This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/pIcqH37mWZXnad3o1d2yHDKbwH8.roa File: pIcqH37mWZXnad3o1d2yHDKbwH8.roa (raw, json) Hash identifier: z3PK62MjV1YaS1wR+F4I8PDopJNEQIGDsxc/zrbNfnk= Subject key identifier: A4:87:2A:1F:7E:E6:59:95:E7:69:DD:E8:D5:DD:B2:1C:32:9B:C0:7F Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc Certificate serial: 019B7A5A0B60177808ED837F1C5A8230C594 Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/pIcqH37mWZXnad3o1d2yHDKbwH8.roa Signing time: Thu 01 Jan 2026 16:18:00 +0000 ROA not before: Thu 01 Jan 2026 16:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24879 IP address blocks: 193.111.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:0b:60:17:78:08:ed:83:7f:1c:5a:82:30:c5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc Validity Not Before: Jan 1 16:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4872a1f7ee65995e769dde8d5ddb21c329bc07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:47:d3:da:05:36:16:c2:bd:28:2d:19:bb:34: ae:a4:de:de:19:c3:38:f7:59:20:8b:ea:48:51:33: f2:a4:ac:6f:70:9f:00:d8:9b:ad:04:b0:15:40:73: 1f:fe:4c:01:9c:42:c9:46:0b:83:0c:ae:eb:7d:4f: c8:17:04:73:75:97:82:c8:b8:3f:ad:58:13:c1:38: 29:a1:ff:11:cf:70:02:f9:e0:08:a1:66:25:8c:53: f8:74:5f:ab:d6:7a:e6:7c:df:65:3c:9e:78:bc:87: c7:81:38:8e:bc:fd:b1:ac:6d:aa:c1:f5:e2:51:85: 63:1f:63:f7:76:13:22:2d:8b:33:8b:6f:62:0b:52: bb:f4:d4:e3:39:07:3d:24:11:04:20:6d:2a:67:ab: 3b:51:ab:25:2f:72:ad:ec:cc:69:ab:1e:5c:71:12: 14:5b:fb:bb:9e:32:3a:2f:24:21:dd:8d:68:ce:02: e6:2b:44:a8:a9:24:61:5c:3d:22:7c:ef:91:04:bc: 81:b3:13:95:f8:97:13:22:67:58:13:01:d3:e3:b0: 9a:18:f7:9b:89:dc:50:a9:0e:f5:a5:cd:66:bd:ae: 00:45:0f:ae:7a:2c:a7:0f:ae:f8:c7:67:cb:2a:65: 2b:d2:bf:da:1b:c4:a4:3e:1a:27:9e:95:d2:c4:18: 8b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:87:2A:1F:7E:E6:59:95:E7:69:DD:E8:D5:DD:B2:1C:32:9B:C0:7F X509v3 Authority Key Identifier: keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/pIcqH37mWZXnad3o1d2yHDKbwH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.166.0/24 Signature Algorithm: sha256WithRSAEncryption b1:0b:04:e7:c0:82:90:01:2b:dd:29:99:b2:6e:ba:f5:84:29: 95:82:1d:18:6d:86:1b:5c:c6:c8:51:e4:81:d0:1a:b2:d6:cf: b1:f1:44:95:1f:12:2f:7f:a2:cd:fa:b8:9b:5f:26:f0:5b:51: a4:08:ba:2a:b4:28:10:d8:b4:37:4a:cb:10:f4:e2:24:68:7e: 28:bf:58:1c:5b:88:76:79:0a:72:70:b2:86:28:d3:66:a2:25: e2:d0:69:54:0f:80:6b:d8:1b:27:31:ae:0e:de:a6:dc:4d:cd: 63:96:90:34:e2:c8:1d:07:3a:59:2c:27:9e:ee:eb:36:ac:64: 07:18:8b:b3:f6:0d:4c:13:d4:54:0d:ee:f8:83:df:c5:3d:c3: e2:6b:ac:30:9b:41:a8:33:ce:39:65:97:de:a4:ea:8c:88:9b: d6:ba:22:f4:b9:b2:89:e6:2e:b1:01:d1:94:3b:b5:0a:a5:84: 55:ab:4e:ee:2f:38:eb:72:69:ee:1f:28:fe:2e:6a:72:02:8c: 78:3c:5e:9c:9a:cd:2c:50:95:bc:4e:99:84:9a:85:66:0a:5d: 69:36:37:58:5e:07:b4:a3:14:95:95:75:ae:81:d4:39:6d:79: 9e:5a:82:1a:0e:4f:6c:15:f7:0e:50:6e:cb:22:2e:8c:3c:d8: bd:c4:b6:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WgtgF3gI7YN/HFqCMMWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNTJjMzhmMGM3ZmViYWUxMzVkNWRkZGQ5NDhjZjI2YmVj ZWYzYmMwHhcNMjYwMTAxMTYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDg3MmExZjdlZTY1OTk1ZTc2OWRkZThkNWRkYjIxYzMyOWJjMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+UfT2gU2FsK9KC0ZuzSupN7eGcM4 91kgi+pIUTPypKxvcJ8A2JutBLAVQHMf/kwBnELJRguDDK7rfU/IFwRzdZeCyLg/ rVgTwTgpof8Rz3AC+eAIoWYljFP4dF+r1nrmfN9lPJ54vIfHgTiOvP2xrG2qwfXi UYVjH2P3dhMiLYszi29iC1K79NTjOQc9JBEEIG0qZ6s7UaslL3Kt7Mxpqx5ccRIU W/u7njI6LyQh3Y1ozgLmK0SoqSRhXD0ifO+RBLyBsxOV+JcTImdYEwHT47CaGPeb idxQqQ71pc1mva4ARQ+ueiynD674x2fLKmUr0r/aG8SkPhonnpXSxBiLmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKSHKh9+5lmV52nd6NXdshwym8B/MB8GA1UdIwQY MBaAFNpSw48Mf+uuE11d3dlIzya+zvO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDct NDFlY2RjN2EzNmY0LzEvcEljcUgzN21XWlhuYWQzbzFkMnlIREtid0g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDctNDFlY2RjN2EzNmY0 LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW+mMA0G CSqGSIb3DQEBCwUAA4IBAQCxCwTnwIKQASvdKZmybrr1hCmVgh0YbYYbXMbIUeSB 0Bqy1s+x8USVHxIvf6LN+ribXybwW1GkCLoqtCgQ2LQ3SssQ9OIkaH4ov1gcW4h2 eQpycLKGKNNmoiXi0GlUD4Br2BsnMa4O3qbcTc1jlpA04sgdBzpZLCee7us2rGQH GIuz9g1ME9RUDe74g9/FPcPia6wwm0GoM845ZZfepOqMiJvWuiL0ubKJ5i6xAdGU O7UKpYRVq07uLzjrcmnuHyj+LmpyAox4PF6cms0sUJW8TpmEmoVmCl1pNjdYXge0 oxSVlXWugdQ5bXmeWoIaDk9sFfcOUG7LIi6MPNi9xLYX -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:15 2026 by rpki-client