This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/iOwYO4Lxb7-lX1XZvdtMWr_SxeI.roa File: iOwYO4Lxb7-lX1XZvdtMWr_SxeI.roa (raw, json) Hash identifier: X1eh/qobiG09DJ7YvAOhgY6UujJecU+Lh8+lJTDAajg= Subject key identifier: 88:EC:18:3B:82:F1:6F:BF:A5:5F:55:D9:BD:DB:4C:5A:BF:D2:C5:E2 Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7 Certificate serial: 019B7910BEB04C69C4254294E4853498C4C7 Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/iOwYO4Lxb7-lX1XZvdtMWr_SxeI.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42605 IP address blocks: 193.33.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:be:b0:4c:69:c4:25:42:94:e4:85:34:98:c4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7 Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88ec183b82f16fbfa55f55d9bddb4c5abfd2c5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:50:23:ee:d5:4c:56:95:a3:b5:b7:78:af: 3a:5a:5f:0e:f9:6c:5f:86:f9:3d:82:5e:cc:02:3b: da:61:a6:60:2a:47:d1:ab:2a:38:39:3e:58:14:55: 88:59:ce:59:fb:c9:3f:2e:29:db:a7:1c:b8:0a:0c: a1:07:95:eb:a1:d6:b0:93:b9:2f:6c:04:8d:73:aa: 9b:45:bd:2a:b8:78:4d:50:7d:5e:3d:e0:8f:df:4e: 25:3e:e7:d1:66:e0:68:c8:8f:cc:35:fb:75:c9:87: 19:57:66:f3:8e:d3:42:c0:4d:41:bf:2f:8f:3a:c8: 1e:b9:1e:ec:6b:27:da:a6:c7:2e:d7:08:89:83:91: a3:c2:9c:e6:6b:16:d6:e8:13:66:cb:a6:ac:e1:e8: 58:6e:9d:ad:bd:eb:63:26:90:cd:b5:6e:88:ba:23: 61:dc:6f:e2:d5:1b:4e:3a:7a:a0:5c:92:03:86:e1: 00:a8:30:23:91:e2:a0:39:5f:5a:97:2b:d4:7a:f6: 57:4b:88:30:16:20:b4:1d:f0:74:7f:ee:08:3f:06: 0d:a3:04:5a:f8:21:51:10:b6:0f:e0:58:1b:b6:2c: 5b:72:fd:50:da:34:1d:c0:6a:1b:3d:60:0b:36:e8: 05:fb:50:20:29:e6:ab:f4:24:1e:9f:ab:75:af:41: 33:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EC:18:3B:82:F1:6F:BF:A5:5F:55:D9:BD:DB:4C:5A:BF:D2:C5:E2 X509v3 Authority Key Identifier: keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/iOwYO4Lxb7-lX1XZvdtMWr_SxeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.158.0/23 Signature Algorithm: sha256WithRSAEncryption a3:41:4e:f7:dd:65:68:f2:12:42:24:69:ba:70:d9:10:81:76: ec:4a:71:ce:a4:b3:bd:f8:11:ae:ea:05:8e:5c:d1:ed:1e:98: 1d:87:9d:68:f8:55:06:e5:4b:b8:8c:ba:6d:e2:8c:eb:76:ff: 2f:ab:c3:a4:94:ec:62:11:3d:2e:5a:c4:a9:c5:a9:f1:44:de: df:92:f9:80:65:b1:90:f3:f7:09:14:5f:b1:71:de:5a:15:03: f7:9d:67:ba:75:23:f7:5b:ae:ac:98:e6:bc:e5:a4:48:f4:1e: de:d4:b4:26:4a:1d:74:9a:f1:94:26:12:ed:21:71:aa:33:cd: 98:99:8c:2b:30:a0:30:20:50:bd:9b:ac:91:32:58:6a:6d:fd: df:e8:ba:1d:e8:1a:85:07:5b:3b:d9:79:3e:ff:4b:b6:21:6e: 42:f5:f6:ee:4a:5d:1d:fe:01:81:06:95:79:8e:a0:d4:00:e2: ec:07:f6:e0:d6:d1:f3:f7:a5:23:04:b5:38:26:5d:6e:97:0b: 65:9f:08:01:e3:83:80:bb:6d:03:b0:1b:a4:ec:39:70:76:7f: 1a:55:f3:75:81:09:7b:b2:1a:46:60:f9:6a:7f:78:d8:75:2b: 6e:c3:ab:c5:14:57:00:4a:7b:85:9b:50:bd:b0:47:0b:4f:5a: 2b:f3:d2:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EL6wTGnEJUKU5IU0mMTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYmViMWY4NWNkYWQxNDViZDJmOTdhZGRkMDk0MWQzMmQ3 NThkZTcwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGVjMTgzYjgyZjE2ZmJmYTU1ZjU1ZDliZGRiNGM1YWJmZDJjNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrBQI+7VTFaVo7W3eK86Wl8O+Wxf hvk9gl7MAjvaYaZgKkfRqyo4OT5YFFWIWc5Z+8k/Linbpxy4CgyhB5Xrodawk7kv bASNc6qbRb0quHhNUH1ePeCP304lPufRZuBoyI/MNft1yYcZV2bzjtNCwE1Bvy+P OsgeuR7sayfapscu1wiJg5GjwpzmaxbW6BNmy6as4ehYbp2tvetjJpDNtW6IuiNh 3G/i1RtOOnqgXJIDhuEAqDAjkeKgOV9alyvUevZXS4gwFiC0HfB0f+4IPwYNowRa +CFRELYP4Fgbtixbcv1Q2jQdwGobPWALNugF+1AgKear9CQen6t1r0Ez6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIjsGDuC8W+/pV9V2b3bTFq/0sXiMB8GA1UdIwQY MBaAFCu+sfhc2tFFvS+Xrd0JQdMtdY3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMt MDJmZDhlOTliZmUxLzEvaU93WU80THhiNy1sWDFYWnZkdE1Xcl9TeGVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMtMDJmZDhlOTliZmUx LzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSGeMA0G CSqGSIb3DQEBCwUAA4IBAQCjQU733WVo8hJCJGm6cNkQgXbsSnHOpLO9+BGu6gWO XNHtHpgdh51o+FUG5Uu4jLpt4ozrdv8vq8OklOxiET0uWsSpxanxRN7fkvmAZbGQ 8/cJFF+xcd5aFQP3nWe6dSP3W66smOa85aRI9B7e1LQmSh10mvGUJhLtIXGqM82Y mYwrMKAwIFC9m6yRMlhqbf3f6Lod6BqFB1s72Xk+/0u2IW5C9fbuSl0d/gGBBpV5 jqDUAOLsB/bg1tHz96UjBLU4Jl1ulwtlnwgB44OAu20DsBuk7Dlwdn8aVfN1gQl7 shpGYPlqf3jYdStuw6vFFFcASnuFm1C9sEcLT1or89Kl -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:12 2026 by rpki-client