This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/REUxyMPs7GWbZsF8OEuAFX9QDL8.roa File: REUxyMPs7GWbZsF8OEuAFX9QDL8.roa (raw, json) Hash identifier: qehVRR9bmjq29nQypelWb8SFMyO97IaXW9uMo+fR3FU= Subject key identifier: 44:45:31:C8:C3:EC:EC:65:9B:66:C1:7C:38:4B:80:15:7F:50:0C:BF Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8 Certificate serial: 019B797EC51E0495B2B4EFB232E4BE92D16D Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/REUxyMPs7GWbZsF8OEuAFX9QDL8.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51695 IP address blocks: 193.23.156.0/24 maxlen: 24 193.202.120.0/24 maxlen: 24 195.191.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c5:1e:04:95:b2:b4:ef:b2:32:e4:be:92:d1:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8 Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=444531c8c3ecec659b66c17c384b80157f500cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:27:3d:bd:4c:d2:4c:b4:63:23:98:cb:77:af: c4:c2:cc:9c:ed:ef:d5:40:df:22:59:88:2c:6b:d5: 6b:46:65:02:ff:81:a4:34:91:ff:04:0b:9f:0c:e6: 4b:de:b3:d9:a9:b8:32:94:b4:d1:52:8c:63:f0:84: 06:41:d8:e5:87:69:36:95:96:0b:3f:bd:29:31:e8: 7f:77:a5:af:49:75:97:87:50:50:61:ca:c7:30:f2: 8c:27:e8:cf:a0:05:e2:fc:59:b1:c2:08:58:e3:a6: f5:01:bd:64:77:fb:c6:f5:de:3d:4b:53:b8:11:64: 73:7b:d4:e2:a7:32:c4:32:9e:41:56:ed:d0:e8:b1: 0a:ff:f0:0e:97:e0:57:ca:a3:31:f7:c4:11:37:c7: 80:57:01:06:af:eb:72:b8:45:96:67:ee:99:4c:21: 51:20:13:d3:61:87:d5:a7:d8:5c:2d:ef:34:68:bb: a5:da:32:4e:80:d4:28:45:b0:ec:b7:b0:b6:bd:d4: 1a:a7:9b:21:ec:06:1c:78:83:60:3c:0f:34:26:c6: c5:01:7c:c3:df:a7:b8:6a:05:d7:70:c3:62:09:b6: c7:ea:9d:9e:ce:be:7c:af:dc:c2:c7:83:2a:cb:6a: 07:44:3a:5d:df:ff:66:6d:d3:9f:0b:c9:f7:1d:04: ce:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:45:31:C8:C3:EC:EC:65:9B:66:C1:7C:38:4B:80:15:7F:50:0C:BF X509v3 Authority Key Identifier: keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/REUxyMPs7GWbZsF8OEuAFX9QDL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.156.0/24 193.202.120.0/24 195.191.118.0/24 Signature Algorithm: sha256WithRSAEncryption b4:c4:f8:c8:fa:06:8f:70:d4:4f:cf:d1:c8:e5:8e:cb:ae:b0: 2e:67:ff:37:a8:b1:6f:34:33:98:c8:5e:e4:80:1b:d8:22:08: b9:0e:df:ec:30:8e:12:fc:8e:d8:2d:fd:ec:8b:84:16:01:3d: 32:0d:cf:f1:5b:05:6a:75:2a:73:73:c7:e5:b8:85:13:f5:16: 16:e5:13:e2:c4:6a:cb:a0:db:75:49:ed:30:92:fd:17:3f:75: f9:86:46:51:63:1c:77:f1:fe:c8:84:af:44:b6:ca:5a:16:a2: 15:46:90:29:97:ae:bc:97:db:9c:36:99:6b:66:c5:72:c1:b6: cc:8f:32:15:7f:17:d1:69:8a:57:33:62:71:26:cf:11:01:19: 46:be:9f:d3:f9:57:fe:d2:cd:65:34:61:a0:a5:d4:5c:13:cf: d1:27:67:84:6f:0c:7f:3c:39:ff:73:05:ec:09:20:94:7a:70: 69:0f:4b:f5:3a:b0:20:27:02:69:fd:4f:5e:91:15:54:b4:15: d4:7e:44:b1:e4:35:5f:21:18:22:9c:1c:ce:3a:d9:fb:33:d7: ad:90:69:e9:13:15:a8:41:dc:b2:ff:dd:7c:52:fa:fe:cb:9a: f4:dc:8e:17:92:00:b8:5a:cf:30:63:12:10:62:0c:29:4c:81: d6:a8:af:ae -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fsUeBJWytO+yMuS+ktFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NjAxZDdjYzgyMGRjNzE5MTVlYTkzMDY3M2VmNDdmMjQx YTcxYzgwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDQ1MzFjOGMzZWNlYzY1OWI2NmMxN2MzODRiODAxNTdmNTAwY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSc9vUzSTLRjI5jLd6/Ewsyc7e/V QN8iWYgsa9VrRmUC/4GkNJH/BAufDOZL3rPZqbgylLTRUoxj8IQGQdjlh2k2lZYL P70pMeh/d6WvSXWXh1BQYcrHMPKMJ+jPoAXi/FmxwghY46b1Ab1kd/vG9d49S1O4 EWRze9TipzLEMp5BVu3Q6LEK//AOl+BXyqMx98QRN8eAVwEGr+tyuEWWZ+6ZTCFR IBPTYYfVp9hcLe80aLul2jJOgNQoRbDst7C2vdQap5sh7AYceINgPA80JsbFAXzD 36e4agXXcMNiCbbH6p2ezr58r9zCx4Mqy2oHRDpd3/9mbdOfC8n3HQTOnQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFERFMcjD7Oxlm2bBfDhLgBV/UAy/MB8GA1UdIwQY MBaAFLdgHXzIINxxkV6pMGc+9H8kGnHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEt NjcxZDY4MTg4Njg4LzEvUkVVeHlNUHM3R1diWnNGOE9FdUFGWDlRREw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEtNjcxZDY4MTg4Njg4 LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwRecAwQA wcp4AwQAw792MA0GCSqGSIb3DQEBCwUAA4IBAQC0xPjI+gaPcNRPz9HI5Y7LrrAu Z/83qLFvNDOYyF7kgBvYIgi5Dt/sMI4S/I7YLf3si4QWAT0yDc/xWwVqdSpzc8fl uIUT9RYW5RPixGrLoNt1Se0wkv0XP3X5hkZRYxx38f7IhK9EtspaFqIVRpApl668 l9ucNplrZsVywbbMjzIVfxfRaYpXM2JxJs8RARlGvp/T+Vf+0s1lNGGgpdRcE8/R J2eEbwx/PDn/cwXsCSCUenBpD0v1OrAgJwJp/U9ekRVUtBXUfkSx5DVfIRginBzO Otn7M9etkGnpExWoQdyy/918Uvr+y5r03I4XkgC4Ws8wYxIQYgwpTIHWqK+u -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:36 2026 by rpki-client