This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/NoeQVsGRTiyXfh1eMtf_ayztjys.roa File: NoeQVsGRTiyXfh1eMtf_ayztjys.roa (raw, json) Hash identifier: AI/YmWAsP7YbcuYJ9yAOU2XEXLr8wONVVB+AxIjcXdo= Subject key identifier: 36:87:90:56:C1:91:4E:2C:97:7E:1D:5E:32:D7:FF:6B:2C:ED:8F:2B Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f Certificate serial: 019B7DCA3699D7A9EF17BC75F0630BF69711 Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/NoeQVsGRTiyXfh1eMtf_ayztjys.roa Signing time: Fri 02 Jan 2026 08:19:22 +0000 ROA not before: Fri 02 Jan 2026 08:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 193.16.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:36:99:d7:a9:ef:17:bc:75:f0:63:0b:f6:97:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f Validity Not Before: Jan 2 08:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36879056c1914e2c977e1d5e32d7ff6b2ced8f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:29:81:99:41:79:b2:60:24:80:a1:d9:ed: 24:ab:bc:70:a2:ee:04:43:71:e4:de:a2:02:19:1a: 59:1b:68:f1:e0:51:b2:b6:4b:49:a5:72:a5:bc:b8: a5:ab:0a:ef:33:3e:be:f5:16:8e:58:8d:53:8b:9b: 31:eb:4c:64:50:19:45:cd:ea:d6:d7:b4:09:5e:5c: a5:d9:bb:93:dd:bb:62:bb:0b:c9:ac:7a:10:1e:f1: b7:1e:b4:0c:61:40:28:6f:2b:6d:55:e4:a8:69:a8: a9:9f:d2:c6:40:ec:e5:01:6f:7c:1f:59:17:15:67: bf:f2:24:7c:08:ac:c3:36:0b:12:e2:41:f3:e1:3a: d3:aa:cb:94:b3:eb:44:a2:1e:3e:28:b4:e4:e7:fc: b6:1c:0a:ef:41:5d:25:71:98:b2:b2:e2:ef:a3:06: e4:53:98:81:0a:45:26:78:8c:29:1c:46:a7:a7:6b: fc:59:ed:c6:2c:c8:c0:c3:0b:25:12:9b:1c:1a:22: 3d:81:1c:3f:79:87:a7:0c:d2:e6:ae:be:49:18:ae: 91:76:85:6b:27:40:05:7a:5d:c7:4a:80:9b:32:25: 3c:17:f4:40:c4:a6:18:5e:a9:70:db:04:99:00:bb: af:cb:d1:bf:8d:37:e2:3d:eb:16:a3:eb:a9:d2:ea: d3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:87:90:56:C1:91:4E:2C:97:7E:1D:5E:32:D7:FF:6B:2C:ED:8F:2B X509v3 Authority Key Identifier: keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/NoeQVsGRTiyXfh1eMtf_ayztjys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.4.0/22 Signature Algorithm: sha256WithRSAEncryption 84:40:fe:4c:61:83:cb:67:d5:37:9a:9d:86:cd:c6:41:cc:cf: 8b:17:30:48:bd:17:f5:ac:f7:e2:ba:82:96:13:40:d3:9e:42: e0:d2:f8:17:69:fa:ce:98:d2:f7:b6:a2:45:17:cb:56:92:76: 2a:01:cd:ac:82:7e:e2:ba:48:68:f5:03:8a:87:b2:da:61:07: 1e:d7:35:57:ee:0a:6f:90:63:d8:fe:ba:37:3c:ca:8d:d4:98: e4:3c:52:a7:35:fd:7f:78:86:fb:bc:9f:20:32:ec:52:02:81: 21:25:62:4f:ee:19:45:8e:45:24:bb:bd:e5:2e:79:cb:5b:33: dc:dd:ab:06:fa:9a:c1:bd:f4:e8:67:79:a1:6e:57:e8:94:0c: b6:42:e0:b6:49:b7:f5:e4:e9:2c:35:f4:e8:8f:7a:ea:58:4d: 66:ee:43:47:aa:a6:b3:a8:c4:cd:5a:8f:ff:17:d9:90:16:2f: 2f:08:89:8a:22:3a:80:24:81:18:2b:59:76:56:ea:f1:b8:93: 9b:c9:ff:9b:f6:5e:6f:d2:81:e5:fe:5a:54:48:7b:f0:c8:1d: 7f:b5:44:73:5c:da:07:20:b8:04:13:5f:4b:12:d8:c6:a4:3f: ed:e2:12:d9:81:8e:73:b3:d9:6a:8b:f5:62:2c:25:a2:ad:71: e2:03:c5:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yjaZ16nvF7x18GML9pcRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWVhNjk4ODQ4MWNlYTRiOTViNjUxMzFjYzQ5ODg0ZjNl ZDBlM2YwHhcNMjYwMTAyMDgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjg3OTA1NmMxOTE0ZTJjOTc3ZTFkNWUzMmQ3ZmY2YjJjZWQ4ZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuwpgZlBebJgJICh2e0kq7xwou4E Q3Hk3qICGRpZG2jx4FGytktJpXKlvLilqwrvMz6+9RaOWI1Ti5sx60xkUBlFzerW 17QJXlyl2buT3btiuwvJrHoQHvG3HrQMYUAobyttVeSoaaipn9LGQOzlAW98H1kX FWe/8iR8CKzDNgsS4kHz4TrTqsuUs+tEoh4+KLTk5/y2HArvQV0lcZiysuLvowbk U5iBCkUmeIwpHEanp2v8We3GLMjAwwslEpscGiI9gRw/eYenDNLmrr5JGK6RdoVr J0AFel3HSoCbMiU8F/RAxKYYXqlw2wSZALuvy9G/jTfiPesWo+up0urTiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDaHkFbBkU4sl34dXjLX/2ss7Y8rMB8GA1UdIwQY MBaAFImuppiEgc6kuVtlExzEmITz7Q4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTIt NGQ4ZTkwZTAzMzNiLzEvTm9lUVZzR1JUaXlYZmgxZU10Zl9heXp0anlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTItNGQ4ZTkwZTAzMzNi LzEvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwRAEMA0G CSqGSIb3DQEBCwUAA4IBAQCEQP5MYYPLZ9U3mp2GzcZBzM+LFzBIvRf1rPfiuoKW E0DTnkLg0vgXafrOmNL3tqJFF8tWknYqAc2sgn7iukho9QOKh7LaYQce1zVX7gpv kGPY/ro3PMqN1JjkPFKnNf1/eIb7vJ8gMuxSAoEhJWJP7hlFjkUku73lLnnLWzPc 3asG+prBvfToZ3mhblfolAy2QuC2Sbf15OksNfToj3rqWE1m7kNHqqazqMTNWo// F9mQFi8vCImKIjqAJIEYK1l2VurxuJObyf+b9l5v0oHl/lpUSHvwyB1/tURzXNoH ILgEE19LEtjGpD/t4hLZgY5zs9lqi/ViLCWirXHiA8Uz -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:38 2026 by rpki-client