This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/e2-M3_roN4thnHrSRcYhd3A5tEE.roa File: e2-M3_roN4thnHrSRcYhd3A5tEE.roa (raw, json) Hash identifier: HtHoJrcFJ7Tr7k+ozWHjO7whHbckIcy4WmHKQ/7ZFj4= Subject key identifier: 7B:6F:8C:DF:FA:E8:37:8B:61:9C:7A:D2:45:C6:21:77:70:39:B4:41 Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 019B7C11F4A5C98700E1DFAD9E9BEBF8B7C0 Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/e2-M3_roN4thnHrSRcYhd3A5tEE.roa Signing time: Fri 02 Jan 2026 00:18:30 +0000 ROA not before: Fri 02 Jan 2026 00:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12761 IP address blocks: 193.118.162.0/24 maxlen: 24 193.118.164.0/24 maxlen: 24 217.111.164.0/24 maxlen: 24 217.111.165.0/24 maxlen: 24 217.111.166.0/24 maxlen: 24 217.111.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:f4:a5:c9:87:00:e1:df:ad:9e:9b:eb:f8:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Jan 2 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b6f8cdffae8378b619c7ad245c621777039b441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:1b:be:dd:b6:0d:07:0b:34:20:b5:d4:e1: 99:9d:02:28:fc:2f:74:6f:dc:6b:98:d3:d7:fc:78: c5:23:ac:9f:61:48:c7:dc:cb:de:12:d7:ac:c0:68: 57:c7:0a:a5:8e:d2:6f:31:ae:6d:bf:13:8d:01:e6: 60:58:0e:60:fc:b4:47:81:47:60:87:bf:57:ca:b1: c8:08:1f:fd:27:a0:51:74:de:bd:33:1f:2a:e4:14: 27:da:65:5d:f7:df:18:c7:d4:56:09:28:26:8b:97: 80:9b:57:e1:a7:bd:1c:11:35:79:9d:fe:e8:04:a6: 7a:e3:3a:7b:e8:1d:9f:52:2d:c9:c9:59:11:96:3e: f7:a5:c4:a9:38:b6:6a:44:7b:1f:90:c7:08:0d:af: 7f:16:ce:70:22:5e:57:32:3f:b7:98:f2:1c:a8:65: 77:5d:87:17:de:60:14:5e:88:3b:ef:f7:47:04:21: 04:c1:52:0b:1a:c0:d1:29:b2:17:5b:c2:1b:ee:37: 41:58:42:ec:4c:6e:5d:ee:d3:0a:71:99:56:9c:e1: 14:ab:24:72:a4:6e:5b:fa:12:39:03:ae:77:2e:44: d3:03:b3:a4:32:db:30:a1:07:d5:c9:28:c9:b0:b3: ed:b6:71:a3:9c:2a:e5:b6:3a:97:69:c9:71:92:ad: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6F:8C:DF:FA:E8:37:8B:61:9C:7A:D2:45:C6:21:77:70:39:B4:41 X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/e2-M3_roN4thnHrSRcYhd3A5tEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.118.162.0/24 193.118.164.0/24 217.111.164.0/22 Signature Algorithm: sha256WithRSAEncryption b5:38:47:3f:b9:a0:87:7a:ca:5f:ae:5d:6b:b9:b4:5a:30:96: 29:6a:7c:ab:18:3d:16:1b:4f:87:72:f6:5a:f5:d8:3c:ac:67: ca:ce:62:6e:1b:f9:56:89:00:3a:80:64:ad:e7:7e:b4:d6:7c: b6:4a:10:d7:d7:fd:11:7a:ff:ee:04:11:e1:73:5e:28:79:61: 58:bc:ae:ab:f0:a2:bc:f7:12:7a:1b:64:db:d3:75:90:9d:bb: 88:af:c6:1d:79:7a:7f:d6:1c:d8:4b:30:ae:12:f0:8c:5a:bd: e6:d6:d8:28:f4:16:1e:9d:cf:36:29:0f:c2:93:a0:98:b0:15: 54:69:86:5c:d1:07:89:b6:a3:81:8e:05:df:ef:0b:14:f6:12: a6:16:60:ca:6e:59:47:c5:56:9a:38:ef:f8:30:19:1b:37:c5: 98:a9:67:f8:d7:7d:6f:08:cb:fb:fe:41:19:6e:ba:18:d9:97: 8d:48:1f:8c:6c:b8:c8:8d:4d:17:e7:47:c6:e7:49:0f:6e:5e: bc:17:b2:39:a7:ad:d9:a9:c6:8f:e8:5a:ef:d8:40:36:b3:30: 86:73:55:27:8e:9f:c8:f2:8a:46:68:be:a1:bb:85:37:70:87: 56:b4:4d:71:d9:9d:c5:da:1b:bd:d3:11:da:bb:42:c8:47:a4: be:5c:c3:df -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EfSlyYcA4d+tnpvr+LfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYwMTAyMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjZmOGNkZmZhZTgzNzhiNjE5YzdhZDI0NWM2MjE3NzcwMzliNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLwbvt22DQcLNCC11OGZnQIo/C90 b9xrmNPX/HjFI6yfYUjH3MveEteswGhXxwqljtJvMa5tvxONAeZgWA5g/LRHgUdg h79XyrHICB/9J6BRdN69Mx8q5BQn2mVd998Yx9RWCSgmi5eAm1fhp70cETV5nf7o BKZ64zp76B2fUi3JyVkRlj73pcSpOLZqRHsfkMcIDa9/Fs5wIl5XMj+3mPIcqGV3 XYcX3mAUXog77/dHBCEEwVILGsDRKbIXW8Ib7jdBWELsTG5d7tMKcZlWnOEUqyRy pG5b+hI5A653LkTTA7OkMtswoQfVySjJsLPttnGjnCrltjqXaclxkq1IuwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHtvjN/66DeLYZx60kXGIXdwObRBMB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvZTItTTNfcm9ONHRobkhyU1JjWWhkM0E1dEVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwXaiAwQA wXakAwQC2W+kMA0GCSqGSIb3DQEBCwUAA4IBAQC1OEc/uaCHespfrl1rubRaMJYp anyrGD0WG0+HcvZa9dg8rGfKzmJuG/lWiQA6gGSt53601ny2ShDX1/0Rev/uBBHh c14oeWFYvK6r8KK89xJ6G2Tb03WQnbuIr8YdeXp/1hzYSzCuEvCMWr3m1tgo9BYe nc82KQ/Ck6CYsBVUaYZc0QeJtqOBjgXf7wsU9hKmFmDKbllHxVaaOO/4MBkbN8WY qWf4131vCMv7/kEZbroY2ZeNSB+MbLjIjU0X50fG50kPbl68F7I5p63ZqcaP6Frv 2EA2szCGc1Unjp/I8opGaL6hu4U3cIdWtE1x2Z3F2hu90xHau0LIR6S+XMPf -----END CERTIFICATE-----Generated at Mon Jan 26 23:42:54 2026 by rpki-client