This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/2asX8qOaxpLjyUU4myYKc0Ej3nA.roa File: 2asX8qOaxpLjyUU4myYKc0Ej3nA.roa (raw, json) Hash identifier: xKHvXSgALDQpoGTmF3KkZGpVCQ/XwWuRiWZZZUlqzJ0= Subject key identifier: D9:AB:17:F2:A3:9A:C6:92:E3:C9:45:38:9B:26:0A:73:41:23:DE:70 Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b Certificate serial: 019B7F82B9839A38202E2F6A505D10D67B3E Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/2asX8qOaxpLjyUU4myYKc0Ej3nA.roa Signing time: Fri 02 Jan 2026 16:20:32 +0000 ROA not before: Fri 02 Jan 2026 16:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41872 IP address blocks: 193.178.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b9:83:9a:38:20:2e:2f:6a:50:5d:10:d6:7b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b Validity Not Before: Jan 2 16:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9ab17f2a39ac692e3c945389b260a734123de70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:21:56:1b:94:06:da:cf:26:06:e2:bd:53: 82:63:31:9c:08:1c:ad:3b:75:d7:3a:18:4c:ec:30: 66:eb:11:fd:6d:c9:a5:a0:21:23:ee:a8:a6:1b:ed: c5:f4:d4:7c:e4:50:4c:ed:57:1d:74:82:ec:dc:08: b9:45:c3:f2:98:b3:13:2a:a5:a8:4f:15:03:94:52: b4:e5:63:af:9b:f7:cb:38:d3:b6:e0:38:11:71:41: c5:e9:38:e7:c8:f6:a9:a2:d2:87:ec:20:54:3c:1a: 3c:80:b4:ec:f3:e9:f4:6b:d3:30:38:3f:55:9b:49: e7:f5:db:cb:fb:b0:b1:93:16:4f:e2:84:97:bf:46: e6:59:59:2a:45:18:73:0b:99:8c:c0:87:43:f2:6e: 23:2f:32:48:50:76:ac:b5:d6:d1:fb:9e:35:8f:5c: 00:53:af:08:ba:42:93:fd:bc:c8:3d:c3:be:3d:7b: 6a:61:d5:28:9d:20:5f:ed:55:ab:27:99:68:8a:47: 98:2b:d9:5f:ef:c2:8e:7d:f3:56:a5:60:cf:94:7f: 0f:0e:43:db:e7:8f:d8:73:be:3d:26:e8:64:88:33: 21:ed:d9:ed:d9:3c:4b:44:85:ba:be:2d:6a:fc:b3: b4:b1:8d:13:61:e1:ba:dc:85:cb:5b:65:bf:94:47: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AB:17:F2:A3:9A:C6:92:E3:C9:45:38:9B:26:0A:73:41:23:DE:70 X509v3 Authority Key Identifier: keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/2asX8qOaxpLjyUU4myYKc0Ej3nA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.156.0/23 Signature Algorithm: sha256WithRSAEncryption 27:84:9f:a3:61:29:79:93:dc:d8:c4:59:bd:79:35:7c:93:98: b2:3f:d6:b4:f4:86:72:55:dd:15:91:5f:aa:2c:e5:5e:a7:2c: b9:b6:0f:02:30:56:b7:6d:33:73:6b:3f:bf:f0:60:55:78:d9: ad:76:a5:54:78:d0:72:58:9d:e2:fb:49:ec:67:9a:4e:f6:ec: c3:a8:06:95:04:24:cb:c9:3f:a6:7b:79:f5:e4:4f:c7:df:2a: 33:15:3b:e5:ba:06:a0:06:e4:f2:52:7e:8b:95:ff:05:bf:3c: ff:bb:e5:dc:5c:9b:d4:ef:81:68:6f:ef:4e:34:ac:cc:8a:1b: 83:d6:ec:3e:e8:c1:1f:95:69:37:0d:f9:81:e0:52:0a:98:06: ec:d9:1f:ed:85:13:46:94:20:8b:93:b7:e8:ae:af:af:d8:3c: 03:b1:1c:ad:b0:cd:9b:13:13:f4:cb:bf:39:34:34:50:46:9e: ca:97:28:5c:62:21:2f:39:12:8f:fa:4e:7b:c6:e4:a7:c4:78: a4:0b:24:45:8b:b6:ba:49:ca:bf:9e:2f:5b:51:1b:41:bf:58: 4b:56:e3:be:06:0b:b5:1e:1a:42:93:37:ce:a1:85:b9:cb:59: d9:ed:05:5d:ec:fe:fa:3d:98:bf:9a:57:47:98:a6:18:36:9d: 83:98:1a:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/grmDmjggLi9qUF0Q1ns+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTRjMzFlMTVkZjRiN2E2MGU1ZDQwZGYzYWFjMTg1MmU4 ZGE3NGIwHhcNMjYwMTAyMTYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWFiMTdmMmEzOWFjNjkyZTNjOTQ1Mzg5YjI2MGE3MzQxMjNkZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrAhVhuUBtrPJgbivVOCYzGcCByt O3XXOhhM7DBm6xH9bcmloCEj7qimG+3F9NR85FBM7VcddILs3Ai5RcPymLMTKqWo TxUDlFK05WOvm/fLONO24DgRcUHF6TjnyPapotKH7CBUPBo8gLTs8+n0a9MwOD9V m0nn9dvL+7CxkxZP4oSXv0bmWVkqRRhzC5mMwIdD8m4jLzJIUHastdbR+541j1wA U68IukKT/bzIPcO+PXtqYdUonSBf7VWrJ5loikeYK9lf78KOffNWpWDPlH8PDkPb 54/Yc749JuhkiDMh7dnt2TxLRIW6vi1q/LO0sY0TYeG63IXLW2W/lEd8yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNmrF/KjmsaS48lFOJsmCnNBI95wMB8GA1UdIwQY MBaAFM6Uwx4V30t6YOXUDfOqwYUujadLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEt MDhmMjI2M2E0MTNjLzEvMmFzWDhxT2F4cExqeVVVNG15WUtjMEVqM25BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEtMDhmMjI2M2E0MTNj LzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbKcMA0G CSqGSIb3DQEBCwUAA4IBAQAnhJ+jYSl5k9zYxFm9eTV8k5iyP9a09IZyVd0VkV+q LOVepyy5tg8CMFa3bTNzaz+/8GBVeNmtdqVUeNByWJ3i+0nsZ5pO9uzDqAaVBCTL yT+me3n15E/H3yozFTvlugagBuTyUn6Llf8Fvzz/u+XcXJvU74Fob+9ONKzMihuD 1uw+6MEflWk3DfmB4FIKmAbs2R/thRNGlCCLk7forq+v2DwDsRytsM2bExP0y785 NDRQRp7KlyhcYiEvORKP+k57xuSnxHikCyRFi7a6Scq/ni9bURtBv1hLVuO+Bgu1 HhpCkzfOoYW5y1nZ7QVd7P76PZi/mldHmKYYNp2DmBqP -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:53 2026 by rpki-client