This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/RlwzmymQw4BKJ8E0igozFpwiNNo.roa File: RlwzmymQw4BKJ8E0igozFpwiNNo.roa (raw, json) Hash identifier: UVpzzvY69LGOYgMZuAZgP3abVssHII4njzML7dW06y0= Subject key identifier: 46:5C:33:9B:29:90:C3:80:4A:27:C1:34:8A:0A:33:16:9C:22:34:DA Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76 Certificate serial: 019B797F4468068F14C12718AFB0337C0F5D Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/RlwzmymQw4BKJ8E0igozFpwiNNo.roa Signing time: Thu 01 Jan 2026 12:19:02 +0000 ROA not before: Thu 01 Jan 2026 12:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42643 IP address blocks: 193.142.210.0/24 maxlen: 24 193.200.46.0/23 maxlen: 23 193.200.46.0/24 maxlen: 24 193.200.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:44:68:06:8f:14:c1:27:18:af:b0:33:7c:0f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76 Validity Not Before: Jan 1 12:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=465c339b2990c3804a27c1348a0a33169c2234da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:87:79:b4:f6:a3:05:73:ec:35:ab:81:c9:fc: 02:f3:95:a7:67:3b:47:d0:37:bf:84:f8:4c:7d:15: 43:e6:36:4e:37:af:bc:72:b6:ce:b5:3d:b2:fa:d6: 38:4a:cd:c8:df:65:cb:25:a5:c9:32:3a:09:f5:67: 96:81:05:3b:86:94:ed:2c:cb:97:27:c9:33:01:5f: d8:48:26:4a:e0:b2:15:40:19:ae:b6:66:2d:96:5f: a6:c6:a1:aa:d7:22:e3:0a:f2:3f:bf:4d:92:5f:94: cf:d4:68:73:86:e2:b9:31:a3:ef:32:a3:82:23:d6: e1:9c:7d:fc:4b:36:27:87:ba:42:77:6f:da:7a:11: 09:7e:0d:5e:bd:ad:b5:73:4f:9c:15:4a:ce:ce:27: f9:11:09:6b:fc:62:83:d5:69:33:3a:6c:c6:14:a9: ab:0d:53:37:75:cb:2b:73:97:a0:69:ce:61:c3:a8: 39:ec:43:6a:d7:1a:8a:61:34:3f:e7:ff:10:8c:3e: 11:26:9d:61:b9:75:55:6d:f4:a3:22:bd:b2:24:63: bf:98:28:d6:12:4b:36:16:08:9c:b2:33:27:2c:ad: 0d:cb:98:d1:de:45:73:46:b6:aa:9f:56:81:01:2a: b0:35:b0:48:82:9b:28:dc:1d:14:ea:5c:1d:c3:c7: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5C:33:9B:29:90:C3:80:4A:27:C1:34:8A:0A:33:16:9C:22:34:DA X509v3 Authority Key Identifier: keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/RlwzmymQw4BKJ8E0igozFpwiNNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.210.0/24 193.200.46.0/23 Signature Algorithm: sha256WithRSAEncryption 45:4c:84:5f:5e:a2:ee:47:e2:d4:ad:54:93:05:76:1f:e1:59: 8c:10:ba:1e:11:70:fd:1a:75:38:63:f2:9c:18:e6:28:ae:93: 3f:a5:8a:9f:73:56:df:11:db:f8:0f:20:70:f9:ac:83:87:e1: a0:3b:3d:33:ac:16:26:0b:52:09:b7:42:ab:87:46:79:3a:9b: 6f:25:2b:09:75:a2:bd:84:62:4d:78:a5:db:d1:c3:88:f4:e7: 1e:9f:4a:b5:70:b4:59:38:93:5f:6d:bd:37:87:72:dd:6e:e8: f2:8d:94:41:7c:e3:7b:4b:54:4a:f9:b4:25:74:91:0c:e0:d9: b4:84:23:d8:b8:fa:73:b7:b4:33:46:9f:92:00:b9:26:e9:e1: 39:6a:22:d1:ed:66:31:e8:6d:a8:bb:7d:49:65:8e:d6:a9:aa: 47:94:7e:3a:1f:d5:94:16:be:a7:b2:f1:04:3f:11:f5:37:4c: f3:4d:6e:e9:9b:7d:bf:55:f9:6c:cc:01:6f:8d:1d:e9:e1:a1: 78:ff:9b:d9:fa:bb:3b:d7:7f:51:12:e1:ea:04:b6:4b:c0:d3: ed:ba:16:47:ad:9e:03:37:0d:21:2b:5e:b6:08:67:f9:9b:c5: 30:58:1c:70:d9:3f:f0:30:c7:55:f3:ac:83:c5:b1:53:0c:51: 36:e9:39:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5f0RoBo8UwScYr7AzfA9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYWVlYmU0MWQwNTE4Mjg0YWJhM2E0ZjVlNWRhMDVjZmFi ZDZmNzYwHhcNMjYwMTAxMTIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjVjMzM5YjI5OTBjMzgwNGEyN2MxMzQ4YTBhMzMxNjljMjIzNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4d5tPajBXPsNauByfwC85WnZztH 0De/hPhMfRVD5jZON6+8crbOtT2y+tY4Ss3I32XLJaXJMjoJ9WeWgQU7hpTtLMuX J8kzAV/YSCZK4LIVQBmutmYtll+mxqGq1yLjCvI/v02SX5TP1GhzhuK5MaPvMqOC I9bhnH38SzYnh7pCd2/aehEJfg1eva21c0+cFUrOzif5EQlr/GKD1WkzOmzGFKmr DVM3dcsrc5egac5hw6g57ENq1xqKYTQ/5/8QjD4RJp1huXVVbfSjIr2yJGO/mCjW Eks2FgicsjMnLK0Ny5jR3kVzRraqn1aBASqwNbBIgpso3B0U6lwdw8deNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEZcM5spkMOASifBNIoKMxacIjTaMB8GA1UdIwQY MBaAFPKu6+QdBRgoSro6T15doFz6vW92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMt YzBhZDc0Y2E1ZDliLzEvUmx3em15bVF3NEJLSjhFMGlnb3pGcHdpTk5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMtYzBhZDc0Y2E1ZDli LzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwY7SAwQB wcguMA0GCSqGSIb3DQEBCwUAA4IBAQBFTIRfXqLuR+LUrVSTBXYf4VmMELoeEXD9 GnU4Y/KcGOYorpM/pYqfc1bfEdv4DyBw+ayDh+GgOz0zrBYmC1IJt0Krh0Z5Optv JSsJdaK9hGJNeKXb0cOI9Ocen0q1cLRZOJNfbb03h3LdbujyjZRBfON7S1RK+bQl dJEM4Nm0hCPYuPpzt7QzRp+SALkm6eE5aiLR7WYx6G2ou31JZY7WqapHlH46H9WU Fr6nsvEEPxH1N0zzTW7pm32/VflszAFvjR3p4aF4/5vZ+rs7139REuHqBLZLwNPt uhZHrZ4DNw0hK162CGf5m8UwWBxw2T/wMMdV86yDxbFTDFE26Tlj -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:22 2026 by rpki-client