This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/12J5auJGnMEfTUqZqs0Y3krx_EA.roa File: 12J5auJGnMEfTUqZqs0Y3krx_EA.roa (raw, json) Hash identifier: gz3Tmv3Kd/VmlXrt56re7837jRA+HGbjJtx1pqOJ4L8= Subject key identifier: D7:62:79:6A:E2:46:9C:C1:1F:4D:4A:99:AA:CD:18:DE:4A:F1:FC:40 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15C175CA5B61EC0FB9A3F3EA239A59 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/12J5auJGnMEfTUqZqs0Y3krx_EA.roa Signing time: Fri 02 Jan 2026 14:21:30 +0000 ROA not before: Fri 02 Jan 2026 14:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46562 IP address blocks: 193.37.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 10:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c1:75:ca:5b:61:ec:0f:b9:a3:f3:ea:23:9a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d762796ae2469cc11f4d4a99aacd18de4af1fc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:4d:fb:86:aa:42:dc:b8:29:d4:63:26:48: ba:1e:a2:78:ef:e1:8b:41:be:03:8a:a1:e8:ae:ed: 58:62:c3:a7:a0:8c:03:e4:4f:94:cd:a2:21:f9:d2: 11:2d:0f:50:f4:f3:6f:b5:a6:44:d1:7b:74:75:97: 1c:f0:38:72:9a:77:af:b6:f2:0d:ae:3c:00:83:0f: 7a:3c:06:c2:e7:4c:bb:97:2d:7a:dd:cd:bc:02:3a: 96:0f:3d:0b:68:17:52:f5:12:39:d5:2b:8c:83:1f: 3e:fa:e1:d6:df:b6:bf:4d:ea:11:b6:59:f1:2f:9d: 11:a4:ce:24:19:8e:42:bd:65:e7:8d:60:a1:39:32: 81:d4:39:02:a9:00:58:90:31:79:4b:3e:3a:ee:bc: 8a:9d:44:35:de:88:69:b2:bd:e8:26:52:04:a7:be: a3:46:8d:35:c3:62:70:4f:d9:0e:83:3e:1a:e9:40: 62:9d:39:f9:56:55:94:da:8e:ed:1f:ee:32:59:eb: 1a:d1:57:8f:c0:af:5d:28:66:e5:de:c0:0f:22:b2: aa:04:77:37:02:1a:f5:fb:f6:fb:80:aa:0a:14:5d: 13:f7:44:d4:64:60:31:5e:51:1e:ea:51:ea:39:ed: 08:a4:09:fe:c8:2c:f7:c2:0a:3a:d7:0e:f6:1b:c3: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:62:79:6A:E2:46:9C:C1:1F:4D:4A:99:AA:CD:18:DE:4A:F1:FC:40 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/12J5auJGnMEfTUqZqs0Y3krx_EA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.199.0/24 Signature Algorithm: sha256WithRSAEncryption 59:db:b4:0d:3f:78:a7:4f:27:a4:f4:57:9c:e9:1b:99:d8:2f: 05:cb:63:92:da:99:d2:b0:74:7a:c4:04:10:fc:5c:5d:07:d1: 91:bf:2d:30:5b:6e:2a:84:e0:d9:e8:eb:52:09:db:fc:c3:64: ae:c9:d4:c0:9e:e2:87:1f:a6:ab:cb:b7:7c:7c:e9:b6:e4:87: 5c:05:97:83:72:ab:16:e2:0c:91:8e:9f:53:d9:04:f0:05:71: f0:d5:46:a0:82:28:c6:04:d3:62:7c:72:b7:a0:e5:3a:c1:eb: c7:18:f9:b0:14:2e:b0:e8:1e:43:bf:54:73:b9:70:64:bc:1d: 9b:54:31:f5:9d:81:2c:4a:4a:e5:b6:41:9c:70:bb:02:46:54: 0e:36:89:20:4d:92:87:37:27:b9:87:a3:e2:43:2a:e7:81:bc: 97:d8:da:c8:ca:2f:b5:98:66:3a:ac:ac:6f:12:74:c0:87:31: 7f:bd:9b:8e:df:a2:5a:cf:32:fa:de:a8:32:86:8d:f4:32:34: b1:43:a6:ea:7c:2a:26:66:a4:13:ff:c2:77:4f:aa:00:a1:12: be:8e:0f:3b:9a:4a:5d:0f:5d:4c:59:ac:d8:83:4a:81:f7:bc: bb:a9:2c:02:84:15:81:5f:6f:7f:e6:43:2c:f6:34:49:48:8b: 48:93:e2:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcF1ylth7A+5o/PqI5pZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzYyNzk2YWUyNDY5Y2MxMWY0ZDRhOTlhYWNkMThkZTRhZjFmYzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7pN+4aqQty4KdRjJki6HqJ47+GL Qb4DiqHoru1YYsOnoIwD5E+UzaIh+dIRLQ9Q9PNvtaZE0Xt0dZcc8DhymnevtvIN rjwAgw96PAbC50y7ly163c28AjqWDz0LaBdS9RI51SuMgx8++uHW37a/TeoRtlnx L50RpM4kGY5CvWXnjWChOTKB1DkCqQBYkDF5Sz467ryKnUQ13ohpsr3oJlIEp76j Ro01w2JwT9kOgz4a6UBinTn5VlWU2o7tH+4yWesa0VePwK9dKGbl3sAPIrKqBHc3 Ahr1+/b7gKoKFF0T90TUZGAxXlEe6lHqOe0IpAn+yCz3wgo61w72G8OWcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdieWriRpzBH01KmarNGN5K8fxAMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvMTJKNWF1SkduTUVmVFVxWnFzMFkza3J4X0VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSXHMA0G CSqGSIb3DQEBCwUAA4IBAQBZ27QNP3inTyek9Fec6RuZ2C8Fy2OS2pnSsHR6xAQQ /FxdB9GRvy0wW24qhODZ6OtSCdv8w2SuydTAnuKHH6ary7d8fOm25IdcBZeDcqsW 4gyRjp9T2QTwBXHw1UaggijGBNNifHK3oOU6wevHGPmwFC6w6B5Dv1RzuXBkvB2b VDH1nYEsSkrltkGccLsCRlQONokgTZKHNye5h6PiQyrngbyX2NrIyi+1mGY6rKxv EnTAhzF/vZuO36JazzL63qgyho30MjSxQ6bqfComZqQT/8J3T6oAoRK+jg87mkpd D11MWazYg0qB97y7qSwChBWBX29/5kMs9jRJSItIk+K1 -----END CERTIFICATE-----Generated at Thu Jan 22 19:48:28 2026 by rpki-client