This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/ayBRUQ4XFp8ceqFrnVdH8JT32Pw.roa File: ayBRUQ4XFp8ceqFrnVdH8JT32Pw.roa (raw, json) Hash identifier: ydKdrH0HwWllY5B18eol6PUwxMhU2Jq/931IBDQs9IM= Subject key identifier: 6B:20:51:51:0E:17:16:9F:1C:7A:A1:6B:9D:57:47:F0:94:F7:D8:FC Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93 Certificate serial: 019B79ED04429641364C36E419DB6B31B642 Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/ayBRUQ4XFp8ceqFrnVdH8JT32Pw.roa Signing time: Thu 01 Jan 2026 14:18:54 +0000 ROA not before: Thu 01 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31711 IP address blocks: 193.28.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:04:42:96:41:36:4c:36:e4:19:db:6b:31:b6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93 Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b2051510e17169f1c7aa16b9d5747f094f7d8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b9:12:22:41:2d:e0:13:43:cc:8e:1c:08:6c: 71:30:70:35:d5:03:9e:f5:3c:4d:bc:ec:bc:0f:15: 5e:d1:67:57:43:68:c6:dd:e0:3c:50:fe:8f:5b:c7: 06:d5:6d:b9:1a:51:2f:26:bf:d1:c2:58:30:0a:69: 6d:28:13:3d:ad:20:78:f3:93:57:dc:ab:3b:06:14: 7c:3f:d4:ec:4c:13:e2:83:44:49:35:93:5c:22:b8: 67:da:68:28:6e:c8:9c:9f:b2:a6:24:a6:62:7c:54: 52:99:9f:3c:b6:b7:fb:1a:a0:d9:7c:b5:8a:00:98: 0e:08:be:27:80:16:d2:95:a4:6f:94:5d:06:ba:3f: 75:de:d2:aa:cf:5f:12:33:89:ec:8f:d8:b0:45:7b: 89:46:8f:9e:e2:a2:3c:84:fc:c9:88:60:6e:d3:c8: 48:21:c7:ce:ae:63:fe:d1:1e:88:f8:03:e0:f4:58: 75:c3:d2:37:78:e0:a1:b3:c0:01:55:64:e3:7c:db: 50:af:3d:64:7d:b2:9f:56:6c:e8:4a:31:ce:42:74: 24:17:71:54:1b:d7:a2:a7:53:f4:78:97:a7:fa:6e: 8a:49:d7:ab:c6:a0:1a:b3:e4:ec:86:ee:86:e6:87: 84:70:ce:f2:e3:3c:d5:e6:ed:1d:6a:4b:e8:82:ed: ce:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:20:51:51:0E:17:16:9F:1C:7A:A1:6B:9D:57:47:F0:94:F7:D8:FC X509v3 Authority Key Identifier: keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/ayBRUQ4XFp8ceqFrnVdH8JT32Pw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.146.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:88:af:e6:a2:25:56:50:bf:ec:47:4e:51:1b:2d:13:a0:74: 58:f0:0f:10:b8:90:e6:1d:e3:3e:a2:f0:b5:7e:86:2c:09:fe: 79:61:2e:f3:da:a4:2a:c9:c0:2a:ac:23:59:5b:b2:8f:df:e3: 16:45:d0:9d:02:5a:ca:e0:63:ea:2b:0f:8f:db:92:78:de:52: 48:03:f9:9e:31:69:59:af:a5:88:8b:db:94:fe:81:09:ba:1c: 68:c4:8c:44:c4:15:99:9f:59:e7:48:ae:8e:67:c8:44:9c:4c: 02:99:bf:fa:cf:ab:9a:34:86:c0:6d:0b:b1:36:19:95:d9:12: 65:4c:49:7e:ee:da:47:0c:76:1e:37:b6:e7:98:86:d2:77:86: 8f:30:f7:5e:c3:3b:d7:01:af:a2:78:3d:95:1c:c3:2b:97:e2: ab:16:b3:ef:1a:cd:81:74:24:31:51:ad:b5:c9:1e:40:42:f1: 34:d7:fc:72:47:40:86:43:49:70:fd:4d:00:47:d5:ce:34:a8: 64:8b:50:05:5b:ae:67:2a:01:96:12:f6:a4:99:39:75:19:95: 96:ed:49:ab:40:8e:35:5b:a4:83:15:ea:7d:9d:96:ea:59:03: 7e:bc:f1:2a:fe:1b:28:b6:a7:28:27:fd:56:80:b2:fc:27:a4: 09:e1:87:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57QRClkE2TDbkGdtrMbZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2Y0MjhmZDk4MzRjZDVlYzliYjE2MGY4YjZkY2Y0NDZl ZjVkOTMwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjIwNTE1MTBlMTcxNjlmMWM3YWExNmI5ZDU3NDdmMDk0ZjdkOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbkSIkEt4BNDzI4cCGxxMHA11QOe 9TxNvOy8DxVe0WdXQ2jG3eA8UP6PW8cG1W25GlEvJr/RwlgwCmltKBM9rSB485NX 3Ks7BhR8P9TsTBPig0RJNZNcIrhn2mgobsicn7KmJKZifFRSmZ88trf7GqDZfLWK AJgOCL4ngBbSlaRvlF0Guj913tKqz18SM4nsj9iwRXuJRo+e4qI8hPzJiGBu08hI IcfOrmP+0R6I+APg9Fh1w9I3eOChs8ABVWTjfNtQrz1kfbKfVmzoSjHOQnQkF3FU G9eip1P0eJen+m6KSderxqAas+Tshu6G5oeEcM7y4zzV5u0dakvogu3OwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGsgUVEOFxafHHqha51XR/CU99j8MB8GA1UdIwQY MBaAFEw/Qo/Zg0zV7JuxYPi23PRG712TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85MmJlNmEtOTJjNS00NTM3LWFjMzIt MTM5NTM2OTUyODk2LzEvYXlCUlVRNFhGcDhjZXFGcm5WZEg4SlQzMlB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy85MmJlNmEtOTJjNS00NTM3LWFjMzItMTM5NTM2OTUyODk2 LzEvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRySMA0G CSqGSIb3DQEBCwUAA4IBAQAtiK/moiVWUL/sR05RGy0ToHRY8A8QuJDmHeM+ovC1 foYsCf55YS7z2qQqycAqrCNZW7KP3+MWRdCdAlrK4GPqKw+P25J43lJIA/meMWlZ r6WIi9uU/oEJuhxoxIxExBWZn1nnSK6OZ8hEnEwCmb/6z6uaNIbAbQuxNhmV2RJl TEl+7tpHDHYeN7bnmIbSd4aPMPdewzvXAa+ieD2VHMMrl+KrFrPvGs2BdCQxUa21 yR5AQvE01/xyR0CGQ0lw/U0AR9XONKhki1AFW65nKgGWEvakmTl1GZWW7UmrQI41 W6SDFep9nZbqWQN+vPEq/hsotqcoJ/1WgLL8J6QJ4YfZ -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:05 2026 by rpki-client