This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/F2AboFEdlaFvK2ZJ7KRuOMnHGR0.roa File: F2AboFEdlaFvK2ZJ7KRuOMnHGR0.roa (raw, json) Hash identifier: zP2rYzTQoCT69vsmw+me7/QeUt3Rf6MGFTqklsAOqU0= Subject key identifier: 17:60:1B:A0:51:1D:95:A1:6F:2B:66:49:EC:A4:6E:38:C9:C7:19:1D Certificate issuer: /CN=2219b59dc2e9f34b255230e562a3cca61daeb155 Certificate serial: 019B7D5C11E2ED4D72ADB98C08073B4E1639 Authority key identifier: 22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/F2AboFEdlaFvK2ZJ7KRuOMnHGR0.roa Signing time: Fri 02 Jan 2026 06:19:04 +0000 ROA not before: Fri 02 Jan 2026 06:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44030 IP address blocks: 176.99.64.0/19 maxlen: 19 195.2.232.0/23 maxlen: 23 2001:67c:2084::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:11:e2:ed:4d:72:ad:b9:8c:08:07:3b:4e:16:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2219b59dc2e9f34b255230e562a3cca61daeb155 Validity Not Before: Jan 2 06:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17601ba0511d95a16f2b6649eca46e38c9c7191d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:86:48:26:fe:5c:1a:f9:ae:2f:9e:1a:ad: 07:73:67:a9:59:ab:ca:13:c4:c4:ca:90:36:67:d9: 59:2f:29:44:04:53:71:ff:44:8d:16:aa:4c:b9:10: 66:7c:50:cd:0e:8a:16:96:3c:df:c1:b9:0f:6a:7e: a6:e0:f7:1b:e4:6f:38:e9:12:b8:0e:7e:c8:86:37: b5:1e:cd:11:46:f2:1b:84:a7:c0:be:f4:c2:61:62: 46:9f:0a:eb:92:49:dd:be:83:f8:06:f8:f0:47:85: 53:c6:f1:b9:2f:7e:e6:88:0a:d9:4f:8c:71:aa:39: 39:1d:c3:c7:2f:6d:50:82:c6:35:16:da:51:4c:1e: 90:63:7c:cb:8b:ce:89:71:61:8d:20:4e:70:19:08: 76:33:21:53:15:c1:6d:28:a4:b1:a1:26:f2:db:a0: 13:2e:f2:40:87:cb:99:a9:76:e6:66:a3:8a:0c:38: 36:28:6a:83:af:e9:8e:cd:99:d6:b7:3c:02:b2:15: 05:7c:33:e1:f8:f5:a6:44:47:06:7e:1e:93:d2:f5: 80:a7:d7:1b:38:f0:b7:ed:e1:f0:4f:df:1c:43:0e: fa:7c:fe:87:77:c3:4f:99:ef:ab:48:f7:c9:ea:93: 92:5c:45:b0:65:47:97:8d:ee:9f:3a:66:87:02:b1: 1c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:60:1B:A0:51:1D:95:A1:6F:2B:66:49:EC:A4:6E:38:C9:C7:19:1D X509v3 Authority Key Identifier: keyid:22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/F2AboFEdlaFvK2ZJ7KRuOMnHGR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.99.64.0/19 195.2.232.0/23 IPv6: 2001:67c:2084::/48 Signature Algorithm: sha256WithRSAEncryption 5c:6d:42:a1:b3:81:45:8b:25:ef:11:ba:d8:20:d7:ca:39:b0: 