This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/eCfVBrUlWVO_wd2C6zG6HlsWFfw.roa File: eCfVBrUlWVO_wd2C6zG6HlsWFfw.roa (raw, json) Hash identifier: LnqLUkXGJD0OiqsbSYEC0AppS9eAVHhK/gEl/tMcU6s= Subject key identifier: 78:27:D5:06:B5:25:59:53:BF:C1:DD:82:EB:31:BA:1E:5B:16:15:FC Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14 Certificate serial: 019B7BA43797F32376A0FBA6F8B88834D7E5 Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/eCfVBrUlWVO_wd2C6zG6HlsWFfw.roa Signing time: Thu 01 Jan 2026 22:18:38 +0000 ROA not before: Thu 01 Jan 2026 22:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35099 IP address blocks: 193.221.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:37:97:f3:23:76:a0:fb:a6:f8:b8:88:34:d7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14 Validity Not Before: Jan 1 22:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7827d506b5255953bfc1dd82eb31ba1e5b1615fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:8e:5f:34:56:b4:52:b9:db:fa:4c:c4:aa: af:bc:f4:33:14:6e:9a:a7:2e:6d:79:d9:a4:7c:f0: b8:a7:13:dd:d3:5d:c4:6c:31:9a:48:4e:c9:48:cf: 53:71:52:be:74:9c:7f:00:52:42:2c:5c:4f:db:69: 7c:c0:9a:4f:c7:71:16:ad:c7:a8:8e:21:bc:d7:1b: f5:f8:ec:af:92:12:3a:09:a2:9d:c3:2a:8d:2e:6c: 20:18:a8:8b:34:a2:36:dd:17:6b:a9:1f:77:ef:e3: 9d:53:ed:1a:06:3e:94:6f:1e:a6:4c:77:02:55:77: 4c:ed:25:ae:fc:b9:50:a9:40:72:6d:05:4b:b3:3a: 3d:2a:e8:c9:ee:41:0c:e3:d6:9c:40:b5:f7:23:dd: 0b:22:32:b1:e3:95:95:dc:0e:4a:88:7a:7c:ce:1f: 9c:26:af:71:aa:6c:74:a8:20:6c:fb:ca:ef:51:36: dc:9b:b5:5e:79:7c:e3:47:2b:fc:74:fb:2b:a4:ff: e9:78:19:82:4f:6e:7a:7e:3e:3d:1b:d8:ea:e1:73: 6c:5d:63:29:36:d0:7d:02:fe:cf:0b:be:71:c5:52: 22:ef:8c:b4:d7:bf:a1:c4:c1:e2:50:3d:a4:e0:3b: b0:45:bf:e6:f8:9e:5c:06:d1:86:25:84:3f:2d:2c: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:27:D5:06:B5:25:59:53:BF:C1:DD:82:EB:31:BA:1E:5B:16:15:FC X509v3 Authority Key Identifier: keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/eCfVBrUlWVO_wd2C6zG6HlsWFfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.221.115.0/24 Signature Algorithm: sha256WithRSAEncryption 99:bd:e0:e4:b0:f4:a6:62:b1:be:b6:eb:58:5b:17:d1:2e:42: 50:7e:00:b5:3e:0d:4f:91:8d:b5:6c:a8:fa:ce:65:27:5f:cd: 1a:e3:db:bf:02:d2:cc:c3:82:c2:69:cb:64:85:d1:5e:bd:29: 24:cf:50:46:68:60:22:c1:1b:58:fa:9a:1d:3d:81:d4:29:d3: 81:dd:92:39:d0:08:c6:f3:17:f3:54:fd:86:db:c9:1e:41:67: 5c:a8:7e:e5:55:8b:63:3b:f7:f3:82:aa:d5:6e:b0:3a:a8:50: 9d:71:8e:50:7a:98:74:42:a6:9c:13:f7:6a:55:10:fc:3a:07: 87:16:56:c4:b1:93:2d:e7:7a:6f:e2:6d:c0:32:6b:55:ac:03: 50:b1:d9:45:81:65:b3:16:00:5f:5f:97:4c:98:1d:dc:b9:5f: 5e:f3:59:4d:f4:e2:4e:8f:8c:83:74:f8:ff:1a:83:4a:be:1a: 6e:f4:f7:60:f6:17:be:1e:ad:ed:40:67:94:0d:56:df:b2:e7: 7e:6c:93:7a:23:b2:f3:f6:77:68:15:8d:8e:81:be:75:22:51: 6e:7b:a3:a6:6e:74:58:60:47:94:48:93:07:a4:a1:52:96:0a: 43:65:fd:c9:4c:83:2d:39:0c:40:74:b1:3e:de:14:b2:64:1a: 6b:0d:21:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pDeX8yN2oPum+LiINNflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTRlYjllZjhkZDM1ODllMjMyZGY4ZmU4NzZmMjVjZTk3 MDdhMTQwHhcNMjYwMTAxMjIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODI3ZDUwNmI1MjU1OTUzYmZjMWRkODJlYjMxYmExZTViMTYxNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnmOXzRWtFK52/pMxKqvvPQzFG6a py5tedmkfPC4pxPd013EbDGaSE7JSM9TcVK+dJx/AFJCLFxP22l8wJpPx3EWrceo jiG81xv1+OyvkhI6CaKdwyqNLmwgGKiLNKI23RdrqR937+OdU+0aBj6Ubx6mTHcC VXdM7SWu/LlQqUBybQVLszo9KujJ7kEM49acQLX3I90LIjKx45WV3A5KiHp8zh+c Jq9xqmx0qCBs+8rvUTbcm7VeeXzjRyv8dPsrpP/peBmCT256fj49G9jq4XNsXWMp NtB9Av7PC75xxVIi74y017+hxMHiUD2k4DuwRb/m+J5cBtGGJYQ/LSwJ9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHgn1Qa1JVlTv8Hdgusxuh5bFhX8MB8GA1UdIwQY MBaAFF7k65743TWJ4jLfj+h28lzpcHoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzIt ZmQzZmYzNWYzNGE5LzEvZUNmVkJyVWxXVk9fd2QyQzZ6RzZIbHNXRmZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzItZmQzZmYzNWYzNGE5 LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd1zMA0G CSqGSIb3DQEBCwUAA4IBAQCZveDksPSmYrG+tutYWxfRLkJQfgC1Pg1PkY21bKj6 zmUnX80a49u/AtLMw4LCactkhdFevSkkz1BGaGAiwRtY+podPYHUKdOB3ZI50AjG 8xfzVP2G28keQWdcqH7lVYtjO/fzgqrVbrA6qFCdcY5Qeph0QqacE/dqVRD8OgeH FlbEsZMt53pv4m3AMmtVrANQsdlFgWWzFgBfX5dMmB3cuV9e81lN9OJOj4yDdPj/ GoNKvhpu9Pdg9he+Hq3tQGeUDVbfsud+bJN6I7Lz9ndoFY2Ogb51IlFue6OmbnRY YEeUSJMHpKFSlgpDZf3JTIMtOQxAdLE+3hSyZBprDSHk -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:11 2026 by rpki-client