This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/1Xm89aaBpVMV9cKG43MJiEDRyXM.roa File: 1Xm89aaBpVMV9cKG43MJiEDRyXM.roa (raw, json) Hash identifier: xvK5vKdtM3Q6AqquyM/QFwGngU91NCTC/sOOpP25kiI= Subject key identifier: D5:79:BC:F5:A6:81:A5:53:15:F5:C2:86:E3:73:09:88:40:D1:C9:73 Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69 Certificate serial: 019B7835367BBCE2A56D0BFF91D538B946DA Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/1Xm89aaBpVMV9cKG43MJiEDRyXM.roa Signing time: Thu 01 Jan 2026 06:18:31 +0000 ROA not before: Thu 01 Jan 2026 06:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39222 IP address blocks: 193.30.245.0/24 maxlen: 24 194.165.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:36:7b:bc:e2:a5:6d:0b:ff:91:d5:38:b9:46:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69 Validity Not Before: Jan 1 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d579bcf5a681a55315f5c286e373098840d1c973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:c3:77:40:a9:90:45:c7:bb:05:df:e5:95: 79:55:1c:40:c6:12:82:ab:b8:be:fe:88:61:a7:12: c5:b3:45:32:2d:96:43:6e:ff:9d:cb:8b:ba:99:65: 02:e5:59:26:bb:bb:dc:db:8c:73:31:e5:70:f5:19: 62:0e:e2:fa:6f:3c:56:be:ad:77:b1:94:d2:db:0c: 82:55:b7:3c:88:0e:90:f6:1b:13:79:46:c7:92:65: 99:11:04:80:3d:de:e3:42:b6:08:54:b6:53:fd:e0: 7b:ea:df:c4:71:f2:0e:ad:c4:11:58:02:b1:54:45: 4d:60:67:bc:80:f7:34:40:d2:e1:76:1f:c2:c8:e0: ce:7f:03:eb:57:35:8d:f1:5b:c3:e5:48:7a:77:f0: a3:08:89:dc:3d:b1:1f:01:ab:c8:d2:a4:7d:c9:f4: 56:17:a8:e4:3f:f4:76:60:da:9f:0d:e7:26:ae:53: 1a:7f:ba:cf:da:c5:3d:16:d9:f5:57:85:e8:a1:60: 55:22:c1:1c:6d:94:94:f7:32:07:44:1a:e2:8f:78: 5d:49:e5:c3:8f:5e:d1:59:19:61:91:0d:92:2a:47: 9d:2d:df:dd:b1:dd:f4:74:a5:f2:33:8f:1d:c8:00: 76:eb:30:2d:bc:5b:12:92:3a:9c:cd:53:f9:40:99: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:79:BC:F5:A6:81:A5:53:15:F5:C2:86:E3:73:09:88:40:D1:C9:73 X509v3 Authority Key Identifier: keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/1Xm89aaBpVMV9cKG43MJiEDRyXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.245.0/24 194.165.46.0/24 Signature Algorithm: sha256WithRSAEncryption a3:a8:5f:9e:ac:22:ec:3a:77:8c:ba:c3:23:53:53:b3:ae:9a: 43:a4:dc:0f:e5:00:0f:cd:68:2e:20:b8:d9:2d:47:4a:be:94: c0:59:33:52:e7:32:c1:6e:fa:0d:a0:da:b9:1c:6d:5d:31:26: dd:36:e9:ab:7c:8d:dd:62:d3:cc:fd:95:30:91:b4:1e:c1:1d: d2:91:bb:23:6f:8f:25:69:51:45:28:73:85:3b:0d:1b:81:68: f1:85:0c:ef:aa:77:f4:63:06:72:6a:a4:b3:5f:17:66:1d:47: 89:b7:1f:ff:8f:ae:5a:07:b4:b6:ef:88:44:10:62:1f:e0:77: c2:8b:ff:3e:49:23:88:b9:22:74:60:91:39:3b:14:91:38:7b: af:eb:d8:b7:ef:c8:df:89:22:b8:70:b4:54:35:8a:2f:5e:a1: 02:12:9a:c3:4d:04:b6:9e:e0:66:9d:1d:6e:85:7e:06:cf:4d: c1:3e:92:26:8c:68:bc:b1:ce:a5:e7:b6:2d:76:08:1b:97:28: 29:d4:48:10:f9:a1:32:14:c9:2c:ff:41:36:16:1a:0c:cb:4a: 5c:ed:b6:77:ad:0e:d1:54:b4:a2:57:ad:3d:1c:4a:1f:78:bb: cb:c5:36:1b:95:4d:08:1b:57:2e:17:78:30:0d:fc:5e:5a:1e: fb:2f:3d:47 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NTZ7vOKlbQv/kdU4uUbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YmViY2ZlODJiMjYyN2VhOGRlODE2MWNiOTI3YjI0NWIw NThlNjkwHhcNMjYwMTAxMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTc5YmNmNWE2ODFhNTUzMTVmNWMyODZlMzczMDk4ODQwZDFjOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2jDd0CpkEXHuwXf5ZV5VRxAxhKC q7i+/ohhpxLFs0UyLZZDbv+dy4u6mWUC5Vkmu7vc24xzMeVw9RliDuL6bzxWvq13 sZTS2wyCVbc8iA6Q9hsTeUbHkmWZEQSAPd7jQrYIVLZT/eB76t/EcfIOrcQRWAKx VEVNYGe8gPc0QNLhdh/CyODOfwPrVzWN8VvD5Uh6d/CjCIncPbEfAavI0qR9yfRW F6jkP/R2YNqfDecmrlMaf7rP2sU9Ftn1V4XooWBVIsEcbZSU9zIHRBrij3hdSeXD j17RWRlhkQ2SKkedLd/dsd30dKXyM48dyAB26zAtvFsSkjqczVP5QJn4jwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNV5vPWmgaVTFfXChuNzCYhA0clzMB8GA1UdIwQY MBaAFMi+vP6CsmJ+qN6BYcuSeyRbBY5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgt ZGVlZjdmMTUxZThlLzEvMVhtODlhYUJwVk1WOWNLRzQzTUppRURSeVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgtZGVlZjdmMTUxZThl LzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwR71AwQA wqUuMA0GCSqGSIb3DQEBCwUAA4IBAQCjqF+erCLsOneMusMjU1OzrppDpNwP5QAP zWguILjZLUdKvpTAWTNS5zLBbvoNoNq5HG1dMSbdNumrfI3dYtPM/ZUwkbQewR3S kbsjb48laVFFKHOFOw0bgWjxhQzvqnf0YwZyaqSzXxdmHUeJtx//j65aB7S274hE EGIf4HfCi/8+SSOIuSJ0YJE5OxSROHuv69i378jfiSK4cLRUNYovXqECEprDTQS2 nuBmnR1uhX4Gz03BPpImjGi8sc6l57Ytdggblygp1EgQ+aEyFMks/0E2FhoMy0pc 7bZ3rQ7RVLSiV609HEofeLvLxTYblU0IG1cuF3gwDfxeWh77Lz1H -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:35 2026 by rpki-client