This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-em5eWGxgjKv244dQDoVrFE9UeI.roa File: 1-em5eWGxgjKv244dQDoVrFE9UeI.roa (raw, json) Hash identifier: VJ1+wkq8bxhyJewrp+Iz73fHe2iL9FSyf4MFvGSounk= Subject key identifier: F9:E9:B9:79:61:B1:82:32:AF:DB:8E:1D:40:3A:15:AC:51:3D:51:E2 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C139F8BDA47B6B7E3F3322CDBDC6162 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-em5eWGxgjKv244dQDoVrFE9UeI.roa Signing time: Fri 02 Jan 2026 00:20:19 +0000 ROA not before: Fri 02 Jan 2026 00:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215334 IP address blocks: 193.26.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:9f:8b:da:47:b6:b7:e3:f3:32:2c:db:dc:61:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9e9b97961b18232afdb8e1d403a15ac513d51e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6b:f5:2c:3a:99:9e:40:14:3e:db:85:25:cd: f5:f5:b5:43:5f:cd:86:fb:ab:73:65:8f:74:6b:95: 7a:83:7f:08:e7:cb:3e:1b:71:52:c4:37:a5:99:57: 45:e2:c0:c8:87:4e:45:5b:b2:83:3e:3d:12:33:d7: 20:39:74:64:ce:84:da:ec:56:18:45:ae:ef:06:9b: 8a:57:67:21:da:fe:1a:10:0c:1b:7d:a5:94:d5:bb: a9:0f:11:ad:22:27:7d:fb:45:b5:47:d8:43:46:10: 54:48:59:8c:17:ce:aa:7b:f4:78:e6:0e:9e:a9:6f: 07:d0:64:fc:0f:b3:fa:d2:3d:d7:a5:c3:5f:9a:71: 57:6d:60:af:69:9b:b8:e3:96:14:0d:cd:c9:a3:06: 9a:46:eb:98:45:5e:41:ad:9e:2a:2a:2c:66:7d:f3: d2:84:a4:c3:d8:4d:bd:71:e8:a9:40:b3:8e:21:23: b2:be:da:b5:7b:c1:8e:85:22:f6:bc:68:5f:93:de: 2b:c3:9b:85:56:ab:1d:ae:38:dc:e5:0a:d0:bd:71: e3:21:84:e3:25:06:ae:d5:75:36:e8:70:d7:65:5e: 1c:4c:94:25:86:25:f8:d6:3c:40:c4:a9:9d:f8:fc: 9f:5d:65:a6:73:63:3d:59:ae:fb:30:ba:ea:94:94: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E9:B9:79:61:B1:82:32:AF:DB:8E:1D:40:3A:15:AC:51:3D:51:E2 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-em5eWGxgjKv244dQDoVrFE9UeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.152.0/22 Signature Algorithm: sha256WithRSAEncryption 97:06:30:5d:f0:15:da:7c:a1:e0:cf:fa:c3:2f:26:3f:bf:e9: 30:61:98:40:1f:8a:27:28:f0:88:52:8a:9e:18:6f:63:15:b1: 43:6e:b6:ec:d3:e4:f4:6f:de:8a:15:a1:85:89:d9:c7:68:dd: 09:f5:f7:05:7d:a0:1f:77:30:f6:63:e4:99:da:0e:49:38:bf: c2:32:3c:34:6f:26:a0:2c:91:67:09:05:59:7b:8b:2b:29:c6: c3:59:ac:67:5e:ad:17:8b:2a:eb:8a:8f:f0:40:e6:68:45:88: 64:d2:c0:5d:12:6a:59:93:88:c2:14:59:b3:b4:c7:76:23:6c: 76:2e:6c:e1:e9:28:90:06:6f:31:6c:8f:02:a4:bb:33:7f:82: d8:2b:fd:5b:eb:49:48:19:4b:4b:67:a3:e0:ea:17:ff:69:e0: 0e:7d:63:60:eb:47:dd:35:81:5c:16:a3:00:27:14:f3:37:f2: 1b:0d:d9:bf:20:92:23:54:76:d8:71:70:3f:68:d2:95:6e:67: 21:d2:96:5e:3a:36:84:23:23:38:03:38:1b:6c:f6:ef:7b:94: 64:d1:26:8d:56:12:a1:16:29:17:64:e6:f7:9e:d9:83:5d:06: 9e:e7:6a:47:a4:00:f7:9b:74:99:62:95:f3:76:6c:02:83:78: e0:6d:2f:85 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8E5+L2ke2t+PzMizb3GFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWU5Yjk3OTYxYjE4MjMyYWZkYjhlMWQ0MDNhMTVhYzUxM2Q1MWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gv1LDqZnkAUPtuFJc319bVDX82G +6tzZY90a5V6g38I58s+G3FSxDelmVdF4sDIh05FW7KDPj0SM9cgOXRkzoTa7FYY Ra7vBpuKV2ch2v4aEAwbfaWU1bupDxGtIid9+0W1R9hDRhBUSFmMF86qe/R45g6e qW8H0GT8D7P60j3XpcNfmnFXbWCvaZu445YUDc3JowaaRuuYRV5BrZ4qKixmffPS hKTD2E29ceipQLOOISOyvtq1e8GOhSL2vGhfk94rw5uFVqsdrjjc5QrQvXHjIYTj JQau1XU26HDXZV4cTJQlhiX41jxAxKmd+PyfXWWmc2M9Wa77MLrqlJTiywIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPnpuXlhsYIyr9uOHUA6FaxRPVHiMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvMS1lbTVlV0d4Z2pLdjI0NGRRRG9WckZFOVVlSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFi Yy8xL1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsEamDAN BgkqhkiG9w0BAQsFAAOCAQEAlwYwXfAV2nyh4M/6wy8mP7/pMGGYQB+KJyjwiFKK nhhvYxWxQ2627NPk9G/eihWhhYnZx2jdCfX3BX2gH3cw9mPkmdoOSTi/wjI8NG8m oCyRZwkFWXuLKynGw1msZ16tF4sq64qP8EDmaEWIZNLAXRJqWZOIwhRZs7THdiNs di5s4ekokAZvMWyPAqS7M3+C2Cv9W+tJSBlLS2ej4OoX/2ngDn1jYOtH3TWBXBaj ACcU8zfyGw3ZvyCSI1R22HFwP2jSlW5nIdKWXjo2hCMjOAM4G2z273uUZNEmjVYS oRYpF2Tm957Zg10GnudqR6QA95t0mWKV83ZsAoN44G0vhQ== -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:15 2026 by rpki-client