This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa File: H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa (raw, json) Hash identifier: pqm+tBEvB6VJYlLNeVfb+SIF3kwpRFZv8Qqe2+lb3Y4= Subject key identifier: 1F:EA:1A:A1:2C:49:69:E2:3C:10:B1:8A:A0:C1:E5:06:AB:53:98:12 Certificate issuer: /CN=92c0cf04a14f6ff78b18f0c0075788220af7391c Certificate serial: 019BFA50FD46F068657C8B571C7B2A5EB24B Authority key identifier: 92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa Signing time: Mon 26 Jan 2026 12:39:30 +0000 ROA not before: Mon 26 Jan 2026 12:39:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 193.29.112.0/24 maxlen: 24 193.29.115.0/24 maxlen: 24 193.29.116.0/24 maxlen: 24 193.29.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:50:fd:46:f0:68:65:7c:8b:57:1c:7b:2a:5e:b2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92c0cf04a14f6ff78b18f0c0075788220af7391c Validity Not Before: Jan 26 12:39:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fea1aa12c4969e23c10b18aa0c1e506ab539812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:42:9f:0c:3e:f4:b5:4a:9e:f4:e6:33:de: 0a:fa:e5:19:3a:39:ae:6d:b4:5f:8c:87:16:12:ff: a2:ec:24:cc:2c:fc:07:d4:4f:6b:f3:9e:62:27:33: 7d:40:e7:38:aa:ab:80:7d:7c:52:08:b1:a3:bb:ce: 7a:88:b4:48:7e:5a:31:33:61:0b:c9:c0:15:af:19: 15:86:73:55:ec:f7:10:e9:39:f2:c3:57:f6:a7:5d: 80:45:fa:10:36:41:df:60:2a:47:f7:fb:ca:87:4f: ab:17:ce:18:98:b3:53:fb:e3:01:a1:8d:3b:51:6c: 5c:86:69:af:02:b7:3c:3b:02:9d:f1:f1:14:b7:e1: 63:7d:71:97:6e:7d:b1:d9:91:f7:f0:d3:23:e8:64: da:71:40:a5:7f:73:14:8b:ba:f9:29:5c:89:b9:91: 0a:ae:e7:91:8e:9d:52:70:07:16:bd:bd:d7:19:df: 9f:5f:3f:12:5a:6a:f0:50:89:72:23:a6:5b:d5:9b: 1f:64:2c:7e:23:0c:1b:69:bb:50:ef:28:e1:32:9c: 54:8f:9d:9f:34:75:7e:0a:5f:33:2f:83:29:fa:11: 5e:b3:c2:4f:00:e6:08:f7:9e:f1:41:bc:f0:10:2f: f4:ba:26:82:4f:fc:cc:a6:65:98:13:30:2e:88:a0: fc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EA:1A:A1:2C:49:69:E2:3C:10:B1:8A:A0:C1:E5:06:AB:53:98:12 X509v3 Authority Key Identifier: keyid:92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.112.0/24 193.29.115.0-193.29.116.255 193.29.126.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:9b:e6:ed:e3:5d:1c:7b:05:a2:d1:f0:24:5e:90:a9:11:27: 69:c7:d0:14:fd:06:19:d9:eb:de:08:0f:a0:e5:3d:04:1c:51: fc:3a:bb:70:5d:16:92:e7:59:b4:82:e2:d3:54:58:93:99:94: 3a:f8:bb:2c:e4:ef:c2:55:48:df:bb:7a:58:f4:8e:1e:19:f5: 43:ac:83:7a:83:71:0b:49:4c:b3:0c:15:bc:f3:a5:95:31:9b: a3:19:ea:28:be:56:98:9a:35:d5:2e:b0:79:a1:b1:17:b6:f5: b5:76:fd:fe:ff:24:dd:1d:df:1f:59:e6:6c:cb:8e:c9:44:6f: a0:b4:55:0f:3a:85:da:66:60:d0:47:77:81:35:76:db:d8:78: 20:fa:a7:82:a8:65:ee:a1:ed:99:d1:2b:fc:72:e6:f6:a7:20: ca:5c:60:14:7b:13:1c:21:c7:a1:32:f5:fc:85:3b:ee:91:52: 60:ec:50:7a:66:9c:fc:1d:b4:28:92:4d:ab:e8:55:34:b4:0d: a6:90:4f:2a:6e:20:18:95:1d:6b:5b:06:d5:7e:c0:f5:30:18: 56:24:32:5d:95:b6:f1:68:17:6d:aa:b3:88:06:18:95:89:89: a4:65:42:17:7a:dc:d0:66:91:f3:11:61:f9:62:ec:32:35:f0: d3:47:df:84 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZv6UP1G8GhlfItXHHsqXrJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYzBjZjA0YTE0ZjZmZjc4YjE4ZjBjMDA3NTc4ODIyMGFm NzM5MWMwHhcNMjYwMTI2MTIzOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmVhMWFhMTJjNDk2OWUyM2MxMGIxOGFhMGMxZTUwNmFiNTM5ODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxFCnww+9LVKnvTmM94K+uUZOjmu bbRfjIcWEv+i7CTMLPwH1E9r855iJzN9QOc4qquAfXxSCLGju856iLRIfloxM2EL ycAVrxkVhnNV7PcQ6Tnyw1f2p12ARfoQNkHfYCpH9/vKh0+rF84YmLNT++MBoY07 UWxchmmvArc8OwKd8fEUt+FjfXGXbn2x2ZH38NMj6GTacUClf3MUi7r5KVyJuZEK rueRjp1ScAcWvb3XGd+fXz8SWmrwUIlyI6Zb1ZsfZCx+IwwbabtQ7yjhMpxUj52f NHV+Cl8zL4Mp+hFes8JPAOYI957xQbzwEC/0uiaCT/zMpmWYEzAuiKD89wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFB/qGqEsSWniPBCxiqDB5QarU5gSMB8GA1UdIwQY MBaAFJLAzwShT2/3ixjwwAdXiCIK9zkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lZjM4NGQtY2U0ZC00OTJlLTk1NjUt NGNmNWRlZGE1YzRjLzEvSC1vYW9TeEphZUk4RUxHS29NSGxCcXRUbUJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9lZjM4NGQtY2U0ZC00OTJlLTk1NjUtNGNmNWRlZGE1YzRj LzEva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAwR1wMAwD BADBHXMDBADBHXQDBADBHX4wDQYJKoZIhvcNAQELBQADggEBAByb5u3jXRx7BaLR 8CRekKkRJ2nH0BT9BhnZ694ID6DlPQQcUfw6u3BdFpLnWbSC4tNUWJOZlDr4uyzk 78JVSN+7elj0jh4Z9UOsg3qDcQtJTLMMFbzzpZUxm6MZ6ii+VpiaNdUusHmhsRe2 9bV2/f7/JN0d3x9Z5mzLjslEb6C0VQ86hdpmYNBHd4E1dtvYeCD6p4KoZe6h7ZnR K/xy5vanIMpcYBR7Exwhx6Ey9fyFO+6RUmDsUHpmnPwdtCiSTavoVTS0DaaQTypu IBiVHWtbBtV+wPUwGFYkMl2VtvFoF22qs4gGGJWJiaRlQhd63NBmkfMRYfli7DI1 8NNH34Q= -----END CERTIFICATE-----Generated at Mon Feb 9 23:56:22 2026 by rpki-client