This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/2anahPKNms3y710gencrWiHxjKo.roa File: 2anahPKNms3y710gencrWiHxjKo.roa (raw, json) Hash identifier: VmazSTwgzYudVyadHVOYGFSp9iz4KiJPufdCdGzHpJ8= Subject key identifier: D9:A9:DA:84:F2:8D:9A:CD:F2:EF:5D:20:7A:77:2B:5A:21:F1:8C:AA Certificate issuer: /CN=13230da70232f66784730fd6c1255135b7f8d09f Certificate serial: 019B7F8571FA7A5BD96F662D4CB0898EEA5B Authority key identifier: 13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/2anahPKNms3y710gencrWiHxjKo.roa Signing time: Fri 02 Jan 2026 16:23:30 +0000 ROA not before: Fri 02 Jan 2026 16:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51354 IP address blocks: 195.43.75.0/24 maxlen: 24 2001:7f9:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:71:fa:7a:5b:d9:6f:66:2d:4c:b0:89:8e:ea:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13230da70232f66784730fd6c1255135b7f8d09f Validity Not Before: Jan 2 16:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9a9da84f28d9acdf2ef5d207a772b5a21f18caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:e1:91:5c:a7:fa:02:75:cf:c0:16:c3:93: cf:48:ff:21:5b:1c:fd:6c:e9:52:90:bd:ec:63:72: 83:a1:f8:22:b1:3e:d1:5e:7f:31:a4:38:6b:4f:c5: b0:f2:76:2f:2e:33:19:ca:16:64:43:21:8d:29:0d: 3b:19:9c:45:6b:4a:40:8f:c5:d1:f9:3d:50:f8:fa: 09:ea:8c:52:2c:ac:a4:52:21:a3:d0:2f:d1:0f:97: 56:37:20:18:6a:5e:9d:9f:28:76:80:6c:39:97:2d: e6:1c:d6:bc:55:69:33:85:ed:0d:c7:c0:be:30:1e: 14:d3:17:bf:49:02:b9:bb:39:b1:ca:22:e3:6e:83: c3:f6:6f:1b:00:65:b8:6f:10:b2:cd:61:12:23:ca: 78:b2:1e:79:3f:21:1e:22:6f:77:f2:34:26:38:e0: 73:f8:5e:57:58:4d:6b:a2:a2:23:70:bc:28:fb:6b: aa:11:a1:99:2c:2b:39:fd:fd:0d:f4:b8:17:e0:34: 3f:02:7c:5f:f8:7a:ae:20:36:f2:9e:1e:ee:28:78: 18:75:ce:1d:83:df:1f:e3:ed:d2:8f:3d:ca:0e:b3: 11:44:92:57:6a:a4:9e:cf:87:fc:5f:1d:80:07:ed: 1c:cf:83:60:80:17:2a:49:8a:71:62:7c:4c:47:09: db:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A9:DA:84:F2:8D:9A:CD:F2:EF:5D:20:7A:77:2B:5A:21:F1:8C:AA X509v3 Authority Key Identifier: keyid:13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/2anahPKNms3y710gencrWiHxjKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.75.0/24 IPv6: 2001:7f9:8::/48 Signature Algorithm: sha256WithRSAEncryption c6:4b:8e:98:b0:ab:99:7a:27:f6:20:28:2b:ea:c3:95:ec:d8: e9:63:b6:75:62:79:94:d9:4e:2f:20:6e:5c:3b:7a:13:12:89: fd:95:83:2c:8e:aa:5c:1e:10:62:2f:7a:c6:4d:c2:3f:15:d1: