This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/_4VYQRquhP3n7V0ZIUcFIYF3tcc.roa File: _4VYQRquhP3n7V0ZIUcFIYF3tcc.roa (raw, json) Hash identifier: E+o4HFAoGMbScOOdpRNVFuEWt1wZ9tuocl+KZhVyuoo= Subject key identifier: FF:85:58:41:1A:AE:84:FD:E7:ED:5D:19:21:47:05:21:81:77:B5:C7 Certificate issuer: /CN=aa9f06a05bc329f0005512b9e8b818503b4a9702 Certificate serial: 019BFA473522B5FF74700ACC6C459958E645 Authority key identifier: AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/_4VYQRquhP3n7V0ZIUcFIYF3tcc.roa Signing time: Mon 26 Jan 2026 12:28:49 +0000 ROA not before: Mon 26 Jan 2026 12:28:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 193.23.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:47:35:22:b5:ff:74:70:0a:cc:6c:45:99:58:e6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9f06a05bc329f0005512b9e8b818503b4a9702 Validity Not Before: Jan 26 12:28:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff8558411aae84fde7ed5d19214705218177b5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1a:b6:f4:14:fa:90:c4:af:ef:49:cb:79:d8: 0d:fa:74:6a:fb:7b:f3:88:61:1f:04:8f:fb:e7:8f: 52:ed:b6:b0:57:03:6f:61:aa:58:4e:e7:30:37:98: d1:1d:af:fd:22:39:e9:03:b3:b3:b6:6e:b3:ee:94: 13:1a:54:9a:75:59:c2:29:6d:fa:6c:af:c2:2d:7b: ce:8e:b0:66:3b:e2:ca:28:81:8b:b5:ed:af:ba:9b: 34:ef:cc:f0:8b:fe:e5:ae:99:73:e1:cf:1f:a7:b6: 7a:1e:a4:4b:89:85:e6:a0:1d:bf:54:87:21:42:82: c8:d4:f1:06:1a:b5:14:a8:af:14:16:d8:da:7a:64: d8:da:3e:e9:95:5d:9b:51:2a:3d:3f:15:af:ec:a4: e8:16:3a:c9:4b:49:ca:65:bd:fd:1e:32:d4:79:60: d7:25:eb:6d:e1:e6:c3:44:b3:b2:d2:88:66:09:95: fd:f9:14:11:30:0a:9a:03:97:03:9b:e3:33:ca:0f: 5d:90:fa:ea:18:81:e1:ed:c8:c5:82:a2:90:6b:2f: 53:ff:56:85:31:77:cc:df:c3:e0:88:9f:2d:88:15: ee:1e:c8:6f:e2:5f:7d:13:86:5b:9c:a7:93:68:c9: 0c:02:ef:0a:a6:19:b0:8d:1b:e4:94:79:b3:f3:a7: e7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:85:58:41:1A:AE:84:FD:E7:ED:5D:19:21:47:05:21:81:77:B5:C7 X509v3 Authority Key Identifier: keyid:AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/_4VYQRquhP3n7V0ZIUcFIYF3tcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.226.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:d1:a7:30:28:63:06:bc:b1:42:65:8f:33:2f:1b:a2:56:27: 73:53:e3:80:3c:36:ec:b8:28:00:42:af:6b:8c:ea:f5:5a:54: 4d:b8:86:0a:c6:0c:ec:be:36:4d:0b:7c:a1:39:11:50:fd:bf: bb:d5:76:bb:3e:9a:26:60:1f:f8:6c:eb:76:35:8b:6a:28:b6: df:a0:4e:ba:48:07:3d:16:38:1c:7c:a6:2b:4f:33:c0:cc:0d: bc:fe:8f:1f:06:c5:bd:34:f8:60:f8:51:51:e6:40:60:b6:c0: 78:6f:30:ad:dd:c9:15:5c:0b:99:30:a7:d9:56:ba:41:d0:a9: 05:72:48:cf:81:45:31:e0:97:ac:a4:b4:2e:e9:8f:50:33:48: 0a:4a:40:69:92:b0:cf:26:e9:25:d7:03:7f:81:c5:43:c7:e3: a2:c1:57:0d:9d:51:23:df:c2:7a:44:73:d6:9c:bd:67:5f:6c: 07:7f:c8:ab:8c:32:2d:79:c9:39:7f:df:e1:1a:f6:9e:d6:0f: 5b:ed:69:fb:80:c0:84:67:74:43:b1:09:de:44:a9:77:d1:4b: 73:13:05:a7:9d:db:f7:ff:87:60:4f:a8:3d:c6:53:fa:37:2c: 82:40:a4:72:db:f9:f4:b7:76:36:0a:f1:7f:d7:3b:4c:ee:d9: e4:0c:9e:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6RzUitf90cArMbEWZWOZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOWYwNmEwNWJjMzI5ZjAwMDU1MTJiOWU4YjgxODUwM2I0 YTk3MDIwHhcNMjYwMTI2MTIyODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjg1NTg0MTFhYWU4NGZkZTdlZDVkMTkyMTQ3MDUyMTgxNzdiNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBq29BT6kMSv70nLedgN+nRq+3vz iGEfBI/7549S7bawVwNvYapYTucwN5jRHa/9IjnpA7Oztm6z7pQTGlSadVnCKW36 bK/CLXvOjrBmO+LKKIGLte2vups078zwi/7lrplz4c8fp7Z6HqRLiYXmoB2/VIch QoLI1PEGGrUUqK8UFtjaemTY2j7plV2bUSo9PxWv7KToFjrJS0nKZb39HjLUeWDX Jett4ebDRLOy0ohmCZX9+RQRMAqaA5cDm+Mzyg9dkPrqGIHh7cjFgqKQay9T/1aF MXfM38PgiJ8tiBXuHshv4l99E4ZbnKeTaMkMAu8KphmwjRvklHmz86fnqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+FWEEaroT95+1dGSFHBSGBd7XHMB8GA1UdIwQY MBaAFKqfBqBbwynwAFUSuei4GFA7SpcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXA4R29GdkRLZkFBVlJLNTZMZ1lVRHRLbHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9lMWNiODctZDhjNi00ZDMxLWE3OTgt NGUyN2Q4OGIyODFhLzEvXzRWWVFScXVoUDNuN1YwWklVY0ZJWUYzdGNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9lMWNiODctZDhjNi00ZDMxLWE3OTgtNGUyN2Q4OGIyODFh LzEvcXA4R29GdkRLZkFBVlJLNTZMZ1lVRHRLbHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRfiMA0G CSqGSIb3DQEBCwUAA4IBAQAe0acwKGMGvLFCZY8zLxuiVidzU+OAPDbsuCgAQq9r jOr1WlRNuIYKxgzsvjZNC3yhORFQ/b+71Xa7PpomYB/4bOt2NYtqKLbfoE66SAc9 FjgcfKYrTzPAzA28/o8fBsW9NPhg+FFR5kBgtsB4bzCt3ckVXAuZMKfZVrpB0KkF ckjPgUUx4JespLQu6Y9QM0gKSkBpkrDPJukl1wN/gcVDx+OiwVcNnVEj38J6RHPW nL1nX2wHf8irjDIteck5f9/hGvae1g9b7Wn7gMCEZ3RDsQneRKl30UtzEwWnndv3 /4dgT6g9xlP6NyyCQKRy2/n0t3Y2CvF/1ztM7tnkDJ6F -----END CERTIFICATE-----Generated at Mon Jan 26 21:32:14 2026 by rpki-client