This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/UrtdSIofhaNFKk3JSuwNs4gGVYM.roa File: UrtdSIofhaNFKk3JSuwNs4gGVYM.roa (raw, json) Hash identifier: ggNMIGKU56jLb1aZj1uZ1UliAG9bzA5REzJSwfmL/7I= Subject key identifier: 52:BB:5D:48:8A:1F:85:A3:45:2A:4D:C9:4A:EC:0D:B3:88:06:55:83 Certificate issuer: /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38 Certificate serial: 019B7EA720B05F54628A9CA4D1B5E9603979 Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/UrtdSIofhaNFKk3JSuwNs4gGVYM.roa Signing time: Fri 02 Jan 2026 12:20:40 +0000 ROA not before: Fri 02 Jan 2026 12:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42824 IP address blocks: 193.104.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:20:b0:5f:54:62:8a:9c:a4:d1:b5:e9:60:39:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38 Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52bb5d488a1f85a3452a4dc94aec0db388065583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6d:5f:16:09:4a:1d:2c:66:1b:8e:44:af:64: de:06:10:12:64:6d:8b:74:83:d1:1b:d8:74:5d:d6: e8:5f:21:fd:c9:e6:c6:34:10:4f:fc:46:da:41:12: 16:54:03:03:31:39:12:fa:53:0c:73:44:80:39:85: 78:b8:e3:6a:2a:45:d7:dc:22:8e:25:80:96:3a:2c: f1:56:ca:64:9b:ed:6a:66:42:65:76:d6:e2:83:f1: ab:c4:42:14:70:b4:eb:3a:3d:4e:30:75:c4:92:4a: 0c:c7:a7:8a:a2:ae:98:8e:5b:9a:6f:ba:27:48:a3: 3e:44:b8:08:c3:7f:bc:95:da:91:8a:8f:28:fd:39: 0b:cf:80:37:33:30:06:fc:ca:d8:d7:eb:c1:9a:67: 10:f4:af:58:c8:43:79:ab:31:92:5f:56:77:ab:31: 4e:5c:e2:46:cb:e4:a7:21:49:73:24:5b:f4:fe:bb: e3:f6:ad:05:db:e1:f0:b5:3f:b2:0e:11:b4:4b:65: 8e:a0:e4:b0:1d:e5:3f:9c:c4:00:34:79:1d:b8:7c: d7:dd:15:42:32:d9:91:31:21:e1:d8:72:c1:ce:f7: 00:54:93:00:0a:ac:5f:2b:d9:0e:f8:f2:f4:d4:2e: ae:41:b9:86:93:3b:90:c6:2e:9d:74:a1:a0:c8:7f: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BB:5D:48:8A:1F:85:A3:45:2A:4D:C9:4A:EC:0D:B3:88:06:55:83 X509v3 Authority Key Identifier: keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/UrtdSIofhaNFKk3JSuwNs4gGVYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.189.0/24 Signature Algorithm: sha256WithRSAEncryption 42:cf:3d:7a:91:62:9a:c6:f9:54:22:f7:c2:73:c2:25:10:28: fe:55:67:2b:62:9f:87:b1:4f:24:8f:61:09:3b:b5:26:10:a7: 80:16:80:76:c2:ca:c3:98:6a:5f:67:ca:d1:6e:6c:09:4f:86: 7b:8c:55:75:e5:4d:0c:8a:d4:78:80:16:73:f1:b9:bf:d6:0d: e7:b5:0e:0f:74:d2:91:a5:ac:f7:4c:a1:80:c6:17:48:9d:e0: 52:92:d9:a9:ac:f3:e2:fe:2e:1e:0c:c8:39:bc:df:44:56:a5: e0:94:50:86:7f:54:e1:2a:1a:30:dd:80:b0:ff:d6:a9:33:7f: 60:a5:3b:5a:9e:90:29:3a:dd:17:b0:f1:70:58:30:fd:91:a7: 7b:4e:0f:50:f4:40:51:c1:a5:d6:84:f4:7f:21:ae:1e:c5:97: b4:17:61:e8:a0:b3:00:6c:72:6a:c8:e8:47:82:9f:19:94:14: 04:02:65:b4:ea:0a:11:cf:ca:02:4d:3c:88:51:12:bb:32:3a: e1:fa:3e:bb:fd:78:5e:e6:b1:20:a3:e7:f9:59:e5:67:c5:ff: e9:77:b7:15:b6:4e:a4:d7:10:e3:db:ea:42:95:07:e1:b3:e8: 3e:a6:9d:cb:02:64:bc:58:1b:76:99:14:7c:5d:da:ef:7b:2b: 1c:5b:8a:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pyCwX1Riipyk0bXpYDl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2E1NWQyZTNiOTE2M2NjNDg4YjZmN2FiZTYyZWIyNmU3 YThjMzgwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmJiNWQ0ODhhMWY4NWEzNDUyYTRkYzk0YWVjMGRiMzg4MDY1NTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA621fFglKHSxmG45Er2TeBhASZG2L dIPRG9h0XdboXyH9yebGNBBP/EbaQRIWVAMDMTkS+lMMc0SAOYV4uONqKkXX3CKO JYCWOizxVspkm+1qZkJldtbig/GrxEIUcLTrOj1OMHXEkkoMx6eKoq6Yjluab7on SKM+RLgIw3+8ldqRio8o/TkLz4A3MzAG/MrY1+vBmmcQ9K9YyEN5qzGSX1Z3qzFO XOJGy+SnIUlzJFv0/rvj9q0F2+HwtT+yDhG0S2WOoOSwHeU/nMQANHkduHzX3RVC MtmRMSHh2HLBzvcAVJMACqxfK9kO+PL01C6uQbmGkzuQxi6ddKGgyH92HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFK7XUiKH4WjRSpNyUrsDbOIBlWDMB8GA1UdIwQY MBaAFNTKVdLjuRY8xIi296vmLrJueow4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xYzYwNWItMTdiMy00ODMzLWEwM2Et YTRmMDEyOTNjYzA1LzEvVXJ0ZFNJb2ZoYU5GS2szSlN1d05zNGdHVllNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xYzYwNWItMTdiMy00ODMzLWEwM2EtYTRmMDEyOTNjYzA1 LzEvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWi9MA0G CSqGSIb3DQEBCwUAA4IBAQBCzz16kWKaxvlUIvfCc8IlECj+VWcrYp+HsU8kj2EJ O7UmEKeAFoB2wsrDmGpfZ8rRbmwJT4Z7jFV15U0MitR4gBZz8bm/1g3ntQ4PdNKR paz3TKGAxhdIneBSktmprPPi/i4eDMg5vN9EVqXglFCGf1ThKhow3YCw/9apM39g pTtanpApOt0XsPFwWDD9kad7Tg9Q9EBRwaXWhPR/Ia4exZe0F2HooLMAbHJqyOhH gp8ZlBQEAmW06goRz8oCTTyIURK7Mjrh+j67/Xhe5rEgo+f5WeVnxf/pd7cVtk6k 1xDj2+pClQfhs+g+pp3LAmS8WBt2mRR8XdrveyscW4rz -----END CERTIFICATE-----Generated at Wed Jan 7 14:25:53 2026 by rpki-client