This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/c52XhO4YGCrU48r6aoFS0wJifx0.roa File: c52XhO4YGCrU48r6aoFS0wJifx0.roa (raw, json) Hash identifier: 4+paDSnGo7aoDvCfZSAugeN0kcY8+2h3yijdRS9k2EQ= Subject key identifier: 73:9D:97:84:EE:18:18:2A:D4:E3:CA:FA:6A:81:52:D3:02:62:7F:1D Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a Certificate serial: 019B7CEE25DC0B306B9082B88A25D4E31F98 Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/c52XhO4YGCrU48r6aoFS0wJifx0.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50194 IP address blocks: 193.104.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:25:dc:0b:30:6b:90:82:b8:8a:25:d4:e3:1f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=739d9784ee18182ad4e3cafa6a8152d302627f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:fc:ea:a5:32:fb:fd:0a:40:58:6a:8f:2a: a0:49:7c:b0:ba:d4:4b:09:3a:7e:77:90:c5:17:5d: 81:25:99:bb:7e:5e:6e:12:09:0e:46:95:85:70:62: 69:e7:17:0a:37:30:1f:4e:62:02:20:e8:d0:6e:84: 50:6a:86:cf:33:bf:d5:b8:ca:36:48:5c:32:92:81: e5:c6:da:c4:10:39:ff:81:b5:8e:48:0c:a8:01:23: d5:8b:b7:20:a8:b5:d9:bf:33:fd:d0:d5:e5:bb:55: 1b:a3:d5:a9:92:d2:ad:52:99:29:c0:ec:28:32:17: 54:5d:38:82:2e:3a:39:6b:d9:89:78:2c:0e:c3:fd: 7a:db:36:95:5a:65:ad:a1:cb:43:12:fc:11:70:0a: c1:ce:23:a2:2e:dd:3e:12:9e:bb:e0:dc:33:05:d1: 3c:64:ac:cb:f3:b7:11:68:da:a3:ab:f6:36:8a:fb: 72:b1:a7:dc:86:21:3d:58:e7:18:56:17:be:46:77: 7e:04:8a:98:f9:65:74:4c:78:4a:b9:ad:63:70:c8: b7:1d:b7:b2:25:cd:ad:be:ae:5c:77:bc:f9:6e:7f: 45:b4:1c:69:0e:25:35:a7:86:23:31:fe:a1:f5:df: 3c:dc:76:b2:22:05:96:38:30:aa:46:19:f5:e0:1c: c8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9D:97:84:EE:18:18:2A:D4:E3:CA:FA:6A:81:52:D3:02:62:7F:1D X509v3 Authority Key Identifier: keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/c52XhO4YGCrU48r6aoFS0wJifx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.165.0/24 Signature Algorithm: sha256WithRSAEncryption 54:1b:d8:8e:32:d2:2b:4b:ae:ba:2b:6f:38:05:56:cc:7a:2e: ba:15:4d:8d:ed:dd:d6:80:e8:a1:03:12:19:01:30:62:68:9d: 94:49:df:54:8a:61:b5:05:e3:21:31:61:19:63:0f:49:79:10: 1d:e2:ad:53:f4:1f:e4:a8:cf:83:cc:37:c5:e5:b9:09:1f:44: 50:36:3b:0a:d3:18:f7:46:32:d6:14:9e:4c:27:e7:69:b2:e4: 46:e9:66:d7:de:54:56:6f:d0:40:d5:2e:21:19:58:38:a9:5a: b5:13:a9:89:9c:14:ba:cc:29:79:94:b8:66:9e:b4:05:c0:00: d4:1a:e8:ca:d3:94:76:ab:ed:7d:ac:b1:21:f8:43:00:f0:25: bf:f1:83:9a:2c:24:ef:18:a8:f9:e4:c2:94:bb:99:69:8b:2e: 22:d2:af:55:19:1d:2d:a1:ed:a2:c8:32:6f:d9:5c:af:67:74: 4b:b5:1c:9d:4e:cc:f0:88:4c:60:86:c2:ee:ed:b6:7a:59:12: 4f:32:30:68:cc:02:b4:b3:91:96:dd:29:84:0b:06:56:1b:5f: b8:26:06:44:42:a4:4b:70:c6:ab:5a:11:3d:a4:c1:e3:4e:ef: ce:b3:35:ac:34:46:54:6d:9a:54:12:b3:de:70:4c:29:fa:c3: a3:0b:2e:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87iXcCzBrkIK4iiXU4x+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMmJhMjlhYTAxMTNmYWZkMzcwZDg2NWZiNDQ0NDk4N2I0 NzMwOGEwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzlkOTc4NGVlMTgxODJhZDRlM2NhZmE2YTgxNTJkMzAyNjI3ZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcv86qUy+/0KQFhqjyqgSXywutRL CTp+d5DFF12BJZm7fl5uEgkORpWFcGJp5xcKNzAfTmICIOjQboRQaobPM7/VuMo2 SFwykoHlxtrEEDn/gbWOSAyoASPVi7cgqLXZvzP90NXlu1Ubo9WpktKtUpkpwOwo MhdUXTiCLjo5a9mJeCwOw/162zaVWmWtoctDEvwRcArBziOiLt0+Ep674NwzBdE8 ZKzL87cRaNqjq/Y2ivtysafchiE9WOcYVhe+Rnd+BIqY+WV0THhKua1jcMi3Hbey Jc2tvq5cd7z5bn9FtBxpDiU1p4YjMf6h9d883HayIgWWODCqRhn14BzIfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHOdl4TuGBgq1OPK+mqBUtMCYn8dMB8GA1UdIwQY MBaAFN4ropqgET+v03DYZftERJh7RzCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85NzAwNGItYjY3MS00ZjNkLThkNTAt ZDFhNGE0NWZhZmJjLzEvYzUyWGhPNFlHQ3JVNDhyNmFvRlMwd0ppZngwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85NzAwNGItYjY3MS00ZjNkLThkNTAtZDFhNGE0NWZhZmJj LzEvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWilMA0G CSqGSIb3DQEBCwUAA4IBAQBUG9iOMtIrS666K284BVbMei66FU2N7d3WgOihAxIZ ATBiaJ2USd9UimG1BeMhMWEZYw9JeRAd4q1T9B/kqM+DzDfF5bkJH0RQNjsK0xj3 RjLWFJ5MJ+dpsuRG6WbX3lRWb9BA1S4hGVg4qVq1E6mJnBS6zCl5lLhmnrQFwADU GujK05R2q+19rLEh+EMA8CW/8YOaLCTvGKj55MKUu5lpiy4i0q9VGR0toe2iyDJv 2VyvZ3RLtRydTszwiExghsLu7bZ6WRJPMjBozAK0s5GW3SmECwZWG1+4JgZEQqRL cMarWhE9pMHjTu/OszWsNEZUbZpUErPecEwp+sOjCy4Q -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:02 2026 by rpki-client