f8:7e:26:23:31:3e:a6:b0:9b: dc:62:30:a4:62:37:8d:ca:3e:29:5a:cc:91:1f:94:cf:a5:d8: 7e:67:f2:4e:4d:c0:7d:b5:c3:99:e4:1a:aa:d1:f1:83:d6:c8: 78:c8:f8:6b:3f:54:31:a6:7c:c8:f6:12:ae:3f:d4:48:70:6d: a6:fc:c4:b5:d7:5a:50:69:a5:44:c9:4b:f1:14:f7:f8:58:d1: 64:4d:45:dc:d8:00:96:16:23:c5:39:57:4b:16:25:9e:83:26: 97:28:e1:93:7a:fe:6d:01:9c:b5:e8:0d:72:5c:07:74:dc:5a: cd:c9:cb:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0O7XMfXVpsGwE+ncH05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2IxZTU2YWM3ZDA3ODAyYzQ1NjdjNDY3OTQzNTE1OWI0 MjIwOTYwHhcNMjYwMTAxMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzQyZGU3MWY1MTE1ODAzZjUyOWRlNzIzMjUwNGE0NDdhZDdiMzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0dWLLSGtlCGjQe0GNVCyah5R0HM uv5fWwsjzL/EEyCVAsxcivjAyNmZYLNo/cs9a6LTr4FuyxF0Jb3b7ByraXwSlk+D LOFFNiJjuFVc1YQDKHwi3s8Bv1EjdvRM20+OalTT6UzeL4sGvFzd8qyiveOad5vo 9Yo3FX9o5cu6dti6DiUkGwT2cSJlpqQeV0y9UB3AlqCTwG0ENYgAqxddnq/R/XAM ej7FBQ0SvnR7ezYhWUWOWlEE44epB2w4LvZX1ozqI1OUO/Io61GWtgjGEEV7Z0Zr siYUQJ/1RIPTZ8l8kne8Zg3hR9PYAkgLJMX1HfqncdIVSgPTjeNGlTZRxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHdC3nH1EVgD9SnecjJQSkR617MwMB8GA1UdIwQY MBaAFJJ7HlasfQeALEVnxGeUNRWbQiCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTIt MzY1MzQ3ZjQxNmMwLzEvZDBMZWNmVVJXQVAxS2Q1eU1sQktSSHJYc3pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTItMzY1MzQ3ZjQxNmMw LzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY6fMA0G CSqGSIb3DQEBCwUAA4IBAQByHymM+YgN++ew06r3NlmwOf5eRtQkb6gSZY/r0hcM ++ytZ86DzZ452VCyKgee1lSq8L2rcY5RODkRQDLDbHfJUKxOuasJj7TJXL57sLft /Li9SND3IVGov0arTqxIvkVm3jEvn4jas+a3ffeGJ5QAT75hAiRQ4c+vK8zpQ/BB lqlnPWDIapf4fiYjMT6msJvcYjCkYjeNyj4pWsyRH5TPpdh+Z/JOTcB9tcOZ5Bqq 0fGD1sh4yPhrP1QxpnzI9hKuP9RIcG2m/MS111pQaaVEyUvxFPf4WNFkTUXc2ACW FiPFOVdLFiWegyaXKOGTev5tAZy16A1yXAd03FrNycuj -----END CERTIFICATE-----Generated at Mon Feb 9 22:58:08 2026 by rpki-client