This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/CRNGBIgOAqgVM21KZhIoo9_853k.roa File: CRNGBIgOAqgVM21KZhIoo9_853k.roa (raw, json) Hash identifier: /efEvDvn7uCH8uEj3lOvf7OI0RjTqwidLcJ4RWs4Nvk= Subject key identifier: 09:13:46:04:88:0E:02:A8:15:33:6D:4A:66:12:28:A3:DF:FC:E7:79 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C6FF34106DA7AB9EC72DC62D5CFF73 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/CRNGBIgOAqgVM21KZhIoo9_853k.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210421 IP address blocks: 193.26.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ff:34:10:6d:a7:ab:9e:c7:2d:c6:2d:5c:ff:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09134604880e02a815336d4a661228a3dffce779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b3:97:a8:e4:07:8f:6d:04:56:f1:84:30:f1: cb:d3:9c:7d:a1:32:3f:5f:83:1b:e2:a9:fb:5a:20: 64:60:38:0b:4e:cb:4b:1e:41:58:bd:1b:fb:70:20: b4:42:a1:cc:04:40:d9:ab:8e:1d:1a:7c:cc:e4:7e: f8:87:fb:11:c0:cf:cc:79:66:81:ff:00:be:66:44: 84:2c:46:1e:90:f8:13:c8:fb:c7:54:ac:db:3f:53: 1f:62:4e:93:f3:73:9d:4c:b1:fd:61:02:0b:bc:9d: 58:8f:4c:34:c4:42:92:e4:d9:82:2b:b0:a2:4e:26: 9b:f5:3b:69:59:d2:1e:f6:04:26:0e:af:c0:1e:41: 0f:7c:18:e9:c0:ca:1b:50:1e:fb:2a:56:cc:3e:cb: 3b:0f:d7:73:cb:b4:8a:86:81:45:29:46:5d:98:21: 7a:35:3a:81:c6:0d:64:b6:8d:38:7f:e0:7e:5d:0d: d1:14:7e:c9:40:4f:33:4f:44:a7:66:a0:c0:04:99: 4a:94:f0:b9:15:fe:76:40:f3:50:04:49:ae:00:99: 3e:b5:32:05:70:e2:06:e4:db:d1:10:89:1b:da:6c: 06:55:bd:20:e6:5d:4f:db:3b:12:88:90:cb:1f:83: f2:d4:fc:fc:21:f7:93:18:0d:04:78:0b:18:5d:34: 33:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:13:46:04:88:0E:02:A8:15:33:6D:4A:66:12:28:A3:DF:FC:E7:79 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/CRNGBIgOAqgVM21KZhIoo9_853k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.3.0/24 Signature Algorithm: sha256WithRSAEncryption be:88:fc:87:9b:7d:67:2b:cf:f1:14:4d:c5:25:a6:e0:f3:28: 2f:19:7e:ac:be:ce:71:3f:b3:d5:15:f9:e2:13:ef:84:85:43: 88:3d:35:fd:56:42:12:5c:71:4f:95:a9:61:61:0a:ba:c8:3a: c0:d5:6a:65:e1:0a:46:d5:c9:b3:d3:27:d5:d5:ce:36:77:b4: 32:19:29:e1:3d:7f:8c:23:a5:a1:ca:16:c6:98:1a:99:cf:46: 6a:fc:29:f3:89:1f:81:46:01:f3:ad:43:22:76:c0:3f:e6:4c: 84:93:2c:cf:f9:28:04:18:5e:6f:6a:47:53:20:27:03:d4:07: 02:3e:eb:ab:b8:55:27:b4:70:23:7b:e1:70:59:39:3a:0a:2f: a7:64:63:b9:2e:ed:ed:07:69:8f:aa:6a:b6:76:e0:eb:66:f7: 33:b0:c5:5a:74:7f:04:e9:f6:62:77:80:c9:e2:01:37:fd:d5: b3:bd:30:14:94:87:61:5a:ca:1e:b5:8b:9c:33:3b:bf:b2:18: 0b:fd:e7:48:bf:78:63:46:4d:2b:ce:b3:e6:cf:6d:c2:71:87: fe:43:35:1e:6d:c0:c8:1b:e5:8b:22:98:81:9a:7a:6c:b7:15: fe:4e:e0:0e:12:11:15:18:37:14:7f:b3:ac:14:fd:f6:72:8e: cc:db:1a:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xv80EG2nq57HLcYtXP9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTEzNDYwNDg4MGUwMmE4MTUzMzZkNGE2NjEyMjhhM2RmZmNlNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLOXqOQHj20EVvGEMPHL05x9oTI/ X4Mb4qn7WiBkYDgLTstLHkFYvRv7cCC0QqHMBEDZq44dGnzM5H74h/sRwM/MeWaB /wC+ZkSELEYekPgTyPvHVKzbP1MfYk6T83OdTLH9YQILvJ1Yj0w0xEKS5NmCK7Ci Tiab9TtpWdIe9gQmDq/AHkEPfBjpwMobUB77KlbMPss7D9dzy7SKhoFFKUZdmCF6 NTqBxg1kto04f+B+XQ3RFH7JQE8zT0SnZqDABJlKlPC5Ff52QPNQBEmuAJk+tTIF cOIG5NvREIkb2mwGVb0g5l1P2zsSiJDLH4Py1Pz8IfeTGA0EeAsYXTQzywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAkTRgSIDgKoFTNtSmYSKKPf/Od5MB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvQ1JOR0JJZ09BcWdWTTIxS1poSW9vOV84NTNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRoDMA0G CSqGSIb3DQEBCwUAA4IBAQC+iPyHm31nK8/xFE3FJabg8ygvGX6svs5xP7PVFfni E++EhUOIPTX9VkISXHFPlalhYQq6yDrA1Wpl4QpG1cmz0yfV1c42d7QyGSnhPX+M I6WhyhbGmBqZz0Zq/CnziR+BRgHzrUMidsA/5kyEkyzP+SgEGF5vakdTICcD1AcC PuuruFUntHAje+FwWTk6Ci+nZGO5Lu3tB2mPqmq2duDrZvczsMVadH8E6fZid4DJ 4gE3/dWzvTAUlIdhWsoetYucMzu/shgL/edIv3hjRk0rzrPmz23CcYf+QzUebcDI G+WLIpiBmnpstxX+TuAOEhEVGDcUf7OsFP32co7M2xr9 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:12 2026 by rpki-client