This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/rChP9coQkYplEubLbO6s9Cp-q5I.roa File: rChP9coQkYplEubLbO6s9Cp-q5I.roa (raw, json) Hash identifier: 1LZSA/1gFfSDw/C3+xqoF/PvToYmYwuTx/TQdw2XSbI= Subject key identifier: AC:28:4F:F5:CA:10:91:8A:65:12:E6:CB:6C:EE:AC:F4:2A:7E:AB:92 Certificate issuer: /CN=c3e715d9490f521e36a056f999bfb56e0f21fc86 Certificate serial: 019B7EA64B3604BD0AB099C74264F86DD908 Authority key identifier: C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/rChP9coQkYplEubLbO6s9Cp-q5I.roa Signing time: Fri 02 Jan 2026 12:19:46 +0000 ROA not before: Fri 02 Jan 2026 12:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31632 IP address blocks: 193.23.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:4b:36:04:bd:0a:b0:99:c7:42:64:f8:6d:d9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e715d9490f521e36a056f999bfb56e0f21fc86 Validity Not Before: Jan 2 12:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac284ff5ca10918a6512e6cb6ceeacf42a7eab92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:a3:c1:60:9f:c5:aa:42:da:de:6c:e3:49: d1:b8:0b:e4:52:47:32:ef:df:dd:86:17:22:fa:ce: 88:77:e3:81:09:a7:e5:66:93:0a:1d:39:8d:84:60: be:ba:ed:ed:7e:57:69:90:26:84:5e:9a:b7:66:be: 70:4b:4e:6b:b2:0c:37:9b:1d:26:bf:78:18:40:bb: 6a:cd:de:38:d8:86:13:aa:fc:e0:22:0e:68:70:65: 19:d0:98:14:33:99:7c:9d:68:76:83:34:04:69:d0: 5f:86:ca:ed:1f:a7:89:57:1b:bd:14:21:7d:5c:de: db:c1:a2:37:d7:1d:bd:4f:b0:21:27:fa:b7:b7:b8: 33:3b:00:89:c6:19:d9:64:7c:58:29:6f:7f:49:13: 95:ab:36:43:32:2b:ad:e5:1c:f9:1f:6e:7b:d6:f8: 18:8e:ee:43:41:18:4e:12:42:d5:77:a9:cc:66:1d: b7:84:32:b0:e9:0d:ee:75:21:54:9e:13:e7:23:e0: 2b:3e:f9:a8:bf:2a:70:02:9c:2c:53:1e:00:b2:0a: 8f:c8:10:79:19:33:e9:5a:da:15:78:03:0a:50:66: 4c:74:1c:05:81:5e:96:f3:33:fd:37:8f:41:94:5f: 1e:01:bb:dc:6d:c4:57:a9:32:23:91:86:17:41:6e: 8c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:28:4F:F5:CA:10:91:8A:65:12:E6:CB:6C:EE:AC:F4:2A:7E:AB:92 X509v3 Authority Key Identifier: keyid:C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/rChP9coQkYplEubLbO6s9Cp-q5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.116.0/24 Signature Algorithm: sha256WithRSAEncryption 62:f3:7a:62:f2:a9:69:2f:12:88:2d:f2:40:80:b2:47:3f:c0: e1:66:e6:8f:1c:f0:55:e5:f2:69:da:b3:f3:b2:28:48:95:56: a1:bd:a2:41:41:4a:27:c0:0b:27:b3:99:cf:60:d1:de:6a:5d: 33:05:2e:9e:55:a4:f0:bf:b3:4a:51:2e:59:53:7d:bd:68:65: aa:20:0c:6f:85:e8:91:30:a4:89:1c:03:2e:4f:6a:4a:33:cf: 6e:92:ff:ab:38:4c:59:0a:0b:76:81:57:fb:c6:85:7c:e6:0a: 16:5a:c2:f6:2e:f6:b7:77:2d:23:71:70:aa:be:33:6c:00:46: 63:2d:93:53:57:78:71:8e:f4:d0:e2:01:4a:56:c4:11:84:1f: 37:69:e5:18:5c:0a:f3:ff:c4:e8:f5:4b:91:af:58:90:16:f1: 74:94:d9:8d:72:bb:72:0e:61:46:d2:2f:a7:0f:f6:49:34:de: 9a:a8:c0:89:fa:3f:1a:8b:a4:0d:d1:8b:a6:bc:06:77:8f:ae: c1:bd:8a:dd:16:73:68:c4:ff:33:c9:ac:63:b7:d0:2b:d6:c1: 9c:b7:65:cd:e0:70:1d:2f:de:b2:a0:75:99:4a:d9:75:75:8c: 70:2d:c7:b1:4e:e8:7a:b7:95:29:69:57:01:e8:97:76:18:e1: 94:f7:0e:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pks2BL0KsJnHQmT4bdkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZTcxNWQ5NDkwZjUyMWUzNmEwNTZmOTk5YmZiNTZlMGYy MWZjODYwHhcNMjYwMTAyMTIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzI4NGZmNWNhMTA5MThhNjUxMmU2Y2I2Y2VlYWNmNDJhN2VhYjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/WjwWCfxapC2t5s40nRuAvkUkcy 79/dhhci+s6Id+OBCaflZpMKHTmNhGC+uu3tfldpkCaEXpq3Zr5wS05rsgw3mx0m v3gYQLtqzd442IYTqvzgIg5ocGUZ0JgUM5l8nWh2gzQEadBfhsrtH6eJVxu9FCF9 XN7bwaI31x29T7AhJ/q3t7gzOwCJxhnZZHxYKW9/SROVqzZDMiut5Rz5H2571vgY ju5DQRhOEkLVd6nMZh23hDKw6Q3udSFUnhPnI+ArPvmovypwApwsUx4AsgqPyBB5 GTPpWtoVeAMKUGZMdBwFgV6W8zP9N49BlF8eAbvcbcRXqTIjkYYXQW6M0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKwoT/XKEJGKZRLmy2zurPQqfquSMB8GA1UdIwQY MBaAFMPnFdlJD1IeNqBW+Zm/tW4PIfyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdy1jVjJVa1BVaDQyb0ZiNW1iLTFiZzhoX0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS81MmIyNzktNGUwMi00NDBmLTgzYzAt YjkzNjAyNGEyNTRhLzEvckNoUDljb1FrWXBsRXViTGJPNnM5Q3AtcTVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS81MmIyNzktNGUwMi00NDBmLTgzYzAtYjkzNjAyNGEyNTRh LzEvdy1jVjJVa1BVaDQyb0ZiNW1iLTFiZzhoX0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRd0MA0G CSqGSIb3DQEBCwUAA4IBAQBi83pi8qlpLxKILfJAgLJHP8DhZuaPHPBV5fJp2rPz sihIlVahvaJBQUonwAsns5nPYNHeal0zBS6eVaTwv7NKUS5ZU329aGWqIAxvheiR MKSJHAMuT2pKM89ukv+rOExZCgt2gVf7xoV85goWWsL2Lva3dy0jcXCqvjNsAEZj LZNTV3hxjvTQ4gFKVsQRhB83aeUYXArz/8To9UuRr1iQFvF0lNmNcrtyDmFG0i+n D/ZJNN6aqMCJ+j8ai6QN0YumvAZ3j67BvYrdFnNoxP8zyaxjt9Ar1sGct2XN4HAd L96yoHWZStl1dYxwLcexTuh6t5UpaVcB6Jd2GOGU9w7D -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:02 2026 by rpki-client