This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2GpewSyH7AWy1Iw5A5P_aqDvvM0.roa File: 2GpewSyH7AWy1Iw5A5P_aqDvvM0.roa (raw, json) Hash identifier: UsdP/VAVmET8exzlnnmey/2VnAM0G4Qgb1AhpM3SmAY= Subject key identifier: D8:6A:5E:C1:2C:87:EC:05:B2:D4:8C:39:03:93:FF:6A:A0:EF:BC:CD Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B7910553C183A6A0F48F452F5B57BD5D6 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2GpewSyH7AWy1Iw5A5P_aqDvvM0.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197450 IP address blocks: 188.132.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:55:3c:18:3a:6a:0f:48:f4:52:f5:b5:7b:d5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d86a5ec12c87ec05b2d48c390393ff6aa0efbccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:ea:18:4d:f0:cb:08:ea:cb:e0:cc:95:3d: fb:be:3e:24:52:29:d1:28:b3:04:29:1c:8d:d3:e8: 7a:4f:a1:f6:6c:fb:4f:6b:f3:c0:96:84:aa:6b:1e: 12:b9:44:dd:03:a1:32:80:81:37:fe:7a:41:36:18: c7:ab:ea:f5:a7:93:ae:84:93:24:54:16:b5:81:a2: 8d:cd:40:dc:df:48:7b:29:66:ad:06:74:91:a0:c0: 0b:14:6d:76:f8:c4:8a:ea:84:c5:94:7a:93:d4:8b: 70:0d:74:14:32:11:39:c4:45:61:e8:07:ba:aa:5a: 64:ea:49:bf:f9:14:98:b2:88:de:0d:5e:c0:b9:77: 91:b6:6e:a6:21:9c:e7:9c:30:88:3c:5f:7a:5f:ea: 8f:68:84:1d:b9:20:93:ad:60:f0:37:3c:89:c2:d9: 2d:13:38:ee:52:2d:e8:1d:e3:eb:7f:86:2f:50:bb: 3f:8b:fd:16:86:b2:18:6a:01:eb:49:b0:8b:8a:1a: 64:a1:c5:94:2b:3b:5b:96:7f:1f:42:f2:2d:8c:ae: ac:64:1d:ad:81:fd:38:f5:60:0d:40:63:d6:65:6f: 0d:cb:04:8b:0f:49:05:aa:74:43:fd:b4:25:db:6a: e8:0e:d1:c4:58:35:f8:b6:e6:77:32:34:62:6e:20: 0b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6A:5E:C1:2C:87:EC:05:B2:D4:8C:39:03:93:FF:6A:A0:EF:BC:CD X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2GpewSyH7AWy1Iw5A5P_aqDvvM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.232.0/24 Signature Algorithm: sha256WithRSAEncryption 14:de:db:71:79:8d:29:66:1c:c4:ac:b6:91:49:ee:e9:b6:89: 24:17:ce:85:3c:ca:01:07:17:a2:5c:fd:dc:30:25:20:5a:cb: 21:3f:aa:10:42:97:d1:25:c1:8d:de:81:9b:10:d1:60:67:c1: 21:74:29:1c:4d:a0:4a:11:64:cb:b8:cf:e5:ca:d9:aa:32:65: 57:56:51:1f:d7:9b:be:0d:cf:00:e2:45:bb:fd:a9:bc:49:ae: ad:6a:1d:37:a7:db:35:ca:0d:74:a5:2e:ea:07:38:e3:04:a4: c7:d6:d7:8f:cd:e3:f2:80:47:02:16:7e:ef:e9:bf:06:d4:12: f6:5c:23:8f:44:40:db:f9:9f:26:8a:bb:bf:08:98:7c:49:48: c5:38:66:76:0a:c6:f0:32:dd:30:11:ec:09:f6:4c:b0:e9:99: 18:88:7b:bc:2f:75:1f:57:23:f4:de:d5:a7:5d:7d:db:e3:f3: a8:6e:7f:71:ab:46:2c:72:f5:6e:4c:5a:9a:0f:34:60:9f:04: 65:79:94:69:78:f4:52:63:78:34:d2:e7:a6:7c:3b:ce:ec:0c: da:6f:5e:39:40:91:5d:3a:13:32:c0:33:fd:37:42:f1:b0:05: d3:a5:9c:cb:22:f3:a3:fa:8f:04:c2:33:52:2b:52:10:ce:64: be:81:31:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFU8GDpqD0j0UvW1e9XWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODZhNWVjMTJjODdlYzA1YjJkNDhjMzkwMzkzZmY2YWEwZWZiY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNLqGE3wywjqy+DMlT37vj4kUinR KLMEKRyN0+h6T6H2bPtPa/PAloSqax4SuUTdA6EygIE3/npBNhjHq+r1p5OuhJMk VBa1gaKNzUDc30h7KWatBnSRoMALFG12+MSK6oTFlHqT1ItwDXQUMhE5xEVh6Ae6 qlpk6km/+RSYsojeDV7AuXeRtm6mIZznnDCIPF96X+qPaIQduSCTrWDwNzyJwtkt EzjuUi3oHePrf4YvULs/i/0WhrIYagHrSbCLihpkocWUKztbln8fQvItjK6sZB2t gf049WANQGPWZW8NywSLD0kFqnRD/bQl22roDtHEWDX4tuZ3MjRibiALYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNhqXsEsh+wFstSMOQOT/2qg77zNMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvMkdwZXdTeUg3QVd5MUl3NUE1UF9hcUR2dk0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvIToMA0G CSqGSIb3DQEBCwUAA4IBAQAU3ttxeY0pZhzErLaRSe7ptokkF86FPMoBBxeiXP3c MCUgWsshP6oQQpfRJcGN3oGbENFgZ8EhdCkcTaBKEWTLuM/lytmqMmVXVlEf15u+ Dc8A4kW7/am8Sa6tah03p9s1yg10pS7qBzjjBKTH1tePzePygEcCFn7v6b8G1BL2 XCOPREDb+Z8miru/CJh8SUjFOGZ2CsbwMt0wEewJ9kyw6ZkYiHu8L3UfVyP03tWn XX3b4/Oobn9xq0YscvVuTFqaDzRgnwRleZRpePRSY3g00uemfDvO7Azab145QJFd OhMywDP9N0LxsAXTpZzLIvOj+o8EwjNSK1IQzmS+gTHx -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:53 2026 by rpki-client