This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/eT2IWPcNjqqYvSRa6WeHp3LmJtA.roa File: eT2IWPcNjqqYvSRa6WeHp3LmJtA.roa (raw, json) Hash identifier: fIsFP2V7Kpl6K2IEcKVfzsXOwzj5Bhe8+tMHJi7fIAI= Subject key identifier: 79:3D:88:58:F7:0D:8E:AA:98:BD:24:5A:E9:67:87:A7:72:E6:26:D0 Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5 Certificate serial: 019B79EC2ADEEDAE24B9E0410D80B0EDE687 Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/eT2IWPcNjqqYvSRa6WeHp3LmJtA.roa Signing time: Thu 01 Jan 2026 14:17:59 +0000 ROA not before: Thu 01 Jan 2026 14:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200621 IP address blocks: 188.214.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2a:de:ed:ae:24:b9:e0:41:0d:80:b0:ed:e6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5 Validity Not Before: Jan 1 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=793d8858f70d8eaa98bd245ae96787a772e626d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:05:c7:91:a3:6e:af:b4:c6:f0:5e:da:ad: 5b:84:63:c5:97:ce:78:f0:ae:9e:ba:cb:47:1b:3f: eb:97:e2:2e:86:2f:5b:56:65:35:22:36:bf:46:55: b5:e4:ee:93:ef:c2:c4:c9:ed:d4:a6:5e:3d:83:76: 96:1d:c2:b4:99:d4:69:9e:34:76:d8:f8:bc:57:49: 49:00:ad:0d:d5:13:95:ff:c9:30:86:b5:de:ee:c7: e0:88:59:a5:54:7b:6d:4a:f3:c7:c8:53:1f:28:6c: d3:12:1e:5f:b6:94:79:61:ba:8b:64:61:b8:72:c0: 73:10:2d:73:d0:9c:2e:bc:61:ad:4d:c3:ad:58:be: 50:a2:23:1e:73:fe:15:4d:c7:a5:f6:44:42:19:1a: 07:6b:bd:e6:03:29:2e:56:99:cb:17:c9:3a:cd:c0: 90:45:32:04:97:67:b4:de:fb:9d:a2:52:f8:b2:58: a8:1a:52:ac:1a:3c:3b:83:d1:70:03:be:8c:34:5d: cd:ab:71:5e:75:5a:c1:30:10:34:36:30:f4:00:ea: 85:8b:5e:85:96:e1:42:e4:df:46:0e:34:03:97:9c: 4f:b5:6c:d0:f7:ad:eb:6a:83:22:05:56:c9:a5:3c: e2:5e:f3:f3:42:5e:41:be:32:56:0c:d5:57:4f:ab: 0e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3D:88:58:F7:0D:8E:AA:98:BD:24:5A:E9:67:87:A7:72:E6:26:D0 X509v3 Authority Key Identifier: keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/eT2IWPcNjqqYvSRa6WeHp3LmJtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.214.101.0/24 Signature Algorithm: sha256WithRSAEncryption 35:36:b7:4f:0c:7b:87:96:04:9a:7f:c6:e6:b1:3f:4a:c5:bc: f9:7a:fd:d8:f0:54:0b:57:1c:fc:5b:ee:7a:c6:df:f8:fe:7c: 7e:24:69:b7:4f:72:3c:66:ee:39:21:9f:33:5d:9e:26:6c:b3: fa:40:4e:63:ca:93:29:ef:c4:4e:1a:57:a9:23:d2:2d:23:05: a3:f2:69:fd:e4:db:ed:c9:85:0d:01:de:0d:72:b7:d6:75:4c: 3d:64:9a:be:81:4e:39:16:8a:ab:99:22:6e:af:f9:26:e8:eb: fc:6a:fb:e3:89:65:17:3c:22:5e:16:86:99:bb:06:07:c9:cb: 44:b5:3d:7a:6a:35:1f:01:48:23:dd:ad:af:e6:c4:a7:8f:c4: fd:97:a7:28:42:9a:4a:28:81:48:47:e8:10:3e:fb:2a:21:6f: d4:cd:80:a5:7f:bf:5b:f0:81:70:1e:55:5e:91:b4:7b:84:4f: 74:07:e3:18:20:a4:5d:bf:87:9b:9c:d2:3d:98:86:58:f1:fd: d2:da:f4:e5:1e:41:da:03:58:d7:6e:79:ec:f5:2e:3a:5a:78: 36:0f:6d:73:3e:5e:5d:78:13:fe:fc:1e:de:bb:87:41:04:5a: 40:01:92:d4:cf:ae:4d:82:92:fd:b5:86:ec:9f:fc:53:6d:8f: 3d:e2:67:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Cre7a4kueBBDYCw7eaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYWZlMWZlZDFmMmI3ZGIyNGEwYzJkMWY2MTAxMDY4NGU5 M2NiZDUwHhcNMjYwMTAxMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTNkODg1OGY3MGQ4ZWFhOThiZDI0NWFlOTY3ODdhNzcyZTYyNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyQFx5Gjbq+0xvBe2q1bhGPFl854 8K6eustHGz/rl+Iuhi9bVmU1Ija/RlW15O6T78LEye3Upl49g3aWHcK0mdRpnjR2 2Pi8V0lJAK0N1ROV/8kwhrXe7sfgiFmlVHttSvPHyFMfKGzTEh5ftpR5YbqLZGG4 csBzEC1z0JwuvGGtTcOtWL5QoiMec/4VTcel9kRCGRoHa73mAykuVpnLF8k6zcCQ RTIEl2e03vudolL4slioGlKsGjw7g9FwA76MNF3Nq3FedVrBMBA0NjD0AOqFi16F luFC5N9GDjQDl5xPtWzQ963raoMiBVbJpTziXvPzQl5BvjJWDNVXT6sOawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHk9iFj3DY6qmL0kWulnh6dy5ibQMB8GA1UdIwQY MBaAFKCv4f7R8rfbJKDC0fYQEGhOk8vVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDIt ZWNhNTNhN2Y3NzYyLzEvZVQySVdQY05qcXFZdlNSYTZXZUhwM0xtSnRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDItZWNhNTNhN2Y3NzYy LzEvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNZlMA0G CSqGSIb3DQEBCwUAA4IBAQA1NrdPDHuHlgSaf8bmsT9Kxbz5ev3Y8FQLVxz8W+56 xt/4/nx+JGm3T3I8Zu45IZ8zXZ4mbLP6QE5jypMp78ROGlepI9ItIwWj8mn95Nvt yYUNAd4NcrfWdUw9ZJq+gU45FoqrmSJur/km6Ov8avvjiWUXPCJeFoaZuwYHyctE tT16ajUfAUgj3a2v5sSnj8T9l6coQppKKIFIR+gQPvsqIW/UzYClf79b8IFwHlVe kbR7hE90B+MYIKRdv4ebnNI9mIZY8f3S2vTlHkHaA1jXbnns9S46Wng2D21zPl5d eBP+/B7eu4dBBFpAAZLUz65NgpL9tYbsn/xTbY894md8 -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:49 2026 by rpki-client