7d:ae:f9:1d:73:39:dd:55:c7:1c:be:15:20:14:aa:f6:0a:bf: c8:00:16:04:85:73:c7:2c:5b:1c:87:01:fa:d8:0c:64:33:92: 78:21:c2:e8:7d:6a:8f:38:75:3a:48:6a:bb:b0:3b:aa:00:d7: ce:c6:60:da:88:02:26:2b:7a:ae:dc:f3:52:ef:38:ee:87:06: 35:b9:63:b3:63:8d:1d:62:29:6b:01:31:7b:fd:91:37:3c:2d: 90:12:b9:9f:5f:43:17:1f:31:eb:1b:8b:77:22:66:28:08:4d: f6:3a:22:78:b7:a4:21:e9:9a:27:d4:b0:c6:ee:d4:91:a2:3d: d2:e4:1d:69:6e:5e:e3:c4:14:a3:69:9a:d4:b4:06:fd:56:d2: 93:31:a8:82:7e:40:e9:ec:4f:ef:04:f3:d0:41:f9:85:5e:6e: ad:18:98:8a:3f:bb:44:59:6e:85:93:22:46:f5:22:2f:5e:a3: 6e:ce:9d:3a:df:dd:80:1c:28:7d:85:05:4e:dc:a6:c8:2e:25: 32:fd:1a:e0:26:01:1c:10:37:6f:e4:4f:70:1f:fb:d3:fd:27: 0d:30:66:0e:b5:99:b2:70:fe:14:e5:5a:86:ec:be:a5:91:00: 30:6d:e1:6f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XBHi7U1yrbmMCAc7ThY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMTliNTlkYzJlOWYzNGIyNTUyMzBlNTYyYTNjY2E2MWRh ZWIxNTUwHhcNMjYwMTAyMDYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzYwMWJhMDUxMWQ5NWExNmYyYjY2NDllY2E0NmUzOGM5YzcxOTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5SGSCb+XBr5ri+eGq0Hc2epWavK E8TEypA2Z9lZLylEBFNx/0SNFqpMuRBmfFDNDooWljzfwbkPan6m4Pcb5G846RK4 Dn7Ihje1Hs0RRvIbhKfAvvTCYWJGnwrrkkndvoP4BvjwR4VTxvG5L37miArZT4xx qjk5HcPHL21QgsY1FtpRTB6QY3zLi86JcWGNIE5wGQh2MyFTFcFtKKSxoSby26AT LvJAh8uZqXbmZqOKDDg2KGqDr+mOzZnWtzwCshUFfDPh+PWmREcGfh6T0vWAp9cb OPC37eHwT98cQw76fP6Hd8NPme+rSPfJ6pOSXEWwZUeXje6fOmaHArEcFwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFBdgG6BRHZWhbytmSeykbjjJxxkdMB8GA1UdIwQY MBaAFCIZtZ3C6fNLJVIw5WKjzKYdrrFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zYmIzYTgtMWMzZS00MTU0LTkwYTkt MDA2ZGUwZmE1MzQyLzEvRjJBYm9GRWRsYUZ2SzJaSjdLUnVPTW5IR1IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8zYmIzYTgtMWMzZS00MTU0LTkwYTktMDA2ZGUwZmE1MzQy LzEvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQFsGNAAwQB wwLoMA8EAgACMAkDBwAgAQZ8IIQwDQYJKoZIhvcNAQELBQADggEBAFxtQqGzgUWL Je8Rutgg18o5sH2u+R1zOd1Vxxy+FSAUqvYKv8gAFgSFc8csWxyHAfrYDGQzkngh wuh9ao84dTpIaruwO6oA187GYNqIAiYreq7c81LvOO6HBjW5Y7NjjR1iKWsBMXv9 kTc8LZASuZ9fQxcfMesbi3ciZigITfY6Ini3pCHpmifUsMbu1JGiPdLkHWluXuPE FKNpmtS0Bv1W0pMxqIJ+QOnsT+8E89BB+YVebq0YmIo/u0RZboWTIkb1Ii9eo27O nTrf3YAcKH2FBU7cpsguJTL9GuAmARwQN2/kT3Af+9P9Jw0wZg61mbJw/hTlWobs vqWRADBt4W8= -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:49 2026 by rpki-client