This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/16IES9haatKMkP-HejVSazJdMkY.roa File: 16IES9haatKMkP-HejVSazJdMkY.roa (raw, json) Hash identifier: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes= Subject key identifier: D7:A2:04:4B:D8:5A:6A:D2:8C:90:FF:87:7A:35:52:6B:32:5D:32:46 Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990 Certificate serial: 019B7EA46F544AA2EC44035511404BDD6E88 Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/16IES9haatKMkP-HejVSazJdMkY.roa Signing time: Fri 02 Jan 2026 12:17:44 +0000 ROA not before: Fri 02 Jan 2026 12:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199510 IP address blocks: 193.34.138.0/23 maxlen: 23 193.108.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:6f:54:4a:a2:ec:44:03:55:11:40:4b:dd:6e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990 Validity Not Before: Jan 2 12:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7a2044bd85a6ad28c90ff877a35526b325d3246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:71:a5:d1:e1:c9:e4:9b:4a:da:23:bb:b4: 82:1a:f0:82:2e:0e:cf:32:47:68:2b:93:ba:46:d1: 9c:54:2d:da:76:5b:5b:90:13:d3:e7:ad:ca:1e:ec: 80:5c:8a:2d:36:ba:13:ff:e5:61:01:e0:a0:2c:a7: 75:06:77:16:21:4f:1c:2c:e5:a3:7e:6e:af:c8:b8: a2:4a:e4:78:9a:2e:bd:2a:83:20:64:2e:27:cf:4d: 37:d0:74:5f:d8:d9:8c:9b:ca:19:68:de:39:00:23: a2:1e:f0:6c:d2:4a:06:41:1b:3c:15:e9:fa:9d:11: 5b:38:a5:fd:a9:3b:8a:20:c6:c5:ff:c4:ec:e7:07: f0:72:5d:cb:a5:b8:c5:5a:4f:c2:b3:7f:26:30:0b: 11:c7:fb:57:0f:a5:88:0c:fc:53:e4:10:f9:fa:87: 8e:70:ae:90:c5:43:ca:6a:17:14:23:a4:c5:5f:09: 18:e7:30:4b:5b:2b:3e:4d:0d:4a:21:c9:54:c0:47: 96:5f:3a:27:77:bd:1f:8a:02:bb:23:d0:c3:c1:e9: ab:99:84:77:f9:c3:01:49:88:2a:53:2c:b8:24:db: b1:fb:ca:43:02:64:a1:4e:fe:7d:40:d0:1e:67:e8: 3c:a6:29:3c:df:7a:21:5f:80:3a:78:a6:3f:d3:e2: 2c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A2:04:4B:D8:5A:6A:D2:8C:90:FF:87:7A:35:52:6B:32:5D:32:46 X509v3 Authority Key Identifier: keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/16IES9haatKMkP-HejVSazJdMkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.138.0/23 193.108.220.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:c3:7c:b1:e4:9b:0f:de:a0:47:77:6f:13:5a:fd:65:f7:80: b6:c6:ea:fd:07:a3:7a:7c:e9:3e:4e:df:be:bd:77:eb:bf:ae: d7:b4:24:3d:fa:e1:8f:32:41:3f:f9:e1:f7:db:c3:07:bd:20: 9a:14:0d:6d:9e:f5:b9:39:38:0e:66:2e:cb:af:54:61:28:d8: fd:f8:53:e7:5d:91:13:e8:e3:af:83:11:4e:0b:47:0b:38:dc: c1:a7:23:cb:df:ce:db:0c:29:02:e8:eb:ac:e2:63:df:17:3b: cf:ba:0d:46:c8:ac:13:09:88:b8:48:1d:04:c9:b3:49:23:aa: 84:31:6d:21:e0:52:f3:94:25:15:79:bc:76:1d:8a:37:71:18: ac:2b:e4:e6:1a:de:1e:47:6f:7b:ee:83:28:18:46:ba:d7:ee: 5c:69:12:86:cc:ad:66:76:8e:53:2f:28:d2:f9:93:ec:05:c6: 0c:76:b6:61:81:91:19:ba:7b:41:e2:f4:29:95:30:c0:a4:b0: 31:49:ee:56:7b:05:c1:02:5f:22:53:bd:5b:05:2b:23:fe:06: a4:9c:3d:f5:79:be:69:c2:db:ab:36:e2:a3:8b:24:b3:e8:ed: 72:4b:9e:d2:57:85:f1:60:b3:22:22:79:bf:71:1f:5f:b0:76: bb:83:34:83 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pG9USqLsRANVEUBL3W6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjN2Y0YTMzODdkYjgzOGNkYTgzN2FiOTJhNmNlOGY2ZmZj M2M5OTAwHhcNMjYwMTAyMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2EyMDQ0YmQ4NWE2YWQyOGM5MGZmODc3YTM1NTI2YjMyNWQzMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWdxpdHhyeSbStoju7SCGvCCLg7P MkdoK5O6RtGcVC3adltbkBPT563KHuyAXIotNroT/+VhAeCgLKd1BncWIU8cLOWj fm6vyLiiSuR4mi69KoMgZC4nz0030HRf2NmMm8oZaN45ACOiHvBs0koGQRs8Fen6 nRFbOKX9qTuKIMbF/8Ts5wfwcl3LpbjFWk/Cs38mMAsRx/tXD6WIDPxT5BD5+oeO cK6QxUPKahcUI6TFXwkY5zBLWys+TQ1KIclUwEeWXzond70figK7I9DDwemrmYR3 +cMBSYgqUyy4JNux+8pDAmShTv59QNAeZ+g8pik833ohX4A6eKY/0+IsjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNeiBEvYWmrSjJD/h3o1UmsyXTJGMB8GA1UdIwQY MBaAFOx/SjOH24OM2oN6uSps6Pb/w8mQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUt OGE4NjVmZDYyMWM4LzEvMTZJRVM5aGFhdEtNa1AtSGVqVlNhekpkTWtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUtOGE4NjVmZDYyMWM4 LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwSKKAwQA wWzcMA0GCSqGSIb3DQEBCwUAA4IBAQA/w3yx5JsP3qBHd28TWv1l94C2xur9B6N6 fOk+Tt++vXfrv67XtCQ9+uGPMkE/+eH328MHvSCaFA1tnvW5OTgOZi7Lr1RhKNj9 +FPnXZET6OOvgxFOC0cLONzBpyPL387bDCkC6Ous4mPfFzvPug1GyKwTCYi4SB0E ybNJI6qEMW0h4FLzlCUVebx2HYo3cRisK+TmGt4eR2977oMoGEa61+5caRKGzK1m do5TLyjS+ZPsBcYMdrZhgZEZuntB4vQplTDApLAxSe5WewXBAl8iU71bBSsj/gak nD31eb5pwturNuKjiySz6O1yS57SV4XxYLMiInm/cR9fsHa7gzSD -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:25 2026 by rpki-client