This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/PEbeUkZb1apX7_y2826D9boddVg.roa File: PEbeUkZb1apX7_y2826D9boddVg.roa (raw, json) Hash identifier: HYxz0iV6fbIzFyu4KMUmllBnnOxRGfy9DSevgJ2/mV0= Subject key identifier: 3C:46:DE:52:46:5B:D5:AA:57:EF:FC:B6:F3:6E:83:F5:BA:1D:75:58 Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090 Certificate serial: 019B79ECD6058D72F1FCBFCD70CC5E8E3A04 Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/PEbeUkZb1apX7_y2826D9boddVg.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209860 IP address blocks: 212.87.242.0/23 maxlen: 23 212.87.248.0/23 maxlen: 23 212.87.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d6:05:8d:72:f1:fc:bf:cd:70:cc:5e:8e:3a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c46de52465bd5aa57effcb6f36e83f5ba1d7558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:76:84:dc:26:7e:af:b0:ee:dc:83:a3:4c:fb: a6:dc:37:2a:64:12:59:5f:94:a5:0d:fe:cc:61:f0: 23:84:64:bd:e4:71:7d:87:88:23:28:36:3e:a1:1f: bb:29:37:5b:d0:bc:88:2d:d9:15:a9:fb:34:74:9f: b4:7e:ea:70:ca:08:3e:b8:bf:5f:37:9a:37:eb:99: 4d:31:cf:19:59:d7:09:04:e6:55:b4:1c:79:28:4a: d4:78:fc:90:05:e0:37:ce:cb:35:34:7a:51:35:3a: 5a:a5:2d:b5:2f:50:e6:2d:e0:c4:d5:d4:cb:42:1d: f2:54:55:df:8c:68:75:01:17:4c:42:b9:a2:83:21: 0e:6e:26:36:9a:aa:48:4a:5d:a7:3c:e2:c3:5b:19: f4:f2:32:c5:7c:0a:61:10:8f:30:a2:3a:04:6f:00: aa:a2:03:77:2d:ad:85:3d:0e:ff:28:d4:b1:ac:19: 11:63:f8:8b:f0:c8:ce:92:b3:38:b5:32:0c:ab:79: 30:52:4b:02:f2:0b:ae:17:f1:4a:f4:a9:be:5b:14: ce:f6:d1:95:72:03:43:c4:a2:5b:19:98:01:c2:ae: 39:d9:5d:40:e8:e6:a5:d3:05:a8:96:36:f0:2a:04: ac:e5:71:69:54:62:64:c2:19:72:88:5e:95:a8:96: 56:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:46:DE:52:46:5B:D5:AA:57:EF:FC:B6:F3:6E:83:F5:BA:1D:75:58 X509v3 Authority Key Identifier: keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/PEbeUkZb1apX7_y2826D9boddVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.87.242.0/23 212.87.248.0/23 Signature Algorithm: sha256WithRSAEncryption 04:6c:29:52:ec:a2:44:22:40:28:28:a2:6d:39:33:5c:f3:76: f2:af:0d:37:77:23:1e:3b:71:c5:5c:69:7b:50:63:1b:4e:aa: 8e:1a:23:e3:65:ac:cb:74:cb:11:15:95:18:51:17:71:bb:a4: 29:fc:bf:80:96:77:29:e2:14:b7:d2:dd:a7:c1:3c:c7:42:0d: 4c:27:1f:5c:d0:89:7a:9f:36:ea:d3:c9:65:88:84:5b:72:f0: c9:66:15:d2:96:f7:39:58:a5:1e:53:28:35:01:81:08:25:07: ae:1d:81:2e:08:e5:ff:f4:64:2a:c9:e6:f9:e6:60:51:e9:92: 59:dc:c1:08:f3:ad:ef:50:70:5f:0a:3a:06:35:e5:e6:ae:55: 5d:11:91:6e:6e:77:a1:ac:0b:c3:07:91:3b:aa:bb:f7:f3:fe: a2:ee:c8:f6:bb:3f:33:e2:f3:77:a9:80:a8:e5:9d:a5:6c:73: 1e:e3:9a:0c:f4:ec:b5:05:6b:70:f0:85:ba:39:83:c4:cc:0e: 5b:20:d6:10:0a:12:c6:bf:51:2f:c2:6f:a1:d5:28:30:26:18: ab:f5:7e:93:c3:02:75:02:f8:42:4b:e0:36:ca:e3:a9:b6:39: 8c:be:21:1b:0e:58:89:31:68:64:7f:28:d0:b3:12:0c:fe:d3: b9:15:3b:90 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57NYFjXLx/L/NcMxejjoEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmFhOTYxYjQ3N2Q1NDIzZDg1YjdkNDNmM2VmYTI2MzI2 ZDcwOTAwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzQ2ZGU1MjQ2NWJkNWFhNTdlZmZjYjZmMzZlODNmNWJhMWQ3NTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23aE3CZ+r7Du3IOjTPum3DcqZBJZ X5SlDf7MYfAjhGS95HF9h4gjKDY+oR+7KTdb0LyILdkVqfs0dJ+0fupwygg+uL9f N5o365lNMc8ZWdcJBOZVtBx5KErUePyQBeA3zss1NHpRNTpapS21L1DmLeDE1dTL Qh3yVFXfjGh1ARdMQrmigyEObiY2mqpISl2nPOLDWxn08jLFfAphEI8wojoEbwCq ogN3La2FPQ7/KNSxrBkRY/iL8MjOkrM4tTIMq3kwUksC8guuF/FK9Km+WxTO9tGV cgNDxKJbGZgBwq452V1A6Oal0wWoljbwKgSs5XFpVGJkwhlyiF6VqJZW+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDxG3lJGW9WqV+/8tvNug/W6HXVYMB8GA1UdIwQY MBaAFLAqqWG0d9VCPYW31D8++iYybXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEt MDc4N2E1MDNjYTY5LzEvUEViZVVrWmIxYXBYN195MjgyNkQ5Ym9kZFZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEtMDc4N2E1MDNjYTY5 LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1FfyAwQB 1Ff4MA0GCSqGSIb3DQEBCwUAA4IBAQAEbClS7KJEIkAoKKJtOTNc83byrw03dyMe O3HFXGl7UGMbTqqOGiPjZazLdMsRFZUYURdxu6Qp/L+Alncp4hS30t2nwTzHQg1M Jx9c0Il6nzbq08lliIRbcvDJZhXSlvc5WKUeUyg1AYEIJQeuHYEuCOX/9GQqyeb5 5mBR6ZJZ3MEI863vUHBfCjoGNeXmrlVdEZFubnehrAvDB5E7qrv38/6i7sj2uz8z 4vN3qYCo5Z2lbHMe45oM9Oy1BWtw8IW6OYPEzA5bINYQChLGv1Evwm+h1SgwJhir 9X6TwwJ1AvhCS+A2yuOptjmMviEbDliJMWhkfyjQsxIM/tO5FTuQ -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:13 2026 by rpki-client