This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/UO3efIc_XfI8seJml1F-LycT9UQ.roa File: UO3efIc_XfI8seJml1F-LycT9UQ.roa (raw, json) Hash identifier: WYOrYWzE4q8B0N8jKOx1Idbj+VGx29/9UmEd7EBF0Xo= Subject key identifier: 50:ED:DE:7C:87:3F:5D:F2:3C:B1:E2:66:97:51:7E:2F:27:13:F5:44 Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96 Certificate serial: 019B78354FAA0E3C09E57308650DDA250823 Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/UO3efIc_XfI8seJml1F-LycT9UQ.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9145 IP address blocks: 193.96.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4f:aa:0e:3c:09:e5:73:08:65:0d:da:25:08:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50edde7c873f5df23cb1e26697517e2f2713f544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3d:9b:a5:6a:3d:29:70:9c:2e:89:d7:2f:60: 42:b7:aa:a1:d1:74:a3:cb:71:a1:3d:bf:a3:5f:5a: dd:e1:26:44:ac:8e:ef:91:11:fc:03:47:0b:ca:47: 0e:95:20:88:75:68:7a:63:f0:79:fb:a7:ee:04:23: 33:74:7d:2b:da:98:86:43:f7:ba:47:32:95:27:e8: fc:40:e0:28:2b:60:ae:fc:61:9c:2e:2f:33:1d:19: da:d7:c8:45:82:fc:ab:9f:bb:65:eb:e1:49:d3:6a: b4:ff:a3:07:16:ed:98:af:f1:04:3c:93:30:d2:11: ae:d8:ad:32:5f:68:04:66:06:7f:e9:92:91:ba:79: 97:e0:1e:2d:e0:2c:22:6d:0f:32:08:a9:ef:f4:8f: 0a:48:4c:60:9a:8e:ed:e7:75:25:38:e7:10:fb:90: ce:84:b2:51:b8:4e:43:d6:7c:c8:d3:d0:27:74:9e: 06:84:49:56:48:bc:12:c8:80:b7:fb:9d:5c:d9:b8: 62:cf:48:7d:65:b5:67:1c:8a:b6:4e:0c:e9:15:61: ee:80:37:44:c4:d9:3c:e2:c0:2d:9e:2d:fe:20:d4: 4c:0f:92:5a:16:fb:13:41:8d:1b:73:68:14:c2:59: 37:52:c3:0d:d3:2d:7f:5f:6f:b9:d1:92:39:da:b8: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:ED:DE:7C:87:3F:5D:F2:3C:B1:E2:66:97:51:7E:2F:27:13:F5:44 X509v3 Authority Key Identifier: keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/UO3efIc_XfI8seJml1F-LycT9UQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.96.240.0/24 Signature Algorithm: sha256WithRSAEncryption 38:33:a1:dc:8e:0e:80:8c:0c:9e:e4:b3:38:c4:7a:2b:2a:23: 2d:bc:4a:5b:e4:1b:41:5d:7e:fe:86:21:2f:10:a2:bd:c9:21: a1:4a:32:a5:83:bf:42:1c:49:16:cc:a5:ac:23:5f:2c:ae:34: bd:00:e2:53:85:5c:76:7e:20:8e:dd:05:a0:6c:d7:b9:95:41: 0a:4b:2d:8a:11:45:c6:d2:fe:67:4f:82:93:0a:63:5a:2f:5b: 1e:89:b0:d8:91:ac:f4:bb:48:50:d3:40:ec:87:65:50:83:6c: 63:ae:63:ba:af:d3:1d:ec:83:7c:8b:35:a1:6c:5a:a2:31:36: 45:a2:19:89:be:73:50:d7:98:8c:6f:0e:be:7f:0c:93:ce:06: f3:19:e2:55:e3:d5:45:9a:8f:b3:de:a6:3f:b9:ae:ad:17:f2: a3:68:5b:52:b3:ba:60:07:70:53:88:b2:83:f2:99:99:6a:3c: 57:ba:4d:c8:42:17:9f:1a:78:47:78:a0:4a:c6:02:17:ff:0b: 36:3b:ab:86:28:c0:47:b0:34:1f:ec:ed:28:8c:ac:4b:48:d9: 37:38:0c:5a:4f:2c:77:71:af:d7:20:ff:0c:b7:c4:e5:73:c8: 02:ac:de:90:27:39:1c:00:2e:63:11:a6:1c:d2:19:21:ca:8b: d2:0e:f0:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NU+qDjwJ5XMIZQ3aJQgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YmMzYWViOGIyZjBiNDg2ZTVjOGMwYzc5Y2U5ZDhkNjhi MThmOTYwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGVkZGU3Yzg3M2Y1ZGYyM2NiMWUyNjY5NzUxN2UyZjI3MTNmNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT2bpWo9KXCcLonXL2BCt6qh0XSj y3GhPb+jX1rd4SZErI7vkRH8A0cLykcOlSCIdWh6Y/B5+6fuBCMzdH0r2piGQ/e6 RzKVJ+j8QOAoK2Cu/GGcLi8zHRna18hFgvyrn7tl6+FJ02q0/6MHFu2Yr/EEPJMw 0hGu2K0yX2gEZgZ/6ZKRunmX4B4t4CwibQ8yCKnv9I8KSExgmo7t53UlOOcQ+5DO hLJRuE5D1nzI09AndJ4GhElWSLwSyIC3+51c2bhiz0h9ZbVnHIq2TgzpFWHugDdE xNk84sAtni3+INRMD5JaFvsTQY0bc2gUwlk3UsMN0y1/X2+50ZI52riojQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFDt3nyHP13yPLHiZpdRfi8nE/VEMB8GA1UdIwQY MBaAFAS8OuuLLwtIblyMDHnOnY1osY+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEt ZmYyMjdlNDk5M2Y3LzEvVU8zZWZJY19YZkk4c2VKbWwxRi1MeWNUOVVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEtZmYyMjdlNDk5M2Y3 LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWDwMA0G CSqGSIb3DQEBCwUAA4IBAQA4M6Hcjg6AjAye5LM4xHorKiMtvEpb5BtBXX7+hiEv EKK9ySGhSjKlg79CHEkWzKWsI18srjS9AOJThVx2fiCO3QWgbNe5lUEKSy2KEUXG 0v5nT4KTCmNaL1seibDYkaz0u0hQ00Dsh2VQg2xjrmO6r9Md7IN8izWhbFqiMTZF ohmJvnNQ15iMbw6+fwyTzgbzGeJV49VFmo+z3qY/ua6tF/KjaFtSs7pgB3BTiLKD 8pmZajxXuk3IQhefGnhHeKBKxgIX/ws2O6uGKMBHsDQf7O0ojKxLSNk3OAxaTyx3 ca/XIP8Mt8Tlc8gCrN6QJzkcAC5jEaYc0hkhyovSDvCE -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:23 2026 by rpki-client