This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/pn0eecPtI3ydGJyzmDixGdijU0M.roa File: pn0eecPtI3ydGJyzmDixGdijU0M.roa (raw, json) Hash identifier: hsAKDf191EtjscgSuEpFCHm/Jr/4jq8uJLk58v0knFk= Subject key identifier: A6:7D:1E:79:C3:ED:23:7C:9D:18:9C:B3:98:38:B1:19:D8:A3:53:43 Certificate issuer: /CN=13efb6e77018c9355a538856d4eb9e506975f535 Certificate serial: 019B7834FD352EEB4225F42A84AD5A3AAD3E Authority key identifier: 13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/pn0eecPtI3ydGJyzmDixGdijU0M.roa Signing time: Thu 01 Jan 2026 06:18:17 +0000 ROA not before: Thu 01 Jan 2026 06:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12581 IP address blocks: 193.138.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fd:35:2e:eb:42:25:f4:2a:84:ad:5a:3a:ad:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13efb6e77018c9355a538856d4eb9e506975f535 Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a67d1e79c3ed237c9d189cb39838b119d8a35343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9e:01:ba:de:a3:3c:2c:23:ce:5a:43:b7:d7: 6e:89:4a:7a:57:1b:9b:e7:36:31:19:84:1d:66:a5: be:c8:bd:ee:dd:86:42:94:59:30:a6:0f:f6:81:30: e4:d8:09:61:6f:13:6a:68:a6:bb:88:ac:9c:3e:74: 86:ef:67:fc:2c:f6:e1:1c:f5:82:b5:7d:aa:e0:bb: 14:e0:31:af:eb:b9:ec:e8:5e:00:b1:ab:6d:32:4f: 1f:a0:df:0c:c6:a1:3b:db:2f:b0:c2:bd:9d:f6:fe: d3:ee:6c:c2:f9:3e:f3:0b:f2:b2:39:27:6e:12:7f: 3c:12:fd:f7:a6:05:55:b9:07:6a:89:6a:f6:6e:03: 33:2a:04:96:f9:2e:cc:cb:33:fc:f6:cf:a3:83:13: 80:86:53:4f:a3:fa:2c:f4:15:e6:01:ac:b9:8e:28: 0b:ae:27:f7:ff:f4:04:01:ba:1e:10:8d:ab:c8:e6: e7:92:48:c0:b9:0f:74:79:db:eb:63:e7:e6:3c:e8: 54:e7:87:ba:3a:b1:11:61:21:85:2d:07:da:53:16: 71:09:6f:6b:ad:90:c3:49:5d:b9:eb:72:a3:06:0b: f9:d5:59:de:ce:1d:23:60:c0:94:00:ae:b3:8f:78: ab:dc:b8:76:a5:11:37:85:0f:5c:a7:cb:a0:6f:d3: 7e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7D:1E:79:C3:ED:23:7C:9D:18:9C:B3:98:38:B1:19:D8:A3:53:43 X509v3 Authority Key Identifier: keyid:13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/pn0eecPtI3ydGJyzmDixGdijU0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.88.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:e9:de:0b:98:d9:85:09:7a:b7:c8:5c:b6:0c:5b:a2:be:fa: 80:ea:88:c4:f0:4d:8b:67:d2:c1:07:e9:66:85:57:de:e7:79: 53:31:cc:16:30:04:59:f9:fa:5d:4b:60:9d:ad:a4:8f:01:92: e1:ac:25:d5:b3:72:96:3d:09:05:ec:97:0a:89:89:21:ad:14: 0a:22:6b:47:4b:b5:3d:2f:02:cd:95:10:71:b1:e5:9d:59:9d: 0a:b9:32:74:26:cb:4e:0a:e4:b1:9d:74:32:7b:f1:49:87:0a: af:92:c9:54:0f:9e:85:aa:cc:ba:8e:3a:c5:25:78:80:ba:5d: 06:a5:cf:4d:dc:2b:df:e9:74:19:83:c9:7f:86:9d:ce:6e:b4: 91:a4:34:f5:31:bd:f3:55:f4:b3:19:ed:d8:d8:6f:67:09:46: 35:5d:74:64:ea:34:a6:39:17:0e:70:d4:c3:7c:ac:60:b9:4c: 77:36:c7:ab:71:d1:b4:7b:dc:03:ec:d9:07:aa:fb:ac:c9:8e: 26:dd:d6:9c:73:6e:1a:f5:96:c5:69:d5:25:f5:b2:12:64:90: 45:25:47:da:b0:1a:ab:14:e1:0d:88:95:9d:22:d5:f3:e7:cf: f0:07:6f:89:fd:42:8b:91:47:21:35:f7:33:17:1c:a3:c4:ff: 5a:62:5f:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NP01LutCJfQqhK1aOq0+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWZiNmU3NzAxOGM5MzU1YTUzODg1NmQ0ZWI5ZTUwNjk3 NWY1MzUwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjdkMWU3OWMzZWQyMzdjOWQxODljYjM5ODM4YjExOWQ4YTM1MzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw54But6jPCwjzlpDt9duiUp6Vxub 5zYxGYQdZqW+yL3u3YZClFkwpg/2gTDk2AlhbxNqaKa7iKycPnSG72f8LPbhHPWC tX2q4LsU4DGv67ns6F4AsattMk8foN8MxqE72y+wwr2d9v7T7mzC+T7zC/KyOSdu En88Ev33pgVVuQdqiWr2bgMzKgSW+S7MyzP89s+jgxOAhlNPo/os9BXmAay5jigL rif3//QEAboeEI2ryObnkkjAuQ90edvrY+fmPOhU54e6OrERYSGFLQfaUxZxCW9r rZDDSV2563KjBgv51Vnezh0jYMCUAK6zj3ir3Lh2pRE3hQ9cp8ugb9N+PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKZ9HnnD7SN8nRics5g4sRnYo1NDMB8GA1UdIwQY MBaAFBPvtudwGMk1WlOIVtTrnlBpdfU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS0tMjUzQVl5VFZhVTRoVzFPdWVVR2wxOVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85MWIyZDItZGZiOS00OGQ3LTg0MzYt ZWJjNWI2NzgyM2M1LzEvcG4wZWVjUHRJM3lkR0p5em1EaXhHZGlqVTBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC85MWIyZDItZGZiOS00OGQ3LTg0MzYtZWJjNWI2NzgyM2M1 LzEvRS0tMjUzQVl5VFZhVTRoVzFPdWVVR2wxOVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYpYMA0G CSqGSIb3DQEBCwUAA4IBAQAf6d4LmNmFCXq3yFy2DFuivvqA6ojE8E2LZ9LBB+lm hVfe53lTMcwWMARZ+fpdS2CdraSPAZLhrCXVs3KWPQkF7JcKiYkhrRQKImtHS7U9 LwLNlRBxseWdWZ0KuTJ0JstOCuSxnXQye/FJhwqvkslUD56Fqsy6jjrFJXiAul0G pc9N3Cvf6XQZg8l/hp3ObrSRpDT1Mb3zVfSzGe3Y2G9nCUY1XXRk6jSmORcOcNTD fKxguUx3NsercdG0e9wD7NkHqvusyY4m3dacc24a9ZbFadUl9bISZJBFJUfasBqr FOENiJWdItXz58/wB2+J/UKLkUchNfczFxyjxP9aYl8+ -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:26 2026 by rpki-client