This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/losRMcMe1sYENcHwmy-F3t27Ir0.roa File: losRMcMe1sYENcHwmy-F3t27Ir0.roa (raw, json) Hash identifier: 3qLyQKtMtn3DWWHuZok+MXdp7KCYO0Zr0mswM5xKKjQ= Subject key identifier: 96:8B:11:31:C3:1E:D6:C6:04:35:C1:F0:9B:2F:85:DE:DD:BB:22:BD Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C80638F18F179A357A8C871FD6CE6D5 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/losRMcMe1sYENcHwmy-F3t27Ir0.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61302 IP address blocks: 193.32.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:63:8f:18:f1:79:a3:57:a8:c8:71:fd:6c:e6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=968b1131c31ed6c60435c1f09b2f85deddbb22bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fd:ae:9e:07:62:a4:b5:5b:b7:0e:01:cc:0b: 37:de:0b:7b:20:09:8e:d8:87:99:ad:9f:27:0f:b8: 62:f0:50:55:df:a2:b7:71:b8:37:5f:d1:fc:76:b2: 0a:0c:bc:44:f5:1e:b1:2e:5c:1d:df:e6:07:a0:7a: 70:0f:bc:77:77:77:0b:9f:a3:70:47:55:50:19:e3: 90:01:26:e0:4b:61:f4:3e:83:bb:fa:15:32:83:71: b4:a1:74:d3:03:da:e5:54:bc:ad:c1:da:fa:f3:ef: e4:ea:b2:08:a1:05:c4:9c:55:57:1e:2e:ad:4e:97: 63:ce:11:14:f3:eb:ee:2a:68:70:b9:b5:1e:af:cf: 06:0a:27:d3:98:16:e1:47:09:6d:a7:83:6d:24:3d: 1b:e1:f0:d6:7e:05:32:ec:29:a3:06:4f:85:c9:1a: 03:9b:3f:f5:86:85:82:a2:7b:4f:e2:1e:65:ae:fb: c7:26:f5:64:a3:1b:ed:ee:5f:7a:b2:bb:f3:6d:6b: 9f:b0:51:f2:4d:38:01:41:31:a3:fd:e9:f8:89:df: 48:f3:76:5c:0b:d4:ba:9e:f6:b6:5f:7b:36:f2:21: 76:5c:53:00:dd:6c:b9:09:1d:9b:44:73:3c:ef:72: 7d:f1:65:b1:cb:8e:41:d4:8c:d7:4e:77:96:ff:72: 45:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8B:11:31:C3:1E:D6:C6:04:35:C1:F0:9B:2F:85:DE:DD:BB:22:BD X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/losRMcMe1sYENcHwmy-F3t27Ir0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.188.0/24 Signature Algorithm: sha256WithRSAEncryption 62:78:ac:c7:f6:ba:5e:c9:d3:86:68:8e:3b:4f:3c:63:f4:e1: f3:9f:be:57:43:00:e3:b9:d7:e1:b5:e6:e7:6f:89:52:82:c5: 9d:8b:12:04:46:92:2c:ff:0d:e2:dd:31:1d:d5:86:d7:bb:65: 6e:7f:72:47:38:16:0c:b9:12:c5:4a:f3:c3:8e:96:70:e6:43: 76:6b:66:be:0a:6f:8f:d2:a0:f1:47:6d:71:8c:6f:07:14:84: 5c:70:38:8e:f3:ce:3b:22:6a:c7:23:13:03:af:21:d8:11:e3: eb:55:1b:a2:6b:d8:ad:7e:e6:c4:5a:ce:9e:4e:59:00:15:c8: 4c:66:4c:e7:98:b1:48:5c:1f:fb:a8:23:66:8a:e8:65:7b:2c: d2:9d:f8:24:75:27:f5:1d:6a:83:c2:e9:df:92:a0:83:0f:84: ef:b0:97:a1:4e:39:85:b0:1e:1a:bb:d4:a3:3b:ad:82:18:b4: 05:eb:dd:d4:69:bd:ff:9a:c3:39:4b:86:6e:21:01:ff:8a:d8: 2f:3c:1c:fc:73:28:92:9d:86:30:ed:f0:2a:cd:3b:9f:f4:cb: 29:94:7e:60:58:3d:c6:a9:c3:01:95:13:04:35:c0:5f:38:c9: 16:c3:9b:72:33:b9:71:78:1a:e6:29:9c:cf:83:07:be:49:a3: e0:a2:4e:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGOPGPF5o1eoyHH9bObVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjhiMTEzMWMzMWVkNmM2MDQzNWMxZjA5YjJmODVkZWRkYmIyMmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv2ungdipLVbtw4BzAs33gt7IAmO 2IeZrZ8nD7hi8FBV36K3cbg3X9H8drIKDLxE9R6xLlwd3+YHoHpwD7x3d3cLn6Nw R1VQGeOQASbgS2H0PoO7+hUyg3G0oXTTA9rlVLytwdr68+/k6rIIoQXEnFVXHi6t TpdjzhEU8+vuKmhwubUer88GCifTmBbhRwltp4NtJD0b4fDWfgUy7CmjBk+FyRoD mz/1hoWContP4h5lrvvHJvVkoxvt7l96srvzbWufsFHyTTgBQTGj/en4id9I83Zc C9S6nva2X3s28iF2XFMA3Wy5CR2bRHM873J98WWxy45B1IzXTneW/3JFKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJaLETHDHtbGBDXB8Jsvhd7duyK9MB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvbG9zUk1jTWUxc1lFTmNId215LUYzdDI3SXIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSC8MA0G CSqGSIb3DQEBCwUAA4IBAQBieKzH9rpeydOGaI47Tzxj9OHzn75XQwDjudfhtebn b4lSgsWdixIERpIs/w3i3TEd1YbXu2Vuf3JHOBYMuRLFSvPDjpZw5kN2a2a+Cm+P 0qDxR21xjG8HFIRccDiO8847ImrHIxMDryHYEePrVRuia9itfubEWs6eTlkAFchM ZkznmLFIXB/7qCNmiuhleyzSnfgkdSf1HWqDwunfkqCDD4TvsJehTjmFsB4au9Sj O62CGLQF693Uab3/msM5S4ZuIQH/itgvPBz8cyiSnYYw7fAqzTuf9MsplH5gWD3G qcMBlRMENcBfOMkWw5tyM7lxeBrmKZzPgwe+SaPgok5X -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:13 2026 by rpki-client