This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/IC4AYaLSBqgg0JMrHuyKozSG5GU.roa File: IC4AYaLSBqgg0JMrHuyKozSG5GU.roa (raw, json) Hash identifier: XdgmSpGuzuLI59vVzt3/5daK9WKM4jAz77ApMoSrJTc= Subject key identifier: 20:2E:00:61:A2:D2:06:A8:20:D0:93:2B:1E:EC:8A:A3:34:86:E4:65 Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c Certificate serial: 019B7CEE21199FF11F085790EF153194A79E Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/IC4AYaLSBqgg0JMrHuyKozSG5GU.roa Signing time: Fri 02 Jan 2026 04:18:59 +0000 ROA not before: Fri 02 Jan 2026 04:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202503 IP address blocks: 193.111.52.0/22 maxlen: 22 193.111.52.0/23 maxlen: 23 193.111.53.0/25 maxlen: 25 193.111.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:21:19:9f:f1:1f:08:57:90:ef:15:31:94:a7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=202e0061a2d206a820d0932b1eec8aa33486e465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:db:d6:f2:17:ef:a4:5b:63:36:19:c8:07:01: 7f:ca:5a:c4:f7:5a:3b:a3:26:07:7a:83:38:7b:46: 52:c3:65:74:82:e8:12:e6:9b:b7:59:75:65:3c:a0: 24:dd:df:8c:c6:08:6f:9e:d7:bf:9c:80:9e:62:69: 46:66:09:98:01:56:02:c2:8e:99:59:ce:ab:29:d8: 5a:c3:4c:18:ba:90:b5:06:c6:4a:c2:77:28:95:bb: 56:ff:12:8a:c5:d0:70:f9:c0:39:1b:b8:0c:0a:fa: 34:34:ed:f0:d7:65:29:7d:ea:f6:d2:48:33:e6:59: 6b:6c:8a:51:03:9f:a6:d7:db:c8:08:41:31:99:73: b0:c7:75:4c:80:57:57:2f:12:be:58:c5:e8:66:d0: 14:e4:ab:c0:73:13:0d:f9:e8:d3:8e:74:7d:c6:6c: e8:16:8b:1a:a5:98:bd:45:05:10:34:74:e8:c4:c8: 1f:ab:16:49:d8:94:51:ec:5b:48:7f:83:9b:7e:16: bb:a8:e3:26:8b:43:7a:18:56:f3:e4:41:38:62:64: e2:67:15:e8:9d:21:23:71:7a:75:12:5e:46:64:c0: 73:da:01:fa:e0:b1:6c:f8:97:33:66:01:a4:fa:43: f4:b8:ea:08:fd:d4:44:53:57:8e:d2:96:9d:96:25: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2E:00:61:A2:D2:06:A8:20:D0:93:2B:1E:EC:8A:A3:34:86:E4:65 X509v3 Authority Key Identifier: keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/IC4AYaLSBqgg0JMrHuyKozSG5GU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.52.0/22 Signature Algorithm: sha256WithRSAEncryption 64:2d:3e:5d:30:23:99:25:a1:df:75:88:72:8b:21:e7:8c:18: c1:24:76:b4:dd:48:e1:11:06:f6:39:5f:0e:07:6d:8a:d6:69: 74:eb:65:8b:2c:c7:7a:7e:30:3b:68:6b:4a:7e:61:ce:93:54: 4e:01:14:f6:1e:22:9a:e2:1c:01:c7:b4:89:2b:63:c0:54:7c: 38:90:ab:82:f1:00:7b:7a:24:d5:cd:87:65:c8:09:5d:6b:a4: 60:a5:62:2d:a0:02:2e:ce:e3:df:29:59:34:d2:3a:62:f4:29: 67:83:72:4f:d9:82:94:99:9e:69:2c:f0:f5:18:8d:93:c0:39: e8:4f:a1:4f:29:91:05:7c:8a:a6:b0:bf:43:7f:c4:47:f3:47: aa:e7:da:a5:d7:04:64:c0:d7:32:f6:60:0b:b4:0f:8e:11:c3: b3:4f:75:7d:9a:c8:7e:2f:42:44:b3:fd:c7:0f:f8:7b:92:bc: 68:7f:95:38:f0:d6:5d:d3:14:e9:a5:c0:d6:c5:02:78:79:4b: 85:aa:6c:fe:dc:64:3a:9b:dc:e4:e1:71:b4:05:a3:ab:ad:9e: 33:e0:52:8e:bd:6a:cf:a8:2b:23:75:33:11:49:26:42:d6:72: 22:b2:72:68:91:84:28:d5:57:b8:80:d9:5f:0d:25:04:c4:f3: 86:ce:56:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87iEZn/EfCFeQ7xUxlKeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZTI5NmI2MGMwMzhjZGM2YmZlZjRjMDYwYjE0MDYxNjRl Yzg2OGMwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDJlMDA2MWEyZDIwNmE4MjBkMDkzMmIxZWVjOGFhMzM0ODZlNDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntvW8hfvpFtjNhnIBwF/ylrE91o7 oyYHeoM4e0ZSw2V0gugS5pu3WXVlPKAk3d+Mxghvnte/nICeYmlGZgmYAVYCwo6Z Wc6rKdhaw0wYupC1BsZKwncolbtW/xKKxdBw+cA5G7gMCvo0NO3w12Upfer20kgz 5llrbIpRA5+m19vICEExmXOwx3VMgFdXLxK+WMXoZtAU5KvAcxMN+ejTjnR9xmzo FosapZi9RQUQNHToxMgfqxZJ2JRR7FtIf4Obfha7qOMmi0N6GFbz5EE4YmTiZxXo nSEjcXp1El5GZMBz2gH64LFs+JczZgGk+kP0uOoI/dREU1eO0padliWTnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAuAGGi0gaoINCTKx7siqM0huRlMB8GA1UdIwQY MBaAFA7ilrYMA4zca/70wGCxQGFk7IaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wY2QwZTctMmRhOS00MDJiLThhNDkt ZjVjODA1ZjAyNTViLzEvSUM0QVlhTFNCcWdnMEpNckh1eUtvelNHNUdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wY2QwZTctMmRhOS00MDJiLThhNDktZjVjODA1ZjAyNTVi LzEvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwW80MA0G CSqGSIb3DQEBCwUAA4IBAQBkLT5dMCOZJaHfdYhyiyHnjBjBJHa03UjhEQb2OV8O B22K1ml062WLLMd6fjA7aGtKfmHOk1ROART2HiKa4hwBx7SJK2PAVHw4kKuC8QB7 eiTVzYdlyAlda6RgpWItoAIuzuPfKVk00jpi9Clng3JP2YKUmZ5pLPD1GI2TwDno T6FPKZEFfIqmsL9Df8RH80eq59ql1wRkwNcy9mALtA+OEcOzT3V9msh+L0JEs/3H D/h7krxof5U48NZd0xTppcDWxQJ4eUuFqmz+3GQ6m9zk4XG0BaOrrZ4z4FKOvWrP qCsjdTMRSSZC1nIisnJokYQo1Ve4gNlfDSUExPOGzlbE -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:42 2026 by rpki-client