This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/C2bNUeB_0zECbd22GOKk7y57b7g.roa File: C2bNUeB_0zECbd22GOKk7y57b7g.roa (raw, json) Hash identifier: l0IvAbIHaEOPaTPBP3rxLmVfNAJqlgTHUbxhQD/Bm6M= Subject key identifier: 0B:66:CD:51:E0:7F:D3:31:02:6D:DD:B6:18:E2:A4:EF:2E:7B:6F:B8 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36AC164C7002AD27509BA5D3957FDE Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/C2bNUeB_0zECbd22GOKk7y57b7g.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8985 IP address blocks: 193.232.64.0/24 maxlen: 24 193.232.76.0/24 maxlen: 24 193.232.226.0/23 maxlen: 23 194.85.16.0/24 maxlen: 24 194.190.146.0/24 maxlen: 24 194.226.16.0/24 maxlen: 24 194.226.38.0/23 maxlen: 23 194.226.41.0/24 maxlen: 24 194.226.56.0/23 maxlen: 23 194.226.58.0/23 maxlen: 23 195.19.8.0/24 maxlen: 24 195.208.24.0/21 maxlen: 21 195.208.29.0/24 maxlen: 24 195.208.222.0/24 maxlen: 24 195.209.147.0/24 maxlen: 24 195.209.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ac:16:4c:70:02:ad:27:50:9b:a5:d3:95:7f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b66cd51e07fd331026dddb618e2a4ef2e7b6fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f1:f9:cb:97:b4:06:df:b6:40:39:d9:57:9c: 11:58:7f:6a:65:d9:ab:39:62:8c:70:c2:97:7c:69: ac:2e:d8:d1:18:24:09:9b:50:18:1c:3f:f4:3d:dd: 35:c4:fd:d1:20:45:1d:8e:53:03:d7:16:09:e1:b3: c0:f7:cd:5f:96:23:fc:0c:83:1a:70:ef:0b:2f:b1: 90:95:49:b4:aa:b2:b9:9f:96:e0:73:9e:7b:07:65: 4c:a7:2d:65:0a:4f:c2:53:8a:5a:a3:0d:5b:9e:9f: a5:ff:90:8d:42:a2:84:c6:2b:48:37:ad:6b:4a:f0: b6:00:7b:c4:1d:bc:d6:11:21:c6:e4:0c:34:9e:e6: 6a:16:17:9b:5b:fc:17:d3:30:db:97:e8:37:9d:ba: 5b:54:29:86:99:c7:e3:c8:31:3c:7a:e4:37:b9:0b: 6a:d6:71:ed:4f:17:37:cf:87:ba:92:75:f6:98:8d: e5:61:c4:02:25:ce:d3:62:2e:0e:31:37:55:c3:2a: 1d:1b:04:91:83:fc:de:72:3f:92:0e:70:b9:c9:6a: 77:ef:d9:d1:e3:0e:66:c9:1c:e9:71:f1:bb:ac:17: 90:ba:bc:2f:48:41:b1:cb:a8:9a:9a:de:80:9c:5d: 23:f4:7d:fa:1c:56:15:98:57:30:d2:7d:7c:14:31: 69:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:66:CD:51:E0:7F:D3:31:02:6D:DD:B6:18:E2:A4:EF:2E:7B:6F:B8 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/C2bNUeB_0zECbd22GOKk7y57b7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.64.0/24 193.232.76.0/24 193.232.226.0/23 194.85.16.0/24 194.190.146.0/24 194.226.16.0/24 194.226.38.0/23 