This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/_pR80NWgxj4Gx0LuVsPkMkTDYZg.roa File: _pR80NWgxj4Gx0LuVsPkMkTDYZg.roa (raw, json) Hash identifier: 1gS4zptz0LFHVLhrqKXAHRNkXnwAvD1HMmz81y59cx0= Subject key identifier: FE:94:7C:D0:D5:A0:C6:3E:06:C7:42:EE:56:C3:E4:32:44:C3:61:98 Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca Certificate serial: 019B7911270758CEC8E7244D9F26571CD8F2 Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/_pR80NWgxj4Gx0LuVsPkMkTDYZg.roa Signing time: Thu 01 Jan 2026 10:18:45 +0000 ROA not before: Thu 01 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.243.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:27:07:58:ce:c8:e7:24:4d:9f:26:57:1c:d8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe947cd0d5a0c63e06c742ee56c3e43244c36198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a0:cb:0d:f4:32:06:cc:87:69:26:21:4f:e3: d5:2e:8e:6f:c5:c0:58:eb:4f:f4:9e:25:9e:8d:89: 09:c8:9b:61:47:cc:38:37:a4:78:fc:10:99:a8:31: 42:ec:c0:c1:dc:db:6c:3e:fb:06:2f:e8:f0:14:c0: d4:74:9b:07:c7:eb:d4:9a:34:c7:ba:ef:d3:35:12: 1c:85:83:84:30:cb:ea:73:ee:18:7c:75:63:55:b6: d3:80:4a:b4:09:70:d4:b9:cb:6e:56:c5:45:65:90: a2:ba:b8:8c:7a:16:9b:a6:1a:53:de:a1:bf:24:82: 44:e9:65:16:ac:ca:8d:da:9d:a7:6f:c9:a2:4f:7f: 68:ad:65:b7:cc:7f:92:03:8b:d4:b4:06:ea:d9:bc: a4:75:34:9f:ac:1f:93:fc:67:0e:ae:18:33:4f:ef: 6d:5c:71:68:fb:c5:d1:f0:d6:3e:43:b6:41:96:8e: d7:b8:d2:e1:bd:af:12:2f:3d:b4:31:6b:ff:94:81: e8:a6:c8:6b:52:92:70:45:64:d7:3c:e5:0c:1d:7e: 5a:af:a2:16:b8:60:86:8d:90:5e:40:54:f7:23:8f: b7:06:04:04:90:15:53:91:7d:01:0c:7a:81:31:fc: 17:3d:ee:55:15:db:f1:f3:44:87:62:bc:18:63:2d: e0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:94:7C:D0:D5:A0:C6:3E:06:C7:42:EE:56:C3:E4:32:44:C3:61:98 X509v3 Authority Key Identifier: keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/_pR80NWgxj4Gx0LuVsPkMkTDYZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.243.129.0/24 Signature Algorithm: sha256WithRSAEncryption 71:b8:c3:b2:7f:dc:af:30:14:d1:95:5a:b2:c3:74:22:de:eb: b0:a3:af:7b:f4:30:9c:74:e3:c2:55:36:71:7c:20:ba:4e:99: 47:13:22:32:45:1d:5d:32:05:83:54:27:09:ad:44:f5:28:4c: 50:37:07:d6:72:f5:4a:29:bf:b2:73:1f:3f:7a:61:10:3a:e4: d9:8c:0c:08:00:be:9e:06:88:a9:2c:ec:9f:58:55:ee:2d:f3: f4:00:8e:5d:d6:4b:5c:ab:c4:76:e7:c2:85:65:42:e5:92:29: 7f:f3:fd:59:12:21:43:a8:32:55:3e:6a:58:8c:f1:ae:d8:9f: 5d:c3:09:f5:03:9b:55:c8:72:dc:b4:0c:93:e0:fc:4f:e2:4a: 90:62:ab:b7:14:73:8b:41:10:1b:d0:06:e0:5d:e8:f4:2e:90: ef:9b:9d:98:25:4f:13:90:a1:47:44:5e:86:e3:aa:33:2f:a6: e8:e2:24:dd:b3:99:48:31:23:3a:6e:1b:46:85:1b:0c:ad:de: 7f:25:bf:0e:d4:62:85:fd:3a:80:9e:b7:69:8c:b8:01:7b:b4: 4a:df:20:07:f5:cf:c4:8c:2f:d0:9e:a8:a9:27:86:a3:30:13: 8d:e3:71:69:e2:53:38:15:cc:68:bb:ec:0b:fa:75:b0:e7:89: a9:45:89:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EScHWM7I5yRNnyZXHNjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NmEzZjgzODY4ODg0Mzc1OGQyODA1NzAwN2RjNmNkMjg5 OGVjY2EwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTk0N2NkMGQ1YTBjNjNlMDZjNzQyZWU1NmMzZTQzMjQ0YzM2MTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aDLDfQyBsyHaSYhT+PVLo5vxcBY 60/0niWejYkJyJthR8w4N6R4/BCZqDFC7MDB3NtsPvsGL+jwFMDUdJsHx+vUmjTH uu/TNRIchYOEMMvqc+4YfHVjVbbTgEq0CXDUuctuVsVFZZCiuriMehabphpT3qG/ JIJE6WUWrMqN2p2nb8miT39orWW3zH+SA4vUtAbq2bykdTSfrB+T/GcOrhgzT+9t XHFo+8XR8NY+Q7ZBlo7XuNLhva8SLz20MWv/lIHopshrUpJwRWTXPOUMHX5ar6IW uGCGjZBeQFT3I4+3BgQEkBVTkX0BDHqBMfwXPe5VFdvx80SHYrwYYy3gGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP6UfNDVoMY+BsdC7lbD5DJEw2GYMB8GA1UdIwQY MBaAFORqP4OGiIQ3WNKAVwB9xs0omOzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81MmNmOTktZTc5OC00Y2FiLWEzMDMt YTNiMDZkNGU0Nzc1LzEvX3BSODBOV2d4ajRHeDBMdVZzUGtNa1REWVpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC81MmNmOTktZTc5OC00Y2FiLWEzMDMtYTNiMDZkNGU0Nzc1 LzEvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfOBMA0G CSqGSIb3DQEBCwUAA4IBAQBxuMOyf9yvMBTRlVqyw3Qi3uuwo6979DCcdOPCVTZx fCC6TplHEyIyRR1dMgWDVCcJrUT1KExQNwfWcvVKKb+ycx8/emEQOuTZjAwIAL6e BoipLOyfWFXuLfP0AI5d1ktcq8R258KFZULlkil/8/1ZEiFDqDJVPmpYjPGu2J9d wwn1A5tVyHLctAyT4PxP4kqQYqu3FHOLQRAb0AbgXej0LpDvm52YJU8TkKFHRF6G 46ozL6bo4iTds5lIMSM6bhtGhRsMrd5/Jb8O1GKF/TqAnrdpjLgBe7RK3yAH9c/E jC/QnqipJ4ajMBON43Fp4lM4Fcxou+wL+nWw54mpRYmL -----END CERTIFICATE-----Generated at Thu Jan 1 17:28:25 2026 by rpki-client