This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/0GmT4kuhECd7fZ-tmbGsaxD0Rq0.roa File: 0GmT4kuhECd7fZ-tmbGsaxD0Rq0.roa (raw, json) Hash identifier: 2zRsav5IEfSlzcwSQLfdTFA0TTacyX5/9RQCzwFOfMo= Subject key identifier: D0:69:93:E2:4B:A1:10:27:7B:7D:9F:AD:99:B1:AC:6B:10:F4:46:AD Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349 Certificate serial: 019B797E8C16993F1441A85552A25889701C Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/0GmT4kuhECd7fZ-tmbGsaxD0Rq0.roa Signing time: Thu 01 Jan 2026 12:18:15 +0000 ROA not before: Thu 01 Jan 2026 12:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59807 IP address blocks: 193.203.196.0/24 maxlen: 24 193.203.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:8c:16:99:3f:14:41:a8:55:52:a2:58:89:70:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349 Validity Not Before: Jan 1 12:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d06993e24ba110277b7d9fad99b1ac6b10f446ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:ec:3e:27:82:74:1b:ef:10:0e:87:60:f6: 3c:68:c0:a6:c4:ad:d5:76:5a:ba:dd:83:92:86:bf: ef:4b:05:70:9d:66:59:c0:d3:0a:56:eb:36:a5:55: 57:98:21:e9:7f:69:f4:44:f5:e6:1d:7c:b9:b7:ac: 97:0d:45:e4:54:cf:6e:58:34:fb:c9:b5:b6:75:43: f9:8a:ac:c7:ae:3d:46:ef:2a:a7:d2:10:63:92:24: 24:22:9d:31:6a:0c:dd:d9:ee:f8:6a:d5:4c:84:6f: 94:cd:04:f9:7b:a6:7e:70:d1:ea:68:49:8f:b0:a9: 15:31:34:aa:28:a9:aa:d5:31:20:a0:f2:a5:64:8a: 9a:a3:0f:46:56:98:c8:18:10:c4:4a:49:fe:fc:f2: b3:0d:a3:c5:ca:ad:3b:4a:27:6b:85:1e:ba:29:55: a8:ca:8a:b6:35:24:c4:b3:d1:df:a3:1c:d6:f3:88: 8c:80:f3:c6:09:0d:6f:eb:23:12:56:3f:80:10:1d: e6:18:e0:36:dd:fb:e5:77:19:75:6e:45:73:d8:c0: 30:be:07:b4:6d:32:12:81:79:c1:0f:8a:0c:c4:6d: 25:1a:da:2a:0a:af:35:e9:1d:61:47:8c:cb:d4:61: a5:2e:b9:f7:56:c9:b8:1e:2b:6a:59:ca:11:de:d3: 91:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:69:93:E2:4B:A1:10:27:7B:7D:9F:AD:99:B1:AC:6B:10:F4:46:AD X509v3 Authority Key Identifier: keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/0GmT4kuhECd7fZ-tmbGsaxD0Rq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.196.0/23 Signature Algorithm: sha256WithRSAEncryption 60:b4:e2:f1:36:d5:c0:cd:b8:b2:6d:94:a8:b3:5b:d7:fe:ce: 1e:72:b3:43:8f:06:de:e8:bb:07:7f:eb:82:41:fd:13:5c:4c: 65:ec:85:7f:a4:23:f6:e3:18:30:dd:36:7f:9d:42:38:1e:8f: 74:4a:56:eb:58:18:08:d3:05:05:b4:5c:3c:89:fa:0c:39:3e: 1f:07:cb:2c:ad:2c:ff:51:80:cf:14:1e:98:7f:cd:45:6d:71: 2b:b2:97:0e:1d:5a:fb:18:de:7f:7b:7f:a1:7f:25:a5:3c:95: a9:95:d4:ad:51:b0:ed:4c:73:87:0b:6d:d3:a9:5b:2e:61:1a: 4a:a0:8d:b5:8f:84:43:71:a1:aa:bb:bf:9e:b7:91:97:17:24: c7:b9:8a:78:0b:59:ee:cf:15:30:54:61:fe:cf:c6:99:b1:ed: aa:0c:4e:92:01:7e:b4:37:e8:ec:bd:cd:26:39:4e:1b:d1:09: ed:ea:f0:e9:c2:e3:23:1e:9d:d8:85:ea:8a:bc:a7:68:1f:37: 1f:6c:87:73:d7:9e:db:bd:c1:39:50:7a:8d:9e:32:4c:de:c8: 9e:a6:61:e6:ad:da:09:bc:e8:8a:ec:22:72:57:8a:82:15:f9: b7:13:da:b9:fc:f5:cd:f2:24:76:e9:0a:bb:5c:bc:26:67:61: 53:4e:1c:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fowWmT8UQahVUqJYiXAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MzY5ZGM1ZGE1ZTRlNzBjNzM1YjIzNTcwNGQ5ZWJjNTgy NTkzNDkwHhcNMjYwMTAxMTIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDY5OTNlMjRiYTExMDI3N2I3ZDlmYWQ5OWIxYWM2YjEwZjQ0NmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQXsPieCdBvvEA6HYPY8aMCmxK3V dlq63YOShr/vSwVwnWZZwNMKVus2pVVXmCHpf2n0RPXmHXy5t6yXDUXkVM9uWDT7 ybW2dUP5iqzHrj1G7yqn0hBjkiQkIp0xagzd2e74atVMhG+UzQT5e6Z+cNHqaEmP sKkVMTSqKKmq1TEgoPKlZIqaow9GVpjIGBDESkn+/PKzDaPFyq07SidrhR66KVWo yoq2NSTEs9HfoxzW84iMgPPGCQ1v6yMSVj+AEB3mGOA23fvldxl1bkVz2MAwvge0 bTISgXnBD4oMxG0lGtoqCq816R1hR4zL1GGlLrn3Vsm4HitqWcoR3tORsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNBpk+JLoRAne32frZmxrGsQ9EatMB8GA1UdIwQY MBaAFEY2ncXaXk5wxzWyNXBNnrxYJZNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgt YTkxNjM0ZDJhODA4LzEvMEdtVDRrdWhFQ2Q3ZlotdG1iR3NheEQwUnEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgtYTkxNjM0ZDJhODA4 LzEvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcvEMA0G CSqGSIb3DQEBCwUAA4IBAQBgtOLxNtXAzbiybZSos1vX/s4ecrNDjwbe6LsHf+uC Qf0TXExl7IV/pCP24xgw3TZ/nUI4Ho90SlbrWBgI0wUFtFw8ifoMOT4fB8ssrSz/ UYDPFB6Yf81FbXErspcOHVr7GN5/e3+hfyWlPJWpldStUbDtTHOHC23TqVsuYRpK oI21j4RDcaGqu7+et5GXFyTHuYp4C1nuzxUwVGH+z8aZse2qDE6SAX60N+jsvc0m OU4b0Qnt6vDpwuMjHp3YheqKvKdoHzcfbIdz157bvcE5UHqNnjJM3siepmHmrdoJ vOiK7CJyV4qCFfm3E9q5/PXN8iR26Qq7XLwmZ2FTThxK -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:45 2026 by rpki-client