This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/rjWMczYWVUlDT0G9Gz8JcdLLaZg.roa File: rjWMczYWVUlDT0G9Gz8JcdLLaZg.roa (raw, json) Hash identifier: 8skxqfY0u+xIRKIa0L6xMXFKLEu62D+QiOeNkaaqh7g= Subject key identifier: AE:35:8C:73:36:16:55:49:43:4F:41:BD:1B:3F:09:71:D2:CB:69:98 Certificate issuer: /CN=c20e52dab06da4175b45c777961f4ea39b9307b7 Certificate serial: 019B7D5D0BE91505ED32893685A0BCC78822 Authority key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/rjWMczYWVUlDT0G9Gz8JcdLLaZg.roa Signing time: Fri 02 Jan 2026 06:20:08 +0000 ROA not before: Fri 02 Jan 2026 06:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56650 IP address blocks: 193.34.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0b:e9:15:05:ed:32:89:36:85:a0:bc:c7:88:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c20e52dab06da4175b45c777961f4ea39b9307b7 Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae358c7336165549434f41bd1b3f0971d2cb6998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:04:a2:96:f7:57:dd:e5:ba:b2:8c:ec:06: 74:12:2b:1c:9c:88:93:a5:48:0e:9b:b5:3f:09:ff: 60:b2:d9:2c:33:6b:8c:56:c6:97:a7:c0:0f:a4:67: f3:3b:38:0d:ea:4e:d5:22:79:47:3f:74:6a:1e:ce: c8:75:c3:47:45:b5:95:be:7a:7a:5c:df:01:1d:d3: 36:17:03:e3:e4:a0:d5:3c:8a:fa:1c:67:66:a9:f4: ef:74:a8:b5:e2:85:ec:32:0c:28:ee:e4:f7:92:89: dc:e2:e3:4b:67:65:5c:32:8f:b4:03:f9:cd:49:d9: 80:de:b1:c9:b3:99:94:2d:80:7f:a9:b4:db:b9:e2: c7:cb:92:b1:96:50:54:6e:5f:00:6f:f1:53:8d:00: 5f:81:df:f8:a0:ca:c2:46:a3:d8:72:a5:20:ee:f0: fa:22:af:7a:9f:a3:99:7e:2a:6a:5e:a8:f1:b1:be: 41:57:bd:98:b7:ef:ba:27:7a:65:b3:89:37:a0:0f: d1:f7:ed:89:db:2e:ba:6d:30:1e:54:0d:00:77:c1: 6d:76:39:2d:c9:04:e4:80:12:63:81:42:86:4d:69: fc:0c:8f:19:2b:8f:27:1c:f8:c6:84:92:06:c7:ca: 53:31:cb:3a:76:16:b8:7f:15:19:b5:96:bc:a6:70: f8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:35:8C:73:36:16:55:49:43:4F:41:BD:1B:3F:09:71:D2:CB:69:98 X509v3 Authority Key Identifier: keyid:C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/rjWMczYWVUlDT0G9Gz8JcdLLaZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.205.0/24 Signature Algorithm: sha256WithRSAEncryption c1:84:69:af:01:a2:7f:bc:e7:36:52:69:8e:72:ee:f2:ef:25: 61:32:d5:38:f8:31:16:6a:5b:b4:da:96:8c:e9:43:b3:a0:11: f7:4e:c7:b5:f9:2c:53:36:bc:93:d9:55:1b:ba:35:10:03:49: 3e:40:9a:de:5a:9b:10:aa:d4:2a:80:5a:91:1b:ee:11:4c:89: 18:6a:fc:33:dd:cc:36:be:4a:84:4b:a9:92:d8:89:59:69:22: 91:cd:d0:bf:55:a3:b7:9c:7f:65:06:86:7f:a4:42:e0:67:c5: 6f:1f:4d:47:b9:c4:08:9c:d9:1a:a3:76:1d:8e:fa:cc:70:e5: cc:8a:69:04:05:58:21:61:dd:78:16:36:45:a0:1e:f6:79:31: 4a:e3:2e:c1:a0:f0:ca:fc:45:f1:2b:59:5e:f2:26:61:0b:ee: 3c:f4:2b:b9:fc:e3:57:79:11:f7:ae:2f:7e:d2:e5:94:24:4d: 17:af:dc:10:79:59:10:c0:ff:67:c9:5b:e9:9a:e9:f0:42:44: 66:1a:bc:2c:b2:77:86:02:26:21:e7:84:48:19:99:ff:63:af: c7:57:ab:d1:6a:a0:38:2b:c4:1f:fd:bf:1d:01:07:39:1e:53: bc:3b:56:16:67:e7:a4:9d:c7:51:9f:c3:05:b1:1b:81:6a:40: 30:4c:33:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQvpFQXtMok2haC8x4giMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMGU1MmRhYjA2ZGE0MTc1YjQ1Yzc3Nzk2MWY0ZWEzOWI5 MzA3YjcwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTM1OGM3MzM2MTY1NTQ5NDM0ZjQxYmQxYjNmMDk3MWQyY2I2OTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmEEopb3V93lurKM7AZ0EiscnIiT pUgOm7U/Cf9gstksM2uMVsaXp8APpGfzOzgN6k7VInlHP3RqHs7IdcNHRbWVvnp6 XN8BHdM2FwPj5KDVPIr6HGdmqfTvdKi14oXsMgwo7uT3konc4uNLZ2VcMo+0A/nN SdmA3rHJs5mULYB/qbTbueLHy5KxllBUbl8Ab/FTjQBfgd/4oMrCRqPYcqUg7vD6 Iq96n6OZfipqXqjxsb5BV72Yt++6J3pls4k3oA/R9+2J2y66bTAeVA0Ad8Ftdjkt yQTkgBJjgUKGTWn8DI8ZK48nHPjGhJIGx8pTMcs6dha4fxUZtZa8pnD4fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK41jHM2FlVJQ09BvRs/CXHSy2mYMB8GA1UdIwQY MBaAFMIOUtqwbaQXW0XHd5YfTqObkwe3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mZTUwOTQtZjE4OC00N2Y2LWI5NDUt ZTRjNzE4MDczMGNiLzEvcmpXTWN6WVdWVWxEVDBHOUd6OEpjZExMYVpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mZTUwOTQtZjE4OC00N2Y2LWI5NDUtZTRjNzE4MDczMGNi LzEvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSLNMA0G CSqGSIb3DQEBCwUAA4IBAQDBhGmvAaJ/vOc2UmmOcu7y7yVhMtU4+DEWalu02paM 6UOzoBH3Tse1+SxTNryT2VUbujUQA0k+QJreWpsQqtQqgFqRG+4RTIkYavwz3cw2 vkqES6mS2IlZaSKRzdC/VaO3nH9lBoZ/pELgZ8VvH01HucQInNkao3YdjvrMcOXM imkEBVghYd14FjZFoB72eTFK4y7BoPDK/EXxK1le8iZhC+489Cu5/ONXeRH3ri9+ 0uWUJE0Xr9wQeVkQwP9nyVvpmunwQkRmGrwssneGAiYh54RIGZn/Y6/HV6vRaqA4 K8Qf/b8dAQc5HlO8O1YWZ+ekncdRn8MFsRuBakAwTDNp -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:09 2026 by rpki-client