This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/D53jq87Ju_5W2NurMBsvi2B8EpQ.roa File: D53jq87Ju_5W2NurMBsvi2B8EpQ.roa (raw, json) Hash identifier: EUilHlQj2DNSvq/wFdSzVtzevf4M4P6120duAQtu7rI= Subject key identifier: 0F:9D:E3:AB:CE:C9:BB:FE:56:D8:DB:AB:30:1B:2F:8B:60:7C:12:94 Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806 Certificate serial: 019B7A5B5E8DA767C55F3FBD1E806AAB077D Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/D53jq87Ju_5W2NurMBsvi2B8EpQ.roa Signing time: Thu 01 Jan 2026 16:19:26 +0000 ROA not before: Thu 01 Jan 2026 16:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211735 IP address blocks: 185.242.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5e:8d:a7:67:c5:5f:3f:bd:1e:80:6a:ab:07:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f9de3abcec9bbfe56d8dbab301b2f8b607c1294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:73:95:57:ff:74:f3:a9:28:f3:50:19:8d:9a: 7b:13:39:e6:48:8e:9d:42:8c:02:09:db:d9:cc:d6: 1e:6e:0c:bd:41:d0:8b:d3:45:da:a7:d6:3b:75:66: fb:40:03:c3:78:e9:a6:b2:0e:5d:3c:64:75:0b:04: e0:a9:bb:cc:18:80:f8:2f:57:b2:ea:63:fa:0c:00: 6c:39:18:bf:8d:a9:5a:94:c9:89:7e:af:94:ff:e6: ec:8d:27:cd:5a:75:ae:94:5b:bd:8f:a9:da:e6:ff: 24:5e:8e:41:a6:83:f6:f5:b8:01:1b:15:1d:a2:c2: 85:9e:d0:14:0e:aa:3e:0f:5b:de:00:c1:82:dd:47: e1:02:a4:3e:8c:bd:1d:0c:3d:a3:ae:50:d3:98:58: 78:af:0d:99:15:2a:0d:12:3d:b2:61:22:d5:1c:f5: e5:be:7b:65:81:19:76:ee:fb:84:62:ea:99:4e:a9: f4:13:98:c7:0c:e3:5c:1d:1a:51:4e:a8:3f:64:b1: 84:61:9e:5d:52:71:1c:cd:8f:51:c3:ee:b4:bf:d2: e8:77:36:45:30:38:94:85:81:64:6c:2e:3e:0a:98: 38:cf:94:2e:0b:1f:3b:9f:5f:72:cf:ec:53:e9:17: f6:02:8b:6b:83:12:98:a8:53:c2:eb:90:9f:50:ef: 73:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9D:E3:AB:CE:C9:BB:FE:56:D8:DB:AB:30:1B:2F:8B:60:7C:12:94 X509v3 Authority Key Identifier: keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/D53jq87Ju_5W2NurMBsvi2B8EpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.176.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:f2:56:ec:31:38:fc:e6:7e:54:85:66:6f:b9:ce:8d:8d:9a: 5d:5b:43:e0:d2:1b:97:cb:91:1f:46:f2:26:fa:71:74:ce:d3: 92:4d:5f:9c:77:ad:bd:0c:26:27:7e:7a:5e:20:46:fd:3f:47: 8d:5c:57:4a:52:4f:c3:83:be:50:de:da:f6:41:c5:e4:bc:9b: e7:d0:7c:f3:91:7c:ca:9e:d6:58:d4:0e:cf:39:d1:a4:ce:d7: 58:f0:46:66:b9:0f:5c:5a:b1:a4:a1:7f:d5:8d:c9:d2:2d:1e: 1c:e4:8b:e5:97:f5:f1:b7:56:b2:59:64:9f:2e:9b:ac:38:41: 69:45:b1:d6:ab:7d:51:88:9d:40:cd:10:b5:b3:78:b7:d3:a2: af:da:4c:85:7b:bb:ef:41:d5:0d:04:28:06:4b:fd:fa:be:a9: d2:39:5a:97:7c:07:b9:6b:f3:91:c5:9f:5d:92:d9:b1:a0:70: f6:5a:43:4c:33:fc:a1:96:80:4c:ae:7d:42:39:33:d6:6c:2c: 36:2e:d5:9c:92:31:12:6e:4f:94:6b:a5:6f:28:ca:25:f0:84: 21:81:6a:96:0e:13:79:53:af:8d:be:2e:4a:b0:12:c5:d6:fe: 29:26:a4:df:f4:b8:ce:95:03:8d:ea:62:23:84:56:b2:8b:bd: 8c:83:23:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W16Np2fFXz+9HoBqqwd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODkwMTkzNzQzYmRmMjRkZDIyYzNlZDZmMjhiMzAzMWEy ZWM4MDYwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjlkZTNhYmNlYzliYmZlNTZkOGRiYWIzMDFiMmY4YjYwN2MxMjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnOVV/9086ko81AZjZp7EznmSI6d QowCCdvZzNYebgy9QdCL00Xap9Y7dWb7QAPDeOmmsg5dPGR1CwTgqbvMGID4L1ey 6mP6DABsORi/jalalMmJfq+U/+bsjSfNWnWulFu9j6na5v8kXo5BpoP29bgBGxUd osKFntAUDqo+D1veAMGC3UfhAqQ+jL0dDD2jrlDTmFh4rw2ZFSoNEj2yYSLVHPXl vntlgRl27vuEYuqZTqn0E5jHDONcHRpRTqg/ZLGEYZ5dUnEczY9Rw+60v9LodzZF MDiUhYFkbC4+Cpg4z5QuCx87n19yz+xT6Rf2AotrgxKYqFPC65CfUO9z3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA+d46vOybv+VtjbqzAbL4tgfBKUMB8GA1UdIwQY MBaAFC6JAZN0O98k3SLD7W8oswMaLsgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy84YzI3YWEtYjUwMC00Yzk2LTg0ZWMt ZjhiZTQ5NTI1MmIwLzEvRDUzanE4N0p1XzVXMk51ck1Cc3ZpMkI4RXBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy84YzI3YWEtYjUwMC00Yzk2LTg0ZWMtZjhiZTQ5NTI1MmIw LzEvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufKwMA0G CSqGSIb3DQEBCwUAA4IBAQAO8lbsMTj85n5UhWZvuc6NjZpdW0Pg0huXy5EfRvIm +nF0ztOSTV+cd629DCYnfnpeIEb9P0eNXFdKUk/Dg75Q3tr2QcXkvJvn0HzzkXzK ntZY1A7POdGkztdY8EZmuQ9cWrGkoX/VjcnSLR4c5Ivll/Xxt1ayWWSfLpusOEFp RbHWq31RiJ1AzRC1s3i306Kv2kyFe7vvQdUNBCgGS/36vqnSOVqXfAe5a/ORxZ9d ktmxoHD2WkNMM/yhloBMrn1COTPWbCw2LtWckjESbk+Ua6VvKMol8IQhgWqWDhN5 U6+Nvi5KsBLF1v4pJqTf9LjOlQON6mIjhFayi72MgyO9 -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:06 2026 by rpki-client