This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/r2j9KB_d9qlo6DM4VIzlnk-FGnA.roa File: r2j9KB_d9qlo6DM4VIzlnk-FGnA.roa (raw, json) Hash identifier: EzpW7vs8EG39ibzlPvK/9rhPpBxeklGzxbYhWxFufes= Subject key identifier: AF:68:FD:28:1F:DD:F6:A9:68:E8:33:38:54:8C:E5:9E:4F:85:1A:70 Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e Certificate serial: 019B7BA4A075AFAA57B6D5074875A37CAFDE Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/r2j9KB_d9qlo6DM4VIzlnk-FGnA.roa Signing time: Thu 01 Jan 2026 22:19:05 +0000 ROA not before: Thu 01 Jan 2026 22:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34729 IP address blocks: 193.138.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:a0:75:af:aa:57:b6:d5:07:48:75:a3:7c:af:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e Validity Not Before: Jan 1 22:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af68fd281fddf6a968e83338548ce59e4f851a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:c6:f0:1d:10:ed:87:94:db:19:64:c3:91: 1c:0a:a9:08:de:f6:2e:49:a1:8e:58:bd:65:3b:fb: b8:a5:e6:b3:f8:c0:d2:bd:2f:a5:83:a2:54:eb:93: 21:f1:4f:1b:ed:09:32:72:00:1a:a9:e6:82:f1:63: cf:27:6a:8a:92:80:84:5d:7c:77:23:48:8f:7b:96: cf:87:df:bc:92:38:e8:1c:8c:a0:78:e2:90:d3:2c: d8:bc:40:da:63:ec:b5:cf:5b:e6:84:c8:88:05:8c: e9:7c:43:d6:32:96:73:38:0a:2e:2f:21:bd:c9:fa: a4:1a:df:6f:c1:8e:2b:6e:e4:e5:ac:9a:27:82:08: 46:53:ea:ec:31:9a:08:8e:9a:a7:05:1e:11:c7:a3: 5b:54:2b:34:70:82:64:7a:9e:f3:61:a5:37:aa:78: d9:ca:0b:91:b8:02:10:22:0a:d3:3b:6d:15:5b:10: d1:75:81:27:ee:fe:f4:60:57:07:98:76:b6:23:62: 8b:11:58:94:43:3f:4f:f9:3a:b8:5c:9d:b5:20:27: 7c:59:ce:a7:64:9e:4b:ce:2e:1a:52:15:bb:92:6e: 52:65:b6:08:07:5a:50:bf:19:81:fc:b5:6c:72:0c: 25:6f:8c:0f:df:f7:8b:dd:d6:49:8d:09:83:94:33: a1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:68:FD:28:1F:DD:F6:A9:68:E8:33:38:54:8C:E5:9E:4F:85:1A:70 X509v3 Authority Key Identifier: keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/r2j9KB_d9qlo6DM4VIzlnk-FGnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.8.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:9e:12:75:e0:10:ff:4e:b0:e8:c6:1e:34:fe:99:6d:ea:2b: 08:20:5d:5b:64:a3:9b:d3:93:4a:31:56:61:09:dc:08:df:30: 4c:81:31:8b:f7:35:88:36:78:d0:18:93:55:be:a3:81:07:37: 71:d7:1c:e4:b5:fc:6c:e9:a0:77:3b:55:b1:62:81:cb:e3:9b: e6:ce:3c:33:d9:03:f2:b9:af:45:d5:4a:04:77:6a:65:66:29: eb:d2:18:e7:40:c0:23:61:47:05:07:94:fa:40:44:64:9d:5c: ad:a7:16:ed:a9:82:96:90:89:c4:5f:8f:a8:72:ea:46:c4:97: a1:b2:43:27:ad:66:10:ee:67:72:17:83:01:fd:61:ab:df:a7: 8b:a2:f9:1d:c2:fe:76:09:4a:27:09:a5:00:94:01:50:1a:63: 6f:82:cc:aa:fe:02:19:c3:e7:ca:e3:fe:71:bd:55:3e:1f:8e: bf:25:e3:e7:68:45:87:e1:d4:8e:5a:0b:e6:12:ab:c6:c7:23: a0:8e:96:b5:36:12:5c:27:6e:b1:61:33:1b:91:57:71:47:73: 83:7c:68:0d:93:41:26:90:75:9d:7e:46:95:9b:d5:1b:43:3a: 52:81:b7:b0:93:9f:c3:ca:17:0b:13:9d:a9:44:fa:4a:5d:0f: 0a:09:da:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pKB1r6pXttUHSHWjfK/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTU0YWRiNWEyZWQ5OTljZjFkYjljMTI3MWIyMjA5ZGFk MzQ0OWUwHhcNMjYwMTAxMjIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjY4ZmQyODFmZGRmNmE5NjhlODMzMzg1NDhjZTU5ZTRmODUxYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmHG8B0Q7YeU2xlkw5EcCqkI3vYu SaGOWL1lO/u4peaz+MDSvS+lg6JU65Mh8U8b7QkycgAaqeaC8WPPJ2qKkoCEXXx3 I0iPe5bPh9+8kjjoHIygeOKQ0yzYvEDaY+y1z1vmhMiIBYzpfEPWMpZzOAouLyG9 yfqkGt9vwY4rbuTlrJongghGU+rsMZoIjpqnBR4Rx6NbVCs0cIJkep7zYaU3qnjZ yguRuAIQIgrTO20VWxDRdYEn7v70YFcHmHa2I2KLEViUQz9P+Tq4XJ21ICd8Wc6n ZJ5Lzi4aUhW7km5SZbYIB1pQvxmB/LVscgwlb4wP3/eL3dZJjQmDlDOhJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK9o/Sgf3fapaOgzOFSM5Z5PhRpwMB8GA1UdIwQY MBaAFOMVSttaLtmZzx25wScbIgna00SeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDct MTQyZmNhY2Q3YTQ5LzEvcjJqOUtCX2Q5cWxvNkRNNFZJemxuay1GR25BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDctMTQyZmNhY2Q3YTQ5 LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYoIMA0G CSqGSIb3DQEBCwUAA4IBAQBtnhJ14BD/TrDoxh40/plt6isIIF1bZKOb05NKMVZh CdwI3zBMgTGL9zWINnjQGJNVvqOBBzdx1xzktfxs6aB3O1WxYoHL45vmzjwz2QPy ua9F1UoEd2plZinr0hjnQMAjYUcFB5T6QERknVytpxbtqYKWkInEX4+ocupGxJeh skMnrWYQ7mdyF4MB/WGr36eLovkdwv52CUonCaUAlAFQGmNvgsyq/gIZw+fK4/5x vVU+H46/JePnaEWH4dSOWgvmEqvGxyOgjpa1NhJcJ26xYTMbkVdxR3ODfGgNk0Em kHWdfkaVm9UbQzpSgbewk5/DyhcLE52pRPpKXQ8KCdrX -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:25 2026 by rpki-client