This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/c2vxh0TJId25IsYoKf4qE5r7y4c.roa File: c2vxh0TJId25IsYoKf4qE5r7y4c.roa (raw, json) Hash identifier: rH400KAscIABX5VYsTzTY3UvtHPOb5oawftmDDbVwS4= Subject key identifier: 73:6B:F1:87:44:C9:21:DD:B9:22:C6:28:29:FE:2A:13:9A:FB:CB:87 Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a Certificate serial: 019B7C11DA29AD702B15167259E4BCDC6668 Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/c2vxh0TJId25IsYoKf4qE5r7y4c.roa Signing time: Fri 02 Jan 2026 00:18:23 +0000 ROA not before: Fri 02 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39816 IP address blocks: 84.38.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:da:29:ad:70:2b:15:16:72:59:e4:bc:dc:66:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a Validity Not Before: Jan 2 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=736bf18744c921ddb922c62829fe2a139afbcb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:62:14:b2:80:9c:99:28:24:dc:c2:1e:ad: 9b:1b:d7:99:47:d4:82:b7:3b:c3:77:d1:f5:16:75: ed:bb:0e:60:fc:ac:05:13:89:85:da:62:80:75:fb: f6:5f:03:30:84:ba:0d:15:e3:a8:6f:a5:0e:e4:f3: 20:f0:09:69:a5:30:95:a4:37:20:77:ea:37:4a:01: 12:83:e8:23:4e:45:8b:85:e1:22:db:e7:20:14:0b: 31:05:8d:07:43:81:45:36:20:f7:f2:08:72:eb:f2: ec:70:80:18:2f:49:34:52:26:5e:52:ab:f4:7a:a4: 05:2a:75:21:6a:08:29:c0:59:e8:a1:62:75:f3:11: a3:ca:69:e8:83:a1:df:b1:a3:04:a5:6b:f0:44:e0: 9c:3d:f7:ba:11:95:03:f3:f7:1e:df:68:47:34:2f: 8c:36:bf:1c:7e:c8:14:0e:68:28:0e:1a:71:c9:fa: 34:1f:21:c1:d2:d0:65:c8:c3:c5:0c:cd:27:04:40: 2a:b7:13:35:8b:70:85:ed:67:2e:d9:20:d1:92:73: 00:4d:f6:af:95:56:0c:b2:78:ee:a4:7f:54:79:ee: ea:97:88:66:fc:25:08:99:cc:19:2f:1e:ea:12:4b: 70:c7:c2:88:7f:8f:cc:21:2c:d8:81:16:ab:a8:ce: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6B:F1:87:44:C9:21:DD:B9:22:C6:28:29:FE:2A:13:9A:FB:CB:87 X509v3 Authority Key Identifier: keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/c2vxh0TJId25IsYoKf4qE5r7y4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.16.0/20 Signature Algorithm: sha256WithRSAEncryption 3d:80:7b:33:a1:32:53:6b:5c:f1:31:4c:92:a1:30:74:c2:1e: 15:c8:db:16:f4:c9:a3:7d:52:e6:51:35:4f:42:b9:98:8d:3f: 08:96:4e:c6:9b:e6:ef:b7:c7:7e:6f:ac:cb:bf:36:01:65:19: 33:18:4f:bc:76:b5:a4:14:72:35:7b:b9:a8:76:32:22:48:68: 2b:d1:b8:04:39:c0:90:90:32:96:33:e3:16:80:66:9b:53:4e: 1a:5e:cd:2e:de:e5:74:09:f0:28:e0:e0:3e:fc:6c:dc:c0:b6: 69:0d:c8:95:68:e4:7a:8f:4a:05:de:80:8e:13:cd:78:ab:b4: 9f:fd:8a:dd:06:9c:9b:d8:d6:14:a3:f5:64:3c:74:13:32:34: 26:62:ee:47:d1:62:05:aa:d5:85:0d:1e:f1:46:88:dc:c3:4b: bc:7e:eb:33:da:7a:2c:de:cc:b9:2d:57:35:5b:0b:2a:45:8f: 28:f0:16:fd:18:42:44:d4:f2:ed:68:09:bf:83:e4:ff:e5:24: c1:c9:ad:f6:d0:72:03:5d:b1:27:04:43:b5:bc:1a:52:e3:32: 78:37:0c:4e:f8:57:6e:26:07:31:de:08:c0:c5:42:ba:e3:65: 48:ac:fa:a2:b4:84:d1:f4:4b:25:85:30:6d:d2:32:b4:b6:38: cf:1f:1e:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EdoprXArFRZyWeS83GZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ODI0MzA4YmM4M2I0ZWU1NmYxYzBjMWI5ZmJmYzMxMWIw Y2Q0NGEwHhcNMjYwMTAyMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzZiZjE4NzQ0YzkyMWRkYjkyMmM2MjgyOWZlMmExMzlhZmJjYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3tiFLKAnJkoJNzCHq2bG9eZR9SC tzvDd9H1FnXtuw5g/KwFE4mF2mKAdfv2XwMwhLoNFeOob6UO5PMg8AlppTCVpDcg d+o3SgESg+gjTkWLheEi2+cgFAsxBY0HQ4FFNiD38ghy6/LscIAYL0k0UiZeUqv0 eqQFKnUhaggpwFnooWJ18xGjymnog6HfsaMEpWvwROCcPfe6EZUD8/ce32hHNC+M Nr8cfsgUDmgoDhpxyfo0HyHB0tBlyMPFDM0nBEAqtxM1i3CF7Wcu2SDRknMATfav lVYMsnjupH9Uee7ql4hm/CUImcwZLx7qEktwx8KIf4/MISzYgRarqM5rOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHNr8YdEySHduSLGKCn+KhOa+8uHMB8GA1UdIwQY MBaAFKSCQwi8g7TuVvHAwbn7/DEbDNRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1Yzkt MTk2ZTZmMzc1ZmQ2LzEvYzJ2eGgwVEpJZDI1SXNZb0tmNHFFNXI3eTRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1YzktMTk2ZTZmMzc1ZmQ2 LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEVCYQMA0G CSqGSIb3DQEBCwUAA4IBAQA9gHszoTJTa1zxMUySoTB0wh4VyNsW9MmjfVLmUTVP QrmYjT8Ilk7Gm+bvt8d+b6zLvzYBZRkzGE+8drWkFHI1e7modjIiSGgr0bgEOcCQ kDKWM+MWgGabU04aXs0u3uV0CfAo4OA+/GzcwLZpDciVaOR6j0oF3oCOE814q7Sf /YrdBpyb2NYUo/VkPHQTMjQmYu5H0WIFqtWFDR7xRojcw0u8fusz2nos3sy5LVc1 WwsqRY8o8Bb9GEJE1PLtaAm/g+T/5STBya320HIDXbEnBEO1vBpS4zJ4NwxO+Fdu Jgcx3gjAxUK642VIrPqitITR9EslhTBt0jK0tjjPHx5G -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:53 2026 by rpki-client