This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/pKf2y4mr6SwsdioJuyeT8C1GN7A.roa File: pKf2y4mr6SwsdioJuyeT8C1GN7A.roa (raw, json) Hash identifier: nd+rjt63wQ19eLVnNpkeTlDLfV8bsIzijEILJh9lv58= Subject key identifier: A4:A7:F6:CB:89:AB:E9:2C:2C:76:2A:09:BB:27:93:F0:2D:46:37:B0 Certificate issuer: /CN=ebf58388c631c977ea51fcadb50cd20a7492f5e7 Certificate serial: 019B7DCA106540C9339B690ACD70F0EAE1B8 Authority key identifier: EB:F5:83:88:C6:31:C9:77:EA:51:FC:AD:B5:0C:D2:0A:74:92:F5:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/pKf2y4mr6SwsdioJuyeT8C1GN7A.roa Signing time: Fri 02 Jan 2026 08:19:13 +0000 ROA not before: Fri 02 Jan 2026 08:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213270 IP address blocks: 37.200.86.0/24 maxlen: 24 2a02:f980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.crl rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:10:65:40:c9:33:9b:69:0a:cd:70:f0:ea:e1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf58388c631c977ea51fcadb50cd20a7492f5e7 Validity Not Before: Jan 2 08:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4a7f6cb89abe92c2c762a09bb2793f02d4637b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:fc:80:69:c7:64:36:68:7f:dd:f9:02:97: ac:de:5c:8e:37:fe:f7:38:13:d3:cd:16:76:c0:c8: 98:66:0c:ce:95:63:0b:00:e7:98:80:fc:57:15:b3: 01:d3:34:bf:4c:6f:2a:40:cb:50:78:29:5e:1b:93: 1e:e6:ba:66:af:87:7e:b1:ad:2d:f3:6f:1f:9e:28: 2a:c3:e3:aa:8e:3a:29:0f:a1:50:dd:78:4f:85:de: 21:d7:35:c3:77:48:e4:0d:46:d8:6d:f2:34:3a:46: f9:ab:15:c9:ad:d6:d7:8d:e7:7d:61:da:ec:80:bd: 10:ab:56:d3:a3:04:c8:ab:f9:94:d2:c6:f1:e1:fa: ec:c6:ee:87:76:eb:9f:b1:ef:57:bf:cb:fd:89:f0: e0:a3:73:c4:f9:b0:85:c7:cc:aa:f4:91:64:5b:af: 04:ee:7d:b4:eb:3b:2b:e5:5c:5e:94:ab:3c:72:e1: 38:0e:2e:c8:24:a0:19:a6:df:9d:d5:db:60:be:a0: 82:49:81:03:02:50:b4:12:6b:a4:a2:8c:ac:d8:9b: 89:3f:70:35:8a:b0:ae:9c:ea:28:ae:f3:00:a7:77: 34:a2:3a:8e:1e:e1:e6:74:3f:cd:64:32:4b:21:cb: 35:ca:92:3a:bd:ec:da:32:ac:20:f6:e8:ed:7b:4f: f8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A7:F6:CB:89:AB:E9:2C:2C:76:2A:09:BB:27:93:F0:2D:46:37:B0 X509v3 Authority Key Identifier: keyid:EB:F5:83:88:C6:31:C9:77:EA:51:FC:AD:B5:0C:D2:0A:74:92:F5:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/pKf2y4mr6SwsdioJuyeT8C1GN7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.200.86.0/24 IPv6: 2a02:f980::/32 Signature Algorithm: sha256WithRSAEncryption 46:9f:b2:7b:da:3e:d4:1c:5e:1e:c5:dd:1f:dc:2c:db:54:7c: 