This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/_7mKcHkP3uOTS3kjipFm2tPGwgM.roa File: _7mKcHkP3uOTS3kjipFm2tPGwgM.roa (raw, json) Hash identifier: ngQx3yfqLseWqUcTbW2AyI+1iXtC1eJXGPQDz+lGjDw= Subject key identifier: FF:B9:8A:70:79:0F:DE:E3:93:4B:79:23:8A:91:66:DA:D3:C6:C2:03 Certificate issuer: /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc Certificate serial: 019B7F1537360534F145725AAD717294AF43 Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/_7mKcHkP3uOTS3kjipFm2tPGwgM.roa Signing time: Fri 02 Jan 2026 14:20:55 +0000 ROA not before: Fri 02 Jan 2026 14:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198941 IP address blocks: 193.35.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:37:36:05:34:f1:45:72:5a:ad:71:72:94:af:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc Validity Not Before: Jan 2 14:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffb98a70790fdee3934b79238a9166dad3c6c203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:17:a9:b2:30:ac:bd:16:ba:f4:1a:55:50:d6: 6a:98:06:db:51:2e:29:c2:04:91:49:0d:82:b4:fc: a2:35:05:ef:66:16:8d:2c:e4:25:cd:f0:ce:ea:a4: a2:16:34:c8:b6:a9:04:36:5b:68:fd:ab:49:58:87: d4:c3:0d:69:2f:de:f7:06:01:e6:60:3e:e3:1f:60: 98:49:d1:6d:a6:cf:da:73:01:e5:54:cf:31:66:6d: a1:96:f5:b2:cf:0f:c7:a8:85:25:33:0f:c7:c3:17: 1a:9e:6c:2d:0b:19:23:d6:d9:22:b7:b9:ca:35:1b: e6:6e:23:1f:9d:4e:33:7a:e9:a3:94:dc:85:70:59: 61:ac:5d:45:18:5c:d7:c6:2e:b2:32:f7:e0:1d:62: 3d:12:da:c5:ad:78:4f:70:cf:ef:d5:9a:2c:35:85: 51:3c:15:a6:4e:03:62:31:15:f6:21:57:c2:52:17: 05:ee:2a:2b:82:d4:7b:b0:c6:3f:54:cd:a7:13:70: fa:23:83:ac:f2:92:a5:64:30:44:35:dc:f5:68:a0: 35:9b:18:e3:2a:76:4e:c8:8a:82:4f:10:3c:e5:31: 2b:d5:d7:5b:8d:8b:12:54:57:a3:34:cd:20:1d:ae: b0:d1:28:e1:38:cf:85:38:dc:cb:13:b4:2a:54:29: c3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B9:8A:70:79:0F:DE:E3:93:4B:79:23:8A:91:66:DA:D3:C6:C2:03 X509v3 Authority Key Identifier: keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/_7mKcHkP3uOTS3kjipFm2tPGwgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.46.0/24 Signature Algorithm: sha256WithRSAEncryption 22:1f:7c:e1:89:34:d3:2d:ad:19:ad:0e:c9:2f:14:17:fb:07: 0c:6b:1b:ec:70:1d:c0:09:5b:7e:cd:dd:75:cc:c3:57:ad:8c: ad:54:7b:de:3f:7b:15:92:ae:82:0f:13:06:0f:24:61:f8:2d: c5:e9:ab:8d:23:ac:12:74:e5:02:ea:f9:a5:c1:d0:6a:9e:70: 79:06:f8:5b:65:ab:1b:53:01:90:6c:44:74:c3:51:8a:01:d3: 9d:40:4f:94:6b:5b:d7:f4:65:48:ab:2d:a1:1d:04:fa:f5:9d: 40:9f:f1:85:95:01:f8:98:bf:f3:74:eb:1d:80:a6:f9:02:6b: 1f:41:71:f7:61:a6:eb:b1:47:29:f1:db:f0:a9:86:f6:85:57: d5:c5:fc:34:e3:db:4b:ab:b3:bc:29:ef:11:09:d0:8c:20:c9: 41:dc:c6:7b:87:10:c9:c8:42:ea:23:ce:75:a4:2b:8e:77:03: 98:5b:42:d5:b1:83:d0:07:97:ce:07:52:22:88:7a:c8:67:41: 8e:10:d4:7d:cb:a2:11:7e:db:af:87:64:83:7e:9c:c6:6c:7f: 74:29:ba:58:94:93:77:f7:3d:64:54:99:c0:e6:a9:30:77:db: c8:fc:b6:6c:be:c0:c1:38:ed:10:6c:b7:63:52:a9:87:b3:69: ff:55:13:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FTc2BTTxRXJarXFylK9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZjMyNjZlMDYxMmQ4MzE0ZjRlOWY5MmEzZGI4YmNiMjUz ZWRhYmMwHhcNMjYwMTAyMTQyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmI5OGE3MDc5MGZkZWUzOTM0Yjc5MjM4YTkxNjZkYWQzYzZjMjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRepsjCsvRa69BpVUNZqmAbbUS4p wgSRSQ2CtPyiNQXvZhaNLOQlzfDO6qSiFjTItqkENlto/atJWIfUww1pL973BgHm YD7jH2CYSdFtps/acwHlVM8xZm2hlvWyzw/HqIUlMw/HwxcanmwtCxkj1tkit7nK NRvmbiMfnU4zeumjlNyFcFlhrF1FGFzXxi6yMvfgHWI9EtrFrXhPcM/v1ZosNYVR PBWmTgNiMRX2IVfCUhcF7iorgtR7sMY/VM2nE3D6I4Os8pKlZDBENdz1aKA1mxjj KnZOyIqCTxA85TEr1ddbjYsSVFejNM0gHa6w0SjhOM+FONzLE7QqVCnDvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+5inB5D97jk0t5I4qRZtrTxsIDMB8GA1UdIwQY MBaAFMLzJm4GEtgxT06fkqPbi8slPtq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kY2VhY2YtZGFlMi00NzYzLWIzOTkt MmZiOTlmZTVlNDc3LzEvXzdtS2NIa1AzdU9UUzNramlwRm0ydFBHd2dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kY2VhY2YtZGFlMi00NzYzLWIzOTktMmZiOTlmZTVlNDc3 LzEvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSMuMA0G CSqGSIb3DQEBCwUAA4IBAQAiH3zhiTTTLa0ZrQ7JLxQX+wcMaxvscB3ACVt+zd11 zMNXrYytVHveP3sVkq6CDxMGDyRh+C3F6auNI6wSdOUC6vmlwdBqnnB5BvhbZasb UwGQbER0w1GKAdOdQE+Ua1vX9GVIqy2hHQT69Z1An/GFlQH4mL/zdOsdgKb5Amsf QXH3YabrsUcp8dvwqYb2hVfVxfw049tLq7O8Ke8RCdCMIMlB3MZ7hxDJyELqI851 pCuOdwOYW0LVsYPQB5fOB1IiiHrIZ0GOENR9y6IRftuvh2SDfpzGbH90KbpYlJN3 9z1kVJnA5qkwd9vI/LZsvsDBOO0QbLdjUqmHs2n/VRNS -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:24 2026 by rpki-client