This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/H_IwdjQek-TxkIwNQc7QdhJFGTY.roa File: H_IwdjQek-TxkIwNQc7QdhJFGTY.roa (raw, json) Hash identifier: jds0yEe3zRWI3cu0lRDYUFLph76il4rNQy+a1D0VpZk= Subject key identifier: 1F:F2:30:76:34:1E:93:E4:F1:90:8C:0D:41:CE:D0:76:12:45:19:36 Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63 Certificate serial: 019B7BA4FCA4E8218FA9DE66ED2DE869100D Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/H_IwdjQek-TxkIwNQc7QdhJFGTY.roa Signing time: Thu 01 Jan 2026 22:19:28 +0000 ROA not before: Thu 01 Jan 2026 22:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21093 IP address blocks: 193.57.106.0/24 maxlen: 24 193.57.107.0/24 maxlen: 24 193.57.109.0/24 maxlen: 24 193.57.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 10:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:fc:a4:e8:21:8f:a9:de:66:ed:2d:e8:69:10:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63 Validity Not Before: Jan 1 22:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ff23076341e93e4f1908c0d41ced07612451936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dd:56:65:46:9e:b8:b0:14:61:d5:0f:34:fa: 34:38:6c:7a:d9:00:3e:85:5e:80:da:10:93:21:8f: b8:7a:cc:ca:7a:a0:07:60:f2:7c:53:c4:d7:10:78: 8c:a2:92:98:b6:29:3a:1a:dc:fa:3a:ee:8b:57:3a: bf:6e:61:69:60:fe:ca:d9:0f:1b:a6:3e:c6:9e:a6: fa:5c:ad:23:c3:56:bf:f1:e0:52:82:82:53:9c:c1: 07:99:3f:fe:fb:14:f0:41:4c:b0:24:e4:ff:9a:f0: 7e:0b:f8:1b:56:f0:0c:89:c7:bd:82:34:4f:ab:86: f9:39:de:4b:fb:4d:48:c5:b2:14:5e:1d:ca:7c:8b: aa:f8:39:8b:55:06:89:c3:02:ed:33:70:aa:0e:49: ba:4f:9c:bc:c5:3f:08:f6:09:f9:60:4b:00:34:b0: 6b:c5:ff:7c:5b:5a:42:cf:eb:a1:db:3a:8f:0d:3a: a0:7b:58:fd:f7:3a:dd:bb:73:06:aa:d4:c2:ae:6f: 49:5a:d5:e1:1a:9e:14:11:66:d1:61:6d:ea:93:85: a4:3c:9d:d2:48:79:23:d9:92:7e:94:f2:3a:e4:d0: 9b:51:1a:e0:64:0a:9e:47:4f:bd:59:75:84:bd:36: 82:1a:0a:4a:7f:a2:49:d7:77:f2:69:2f:60:c6:4d: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F2:30:76:34:1E:93:E4:F1:90:8C:0D:41:CE:D0:76:12:45:19:36 X509v3 Authority Key Identifier: keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/H_IwdjQek-TxkIwNQc7QdhJFGTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.106.0/23 193.57.109.0-193.57.110.255 Signature Algorithm: sha256WithRSAEncryption a7:d2:23:1a:c1:ed:e6:74:b7:d7:11:0d:3d:c4:02:4e:86:d3: b7:c8:22:40:e2:33:e0:9c:f1:93:d8:1c:72:2d:ab:34:da:fb: 6f:6a:98:a1:ae:ed:53:79:1b:db:40:4d:03:a4:6e:12:82:5d: 63:12:55:6c:d0:47:66:29:0d:45:52:26:7e:01:a3:4e:a5:db: 4a:62:ae:50:f9:fd:0b:01:5e:18:7c:6e:07:3f:3d:37:ab:61: 43:2e:21:4e:63:4c:d7:48:5f:6b:d2:23:82:e7:74:11:7d:8f: 87:00:95:18:1f:2b:90:37:26:0f:ba:08:4c:08:f7:ed:0b:1f: 3a:be:2f:f2:9f:f4:da:9b:03:56:a1:ec:9b:75:3e:64:5f:ff: 46:70:a7:36:65:86:81:7c:2a:38:ac:0c:7e:d7:5b:12:ff:c9: 82:e5:10:f9:ed:6e:61:0a:73:2a:22:34:be:40:81:6a:32:3d: 8c:c6:2b:57:ed:c5:51:03:ca:d3:03:de:0e:ba:15:ee:b6:e7: 61:6e:5a:3e:9b:8e:42:68:d7:60:8e:07:27:41:eb:7c:33:47: 72:39:a3:db:ed:ee:9c:96:34:fb:1f:b8:86:26:ec:65:6b:60: dc:ce:37:29:2d:3b:3d:46:a3:7f:60:69:87:89:f1:dd:0f:7a: de:51:82:10 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7pPyk6CGPqd5m7S3oaRANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk NTBhNjMwHhcNMjYwMTAxMjIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmYyMzA3NjM0MWU5M2U0ZjE5MDhjMGQ0MWNlZDA3NjEyNDUxOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N1WZUaeuLAUYdUPNPo0OGx62QA+ hV6A2hCTIY+4eszKeqAHYPJ8U8TXEHiMopKYtik6Gtz6Ou6LVzq/bmFpYP7K2Q8b pj7Gnqb6XK0jw1a/8eBSgoJTnMEHmT/++xTwQUywJOT/mvB+C/gbVvAMice9gjRP q4b5Od5L+01IxbIUXh3KfIuq+DmLVQaJwwLtM3CqDkm6T5y8xT8I9gn5YEsANLBr xf98W1pCz+uh2zqPDTqge1j99zrdu3MGqtTCrm9JWtXhGp4UEWbRYW3qk4WkPJ3S SHkj2ZJ+lPI65NCbURrgZAqeR0+9WXWEvTaCGgpKf6JJ13fyaS9gxk1IRwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFB/yMHY0HpPk8ZCMDUHO0HYSRRk2MB8GA1UdIwQY MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt ZWQ1ZDZjZThkN2U4LzEvSF9Jd2RqUWVrLVR4a0l3TlFjN1FkaEpGR1RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4 LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBwTlqMAwD BADBOW0DBADBOW4wDQYJKoZIhvcNAQELBQADggEBAKfSIxrB7eZ0t9cRDT3EAk6G 07fIIkDiM+Cc8ZPYHHItqzTa+29qmKGu7VN5G9tATQOkbhKCXWMSVWzQR2YpDUVS Jn4Bo06l20pirlD5/QsBXhh8bgc/PTerYUMuIU5jTNdIX2vSI4LndBF9j4cAlRgf K5A3Jg+6CEwI9+0LHzq+L/Kf9NqbA1ah7Jt1PmRf/0ZwpzZlhoF8KjisDH7XWxL/ yYLlEPntbmEKcyoiNL5AgWoyPYzGK1ftxVEDytMD3g66Fe6252FuWj6bjkJo12CO BydB63wzR3I5o9vt7pyWNPsfuIYm7GVrYNzONyktOz1Go39gaYeJ8d0Pet5RghA= -----END CERTIFICATE-----Generated at Sat Jan 3 19:00:21 2026 by rpki-client