41:cd:a2:49:7d:f4:9a:24:27:0a:5f:05:60:38:60:ea:d7:ee: 93:f2:71:7c:3d:af:f4:2c:f4:8c:db:cd:ae:5b:9c:2d:dc:00: 53:4a:0f:a4:1e:96:4f:e8:30:c9:c7:7b:7c:78:c5:b3:b3:4c: 40:68:58:09:38:5c:76:b3:7c:b8:4e:e5:ca:a4:94:bc:f4:c8: 91:a8:88:44:f0:e0:87:ee:27:23:f6:9c:79:33:2a:39:07:7d: a0:c2:86:7f:bc:23:41:8e:a8:86:88:64:49:9e:45:e9:de:86: b8:99:6e:c0:39:d5:0b:0a:51:b6:1c:ae:30:b7:b8:46:0d:ee: 66:58:ce:13:9a:3e:90:6a:3b:c8:26:d4:72:dd:36:b4:f7:88: 9a:34:71:b8:42:6c:99:2d:44:04:15:ad:d4:a8:e5:19:23:db: 93:80:23:19:ce:39:cf:2b:a9:54:a6:55:0b:66:99:42:02:8d: 09:fb:a5:49:99:fd:10:02:4b:c2:97:c7:8d:9f:ca:03:8d:ff: be:92:31:cd:60:04:f7:df:e5:ca:92:a1:df:5d:6f:1d:f8:68: 39:bf:1c:b4:83:d7:b4:31:78:f7:3c:be:5f:27:7f:c1:85:ad: dd:49:a0:01 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yhBlQMkzm2kKzXDw6uG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjU4Mzg4YzYzMWM5NzdlYTUxZmNhZGI1MGNkMjBhNzQ5 MmY1ZTcwHhcNMjYwMTAyMDgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGE3ZjZjYjg5YWJlOTJjMmM3NjJhMDliYjI3OTNmMDJkNDYzN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvv8gGnHZDZof935Apes3lyON/73 OBPTzRZ2wMiYZgzOlWMLAOeYgPxXFbMB0zS/TG8qQMtQeCleG5Me5rpmr4d+sa0t 828fnigqw+OqjjopD6FQ3XhPhd4h1zXDd0jkDUbYbfI0Okb5qxXJrdbXjed9Ydrs gL0Qq1bTowTIq/mU0sbx4frsxu6Hduufse9Xv8v9ifDgo3PE+bCFx8yq9JFkW68E 7n206zsr5VxelKs8cuE4Di7IJKAZpt+d1dtgvqCCSYEDAlC0Emukooys2JuJP3A1 irCunOoorvMAp3c0ojqOHuHmdD/NZDJLIcs1ypI6vezaMqwg9ujte0/4vwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKSn9suJq+ksLHYqCbsnk/AtRjewMB8GA1UdIwQY MBaAFOv1g4jGMcl36lH8rbUM0gp0kvXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9XRGlNWXh5WGZxVWZ5dHRRelNDblNTOWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xYzhiZWUtOGRmOC00MTAyLWE0ZWMt NGYxYWRlMWRhMjBkLzEvcEtmMnk0bXI2U3dzZGlvSnV5ZVQ4QzFHTjdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xYzhiZWUtOGRmOC00MTAyLWE0ZWMtNGYxYWRlMWRhMjBk LzEvNl9XRGlNWXh5WGZxVWZ5dHRRelNDblNTOWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAJchWMA0E AgACMAcDBQAqAvmAMA0GCSqGSIb3DQEBCwUAA4IBAQBGn7J72j7UHF4exd0f3Czb VHxBzaJJffSaJCcKXwVgOGDq1+6T8nF8Pa/0LPSM282uW5wt3ABTSg+kHpZP6DDJ x3t8eMWzs0xAaFgJOFx2s3y4TuXKpJS89MiRqIhE8OCH7icj9px5Myo5B32gwoZ/ vCNBjqiGiGRJnkXp3oa4mW7AOdULClG2HK4wt7hGDe5mWM4Tmj6QajvIJtRy3Ta0 94iaNHG4QmyZLUQEFa3UqOUZI9uTgCMZzjnPK6lUplULZplCAo0J+6VJmf0QAkvC l8eNn8oDjf++kjHNYAT33+XKkqHfXW8d+Gg5vxy0g9e0MXj3PL5fJ3/Bha3dSaAB -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:24 2026 by rpki-client