This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/M96SaOtXf2BYyJPHvAneKZXSlX4.roa File: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (raw, json) Hash identifier: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo= Subject key identifier: 33:DE:92:68:EB:57:7F:60:58:C8:93:C7:BC:09:DE:29:95:D2:95:7E Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15D212BBDAAB5F529B6704FA511516 Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/M96SaOtXf2BYyJPHvAneKZXSlX4.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214368 IP address blocks: 185.236.10.0/24 maxlen: 24 194.110.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d2:12:bb:da:ab:5f:52:9b:67:04:fa:51:15:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33de9268eb577f6058c893c7bc09de2995d2957e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:04:12:c4:61:02:ea:c9:96:90:86:ea:b6:69: 10:07:df:c9:f1:cc:7b:69:77:2f:8c:14:c5:9b:1e: 88:2e:f3:fc:15:9f:00:81:5f:05:c0:81:e4:f3:a3: cd:de:7b:f5:12:a0:3f:ed:de:db:66:5f:45:8f:5a: cc:03:38:52:ab:59:dd:c1:4b:c4:ff:43:c0:95:52: 6e:42:48:bc:85:db:02:37:62:d3:13:bd:ee:96:f6: 14:17:6d:37:3b:e1:4a:b1:e6:aa:4a:70:44:58:28: 78:6d:8c:99:e1:a5:f1:c6:6b:ae:25:f4:55:50:92: 44:ef:e8:de:3e:fb:08:0a:e0:32:0e:f3:48:f5:01: d2:93:c2:87:48:c1:9a:3a:ab:f2:f2:35:fb:11:c5: d4:ec:2a:d5:b9:9e:99:c8:ca:4d:d5:1f:95:6f:7e: a3:b1:93:48:7c:9c:40:d8:ac:fd:39:d2:94:ce:2a: 44:ac:d1:e3:9e:11:a8:7e:cd:a3:f1:c2:de:b3:13: f6:85:13:41:8e:4f:8a:7d:1f:d3:e3:d1:bc:7e:46: b7:90:c5:5b:1f:6a:73:52:b5:74:0d:92:b2:90:76: 88:d6:f9:db:85:bc:f2:af:8a:8c:f0:37:ec:d4:3d: 7f:d1:cb:11:ab:44:2f:da:69:34:60:a6:1d:cc:97: ca:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DE:92:68:EB:57:7F:60:58:C8:93:C7:BC:09:DE:29:95:D2:95:7E X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/M96SaOtXf2BYyJPHvAneKZXSlX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.10.0/24 194.110.174.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:9b:14:2d:25:a6:88:07:04:58:64:de:7b:78:ad:de:45:a7: 66:00:96:44:57:66:a7:e2:f2:b0:f5:1b:74:a0:f4:c7:94:a8: b0:0b:7d:6b:4d:83:20:8b:8d:6d:11:a6:20:20:19:07:24:dc: 28:81:ca:ba:69:75:4d:6b:91:6e:a2:27:1b:73:9a:f0:84:2a: a3:f7:9d:91:d2:93:54:68:68:c9:5d:9e:3f:66:c4:ac:12:fa: 82:c4:c1:87:03:0d:eb:12:a2:62:fa:3d:35:4c:b0:5b:ef:19: 87:81:0f:ed:80:69:5c:9d:5b:c8:f8:04:8c:97:48:55:5d:54: 9b:62:d6:c9:f1:c7:dc:2a:36:22:9f:a7:28:28:0b:c1:d3:77: 8b:fd:38:a9:c3:3f:81:60:1f:67:12:24:4e:b1:f2:26:2a:52: 25:b6:03:11:b8:d9:ae:8e:fe:9b:fb:a3:b3:13:7c:4d:a9:50: bb:2d:e0:32:e2:79:17:22:c9:8e:c2:b2:1a:9e:7b:14:b4:81: 05:c2:6e:93:4a:36:ae:68:c7:e8:56:d3:30:a9:22:f0:94:46: 2c:46:d6:6d:c9:df:d0:f5:dd:89:39:2b:30:f5:26:08:13:4a: 30:4e:c4:d5:e8:75:1c:47:49:1b:46:f1:43:ad:af:f8:b4:9e: f4:51:84:e8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FdISu9qrX1KbZwT6URUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2RlOTI2OGViNTc3ZjYwNThjODkzYzdiYzA5ZGUyOTk1ZDI5NTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QQSxGEC6smWkIbqtmkQB9/J8cx7 aXcvjBTFmx6ILvP8FZ8AgV8FwIHk86PN3nv1EqA/7d7bZl9Fj1rMAzhSq1ndwUvE /0PAlVJuQki8hdsCN2LTE73ulvYUF203O+FKseaqSnBEWCh4bYyZ4aXxxmuuJfRV UJJE7+jePvsICuAyDvNI9QHSk8KHSMGaOqvy8jX7EcXU7CrVuZ6ZyMpN1R+Vb36j sZNIfJxA2Kz9OdKUzipErNHjnhGofs2j8cLesxP2hRNBjk+KfR/T49G8fka3kMVb H2pzUrV0DZKykHaI1vnbhbzyr4qM8Dfs1D1/0csRq0Qv2mk0YKYdzJfKKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDPekmjrV39gWMiTx7wJ3imV0pV+MB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvTTk2U2FPdFhmMkJZeUpQSHZBbmVLWlhTbFg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuewKAwQA wm6uMA0GCSqGSIb3DQEBCwUAA4IBAQA6mxQtJaaIBwRYZN57eK3eRadmAJZEV2an 4vKw9Rt0oPTHlKiwC31rTYMgi41tEaYgIBkHJNwogcq6aXVNa5Fuoicbc5rwhCqj 952R0pNUaGjJXZ4/ZsSsEvqCxMGHAw3rEqJi+j01TLBb7xmHgQ/tgGlcnVvI+ASM l0hVXVSbYtbJ8cfcKjYin6coKAvB03eL/Tipwz+BYB9nEiROsfImKlIltgMRuNmu jv6b+6OzE3xNqVC7LeAy4nkXIsmOwrIannsUtIEFwm6TSjauaMfoVtMwqSLwlEYs RtZtyd/Q9d2JOSsw9SYIE0owTsTV6HUcR0kbRvFDra/4tJ70UYTo -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:56 2026 by rpki-client