This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/1Pk2KOHLdvr4CicnUNuBzH_2gyo.roa File: 1Pk2KOHLdvr4CicnUNuBzH_2gyo.roa (raw, json) Hash identifier: MhgKH4XXLplgDoi9ekQYp8OVpGYhKa65h2GVlb4h3zY= Subject key identifier: D4:F9:36:28:E1:CB:76:FA:F8:0A:27:27:50:DB:81:CC:7F:F6:83:2A Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb Certificate serial: 019B77C6E0058B60D5DFF7F3CB15359B1EE1 Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/1Pk2KOHLdvr4CicnUNuBzH_2gyo.roa Signing time: Thu 01 Jan 2026 04:18:00 +0000 ROA not before: Thu 01 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15925 IP address blocks: 193.41.124.0/23 maxlen: 23 195.110.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e0:05:8b:60:d5:df:f7:f3:cb:15:35:9b:1e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb Validity Not Before: Jan 1 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4f93628e1cb76faf80a272750db81cc7ff6832a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:40:e4:e5:1a:73:ba:e6:43:80:74:e4:42:ed: a7:9c:d2:e0:0c:bb:25:e6:16:a1:33:a0:76:71:b2: cd:99:a9:54:cf:8d:ae:ab:89:77:e4:44:59:2c:09: 4f:94:ef:07:64:81:2d:b4:96:d9:b1:cb:df:10:60: cf:4c:c0:20:39:11:fc:a0:32:e4:1e:cc:c6:44:92: 7a:e0:22:cd:6d:b0:6c:a1:5d:e4:13:1c:46:b1:e1: c4:bb:5d:22:a2:8d:3c:63:d4:29:0c:87:a2:bb:a0: 23:0a:26:f9:8f:03:50:c1:75:87:a0:bf:02:16:65: 7f:00:02:c3:31:63:4a:30:e2:d1:9b:5e:11:d6:dd: 4d:34:86:74:53:52:64:a0:dc:71:11:44:70:29:0f: 52:b8:fa:48:41:0d:71:44:6a:ee:91:51:ae:69:5a: 3e:d1:ee:34:88:61:54:09:1e:43:3c:f2:ec:fe:7b: 0a:e9:64:67:1d:5b:13:bc:40:cc:72:e5:c9:26:82: 0d:a4:0e:f7:94:68:01:44:9b:37:d8:cf:cf:92:d3: 92:85:61:f6:2f:c7:f5:96:2f:14:0d:b9:c6:4a:52: e9:41:12:ed:30:6d:55:16:e9:9b:8c:26:ca:5d:5c: 0e:e3:5c:b9:a6:8c:5f:b4:ab:e6:34:62:c4:fb:fe: a6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F9:36:28:E1:CB:76:FA:F8:0A:27:27:50:DB:81:CC:7F:F6:83:2A X509v3 Authority Key Identifier: keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/1Pk2KOHLdvr4CicnUNuBzH_2gyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.124.0/23 195.110.26.0/23 Signature Algorithm: sha256WithRSAEncryption 43:9f:b8:9c:94:db:bd:01:07:38:07:cb:72:92:04:a8:79:e5: e5:e0:2c:20:b4:8b:8d:54:09:63:f4:18:8e:75:a3:d2:66:bd: 05:da:47:94:7d:65:6a:4c:2e:cf:2a:dd:54:55:5f:d2:6d:b6: 59:c2:57:b0:69:35:65:4a:2c:45:03:05:85:27:98:32:b8:8f: 74:3c:5f:92:8e:04:61:51:bb:ce:06:40:8b:0f:92:7d:1e:16: 2b:13:2b:51:37:4a:9d:78:5f:5b:63:cc:4f:69:8f:da:18:88: 98:5e:39:f2:ea:f9:dc:9a:bf:86:b5:b9:f4:ad:6e:1c:9c:76: b6:25:fc:c2:d6:0f:7f:a2:c6:54:8a:1e:f0:e0:35:ba:73:ca: 4f:26:4a:2f:99:a7:b5:be:9a:e3:f0:64:c3:4d:32:c3:62:d0: 6b:47:b3:31:fb:61:e3:3c:3c:0c:9a:45:f4:96:66:cf:5e:f0: 70:46:64:ff:29:63:95:f1:aa:93:f7:c6:74:b6:37:cd:92:2a: 6e:73:40:9b:c7:07:f6:ad:56:b9:d1:36:5d:ed:c7:34:30:db: e8:0c:4e:05:a5:ff:26:c7:63:c4:24:c1:e1:c8:bf:dd:a3:de: 78:10:c2:27:61:c4:3c:b3:65:54:4d:bf:25:ae:8d:8b:fb:e9: 82:32:1d:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xuAFi2DV3/fzyxU1mx7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTZmYzcyNjJiYTc4MmRkNWY2NDMwODU5ODJiNWQzNjcw M2RiZmIwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGY5MzYyOGUxY2I3NmZhZjgwYTI3Mjc1MGRiODFjYzdmZjY4MzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEDk5RpzuuZDgHTkQu2nnNLgDLsl 5hahM6B2cbLNmalUz42uq4l35ERZLAlPlO8HZIEttJbZscvfEGDPTMAgORH8oDLk HszGRJJ64CLNbbBsoV3kExxGseHEu10ioo08Y9QpDIeiu6AjCib5jwNQwXWHoL8C FmV/AALDMWNKMOLRm14R1t1NNIZ0U1JkoNxxEURwKQ9SuPpIQQ1xRGrukVGuaVo+ 0e40iGFUCR5DPPLs/nsK6WRnHVsTvEDMcuXJJoINpA73lGgBRJs32M/PktOShWH2 L8f1li8UDbnGSlLpQRLtMG1VFumbjCbKXVwO41y5poxftKvmNGLE+/6mNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNT5Nijhy3b6+AonJ1Dbgcx/9oMqMB8GA1UdIwQY MBaAFKGm/HJiungt1fZDCFmCtdNnA9v7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FiOGNtSzZlQzNWOWtNSVdZSzEwMmNEMl9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZjEzYTUtYThkYi00YzM3LWI3YTct YzUzNzg1ODFiMGUxLzEvMVBrMktPSExkdnI0Q2ljblVOdUJ6SF8yZ3lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZjEzYTUtYThkYi00YzM3LWI3YTctYzUzNzg1ODFiMGUx LzEvb2FiOGNtSzZlQzNWOWtNSVdZSzEwMmNEMl9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwSl8AwQB w24aMA0GCSqGSIb3DQEBCwUAA4IBAQBDn7iclNu9AQc4B8tykgSoeeXl4CwgtIuN VAlj9BiOdaPSZr0F2keUfWVqTC7PKt1UVV/SbbZZwlewaTVlSixFAwWFJ5gyuI90 PF+SjgRhUbvOBkCLD5J9HhYrEytRN0qdeF9bY8xPaY/aGIiYXjny6vncmr+Gtbn0 rW4cnHa2JfzC1g9/osZUih7w4DW6c8pPJkovmae1vprj8GTDTTLDYtBrR7Mx+2Hj PDwMmkX0lmbPXvBwRmT/KWOV8aqT98Z0tjfNkipuc0Cbxwf2rVa50TZd7cc0MNvo DE4Fpf8mx2PEJMHhyL/do954EMInYcQ8s2VUTb8lro2L++mCMh06 -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:32 2026 by rpki-client