This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/io2mF3E9gfP7892mcQBySWcc0wI.roa File: io2mF3E9gfP7892mcQBySWcc0wI.roa (raw, json) Hash identifier: s9fn90wE9W/HoEf/IkcbrFOIhL596v/QWK9di592Y8w= Subject key identifier: 8A:8D:A6:17:71:3D:81:F3:FB:F3:DD:A6:71:00:72:49:67:1C:D3:02 Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71 Certificate serial: 019B7F160500B7A97D1D5943594E488C744F Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/io2mF3E9gfP7892mcQBySWcc0wI.roa Signing time: Fri 02 Jan 2026 14:21:48 +0000 ROA not before: Fri 02 Jan 2026 14:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197068 IP address blocks: 45.152.114.0/24 maxlen: 24 45.152.115.0/24 maxlen: 24 193.23.55.0/24 maxlen: 24 193.43.79.0/24 maxlen: 24 193.43.91.0/24 maxlen: 24 193.43.94.0/24 maxlen: 24 195.43.92.0/23 maxlen: 24 2a03:70c1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:05:00:b7:a9:7d:1d:59:43:59:4e:48:8c:74:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71 Validity Not Before: Jan 2 14:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a8da617713d81f3fbf3dda671007249671cd302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d0:f9:40:3d:ac:e7:95:63:94:ff:12:ec:0e: 25:ab:aa:e2:f9:a2:e2:d7:01:06:1c:7f:fe:6c:aa: c1:5c:b3:07:44:55:7e:03:97:c7:6b:c5:e4:b0:7e: f4:5b:b3:05:11:1d:c8:3b:36:5d:23:3e:40:26:50: e3:6d:9c:49:41:e8:c1:48:fa:08:d3:c1:d5:9b:ef: c1:20:c6:93:71:21:d8:10:a7:1b:ef:90:a5:c6:7a: 2d:f0:2c:f7:26:b4:e8:b4:9a:4b:35:48:b8:8d:4b: 1e:63:19:90:40:72:82:81:48:ec:29:e8:4f:0c:22: 64:bc:eb:8d:20:1a:d4:06:ba:bc:8d:f1:a7:97:53: 2d:7e:64:7f:5e:35:26:47:20:7c:ce:8c:c4:19:ef: 20:af:85:b5:f2:c7:6d:d4:1e:19:b3:79:cf:64:cd: 5e:41:4a:3f:7b:35:aa:b6:3c:8a:57:4f:b0:16:bb: 0a:15:7a:85:c1:b6:f3:61:f0:77:e1:08:b7:6e:5b: ff:eb:be:35:1c:b8:e1:9d:b0:90:1b:22:9b:c4:31: 26:67:f4:e7:00:35:f2:cc:b2:4c:00:a7:d9:34:b9: 22:25:4f:1c:97:56:17:30:c6:29:fd:fb:06:a8:6e: 58:59:ff:3c:af:fc:bd:4a:9d:f2:a1:02:1e:02:41: e2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:A6:17:71:3D:81:F3:FB:F3:DD:A6:71:00:72:49:67:1C:D3:02 X509v3 Authority Key Identifier: keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/io2mF3E9gfP7892mcQBySWcc0wI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.114.0/23 193.23.55.0/24 193.43.79.0/24 193.43.91.0/24 193.43.94.0/24 195.43.92.0/23 IPv6: 2a03:70c1::/32 Signature Algorithm: sha256WithRSAEncryption 