This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/1_xba5d5cbirhQ2s_z8_1tiC0PA.roa File: 1_xba5d5cbirhQ2s_z8_1tiC0PA.roa (raw, json) Hash identifier: Bfsy6ICU1Mj8KS3Ard+cJzbdeC4klrQoTK7qG8jjB4g= Subject key identifier: D7:FC:5B:6B:97:79:71:B8:AB:85:0D:AC:FF:3F:3F:D6:D8:82:D0:F0 Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3 Certificate serial: 019B7D5B931ABFB4F453DDBF8BE291359F0E Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/1_xba5d5cbirhQ2s_z8_1tiC0PA.roa Signing time: Fri 02 Jan 2026 06:18:31 +0000 ROA not before: Fri 02 Jan 2026 06:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42814 IP address blocks: 193.8.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:93:1a:bf:b4:f4:53:dd:bf:8b:e2:91:35:9f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3 Validity Not Before: Jan 2 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7fc5b6b977971b8ab850dacff3f3fd6d882d0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:43:ac:aa:56:d6:81:77:3c:d2:3e:a4:9d:cc: bb:a5:4c:9c:1d:35:e5:b2:01:82:aa:6b:38:2c:20: d6:97:e3:07:ac:5a:86:eb:04:a7:0a:01:ac:bc:e1: 0a:9e:76:61:fb:96:80:28:34:2c:70:53:f0:6c:ed: 2d:9e:c2:94:d8:97:af:ad:da:86:1f:4f:ba:71:53: 33:a0:2c:aa:be:cb:2d:15:41:45:84:45:7b:1a:c4: 9d:76:5e:10:3c:d5:7f:ce:ff:d6:2f:d1:c4:76:0b: 55:15:53:3f:b4:83:b1:19:cf:d3:74:5c:e5:e3:ec: c0:fa:cb:b0:00:32:cf:7d:a0:65:71:4d:29:97:25: 34:74:6c:60:f5:2d:20:2a:62:b2:74:14:2d:c3:4f: c4:a2:16:38:55:5b:e6:6a:74:ca:42:56:48:ff:b3: 4b:77:96:90:79:d5:f2:e2:d2:41:ec:3c:c1:6d:6a: 0d:d8:2a:ec:8a:77:d4:d0:a1:0d:2b:28:0e:d0:d9: db:f1:68:cc:bc:ad:7b:f2:1c:cf:01:43:a2:68:16: c6:cb:57:62:74:86:e0:a1:fc:31:12:6a:30:62:0e: 3c:54:59:87:63:e1:85:05:c9:a2:63:11:79:a4:3c: a4:6f:b3:cf:cf:ce:d7:f6:cb:12:f9:c7:f6:6e:ec: 6e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FC:5B:6B:97:79:71:B8:AB:85:0D:AC:FF:3F:3F:D6:D8:82:D0:F0 X509v3 Authority Key Identifier: keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/1_xba5d5cbirhQ2s_z8_1tiC0PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.248.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:4a:5c:8c:ca:20:85:c3:27:70:89:8a:bb:95:9b:a2:fc:ba: 72:73:1e:ab:cb:01:70:03:36:72:83:fe:91:75:79:b2:a7:b8: e3:31:6c:98:f9:a3:19:96:5f:9f:69:de:01:39:17:db:9d:2e: 74:d9:1c:e5:b4:40:92:4a:ad:ac:cc:ce:6f:80:ef:23:eb:c0: 96:87:c8:c4:5b:f3:75:28:2d:dd:3f:cf:cc:c6:59:25:77:67: 66:ed:fd:a5:48:57:f9:49:51:52:0c:6b:0f:ae:48:fa:7f:fa: cd:a7:06:d1:9a:0b:91:a8:6a:35:fc:2d:78:86:1e:c1:99:ed: d0:8a:88:d0:52:8a:a5:c2:e9:0c:32:f4:de:d0:eb:28:ef:bf: d2:94:63:c3:d9:3b:5b:62:c3:65:fa:05:99:95:05:56:ff:39: c3:53:00:d2:a0:e5:bd:0f:eb:3d:5e:a6:a5:20:80:50:2f:01: 28:91:13:d2:42:6b:b8:51:ae:dd:e8:94:e8:07:a0:7f:c3:c1: 24:db:a0:84:1b:2a:44:ad:ba:9f:2c:26:c5:60:fd:58:4c:8f: cb:32:ff:7b:f3:5b:fe:57:d6:14:61:f3:3a:c8:37:fe:b5:72: 75:dc:6e:1c:c6:c8:96:e1:5a:fe:8f:55:af:3a:ff:e5:1a:be: f0:67:cf:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W5Mav7T0U92/i+KRNZ8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzgwNzQyNmE3NDg3YTA4NDRmZGY0ZDdhNTJmMGZiOTBi ZGI3ZDMwHhcNMjYwMTAyMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2ZjNWI2Yjk3Nzk3MWI4YWI4NTBkYWNmZjNmM2ZkNmQ4ODJkMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUOsqlbWgXc80j6kncy7pUycHTXl sgGCqms4LCDWl+MHrFqG6wSnCgGsvOEKnnZh+5aAKDQscFPwbO0tnsKU2JevrdqG H0+6cVMzoCyqvsstFUFFhEV7GsSddl4QPNV/zv/WL9HEdgtVFVM/tIOxGc/TdFzl 4+zA+suwADLPfaBlcU0plyU0dGxg9S0gKmKydBQtw0/EohY4VVvmanTKQlZI/7NL d5aQedXy4tJB7DzBbWoN2CrsinfU0KENKygO0Nnb8WjMvK178hzPAUOiaBbGy1di dIbgofwxEmowYg48VFmHY+GFBcmiYxF5pDykb7PPz87X9ssS+cf2buxuNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNf8W2uXeXG4q4UNrP8/P9bYgtDwMB8GA1UdIwQY MBaAFOM4B0JqdIeghE/fTXpS8PuQvbfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpnSFFtcDBoNkNFVDk5TmVsTHctNUM5dDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xNzUwYmQtNDdkNi00NTA1LWFiMDUt ODI4MTk3NjM0OTc2LzEvMV94YmE1ZDVjYmlyaFEyc196OF8xdGlDMFBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xNzUwYmQtNDdkNi00NTA1LWFiMDUtODI4MTk3NjM0OTc2 LzEvNHpnSFFtcDBoNkNFVDk5TmVsTHctNUM5dDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQj4MA0G CSqGSIb3DQEBCwUAA4IBAQBOSlyMyiCFwydwiYq7lZui/Lpycx6rywFwAzZyg/6R dXmyp7jjMWyY+aMZll+fad4BORfbnS502RzltECSSq2szM5vgO8j68CWh8jEW/N1 KC3dP8/Mxlkld2dm7f2lSFf5SVFSDGsPrkj6f/rNpwbRmguRqGo1/C14hh7Bme3Q iojQUoqlwukMMvTe0Oso77/SlGPD2TtbYsNl+gWZlQVW/znDUwDSoOW9D+s9Xqal IIBQLwEokRPSQmu4Ua7d6JToB6B/w8Ek26CEGypErbqfLCbFYP1YTI/LMv9781v+ V9YUYfM6yDf+tXJ13G4cxsiW4Vr+j1WvOv/lGr7wZ8+B -----END CERTIFICATE-----Generated at Mon Jan 26 23:00:35 2026 by rpki-client