c0:a2:4c:6a:25:af:70:99:c6:c9:1a:e3:ad:95:c4:de:0a:99: 00:b4:d9:98:22:7d:85:64:1c:8f:44:25:5b:49:56:2d:38:e9: 75:7e:fb:91:08:82:7e:0e:c9:a9:3e:a0:49:d1:ee:d5:13:d1: da:2a:1d:91:27:1a:ff:57:26:ba:d2:8d:04:ea:fd:5f:96:eb: f1:be:89:c3:d1:57:7d:b2:9a:a6:bf:6d:35:3c:d2:82:72:42: a5:77:71:45:48:71:e1:e0:73:07:a8:a2:c0:37:32:51:87:06: 95:54:bf:00:2c:38:b1:7b:76:4c:68:ad:ae:75:72:fb:1d:c6: cd:f8:1d:e6:19:ee:f9:d3:81:4b:17:38:39:b6:c4:e2:47:9e: ea:dd:10:89:de:ce:e3:ba:b3:f2:ac:9b:bf:a6:45:14:2f:9a: 7b:dc:a5:b4:67:9e:c3:14:60:ea:e7:0d:c0:85:b9:21:3a:e5: 3c:f1:ae:79:fa:de:b6:0f:f3:33:e1:7f:01:06:65:39:ba:12: 5b:da:f0:06 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hXH6elvZb2YtTLCJjupbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMjMwZGE3MDIzMmY2Njc4NDczMGZkNmMxMjU1MTM1Yjdm OGQwOWYwHhcNMjYwMTAyMTYyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWE5ZGE4NGYyOGQ5YWNkZjJlZjVkMjA3YTc3MmI1YTIxZjE4Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUzhkVyn+gJ1z8AWw5PPSP8hWxz9 bOlSkL3sY3KDofgisT7RXn8xpDhrT8Ww8nYvLjMZyhZkQyGNKQ07GZxFa0pAj8XR +T1Q+PoJ6oxSLKykUiGj0C/RD5dWNyAYal6dnyh2gGw5ly3mHNa8VWkzhe0Nx8C+ MB4U0xe/SQK5uzmxyiLjboPD9m8bAGW4bxCyzWESI8p4sh55PyEeIm938jQmOOBz +F5XWE1roqIjcLwo+2uqEaGZLCs5/f0N9LgX4DQ/Anxf+HquIDbynh7uKHgYdc4d g98f4+3Sjz3KDrMRRJJXaqSez4f8Xx2AB+0cz4NggBcqSYpxYnxMRwnb2wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNmp2oTyjZrN8u9dIHp3K1oh8YyqMB8GA1UdIwQY MBaAFBMjDacCMvZnhHMP1sElUTW3+NCfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXlNTnB3SXk5bWVFY3dfV3dTVlJOYmY0MEo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYmUyZjMtMTMzYy00NGQ1LThhYzgt ZWIwMWU4YThkNGIzLzEvMmFuYWhQS05tczN5NzEwZ2VuY3JXaUh4aktvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xYmUyZjMtMTMzYy00NGQ1LThhYzgtZWIwMWU4YThkNGIz LzEvRXlNTnB3SXk5bWVFY3dfV3dTVlJOYmY0MEo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwytLMA8E AgACMAkDBwAgAQf5AAgwDQYJKoZIhvcNAQELBQADggEBAMZLjpiwq5l6J/YgKCvq w5Xs2OljtnVieZTZTi8gblw7ehMSif2VgyyOqlweEGIvesZNwj8V0cCiTGolr3CZ xska462VxN4KmQC02ZgifYVkHI9EJVtJVi046XV++5EIgn4Oyak+oEnR7tUT0doq HZEnGv9XJrrSjQTq/V+W6/G+icPRV32ymqa/bTU80oJyQqV3cUVIceHgcweoosA3 MlGHBpVUvwAsOLF7dkxora51cvsdxs34HeYZ7vnTgUsXODm2xOJHnurdEInezuO6 s/Ksm7+mRRQvmnvcpbRnnsMUYOrnDcCFuSE65Tzxrnn63rYP8zPhfwEGZTm6Elva 8AY= -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:30 2026 by rpki-client