2c:54:5d:0b:28:69:b3:50:6d:2d:bc:ea:8f:de:84:2f:34:74: 3e:1e:59:02:a7:06:af:92:0c:34:d7:d8:3b:dc:c3:b7:44:fd: 0e:2e:7d:06:eb:bf:ac:f0:e3:98:cb:26:ba:59:fb:7b:09:d3: 84:34:4b:11:a0:39:2c:c9:18:dd:8f:f0:35:67:ab:c8:bf:81: 8a:e5:3e:20:db:1a:20:ed:02:5f:d5:08:2b:d9:01:de:13:11: c9:2c:a7:a6:b5:81:69:97:85:9c:ec:86:1f:c4:70:0b:51:85: 82:b6:bd:6e:cb:22:46:93:97:61:0f:8f:dc:35:38:74:25:bf: 43:e6:68:8f:67:d1:66:46:a1:d6:52:88:43:4f:01:1e:9b:85: 34:b6:06:e3:be:1d:82:b0:a8:16:e8:21:c0:31:a0:a6:1a:d8: b2:5a:d3:f2:6f:4e:26:5a:f5:3c:c6:bf:f3:a6:64:98:a7:11: bc:ef:60:4f:69:aa:a8:5d:10:23:52:28:cc:0c:03:c8:f2:9d: c2:e4:ab:77:cd:82:2e:1b:88:0d:6b:c8:6c:ff:5f:3d:47:57: 6d:2c:91:f5:58:dd:7a:8c:ba:58:32:1d:b5:e2:8b:d3:7b:15: 14:2d:46:c8:91:bd:89:02:4b:0a:b2:c0:25:e7:23:bf:1d:ab: eb:4f:4d:2b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt/FgUAt6l9HVlDWU5IjHRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjYxMGNkNDNiYWZjZWQ5MTQ4MGZhYmZkY2FhZTgyMDQ5 ZmJmNzEwHhcNMjYwMTAyMTQyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YThkYTYxNzcxM2Q4MWYzZmJmM2RkYTY3MTAwNzI0OTY3MWNkMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdD5QD2s55VjlP8S7A4lq6ri+aLi 1wEGHH/+bKrBXLMHRFV+A5fHa8XksH70W7MFER3IOzZdIz5AJlDjbZxJQejBSPoI 08HVm+/BIMaTcSHYEKcb75Clxnot8Cz3JrTotJpLNUi4jUseYxmQQHKCgUjsKehP DCJkvOuNIBrUBrq8jfGnl1MtfmR/XjUmRyB8zozEGe8gr4W18sdt1B4Zs3nPZM1e QUo/ezWqtjyKV0+wFrsKFXqFwbbzYfB34Qi3blv/6741HLjhnbCQGyKbxDEmZ/Tn ADXyzLJMAKfZNLkiJU8cl1YXMMYp/fsGqG5YWf88r/y9Sp3yoQIeAkHiJQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFIqNphdxPYHz+/PdpnEAcklnHNMCMB8GA1UdIwQY MBaAFAK2EM1DuvztkUgPq/3KroIEn79xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEt OTAxM2NhOTk2YjE2LzEvaW8ybUYzRTlnZlA3ODkybWNRQnlTV2NjMHdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEtOTAxM2NhOTk2YjE2 LzEvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBLZhyAwQA wRc3AwQAwStPAwQAwStbAwQAwSteAwQBwytcMA0EAgACMAcDBQAqA3DBMA0GCSqG SIb3DQEBCwUAA4IBAQAsVF0LKGmzUG0tvOqP3oQvNHQ+HlkCpwavkgw019g73MO3 RP0OLn0G67+s8OOYyya6Wft7CdOENEsRoDksyRjdj/A1Z6vIv4GK5T4g2xog7QJf 1Qgr2QHeExHJLKemtYFpl4Wc7IYfxHALUYWCtr1uyyJGk5dhD4/cNTh0Jb9D5miP Z9FmRqHWUohDTwEem4U0tgbjvh2CsKgW6CHAMaCmGtiyWtPyb04mWvU8xr/zpmSY pxG872BPaaqoXRAjUijMDAPI8p3C5Kt3zYIuG4gNa8hs/189R1dtLJH1WN16jLpY Mh214ovTexUULUbIkb2JAksKssAl5yO/HavrT00r -----END CERTIFICATE-----Generated at Sat Jan 10 22:39:11 2026 by rpki-client