This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/RtEJrYYYVSw3agdpZ8fIxDXTX1Y.roa File: RtEJrYYYVSw3agdpZ8fIxDXTX1Y.roa (raw, json) Hash identifier: cKYN0YkCJsDdPkx/HgK4R2mLQELTgIw1O/rAAl0yOQY= Subject key identifier: 46:D1:09:AD:86:18:55:2C:37:6A:07:69:67:C7:C8:C4:35:D3:5F:56 Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb Certificate serial: 019B7B35C6C073ACC5E2E188EF4C026117F7 Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/RtEJrYYYVSw3agdpZ8fIxDXTX1Y.roa Signing time: Thu 01 Jan 2026 20:18:00 +0000 ROA not before: Thu 01 Jan 2026 20:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20983 IP address blocks: 193.109.244.0/23 maxlen: 24 193.109.244.0/24 maxlen: 24 193.109.245.0/24 maxlen: 24 195.242.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c6:c0:73:ac:c5:e2:e1:88:ef:4c:02:61:17:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46d109ad8618552c376a076967c7c8c435d35f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:d4:35:a9:86:34:85:c2:04:24:30:e7:2d: e6:4d:5c:69:be:d8:c1:82:14:79:03:51:1f:02:4b: 8b:56:82:68:51:57:27:9c:67:1a:41:32:2d:ee:70: fb:14:02:a0:ac:dd:ae:74:a3:44:18:3c:db:ad:57: ac:73:53:23:b7:7a:f3:81:2f:6c:4a:e7:3e:3f:d1: 37:65:02:8e:7f:69:2c:1c:d3:45:ab:a5:d0:f9:73: 04:e8:6c:9d:9d:05:67:c2:67:e7:87:dd:22:fa:00: 11:87:0b:47:88:3d:f3:4f:f9:96:da:28:7a:aa:88: c7:26:04:29:52:3f:fc:98:3f:6b:65:65:8e:03:5f: 94:29:25:92:28:a3:fd:a3:f1:8a:41:1a:6b:fa:13: 54:9d:15:e6:be:97:3e:2c:40:fb:c0:2b:67:32:06: 1a:ae:72:67:a9:f2:75:2a:9f:83:8f:f6:f2:53:19: 53:33:e7:54:37:7a:c3:17:39:5d:4d:4c:92:e9:cf: 31:bc:b7:80:b9:e2:86:e6:46:69:28:34:66:73:8a: ea:93:08:56:b2:24:59:11:85:48:f5:09:21:84:50: 99:d2:b9:6f:e3:4c:23:45:16:9c:91:40:aa:a7:d5: f2:12:50:a7:c8:68:6e:78:ae:57:21:4b:da:4f:79: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D1:09:AD:86:18:55:2C:37:6A:07:69:67:C7:C8:C4:35:D3:5F:56 X509v3 Authority Key Identifier: keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/RtEJrYYYVSw3agdpZ8fIxDXTX1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.244.0/23 195.242.183.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:39:2d:46:48:6b:58:24:03:75:d2:e0:f2:58:0c:b7:80:03: 65:d7:a7:63:59:88:aa:61:fa:c4:bc:c9:98:9e:c9:9d:d3:db: 61:a7:80:ff:21:f2:af:fe:b4:76:cc:ed:c5:d4:8e:52:c9:3e: 9d:4c:91:a0:f1:a1:ed:8d:3c:bf:89:62:30:65:c0:e5:0a:4e: 14:7d:63:ac:36:90:54:b0:e4:83:22:0f:46:c9:3a:27:cd:c0: 91:3e:8e:e9:8e:3c:a7:77:05:fc:f0:9a:ba:83:19:86:83:32: 2b:fc:28:5a:97:af:f4:9f:3b:c2:bb:4d:08:96:72:91:b4:8a: 8a:8b:e5:37:d4:83:98:2a:3e:ef:9d:93:be:4d:7e:98:15:ac: 8d:97:6a:35:ae:f4:03:cc:23:b6:9f:3a:f0:10:20:b9:90:56: 32:a3:0e:aa:70:f8:36:ee:49:9d:5b:c8:92:fe:c4:39:37:93: aa:6a:f2:11:60:d9:4f:68:e7:27:3e:72:22:90:e7:65:35:b0: d8:24:61:6a:35:db:94:47:bf:98:26:44:0e:5f:25:8e:b2:41: 69:ce:e7:90:e7:7b:2e:dc:6e:25:8c:03:68:e2:ab:61:f8:ee: ea:69:f1:f5:64:50:4c:79:83:fa:a7:14:32:1b:fe:d8:f6:b4: cb:ea:64:59 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NcbAc6zF4uGI70wCYRf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMjNiMDZkNjBlYzNlNzZiNDkyMGIyYjY0MTQxZmEzYWY2 ZTVmYmIwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmQxMDlhZDg2MTg1NTJjMzc2YTA3Njk2N2M3YzhjNDM1ZDM1ZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp53UNamGNIXCBCQw5y3mTVxpvtjB ghR5A1EfAkuLVoJoUVcnnGcaQTIt7nD7FAKgrN2udKNEGDzbrVesc1Mjt3rzgS9s Suc+P9E3ZQKOf2ksHNNFq6XQ+XME6GydnQVnwmfnh90i+gARhwtHiD3zT/mW2ih6 qojHJgQpUj/8mD9rZWWOA1+UKSWSKKP9o/GKQRpr+hNUnRXmvpc+LED7wCtnMgYa rnJnqfJ1Kp+Dj/byUxlTM+dUN3rDFzldTUyS6c8xvLeAueKG5kZpKDRmc4rqkwhW siRZEYVI9QkhhFCZ0rlv40wjRRackUCqp9XyElCnyGhueK5XIUvaT3mlnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEbRCa2GGFUsN2oHaWfHyMQ1019WMB8GA1UdIwQY MBaAFEsjsG1g7D52tJILK2QUH6Ovbl+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAt NTRmNmU1MmY1NDdiLzEvUnRFSnJZWVlWU3czYWdkcFo4Zkl4RFhUWDFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAtNTRmNmU1MmY1NDdi LzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwW30AwQA w/K3MA0GCSqGSIb3DQEBCwUAA4IBAQCMOS1GSGtYJAN10uDyWAy3gANl16djWYiq YfrEvMmYnsmd09thp4D/IfKv/rR2zO3F1I5SyT6dTJGg8aHtjTy/iWIwZcDlCk4U fWOsNpBUsOSDIg9GyTonzcCRPo7pjjyndwX88Jq6gxmGgzIr/Chal6/0nzvCu00I lnKRtIqKi+U31IOYKj7vnZO+TX6YFayNl2o1rvQDzCO2nzrwECC5kFYyow6qcPg2 7kmdW8iS/sQ5N5OqavIRYNlPaOcnPnIikOdlNbDYJGFqNduUR7+YJkQOXyWOskFp zueQ53su3G4ljANo4qth+O7qafH1ZFBMeYP6pxQyG/7Y9rTL6mRZ -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:08 2026 by rpki-client