This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa File: lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa (raw, json) Hash identifier: 9m0BkgzH4gSyZI57npmc+BY5iSf+kkTcUVRRsTUd1zs= Subject key identifier: 94:40:6F:5E:CE:2E:DC:EA:5B:11:93:31:E5:7C:0B:1F:68:50:94:AB Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1 Certificate serial: 019B7758C8C9C75B7C9BA4FAA37771853DD3 Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 193.47.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c8:c9:c7:5b:7c:9b:a4:fa:a3:77:71:85:3d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94406f5ece2edcea5b119331e57c0b1f685094ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8c:2f:d8:08:ea:1c:90:11:5a:fd:54:6c:09: 32:d9:d4:df:bd:2c:e7:0c:51:fb:9b:ff:f3:a5:f4: fa:91:d5:d4:b6:6d:ca:ed:b4:db:9c:93:b9:8c:05: 82:e8:d7:b5:1d:ce:b7:32:e5:02:d9:ea:03:cf:a6: 19:c6:51:d1:75:fe:b6:aa:5d:38:75:c8:a4:58:45: 1d:18:3f:a3:80:0e:99:fc:c3:bd:1a:5d:21:98:dd: 00:aa:b1:3f:40:06:28:d9:51:6c:22:5a:6e:ae:40: c3:c2:c6:29:9d:09:7f:dc:73:7e:b2:5a:2c:11:ac: a7:76:2c:21:c1:68:d0:2f:39:e5:d3:38:9f:71:18: 8a:18:48:43:a3:05:e8:6a:39:17:5a:25:6a:00:41: 1b:13:7e:da:a6:18:d9:29:d1:f4:cd:17:6d:87:dd: 4b:bc:d6:27:75:44:d2:06:70:f5:64:b9:f4:40:ff: 46:10:a2:89:93:54:ce:63:11:54:b3:88:92:b2:ed: aa:d8:ad:ef:0f:b2:7b:5e:f2:4a:88:b2:eb:41:2c: 50:dd:75:ea:7d:74:2e:c8:e6:d4:df:4c:5d:e6:ed: 9e:c9:d7:94:2c:b0:86:e2:c8:58:b8:1c:79:97:93: 23:b7:dd:77:65:c6:07:68:fa:22:75:12:87:20:41: 3f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:40:6F:5E:CE:2E:DC:EA:5B:11:93:31:E5:7C:0B:1F:68:50:94:AB X509v3 Authority Key Identifier: keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.103.0/24 Signature Algorithm: sha256WithRSAEncryption 40:95:21:57:f7:f0:98:37:0b:54:c7:d1:1e:05:fd:9e:56:b6: 30:0c:bc:ab:2f:a4:b2:f2:89:69:0b:39:2b:27:4d:65:f5:cc: 09:0d:3c:50:f5:e7:6a:95:7d:2c:bd:1c:6b:92:e8:31:42:95: c4:51:56:4b:7a:b6:00:68:26:34:01:f7:33:67:32:82:9f:1b: 35:78:3a:6b:62:9e:91:1e:23:dc:65:09:30:f1:fe:37:47:ca: 83:94:5d:88:64:ba:85:28:e1:77:d9:80:50:fc:46:c6:f4:0a: 2a:7b:4d:75:a2:81:86:e4:ba:82:cd:77:ac:64:cd:13:a7:db: 6a:b1:1b:22:b4:30:69:ff:1b:75:1c:45:0c:9f:56:19:ef:b8: bc:66:8d:3d:b9:17:81:cf:89:95:32:88:15:5f:a7:af:ab:8b: 0e:32:e4:b9:74:bb:9d:76:5e:ba:d3:16:25:96:ff:17:41:1e: d5:e1:35:61:29:ae:44:ef:8e:aa:ba:9a:58:e1:77:88:14:6a: 46:9a:ab:a6:fe:c7:4e:9b:2c:3d:f0:5c:5d:36:69:e8:db:c3: eb:f1:73:4e:6d:38:1c:1d:be:14:f1:30:f9:2e:f2:60:ea:8f: a9:e8:f5:42:a2:d1:41:9d:89:c9:24:51:84:77:5d:ec:21:7b: 30:37:97:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMjJx1t8m6T6o3dxhT3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDIyYzI0MTQ3ZWM3OWZhOTA2NDY0YWIxNDNmZDQ3ZTNi ZWIzYTEwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDQwNmY1ZWNlMmVkY2VhNWIxMTkzMzFlNTdjMGIxZjY4NTA5NGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYwv2AjqHJARWv1UbAky2dTfvSzn DFH7m//zpfT6kdXUtm3K7bTbnJO5jAWC6Ne1Hc63MuUC2eoDz6YZxlHRdf62ql04 dcikWEUdGD+jgA6Z/MO9Gl0hmN0AqrE/QAYo2VFsIlpurkDDwsYpnQl/3HN+slos EayndiwhwWjQLznl0zifcRiKGEhDowXoajkXWiVqAEEbE37aphjZKdH0zRdth91L vNYndUTSBnD1ZLn0QP9GEKKJk1TOYxFUs4iSsu2q2K3vD7J7XvJKiLLrQSxQ3XXq fXQuyObU30xd5u2eydeULLCG4shYuBx5l5Mjt913ZcYHaPoidRKHIEE//QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJRAb17OLtzqWxGTMeV8Cx9oUJSrMB8GA1UdIwQY MBaAFNxCLCQUfsefqQZGSrFD/UfjvrOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMt MjE2NTEzNmM5ZDlhLzEvbEVCdlhzNHUzT3BiRVpNeDVYd0xIMmhRbEtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMtMjE2NTEzNmM5ZDlh LzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS9nMA0G CSqGSIb3DQEBCwUAA4IBAQBAlSFX9/CYNwtUx9EeBf2eVrYwDLyrL6Sy8olpCzkr J01l9cwJDTxQ9edqlX0svRxrkugxQpXEUVZLerYAaCY0AfczZzKCnxs1eDprYp6R HiPcZQkw8f43R8qDlF2IZLqFKOF32YBQ/EbG9Aoqe011ooGG5LqCzXesZM0Tp9tq sRsitDBp/xt1HEUMn1YZ77i8Zo09uReBz4mVMogVX6evq4sOMuS5dLuddl660xYl lv8XQR7V4TVhKa5E746quppY4XeIFGpGmqum/sdOmyw98FxdNmno28Pr8XNObTgc Hb4U8TD5LvJg6o+p6PVCotFBnYnJJFGEd13sIXswN5fj -----END CERTIFICATE-----Generated at Mon Jan 26 19:20:14 2026 by rpki-client