This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/wC3BpEB8qdaKpa6CpGZXp4T9slk.roa File: wC3BpEB8qdaKpa6CpGZXp4T9slk.roa (raw, json) Hash identifier: IXG8fhcHEZ3Xyts0Msy3p2RYoLeCdjHeJU1oF2Pw3VU= Subject key identifier: C0:2D:C1:A4:40:7C:A9:D6:8A:A5:AE:82:A4:66:57:A7:84:FD:B2:59 Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b Certificate serial: 019B7A5B51C9796F672D12E250EAF144699D Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/wC3BpEB8qdaKpa6CpGZXp4T9slk.roa Signing time: Thu 01 Jan 2026 16:19:23 +0000 ROA not before: Thu 01 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205020 IP address blocks: 193.186.196.0/22 maxlen: 22 193.186.196.0/23 maxlen: 23 193.186.196.0/24 maxlen: 24 193.186.197.0/24 maxlen: 24 193.186.198.0/23 maxlen: 23 193.186.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:51:c9:79:6f:67:2d:12:e2:50:ea:f1:44:69:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c02dc1a4407ca9d68aa5ae82a46657a784fdb259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:4e:f2:ba:e7:c3:e0:22:eb:b1:89:1b:be: e2:cd:f2:87:ac:51:6d:0c:1e:a5:c7:93:f6:2f:97: b5:b5:d0:f8:ac:86:01:17:67:49:46:6a:fa:37:47: a7:f8:20:9c:de:4c:b6:a3:f2:c1:80:09:69:f7:86: 3b:33:1d:d2:0d:50:2b:74:fd:1d:d7:90:a9:b0:0f: 7f:14:ad:63:23:0d:4d:fe:a1:66:15:95:c1:86:ec: e4:95:af:dd:b0:59:6b:2f:1e:bd:ec:27:d5:8d:b7: 13:71:a8:89:10:cf:2c:34:42:ce:48:c6:00:d6:da: 4f:17:c1:b3:a6:20:32:cf:f0:69:a2:23:55:d5:d4: 3e:75:0f:9d:7b:a0:36:1f:6a:7d:6d:f7:bb:62:c1: 4d:4b:fb:47:91:bb:71:74:f1:2f:6b:1b:e2:b5:12: 2d:e8:1d:d6:10:7f:11:04:6b:bd:5f:94:47:db:2e: 2e:f0:9a:79:ba:87:be:83:20:fe:71:9e:bd:e9:5e: 83:15:1c:14:58:fb:5e:09:e7:dc:cc:23:5c:4d:62: 6b:02:fe:ce:03:72:5b:31:93:52:ec:0a:68:c0:ff: f6:fe:44:1c:7f:f3:e6:8e:d8:3b:98:33:6a:7d:3c: 73:8a:ce:1e:a2:93:c8:56:7b:6b:cf:23:2f:b4:5c: 28:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2D:C1:A4:40:7C:A9:D6:8A:A5:AE:82:A4:66:57:A7:84:FD:B2:59 X509v3 Authority Key Identifier: keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/wC3BpEB8qdaKpa6CpGZXp4T9slk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.196.0/22 Signature Algorithm: sha256WithRSAEncryption 42:04:92:6a:e0:d0:ee:54:c4:9c:f1:02:38:e4:e3:7a:72:c5: cb:29:50:79:f1:d3:f5:45:44:25:8d:00:43:3a:e1:b3:61:36: 46:bd:46:b2:a5:d2:76:1e:43:2b:47:89:0a:82:f9:68:09:ae: 57:13:a5:45:9d:29:5f:10:3d:e4:20:de:89:d1:79:79:4c:42: 65:a8:e3:7c:95:2e:49:29:5d:ea:90:d2:8c:21:5f:74:bd:26: 1a:e1:8b:cb:64:99:d4:d2:56:c8:25:f8:0f:7e:09:a2:bf:38: 98:99:8f:f3:cc:f6:c6:10:a7:2c:a7:d8:80:3b:33:b7:14:e3: fd:a2:a8:2b:e6:55:90:36:26:1d:b5:5c:4e:f9:0e:c7:0e:87: 64:ad:62:ca:ca:0f:1d:aa:43:a2:c3:bf:d5:15:e6:60:43:b6: f6:0b:f1:bb:47:78:ce:23:5d:fb:4f:af:d1:af:f6:89:94:04: df:13:49:b0:64:32:fe:60:ab:28:79:ff:63:96:60:c8:cc:72: 07:04:cd:6b:0f:62:ac:31:d4:6e:3c:e7:3b:f2:5e:82:4a:05: b9:82:dd:17:f0:64:36:59:4b:87:bb:e6:c0:e0:4f:ca:1b:6f: 67:00:6d:62:48:c8:04:0e:6a:9f:b6:47:17:d8:ba:54:ec:21: 8b:a8:21:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1HJeW9nLRLiUOrxRGmdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4 MDY1MmIwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDJkYzFhNDQwN2NhOWQ2OGFhNWFlODJhNDY2NTdhNzg0ZmRiMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlpO8rrnw+Ai67GJG77izfKHrFFt DB6lx5P2L5e1tdD4rIYBF2dJRmr6N0en+CCc3ky2o/LBgAlp94Y7Mx3SDVArdP0d 15CpsA9/FK1jIw1N/qFmFZXBhuzkla/dsFlrLx697CfVjbcTcaiJEM8sNELOSMYA 1tpPF8GzpiAyz/BpoiNV1dQ+dQ+de6A2H2p9bfe7YsFNS/tHkbtxdPEvaxvitRIt 6B3WEH8RBGu9X5RH2y4u8Jp5uoe+gyD+cZ696V6DFRwUWPteCefczCNcTWJrAv7O A3JbMZNS7ApowP/2/kQcf/Pmjtg7mDNqfTxzis4eopPIVntrzyMvtFwoxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAtwaRAfKnWiqWugqRmV6eE/bJZMB8GA1UdIwQY MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt YTdhZGU0MzRkNDUxLzEvd0MzQnBFQjhxZGFLcGE2Q3BHWlhwNFQ5c2xrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbrEMA0G CSqGSIb3DQEBCwUAA4IBAQBCBJJq4NDuVMSc8QI45ON6csXLKVB58dP1RUQljQBD OuGzYTZGvUaypdJ2HkMrR4kKgvloCa5XE6VFnSlfED3kIN6J0Xl5TEJlqON8lS5J KV3qkNKMIV90vSYa4YvLZJnU0lbIJfgPfgmivziYmY/zzPbGEKcsp9iAOzO3FOP9 oqgr5lWQNiYdtVxO+Q7HDodkrWLKyg8dqkOiw7/VFeZgQ7b2C/G7R3jOI137T6/R r/aJlATfE0mwZDL+YKsoef9jlmDIzHIHBM1rD2KsMdRuPOc78l6CSgW5gt0X8GQ2 WUuHu+bA4E/KG29nAG1iSMgEDmqftkcX2LpU7CGLqCFQ -----END CERTIFICATE-----Generated at Fri Jan 2 18:05:43 2026 by rpki-client