This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/bke8ax1pCvvLAuwPv4em1prwfnY.roa File: bke8ax1pCvvLAuwPv4em1prwfnY.roa (raw, json) Hash identifier: mJQ3UKIJxw6Qho+A0NX51BaOUpOgZ2myXxBW+mqxYw8= Subject key identifier: 6E:47:BC:6B:1D:69:0A:FB:CB:02:EC:0F:BF:87:A6:D6:9A:F0:7E:76 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C807283A7D9FC7778358B31F41DF31F Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/bke8ax1pCvvLAuwPv4em1prwfnY.roa Signing time: Fri 02 Jan 2026 02:19:11 +0000 ROA not before: Fri 02 Jan 2026 02:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215498 IP address blocks: 93.92.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:72:83:a7:d9:fc:77:78:35:8b:31:f4:1d:f3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e47bc6b1d690afbcb02ec0fbf87a6d69af07e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:46:92:aa:6e:5b:84:03:b0:7f:06:ca:98: 88:68:14:e8:b2:a4:0e:ce:0f:ad:aa:27:31:fc:41: 49:83:b4:23:4d:1e:d6:33:b6:a6:5b:93:03:11:0e: 3a:02:1a:dd:2c:c4:50:88:26:e4:ce:18:0d:b7:46: be:4c:5c:0a:f5:ee:ac:74:e8:a0:fe:51:d0:c4:53: bf:98:4c:b0:75:d5:ea:f7:53:7e:38:2c:47:7a:ae: d2:d5:b4:a5:d7:9b:d0:ae:c7:b9:35:37:82:25:5a: 84:c8:e2:90:c1:76:2a:70:bd:2d:1e:09:76:5e:47: ea:35:19:91:8d:e2:63:aa:65:ed:d4:e9:70:13:f6: 61:9d:ec:fa:4e:6e:8a:cc:66:f5:19:fe:9f:1a:57: 40:8f:9d:64:d2:cc:df:c6:21:5f:79:bf:68:b7:e2: 0f:bd:2b:fb:3f:3e:4b:34:f9:54:d5:fe:86:b0:01: 32:6f:38:96:99:27:0b:9d:2f:6d:50:4d:13:a2:d5: 42:82:2e:37:e0:06:2e:b7:6f:01:4d:b5:b4:4a:40: 31:96:89:26:2c:e8:67:4b:8f:e5:e9:9f:9b:dc:54: cc:a8:d8:cf:8f:e9:86:87:ba:23:a9:27:30:e1:14: 46:8c:15:4e:89:15:d5:c4:5d:72:fe:b7:50:b9:ee: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:47:BC:6B:1D:69:0A:FB:CB:02:EC:0F:BF:87:A6:D6:9A:F0:7E:76 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/bke8ax1pCvvLAuwPv4em1prwfnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.92.114.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:2d:3e:b6:16:1d:57:b8:25:90:89:e6:dd:4b:18:2b:85:2f: 2d:a0:d2:33:af:32:65:0b:96:35:73:75:5e:67:4c:15:3a:f7: ea:0c:d2:6b:53:44:65:5d:7e:11:25:ae:ee:0a:04:d4:36:44: 42:e4:9d:39:f9:f9:c1:7c:38:1f:fc:77:7e:13:ee:81:69:c1: b9:7c:32:39:57:0b:87:25:bf:6f:72:54:58:c2:89:52:6c:f9: 8e:8e:d1:18:8d:b0:49:06:11:b6:36:65:9a:97:b4:2e:87:f4: 50:dd:5b:a3:ea:98:3a:77:81:be:4b:c5:68:2d:a1:cb:65:1e: 7d:0f:75:4d:46:96:74:03:59:ef:18:3d:9f:c1:69:62:dc:ce: 5d:74:1b:b3:1d:c9:89:75:bc:c2:c1:b7:7e:5d:19:e6:cf:ab: 3f:88:58:77:01:3c:85:10:dd:77:73:cc:d7:d6:4b:11:9a:0c: 34:7d:43:a1:32:80:66:a5:b9:e6:16:40:0f:46:a6:5a:bb:0d: 04:0f:bf:b8:6d:b6:d5:16:c9:f2:8e:f2:ca:1d:67:98:33:ed: 41:16:40:e7:0d:99:2b:0c:91:8e:54:14:43:9e:90:4e:ca:21: 2d:0f:43:4b:50:ff:f5:6a:1b:2b:23:14:80:b8:f7:f0:c2:5c: cb:4c:d1:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHKDp9n8d3g1izH0HfMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTQ3YmM2YjFkNjkwYWZiY2IwMmVjMGZiZjg3YTZkNjlhZjA3ZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY9GkqpuW4QDsH8GypiIaBTosqQO zg+tqicx/EFJg7QjTR7WM7amW5MDEQ46AhrdLMRQiCbkzhgNt0a+TFwK9e6sdOig /lHQxFO/mEywddXq91N+OCxHeq7S1bSl15vQrse5NTeCJVqEyOKQwXYqcL0tHgl2 XkfqNRmRjeJjqmXt1OlwE/Zhnez6Tm6KzGb1Gf6fGldAj51k0szfxiFfeb9ot+IP vSv7Pz5LNPlU1f6GsAEybziWmScLnS9tUE0TotVCgi434AYut28BTbW0SkAxlokm LOhnS4/l6Z+b3FTMqNjPj+mGh7ojqScw4RRGjBVOiRXVxF1y/rdQue46uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG5HvGsdaQr7ywLsD7+Hptaa8H52MB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvYmtlOGF4MXBDdnZMQXV3UHY0ZW0xcHJ3Zm5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVxyMA0G CSqGSIb3DQEBCwUAA4IBAQBsLT62Fh1XuCWQiebdSxgrhS8toNIzrzJlC5Y1c3Ve Z0wVOvfqDNJrU0RlXX4RJa7uCgTUNkRC5J05+fnBfDgf/Hd+E+6BacG5fDI5VwuH Jb9vclRYwolSbPmOjtEYjbBJBhG2NmWal7Quh/RQ3Vuj6pg6d4G+S8VoLaHLZR59 D3VNRpZ0A1nvGD2fwWli3M5ddBuzHcmJdbzCwbd+XRnmz6s/iFh3ATyFEN13c8zX 1ksRmgw0fUOhMoBmpbnmFkAPRqZauw0ED7+4bbbVFsnyjvLKHWeYM+1BFkDnDZkr DJGOVBRDnpBOyiEtD0NLUP/1ahsrIxSAuPfwwlzLTNHp -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:12 2026 by rpki-client