This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/d5q3dL4EASzGPAAwnOfen6UJAcQ.roa File: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (raw, json) Hash identifier: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY= Subject key identifier: 77:9A:B7:74:BE:04:01:2C:C6:3C:00:30:9C:E7:DE:9F:A5:09:01:C4 Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c Certificate serial: 019C232B0FD494715DEC3D1F8362B08DB991 Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/d5q3dL4EASzGPAAwnOfen6UJAcQ.roa Signing time: Tue 03 Feb 2026 11:02:30 +0000 ROA not before: Tue 03 Feb 2026 11:02:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29518 IP address blocks: 193.26.17.0/24 maxlen: 24 2001:67c:2968::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:2b:0f:d4:94:71:5d:ec:3d:1f:83:62:b0:8d:b9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c Validity Not Before: Feb 3 11:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=779ab774be04012cc63c00309ce7de9fa50901c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:63:27:9a:31:38:0d:be:c2:3f:f2:3b:c2: 25:41:f1:b1:55:b3:fd:32:76:42:24:e8:6c:d1:25: c6:23:fa:41:56:0b:51:54:01:e9:04:7e:fb:c4:d3: 63:36:a1:cf:c0:ad:4f:d7:c8:f2:c2:fc:ff:21:96: 58:38:00:d2:c6:d4:3f:28:2b:f3:c5:70:7e:32:a6: 01:74:bb:8b:05:06:66:fe:f5:08:2c:93:60:49:1f: db:07:80:e3:e7:4d:de:83:79:23:46:d8:b6:34:d7: 63:4a:ec:78:51:55:02:2b:3b:5a:58:7b:ea:43:43: 06:2f:7c:16:04:4c:69:9b:3d:d6:f2:70:11:d6:ea: d2:fa:ed:64:67:e6:4d:87:98:c1:85:13:10:4a:63: f0:de:d7:fb:b5:74:67:40:d8:13:c9:fb:48:76:c8: e2:73:47:95:53:60:fd:92:66:4c:2d:28:e7:cd:c1: ef:de:f0:de:56:3f:54:71:bc:34:cd:d6:cb:ec:b4: 60:12:40:cd:0e:27:c7:0b:56:52:57:f2:6b:e4:f8: a1:a2:38:f4:8e:e4:86:d6:98:d5:3e:0e:5d:93:22: 3d:52:89:3a:12:00:07:2d:1d:a4:f8:64:15:58:21: 0f:f8:55:8b:16:b1:32:e1:83:d8:1b:94:48:b5:2d: 14:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9A:B7:74:BE:04:01:2C:C6:3C:00:30:9C:E7:DE:9F:A5:09:01:C4 X509v3 Authority Key Identifier: keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/d5q3dL4EASzGPAAwnOfen6UJAcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.17.0/24 IPv6: 2001:67c:2968::/48 Signature Algorithm: sha256WithRSAEncryption 9d:e9:b6:1c:da:a7:e1:29:05:8d:f6:bc:fe:a7:43:16:b7:fb: cb:65:ee:e2:41:86:06:79:35:ea:bc:fe:87:2e:9f:7c:f8:28: 24:a6:f1:fe:28:91:e2:91:80:96:da:a3:d8:0b:df:99:16:e7: c0:4d:4f:ec:78:6d:27:01:9d:2c:d9:16:07:90:70:78:17:59: 13:3b:7a:c3:ed:59:53:a5:43:ce:1e:64:7f:e4:63:40:8a:d1: 0b:82:12:14:27:5c:a8:b6:c9:9e:c5:49:57:cb:84:f1:7a:0a: 61:99:12:92:69:35:11:e8:5d:a0:f1:b0:b2:d6:8d:93:3e:14: e6:c2:d8:d2:bb:72:a6:a0:5c:2c:57:29:b1:62:5d:ed:bc:40: 11:a9:e1:8a:c8:04:27:3f:a2:44:83:95:a8:cd:a5:32:1f:91: 00:6b:fa:34:78:14:f6:21:d9:38:6a:fe:57:f8:22:ad:09:5f: 73:56:b1:20:a0:ee:b6:ee:70:3b:7f:84:18:fa:fc:c6:69:c5: dd:1e:b2:59:bb:2f:b7:8d:3f:ed:f4:2d:7b:dc:c3:46:65:56: e0:1e:b1:95:d7:b0:c2:e7:62:65:ed:96:bf:6b:c1:84:c1:0f: 28:b8:46:3f:db:4f:d7:43:99:c6:55:89:9e:b8:2f:bd:b7:96: d2:00:cf:b4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZwjKw/UlHFd7D0fg2KwjbmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTI3NTU1YzFhNWM1ZGRmN2Y3YWNjODM5ZmE1NzdhYTdl ZTdhOWMwHhcNMjYwMjAzMTEwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzlhYjc3NGJlMDQwMTJjYzYzYzAwMzA5Y2U3ZGU5ZmE1MDkwMWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqdjJ5oxOA2+wj/yO8IlQfGxVbP9 MnZCJOhs0SXGI/pBVgtRVAHpBH77xNNjNqHPwK1P18jywvz/IZZYOADSxtQ/KCvz xXB+MqYBdLuLBQZm/vUILJNgSR/bB4Dj503eg3kjRti2NNdjSux4UVUCKztaWHvq Q0MGL3wWBExpmz3W8nAR1urS+u1kZ+ZNh5jBhRMQSmPw3tf7tXRnQNgTyftIdsji c0eVU2D9kmZMLSjnzcHv3vDeVj9Ucbw0zdbL7LRgEkDNDifHC1ZSV/Jr5Pihojj0 juSG1pjVPg5dkyI9Uok6EgAHLR2k+GQVWCEP+FWLFrEy4YPYG5RItS0U7QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHeat3S+BAEsxjwAMJzn3p+lCQHEMB8GA1UdIwQY MBaAFOWidVXBpcXd9/esyDn6V3qn7nqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEt ZmQ3MTY2N2EyYjVmLzEvZDVxM2RMNEVBU3pHUEFBd25PZmVuNlVKQWNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEtZmQ3MTY2N2EyYjVm LzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwRoRMA8E AgACMAkDBwAgAQZ8KWgwDQYJKoZIhvcNAQELBQADggEBAJ3pthzap+EpBY32vP6n Qxa3+8tl7uJBhgZ5Neq8/ocun3z4KCSm8f4okeKRgJbao9gL35kW58BNT+x4bScB nSzZFgeQcHgXWRM7esPtWVOlQ84eZH/kY0CK0QuCEhQnXKi2yZ7FSVfLhPF6CmGZ EpJpNRHoXaDxsLLWjZM+FObC2NK7cqagXCxXKbFiXe28QBGp4YrIBCc/okSDlajN pTIfkQBr+jR4FPYh2Thq/lf4Iq0JX3NWsSCg7rbucDt/hBj6/MZpxd0eslm7L7eN P+30LXvcw0ZlVuAesZXXsMLnYmXtlr9rwYTBDyi4Rj/bT9dDmcZViZ64L723ltIA z7Q= -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:46 2026 by rpki-client