This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/F2TkJWjO_kTKwB5VXzwGua_uOGc.roa File: F2TkJWjO_kTKwB5VXzwGua_uOGc.roa (raw, json) Hash identifier: 7uJ+vBAnx4mbXYmOtaqu9UWy++IVJBYxNoDqgTuqW5E= Subject key identifier: 17:64:E4:25:68:CE:FE:44:CA:C0:1E:55:5F:3C:06:B9:AF:EE:38:67 Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648 Certificate serial: 019B7C119E320151233465DE0602F3780777 Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/F2TkJWjO_kTKwB5VXzwGua_uOGc.roa Signing time: Fri 02 Jan 2026 00:18:07 +0000 ROA not before: Fri 02 Jan 2026 00:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 193.109.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:9e:32:01:51:23:34:65:de:06:02:f3:78:07:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648 Validity Not Before: Jan 2 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1764e42568cefe44cac01e555f3c06b9afee3867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:c4:d1:c5:2f:22:49:8d:d9:b7:14:0d:3f: 12:55:c2:fe:9e:3a:57:05:1b:f0:c2:58:98:0b:a2: ad:1c:27:52:88:67:f8:37:78:82:d9:79:68:aa:9f: c9:32:8a:61:68:c9:e3:fd:e8:47:ab:67:aa:31:63: 5d:a4:ba:a0:fa:3b:ed:0f:3d:d2:aa:b3:58:f3:82: df:5e:5d:59:5a:d6:34:95:91:df:dd:75:d8:c2:c9: 83:59:67:e0:be:c1:46:bd:80:74:69:d5:5a:1a:b8: 5d:92:d4:27:ec:8d:9e:f2:04:28:7c:87:17:48:26: ce:52:3e:34:0e:da:b3:2d:0a:5e:e1:07:a5:ae:a8: 17:e6:94:c0:85:f6:b6:b1:3f:88:29:46:a1:5e:ea: 97:1c:85:86:82:b9:3e:d9:42:50:84:60:fd:e4:7a: dd:ef:66:ef:e2:11:49:85:c4:7b:c4:7a:37:fc:8b: 55:fc:e9:70:63:39:8b:0f:8b:cd:ed:de:e3:50:52: 8b:16:24:66:c4:5a:fb:aa:53:90:d8:1a:cd:d9:02: 34:22:e7:fb:31:cb:43:03:b0:30:9b:35:ed:f9:32: 3e:10:77:1c:23:43:3a:50:30:dc:f0:88:67:62:ad: ce:96:da:0f:b6:07:93:44:31:f4:a3:0b:6a:14:07: fd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:64:E4:25:68:CE:FE:44:CA:C0:1E:55:5F:3C:06:B9:AF:EE:38:67 X509v3 Authority Key Identifier: keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/F2TkJWjO_kTKwB5VXzwGua_uOGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.168.0/22 Signature Algorithm: sha256WithRSAEncryption 55:cc:aa:d3:01:50:11:ee:13:ab:27:1b:7e:65:53:90:3f:43: d0:c5:54:d4:72:07:81:23:be:ea:4e:ed:f6:44:25:5e:e6:22: 6d:86:76:78:a0:61:26:6f:8c:79:f2:f9:2b:a4:81:d9:10:47: 00:16:46:7f:1f:fc:a2:02:91:cc:24:de:94:d4:e9:37:ee:75: e8:d7:82:80:4e:51:52:1f:23:4c:f8:7e:a5:4b:55:30:6a:f5: b2:d0:71:7f:02:4e:4d:c4:bd:e0:4c:74:04:b7:77:c0:68:27: bc:1e:02:f0:cc:24:cb:13:56:17:00:de:ee:91:8b:f5:41:2b: 40:58:ca:56:1d:2b:33:df:e6:56:56:3b:ac:e3:de:49:0d:9f: 48:d6:65:1d:11:5a:7a:23:c9:1a:d1:f8:85:1b:44:f3:76:78: 77:7a:7e:50:c8:ca:67:b9:7a:e6:d3:d7:2c:de:21:47:52:15: 88:18:51:ae:9d:d3:64:80:fc:7d:6a:08:8a:25:ec:d8:e8:71: 01:d3:16:5e:4d:dc:00:b4:82:31:66:09:d2:db:98:72:1a:2a: 3d:de:77:a8:72:46:72:65:0a:f1:14:e8:61:0e:eb:be:ca:89: 2f:79:6c:b8:e6:18:8d:ee:74:d2:17:0d:d3:b2:c0:bd:fb:3d: 66:66:97:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EZ4yAVEjNGXeBgLzeAd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNjZiOTYwYTZmMWYwNDQzOWYwOTE4NmY5ZWNmNTMxYTlj ZTI2NDgwHhcNMjYwMTAyMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzY0ZTQyNTY4Y2VmZTQ0Y2FjMDFlNTU1ZjNjMDZiOWFmZWUzODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qbE0cUvIkmN2bcUDT8SVcL+njpX BRvwwliYC6KtHCdSiGf4N3iC2Xloqp/JMophaMnj/ehHq2eqMWNdpLqg+jvtDz3S qrNY84LfXl1ZWtY0lZHf3XXYwsmDWWfgvsFGvYB0adVaGrhdktQn7I2e8gQofIcX SCbOUj40DtqzLQpe4QelrqgX5pTAhfa2sT+IKUahXuqXHIWGgrk+2UJQhGD95Hrd 72bv4hFJhcR7xHo3/ItV/OlwYzmLD4vN7d7jUFKLFiRmxFr7qlOQ2BrN2QI0Iuf7 MctDA7AwmzXt+TI+EHccI0M6UDDc8IhnYq3OltoPtgeTRDH0owtqFAf9awIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBdk5CVozv5EysAeVV88Brmv7jhnMB8GA1UdIwQY MBaAFBNmuWCm8fBEOfCRhvns9TGpziZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjIt YTk2NzE1OWY4ODdkLzEvRjJUa0pXak9fa1RLd0I1Vlh6d0d1YV91T0djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjItYTk2NzE1OWY4ODdk LzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwW2oMA0G CSqGSIb3DQEBCwUAA4IBAQBVzKrTAVAR7hOrJxt+ZVOQP0PQxVTUcgeBI77qTu32 RCVe5iJthnZ4oGEmb4x58vkrpIHZEEcAFkZ/H/yiApHMJN6U1Ok37nXo14KATlFS HyNM+H6lS1UwavWy0HF/Ak5NxL3gTHQEt3fAaCe8HgLwzCTLE1YXAN7ukYv1QStA WMpWHSsz3+ZWVjus495JDZ9I1mUdEVp6I8ka0fiFG0Tzdnh3en5QyMpnuXrm09cs 3iFHUhWIGFGundNkgPx9agiKJezY6HEB0xZeTdwAtIIxZgnS25hyGio93neockZy ZQrxFOhhDuu+yokveWy45hiN7nTSFw3TssC9+z1mZpdY -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:31 2026 by rpki-client