This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/xP2-PGjj2ZcXju3-gF6z2cy8Ry8.roa File: xP2-PGjj2ZcXju3-gF6z2cy8Ry8.roa (raw, json) Hash identifier: udxzAht7sjVAvqEdnFS9dvNnVG0rFxFaOfjA1MrLEX8= Subject key identifier: C4:FD:BE:3C:68:E3:D9:97:17:8E:ED:FE:80:5E:B3:D9:CC:BC:47:2F Certificate issuer: /CN=aa21104b4f772224d11856a24edf9466a844d26c Certificate serial: 019B7D5C7E605A140AAFDAF46371475F475E Authority key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/xP2-PGjj2ZcXju3-gF6z2cy8Ry8.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43268 IP address blocks: 194.62.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7e:60:5a:14:0a:af:da:f4:63:71:47:5f:47:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa21104b4f772224d11856a24edf9466a844d26c Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4fdbe3c68e3d997178eedfe805eb3d9ccbc472f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c1:6b:2d:df:20:f9:48:7c:1e:6f:e0:cb:55: cb:74:0b:8a:03:7f:44:c2:ed:b5:1e:2d:9e:2d:84: 83:a3:69:ee:73:88:e9:79:60:12:aa:46:e5:b0:41: 52:fc:c0:b5:7d:ca:92:11:d9:38:74:66:9b:77:0f: c8:c5:ef:b4:7d:df:b6:c9:1a:fb:89:42:87:b4:00: 64:f6:01:33:e2:67:88:b3:d8:ee:82:83:3c:f9:b3: 63:11:85:ef:c8:13:3c:1c:ff:40:9d:d3:6b:2f:ad: 13:59:5b:8f:25:20:30:56:8a:76:6b:ab:1b:19:f3: 32:37:c5:41:47:33:9a:94:9e:9f:e8:12:58:e3:44: 1e:3c:40:03:26:e5:83:d2:4e:81:5a:d1:8d:21:9d: 2b:58:9e:f2:49:68:de:ba:ac:26:47:ee:f5:c1:7e: ea:b4:65:c3:fc:d3:43:ad:fd:39:6d:67:8a:55:df: 9b:2c:8c:5d:2b:72:fc:76:ed:71:c6:c8:27:90:40: 22:6b:16:c8:8c:af:bc:ec:17:da:b7:34:e7:95:43: 72:ea:86:e4:17:c9:1e:81:0c:d4:5c:8d:bb:ed:ed: ce:98:4f:0b:17:d0:39:22:84:a8:31:df:08:a9:1d: a7:0d:00:2f:01:c2:9c:b6:b2:a2:0c:27:df:7f:ec: c2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FD:BE:3C:68:E3:D9:97:17:8E:ED:FE:80:5E:B3:D9:CC:BC:47:2F X509v3 Authority Key Identifier: keyid:AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/xP2-PGjj2ZcXju3-gF6z2cy8Ry8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.108.0/22 Signature Algorithm: sha256WithRSAEncryption 03:1a:1e:bf:54:29:1f:88:72:c9:9d:cb:1d:05:7c:e1:17:27: a9:36:25:65:bc:b2:9c:84:59:3a:d9:86:ad:85:95:87:cd:f2: 41:74:46:8d:c5:2d:93:d7:72:a0:30:bc:a6:97:d3:4c:da:ad: 5c:f7:4d:79:2e:54:79:82:fb:10:6a:0b:9d:05:39:cf:89:dc: a8:e4:83:05:47:73:a2:1b:3c:a2:98:b4:16:e5:85:84:e1:48: 17:f6:79:10:a9:4a:3e:9c:0b:5e:93:48:31:5b:6c:bd:4b:8d: 73:89:40:dd:b5:0b:21:be:09:b9:68:56:4b:f8:a3:b0:b1:72: 91:b6:e2:b9:85:4e:4b:0b:26:c0:b4:5f:51:ab:fb:ad:52:4d: d0:e3:6b:eb:b9:3c:fd:9d:98:af:ce:f1:0e:8a:95:92:36:57: 0c:be:5b:a7:d1:b2:c3:70:ad:21:32:32:f0:49:12:76:a0:48: 76:68:ea:60:37:83:80:d5:81:72:c8:30:52:85:bb:d1:92:37: 94:6b:80:4d:1b:ab:dc:e9:e0:f3:0b:02:73:22:90:0b:27:33: 66:ee:5c:a9:32:99:01:11:27:a8:ab:66:4a:f1:a6:6d:59:84: 28:9e:ea:8c:57:84:15:31:35:0f:32:3c:51:19:4a:1a:92:22: 8a:8c:50:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XH5gWhQKr9r0Y3FHX0deMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMjExMDRiNGY3NzIyMjRkMTE4NTZhMjRlZGY5NDY2YTg0 NGQyNmMwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGZkYmUzYzY4ZTNkOTk3MTc4ZWVkZmU4MDVlYjNkOWNjYmM0NzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sFrLd8g+Uh8Hm/gy1XLdAuKA39E wu21Hi2eLYSDo2nuc4jpeWASqkblsEFS/MC1fcqSEdk4dGabdw/Ixe+0fd+2yRr7 iUKHtABk9gEz4meIs9jugoM8+bNjEYXvyBM8HP9AndNrL60TWVuPJSAwVop2a6sb GfMyN8VBRzOalJ6f6BJY40QePEADJuWD0k6BWtGNIZ0rWJ7ySWjeuqwmR+71wX7q tGXD/NNDrf05bWeKVd+bLIxdK3L8du1xxsgnkEAiaxbIjK+87BfatzTnlUNy6obk F8kegQzUXI277e3OmE8LF9A5IoSoMd8IqR2nDQAvAcKctrKiDCfff+zCHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMT9vjxo49mXF47t/oBes9nMvEcvMB8GA1UdIwQY MBaAFKohEEtPdyIk0RhWok7flGaoRNJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWlFUVMwOTNJaVRSR0ZhaVR0LVVacWhFMG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kYWJhY2ItZTZmNS00MDY1LTg2YjYt OGUwZDgzYzVlZGZlLzEveFAyLVBHamoyWmNYanUzLWdGNnoyY3k4Unk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kYWJhY2ItZTZmNS00MDY1LTg2YjYtOGUwZDgzYzVlZGZl LzEvcWlFUVMwOTNJaVRSR0ZhaVR0LVVacWhFMG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwj5sMA0G CSqGSIb3DQEBCwUAA4IBAQADGh6/VCkfiHLJncsdBXzhFyepNiVlvLKchFk62Yat hZWHzfJBdEaNxS2T13KgMLyml9NM2q1c9015LlR5gvsQagudBTnPidyo5IMFR3Oi GzyimLQW5YWE4UgX9nkQqUo+nAtek0gxW2y9S41ziUDdtQshvgm5aFZL+KOwsXKR tuK5hU5LCybAtF9Rq/utUk3Q42vruTz9nZivzvEOipWSNlcMvlun0bLDcK0hMjLw SRJ2oEh2aOpgN4OA1YFyyDBShbvRkjeUa4BNG6vc6eDzCwJzIpALJzNm7lypMpkB ESeoq2ZK8aZtWYQonuqMV4QVMTUPMjxRGUoakiKKjFAg -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:53 2026 by rpki-client