This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/c2vQVEHN6TNSHCrc8XakavTk5Vg.roa File: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (raw, json) Hash identifier: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko= Subject key identifier: 73:6B:D0:54:41:CD:E9:33:52:1C:2A:DC:F1:76:A4:6A:F4:E4:E5:58 Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26 Certificate serial: 019B7C80DA75C932623A3DB70FDD80745737 Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/c2vQVEHN6TNSHCrc8XakavTk5Vg.roa Signing time: Fri 02 Jan 2026 02:19:37 +0000 ROA not before: Fri 02 Jan 2026 02:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.17.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:da:75:c9:32:62:3a:3d:b7:0f:dd:80:74:57:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26 Validity Not Before: Jan 2 02:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=736bd05441cde933521c2adcf176a46af4e4e558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:f0:32:bf:20:24:c8:5d:e8:2e:34:f5:db: fd:cf:e2:2d:00:e6:bc:f0:f7:ce:91:41:3f:96:d7: 01:3e:fe:06:50:4a:7c:bf:49:c8:d1:c1:05:95:37: ab:93:99:8f:89:6f:f7:17:a3:3e:39:93:75:29:22: c1:35:78:49:34:77:cc:64:79:14:37:d6:e6:75:13: ae:e2:89:8e:24:35:85:72:25:9a:73:4c:9b:07:78: 52:02:74:db:59:f4:74:65:78:e8:f8:f3:54:17:1e: c9:c4:46:f3:95:b2:4b:d0:2b:fe:f7:de:49:a8:2b: 0d:12:44:2f:c2:14:5f:69:3b:8c:9e:c1:f3:8a:b3: bd:00:34:74:96:f5:bb:6e:da:db:ae:4c:38:9a:0f: 6a:42:4a:e0:1b:90:31:df:a5:20:2e:69:b8:23:bf: 8d:05:f9:60:fa:30:9a:41:dc:6c:dd:f7:07:3f:5c: a9:38:39:49:5a:43:a8:f7:35:50:f1:9c:14:6a:95: f6:2d:1b:05:71:8b:52:fd:16:f2:7b:89:fc:ca:75: 86:9d:2e:b1:b5:bf:82:2c:71:c5:d5:96:25:d7:10: 27:e1:f0:e2:63:ea:ff:88:2a:87:d9:d2:35:48:3e: 51:cc:cd:81:eb:48:d1:01:5e:b9:92:47:51:87:d2: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6B:D0:54:41:CD:E9:33:52:1C:2A:DC:F1:76:A4:6A:F4:E4:E5:58 X509v3 Authority Key Identifier: keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/c2vQVEHN6TNSHCrc8XakavTk5Vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.209.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:3a:28:6f:fd:31:45:b5:bd:4b:4e:ac:3a:14:7b:b9:71:72: 9a:41:8c:78:1b:43:32:9f:bb:b8:9b:84:13:73:65:d2:a7:aa: 33:16:e5:74:7f:94:4e:78:82:4e:c1:40:0b:88:b2:aa:dc:c8: 96:31:c2:a1:56:7d:f1:d0:f0:4f:4b:33:c5:f3:d6:b9:b0:e0: df:9f:82:2e:e7:4e:4a:9f:a2:c7:35:b6:73:7c:24:e7:14:cd: 96:5a:42:10:37:f7:e8:cf:8e:ed:91:59:68:4c:f5:f9:9c:d9: 1c:45:82:76:67:83:c2:4e:c8:f9:c1:d8:7a:0c:1f:1f:df:4d: b3:41:02:77:00:e6:a1:bf:b5:8a:b9:7b:1e:9d:7a:e8:67:ef: 1d:54:fc:26:79:b4:dd:05:57:fe:62:f6:67:c4:fd:e7:41:29: 15:48:66:b8:a4:6a:e2:f3:35:aa:3e:d9:0c:fd:6a:3d:2f:6c: f7:74:40:2e:52:c0:2a:f5:c0:e5:fc:bf:4a:5d:07:c4:3c:7b: 7a:37:45:0e:7f:d9:74:e4:ce:7d:75:21:07:d8:0e:66:b3:6c: f6:01:82:bd:e9:f8:32:eb:8b:9d:69:e6:6e:39:b4:f4:2c:7b: b1:aa:5a:25:f3:eb:9c:7c:77:7f:0e:d6:93:2f:51:58:51:9d: 01:d1:fd:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gNp1yTJiOj23D92AdFc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2M2ZGJhZjJiY2Y1MmYyN2U1OGMyZDg5YzZjMWM1NWI5 NWRmMjYwHhcNMjYwMTAyMDIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzZiZDA1NDQxY2RlOTMzNTIxYzJhZGNmMTc2YTQ2YWY0ZTRlNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAzwMr8gJMhd6C409dv9z+ItAOa8 8PfOkUE/ltcBPv4GUEp8v0nI0cEFlTerk5mPiW/3F6M+OZN1KSLBNXhJNHfMZHkU N9bmdROu4omOJDWFciWac0ybB3hSAnTbWfR0ZXjo+PNUFx7JxEbzlbJL0Cv+995J qCsNEkQvwhRfaTuMnsHzirO9ADR0lvW7btrbrkw4mg9qQkrgG5Ax36UgLmm4I7+N Bflg+jCaQdxs3fcHP1ypODlJWkOo9zVQ8ZwUapX2LRsFcYtS/Rbye4n8ynWGnS6x tb+CLHHF1ZYl1xAn4fDiY+r/iCqH2dI1SD5RzM2B60jRAV65kkdRh9IomQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHNr0FRBzekzUhwq3PF2pGr05OVYMB8GA1UdIwQY MBaAFKY8bbryvPUvJ+WMLYnGwcVbld8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp4dHV2Szg5UzhuNVl3dGljYkJ4VnVWM3lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zM2Q3MWEtOTM1MC00MzQ1LWI2Yjgt YTgzZDZjM2NmMDUzLzEvYzJ2UVZFSE42VE5TSENyYzhYYWthdlRrNVZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zM2Q3MWEtOTM1MC00MzQ1LWI2YjgtYTgzZDZjM2NmMDUz LzEvcGp4dHV2Szg5UzhuNVl3dGljYkJ4VnVWM3lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRHRMA0G CSqGSIb3DQEBCwUAA4IBAQAbOihv/TFFtb1LTqw6FHu5cXKaQYx4G0Myn7u4m4QT c2XSp6ozFuV0f5ROeIJOwUALiLKq3MiWMcKhVn3x0PBPSzPF89a5sODfn4Iu505K n6LHNbZzfCTnFM2WWkIQN/foz47tkVloTPX5nNkcRYJ2Z4PCTsj5wdh6DB8f302z QQJ3AOahv7WKuXsenXroZ+8dVPwmebTdBVf+YvZnxP3nQSkVSGa4pGri8zWqPtkM /Wo9L2z3dEAuUsAq9cDl/L9KXQfEPHt6N0UOf9l05M59dSEH2A5ms2z2AYK96fgy 64udaeZuObT0LHuxqlol8+ucfHd/DtaTL1FYUZ0B0f24 -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:03 2026 by rpki-client