This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/p2L_EOyK-Gu4buEXAYfa_Yk4PIM.roa File: p2L_EOyK-Gu4buEXAYfa_Yk4PIM.roa (raw, json) Hash identifier: 6kS2aQ01rx8f7YBcYoBwf+GjyXhd+eHnUHvmzdgYR3U= Subject key identifier: A7:62:FF:10:EC:8A:F8:6B:B8:6E:E1:17:01:87:DA:FD:89:38:3C:83 Certificate issuer: /CN=234f08fa4222535c0af26a0d7347dbf172547196 Certificate serial: 019B77C71159833E48764DFEE579716C2355 Authority key identifier: 23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/p2L_EOyK-Gu4buEXAYfa_Yk4PIM.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210506 IP address blocks: 62.3.38.0/24 maxlen: 24 185.225.189.0/24 maxlen: 24 193.105.88.0/24 maxlen: 24 194.26.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:11:59:83:3e:48:76:4d:fe:e5:79:71:6c:23:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234f08fa4222535c0af26a0d7347dbf172547196 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a762ff10ec8af86bb86ee1170187dafd89383c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:06:6f:34:f4:b2:bd:7a:7f:92:c8:ed:e6: ae:a9:ad:c7:94:d0:79:e3:e2:5e:45:a3:b7:97:aa: d7:90:1f:1e:1d:80:59:cd:b2:fb:03:dd:30:24:d6: 14:0e:49:8c:fa:eb:9f:2a:c9:83:58:2a:2e:26:7c: 2d:5c:7d:ab:bf:f5:6c:e4:2c:df:e3:6c:8e:7c:88: ce:99:fb:bf:ad:16:9d:2e:c8:14:ed:32:e8:73:6b: 1b:c0:1b:05:87:ab:d6:e7:08:d5:b7:5f:2c:68:90: de:c7:12:2a:cf:e3:6d:3f:28:08:88:f5:d8:b4:db: 24:db:1e:f6:e8:e4:c6:f1:93:ec:0e:13:7b:b6:ba: 1a:ac:25:50:42:31:95:68:64:c8:a4:ed:89:f2:94: 3a:54:29:2f:5d:32:81:a0:48:c2:77:f3:8f:9c:5e: c2:00:7e:52:27:55:48:bd:2d:74:e8:28:fb:10:87: b5:4a:6a:ce:29:0e:2d:19:b0:35:78:e6:45:c0:19: 60:fa:b0:29:e1:75:91:29:b9:04:fa:28:c4:7b:e3: 05:6b:80:17:2f:8a:0c:ec:9d:56:b1:c7:86:06:62: 65:85:a8:2b:41:b9:e3:54:bc:7e:31:af:c6:7f:ec: b8:3f:62:c6:0e:f6:65:c8:7a:19:6e:b7:94:73:a1: 03:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:62:FF:10:EC:8A:F8:6B:B8:6E:E1:17:01:87:DA:FD:89:38:3C:83 X509v3 Authority Key Identifier: keyid:23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/p2L_EOyK-Gu4buEXAYfa_Yk4PIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.38.0/24 185.225.189.0/24 193.105.88.0/24 194.26.201.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:29:ce:c6:b7:00:70:9c:6e:ed:d4:67:15:ff:35:9e:a4:8b: 5d:f1:98:50:71:9b:2d:f8:75:ca:5b:81:ce:bd:0a:4a:04:19: 96:8d:e6:42:d0:0a:59:f2:39:5e:2b:c3:4e:ba:3b:78:cb:c5: fd:da:59:3c:62:c6:fb:62:42:ab:e3:18:00:47:72:d1:9d:58: af:b3:0e:aa:7d:b0:20:67:98:0c:31:6c:18:31:d1:c4:df:1e: 15:a4:8d:cb:24:99:b0:32:75:d1:b2:b5:39:65:89:4f:91:0d: f8:51:cc:da:3d:3f:7a:5a:bd:e4:e4:b8:ea:f2:d5:24:f1:1f: 35:95:65:0a:83:3c:4d:5a:a2:6c:79:41:25:97:41:f6:b9:99: 38:16:85:53:28:47:36:78:12:2d:6b:c4:2f:53:02:7f:ca:90: d8:92:84:03:e8:4a:67:d3:36:1c:36:8c:ec:55:a2:3c:04:3b: f9:fa:d5:12:0a:c4:30:bc:43:08:d3:05:a5:9c:34:70:a7:4f: 4d:ab:80:99:64:16:05:a9:e9:86:f1:c8:d1:58:15:70:0d:8a: 2a:ad:82:85:ef:05:fd:c1:10:f4:ef:b8:42:31:75:c9:ea:e7: 86:0b:f5:e0:c4:e6:95:e3:ae:7c:fc:1f:3a:f1:02:83:43:65: 0f:1c:10:9a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xxFZgz5Idk3+5XlxbCNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGYwOGZhNDIyMjUzNWMwYWYyNmEwZDczNDdkYmYxNzI1 NDcxOTYwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzYyZmYxMGVjOGFmODZiYjg2ZWUxMTcwMTg3ZGFmZDg5MzgzYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcEGbzT0sr16f5LI7eauqa3HlNB5 4+JeRaO3l6rXkB8eHYBZzbL7A90wJNYUDkmM+uufKsmDWCouJnwtXH2rv/Vs5Czf 42yOfIjOmfu/rRadLsgU7TLoc2sbwBsFh6vW5wjVt18saJDexxIqz+NtPygIiPXY tNsk2x726OTG8ZPsDhN7troarCVQQjGVaGTIpO2J8pQ6VCkvXTKBoEjCd/OPnF7C AH5SJ1VIvS106Cj7EIe1SmrOKQ4tGbA1eOZFwBlg+rAp4XWRKbkE+ijEe+MFa4AX L4oM7J1WsceGBmJlhagrQbnjVLx+Ma/Gf+y4P2LGDvZlyHoZbreUc6EDWQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKdi/xDsivhruG7hFwGH2v2JODyDMB8GA1UdIwQY MBaAFCNPCPpCIlNcCvJqDXNH2/FyVHGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTA4SS1rSWlVMXdLOG1vTmMwZmI4WEpVY1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MzhhOWMtZWM2NC00NWRlLWJjMmUt MmJlN2VkYzc5MzJkLzEvcDJMX0VPeUstR3U0YnVFWEFZZmFfWWs0UElNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82MzhhOWMtZWM2NC00NWRlLWJjMmUtMmJlN2VkYzc5MzJk LzEvSTA4SS1rSWlVMXdLOG1vTmMwZmI4WEpVY1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPgMmAwQA ueG9AwQAwWlYAwQAwhrJMA0GCSqGSIb3DQEBCwUAA4IBAQBqKc7GtwBwnG7t1GcV /zWepItd8ZhQcZst+HXKW4HOvQpKBBmWjeZC0ApZ8jleK8NOujt4y8X92lk8Ysb7 YkKr4xgAR3LRnVivsw6qfbAgZ5gMMWwYMdHE3x4VpI3LJJmwMnXRsrU5ZYlPkQ34 UczaPT96Wr3k5Ljq8tUk8R81lWUKgzxNWqJseUEll0H2uZk4FoVTKEc2eBIta8Qv UwJ/ypDYkoQD6Epn0zYcNozsVaI8BDv5+tUSCsQwvEMI0wWlnDRwp09Nq4CZZBYF qemG8cjRWBVwDYoqrYKF7wX9wRD077hCMXXJ6ueGC/XgxOaV4658/B868QKDQ2UP HBCa -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:22 2026 by rpki-client