194.226.41.0/24 194.226.56.0/22 195.19.8.0/24 195.208.24.0/21 195.208.222.0/24 195.209.147.0-195.209.148.255 Signature Algorithm: sha256WithRSAEncryption b2:87:c9:ce:ff:c3:82:61:78:45:96:ec:2d:26:41:b1:b9:c3: dc:ef:9e:13:0c:1a:b4:87:31:1b:8a:04:cd:b2:9a:a1:20:32: 46:f7:34:fa:ea:34:66:7e:5c:ae:9f:91:76:f3:c4:d6:36:24: 2f:28:04:9e:ae:11:32:41:fc:03:cd:6a:a9:dc:24:88:fe:7d: 5d:21:ee:bc:a2:1b:be:f8:16:b4:7f:1d:c0:f7:2f:39:ee:9d: 9e:4e:7b:90:3b:af:fc:33:b6:fd:5c:ec:32:52:72:ec:38:a4: 12:a0:c2:d2:df:81:2d:52:88:5a:01:0a:6f:02:26:2e:27:c1: 66:02:9c:78:c1:12:62:be:43:0e:af:b3:11:5e:d9:b8:7b:75: a8:86:ea:73:a6:ae:13:c3:a2:f0:cc:c6:66:78:b9:ef:6f:9e: e2:1e:83:8b:d9:7f:4f:56:a5:fb:ae:2f:df:9d:f8:d0:7a:14: ac:5a:bc:6d:a5:b5:d2:8d:d1:68:04:9a:d3:93:9d:8e:ec:96: 13:95:77:f0:3b:fa:f3:a6:14:d1:69:ee:84:12:1c:ea:c2:b4: e8:c1:9f:51:d3:50:09:c5:0a:88:e1:03:27:fd:63:15:19:be: 5f:4e:5d:f0:1a:bb:cb:f6:d1:75:8b:2a:79:5a:4f:6a:41:67: 84:5c:08:a3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZt7NqwWTHACrSdQm6XTlX/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjY2Y2Q1MWUwN2ZkMzMxMDI2ZGRkYjYxOGUyYTRlZjJlN2I2ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfH5y5e0Bt+2QDnZV5wRWH9qZdmr OWKMcMKXfGmsLtjRGCQJm1AYHD/0Pd01xP3RIEUdjlMD1xYJ4bPA981fliP8DIMa cO8LL7GQlUm0qrK5n5bgc557B2VMpy1lCk/CU4paow1bnp+l/5CNQqKExitIN61r SvC2AHvEHbzWESHG5Aw0nuZqFhebW/wX0zDbl+g3nbpbVCmGmcfjyDE8euQ3uQtq 1nHtTxc3z4e6knX2mI3lYcQCJc7TYi4OMTdVwyodGwSRg/zecj+SDnC5yWp379nR 4w5myRzpcfG7rBeQurwvSEGxy6iamt6AnF0j9H36HFYVmFcw0n18FDFpiwIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFAtmzVHgf9MxAm3dthjipO8ue2+4MB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvQzJiTlVlQl8wekVDYmQyMkdPS2s3eTU3YjdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAwehAAwQA wehMAwQBwejiAwQAwlUQAwQAwr6SAwQAwuIQAwQBwuImAwQAwuIpAwQCwuI4AwQA wxMIAwQDw9AYAwQAw9DeMAwDBADD0ZMDBADD0ZQwDQYJKoZIhvcNAQELBQADggEB ALKHyc7/w4JheEWW7C0mQbG5w9zvnhMMGrSHMRuKBM2ymqEgMkb3NPrqNGZ+XK6f kXbzxNY2JC8oBJ6uETJB/APNaqncJIj+fV0h7ryiG774FrR/HcD3LznunZ5Oe5A7 r/wztv1c7DJScuw4pBKgwtLfgS1SiFoBCm8CJi4nwWYCnHjBEmK+Qw6vsxFe2bh7 daiG6nOmrhPDovDMxmZ4ue9vnuIeg4vZf09WpfuuL9+d+NB6FKxavG2ltdKN0WgE mtOTnY7slhOVd/A7+vOmFNFp7oQSHOrCtOjBn1HTUAnFCojhAyf9YxUZvl9OXfAa u8v20XWLKnlaT2pBZ4RcCKM= -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:46 2026 by rpki-client