This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa File: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (raw, json) Hash identifier: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM= Subject key identifier: D8:3A:7E:F0:41:C1:C5:7D:43:FE:55:7A:52:CC:68:56:A2:CD:42:44 Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb Certificate serial: 019B76EB1DB12277DDEB46D130184D52B3B2 Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15536 IP address blocks: 194.26.22.0/23 maxlen: 23 194.26.22.0/24 maxlen: 24 194.26.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1d:b1:22:77:dd:eb:46:d1:30:18:4d:52:b3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d83a7ef041c1c57d43fe557a52cc6856a2cd4244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:17:c2:51:dd:59:93:61:c0:95:3e:7c:50: 29:ac:c4:c0:19:c2:a5:28:b5:bb:f0:e7:b0:61:f8: 67:24:a1:6d:63:4b:8a:89:7a:13:d0:bb:1f:59:43: 75:ce:70:7f:21:7f:e3:64:c9:d9:59:4d:32:cc:eb: a1:96:d7:40:ba:fc:e6:d0:33:76:69:c0:6d:a9:00: a6:f8:24:16:eb:9b:bb:cc:e7:39:80:27:52:bc:b8: 00:76:22:68:2c:9e:86:dc:5f:c8:0c:44:25:a7:11: 51:ee:e6:f8:1f:9f:62:5c:38:20:6e:b9:64:98:10: a5:3d:aa:05:45:e5:17:42:64:a7:e4:6d:69:ea:6f: 9d:04:70:10:66:5d:66:2f:3c:85:0e:49:ec:8f:89: 0b:e1:44:9c:fa:51:4f:dc:55:dc:00:c2:1f:33:07: 85:4d:73:6d:6a:2f:c8:dd:5d:a2:6c:e3:2e:7a:fb: ee:0b:65:d7:4d:51:6d:15:f4:5a:4f:e9:c3:9f:3b: ac:b2:2b:ff:aa:8f:55:50:4d:16:13:d8:36:ff:a2: b9:5e:c8:74:24:a1:c9:c5:1f:2e:c7:ec:da:c6:81: 7b:39:f9:ec:8e:36:2e:31:62:5f:db:54:d2:0e:89: a3:4b:f9:d7:d1:7a:76:43:2f:eb:0e:7f:aa:3d:ce: 90:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3A:7E:F0:41:C1:C5:7D:43:FE:55:7A:52:CC:68:56:A2:CD:42:44 X509v3 Authority Key Identifier: keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.22.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:fb:04:ef:27:d0:9c:8a:6c:66:6c:14:88:ae:70:2e:a9:d5: 73:d0:88:29:dc:79:62:82:be:f8:70:bf:b4:fe:e3:f8:c3:c6: 7a:db:b1:e1:6d:d7:55:bc:03:b8:4a:47:8a:4e:58:c8:34:9a: 1f:bc:da:82:fd:87:7a:8e:ab:36:c6:09:15:e3:9e:12:07:2f: 15:5d:c7:a9:30:ef:4f:8a:52:34:6e:0f:83:48:3d:36:eb:a3: 7b:dc:3a:b3:a1:f1:87:09:bf:c5:46:c0:7d:d3:38:a0:37:84: 99:2f:62:58:a6:e4:cb:7b:c0:20:83:38:dd:40:dc:4b:5f:fa: 7b:c3:d6:d4:0f:8b:78:7c:82:ac:ab:4e:29:dd:49:ea:80:3b: 4c:2a:91:3c:8b:d9:c4:67:1a:52:9f:5c:03:14:fe:77:fd:51: 14:a0:57:35:9b:1a:96:18:28:af:20:e4:78:e0:16:ef:f6:78: 7b:59:65:8c:00:d8:d8:dc:65:2e:d6:24:53:64:70:ae:e4:98: fb:05:da:e5:96:f3:4d:74:2d:d9:4f:a6:55:c0:c8:3a:fd:a8: 65:61:63:70:e6:2e:c3:42:5e:4c:21:35:9f:b6:be:06:fc:bf: 98:d9:06:3a:17:bf:7e:07:b1:d2:20:b1:c4:c3:9b:3b:45:b4: 7a:6d:96:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26x2xInfd60bRMBhNUrOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNDNmOGVhYWQ4NGVjMDkxZTg3MDZhN2M5ODY2YzFhZGU1 NjVlZGIwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODNhN2VmMDQxYzFjNTdkNDNmZTU1N2E1MmNjNjg1NmEyY2Q0MjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a4XwlHdWZNhwJU+fFAprMTAGcKl KLW78OewYfhnJKFtY0uKiXoT0LsfWUN1znB/IX/jZMnZWU0yzOuhltdAuvzm0DN2 acBtqQCm+CQW65u7zOc5gCdSvLgAdiJoLJ6G3F/IDEQlpxFR7ub4H59iXDggbrlk mBClPaoFReUXQmSn5G1p6m+dBHAQZl1mLzyFDknsj4kL4USc+lFP3FXcAMIfMweF TXNtai/I3V2ibOMuevvuC2XXTVFtFfRaT+nDnzussiv/qo9VUE0WE9g2/6K5Xsh0 JKHJxR8ux+zaxoF7OfnsjjYuMWJf21TSDomjS/nX0Xp2Qy/rDn+qPc6QRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNg6fvBBwcV9Q/5VelLMaFaizUJEMB8GA1UdIwQY MBaAFPJD+OqthOwJHocGp8mGbBreVl7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDct ZWY2MWE2MTQxNDJkLzEvMkRwLThFSEJ4WDFEX2xWNlVzeG9WcUxOUWtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDctZWY2MWE2MTQxNDJk LzEvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwhoWMA0G CSqGSIb3DQEBCwUAA4IBAQB/+wTvJ9CcimxmbBSIrnAuqdVz0Igp3Hligr74cL+0 /uP4w8Z627HhbddVvAO4SkeKTljINJofvNqC/Yd6jqs2xgkV454SBy8VXcepMO9P ilI0bg+DSD0266N73DqzofGHCb/FRsB90zigN4SZL2JYpuTLe8AggzjdQNxLX/p7 w9bUD4t4fIKsq04p3UnqgDtMKpE8i9nEZxpSn1wDFP53/VEUoFc1mxqWGCivIOR4 4Bbv9nh7WWWMANjY3GUu1iRTZHCu5Jj7BdrllvNNdC3ZT6ZVwMg6/ahlYWNw5i7D Ql5MITWftr4G/L+Y2QY6F79+B7HSILHEw5s7RbR6bZbG -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:21 2026 by rpki-client