This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/B2icUM6CeeejuMgcUvx_kDaA564.roa File: B2icUM6CeeejuMgcUvx_kDaA564.roa (raw, json) Hash identifier: MnhHbagUBXFrbwkwtXZWHt9EfUip9vPtnZBoYPXkEak= Subject key identifier: 07:68:9C:50:CE:82:79:E7:A3:B8:C8:1C:52:FC:7F:90:36:80:E7:AE Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d Certificate serial: 019B78A2EFEE03C46E8B249F3CA423F29DF3 Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/B2icUM6CeeejuMgcUvx_kDaA564.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15806 IP address blocks: 137.191.224.0/19 maxlen: 24 193.178.64.0/19 maxlen: 24 193.178.96.0/20 maxlen: 24 2a01:88::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ef:ee:03:c4:6e:8b:24:9f:3c:a4:23:f2:9d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07689c50ce8279e7a3b8c81c52fc7f903680e7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:1f:36:d5:c7:44:63:61:84:cd:15:a9:0f: 15:5e:0f:a0:c7:8e:ec:a4:99:e1:a6:c5:0a:31:7d: 83:3b:da:bd:d7:b3:30:51:92:19:68:22:19:44:ec: f8:0e:e8:d2:2a:f5:54:4d:96:8d:4a:19:44:f8:6f: e7:e4:d7:8f:9e:ab:c3:c5:20:d3:cc:8b:93:d3:25: 14:c6:b8:bf:53:2e:cd:9d:9e:99:e2:97:68:b9:2c: de:d4:21:13:d2:ea:8c:48:99:d4:6e:ec:9d:c3:36: 21:fe:4a:2f:99:4d:a3:1e:a2:e0:20:8a:ef:d6:31: 24:3f:c0:02:a7:8c:53:b9:35:20:c8:e2:0a:71:f4: 30:80:9a:f8:43:c5:26:a0:45:d8:2f:a7:bb:03:74: 59:fe:e8:56:3c:71:8e:e2:c5:b4:24:28:a7:63:3b: a8:0d:bd:08:37:cf:14:28:bf:ff:0c:ba:05:cb:19: a4:54:d8:7a:5c:87:00:7b:ac:96:e4:c7:19:2c:1d: e0:40:12:ef:a4:69:2c:11:33:23:c4:57:ce:38:e8: 04:a2:07:5d:0e:0e:44:09:7b:11:b6:0b:2c:04:35: bb:36:31:48:c8:ad:31:15:e4:bc:f4:ab:9c:6c:e0: 7a:c0:e2:3e:57:d6:f9:3e:43:b1:48:c3:cc:3d:2b: 30:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:68:9C:50:CE:82:79:E7:A3:B8:C8:1C:52:FC:7F:90:36:80:E7:AE X509v3 Authority Key Identifier: keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/B2icUM6CeeejuMgcUvx_kDaA564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.191.224.0/19 193.178.64.0-193.178.111.255 IPv6: 2a01:88::/32 Signature Algorithm: sha256WithRSAEncryption 22:0b:b0:d9:cd:3b:2f:9d:17:be:43:6f:b6:9b:6a:ab:3a:42: a3:1b:fa:89:fd:24:e7:16:8c:29:4f:92:e6:90:8c:d2:b2:c9: b6:9d:4d:3a:9c:2d:fb:25:d5:5b:a2:4d:16:0c:63:b2:aa:fb: 4d:c5:43:43:3d:6b:93:ca:35:1e:95:cc:4d:dc:ec:78:43:6d: 2e:28:00:be:b3:7d:79:43:67:a9:6d:0c:17:72:a5:d8:c4:21: 39:46:ba:c4:dc:e6:ff:37:c2:e0:c5:84:d6:c6:8e:4e:df:40: e5:b6:5d:61:9d:2e:c9:fd:64:48:71:71:26:77:1f:31:da:81: b5:07:66:db:bd:86:11:e5:fe:0e:00:f0:69:9f:b0:1e:5a:64: 40:4a:48:77:30:c6:a7:31:16:11:5a:09:ef:4d:fb:c1:6c:3f: 7c:08:bc:a1:31:9a:53:86:9f:54:be:c9:d7:50:7f:9f:cf:39: e9:2b:63:2f:0c:11:e0:49:be:36:80:b5:15:21:4a:fe:6c:96: f4:cc:be:e7:26:88:04:7c:f7:d9:8c:2b:aa:b9:ab:ec:8c:cb: 89:83:a2:e9:f1:d6:16:b1:4e:4a:b2:a7:7c:a0:85:35:e1:4e: b4:25:08:3a:73:4f:4e:6d:4e:54:52:69:60:06:d2:40:d1:b9: ba:25:97:cc -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt4ou/uA8RuiySfPKQj8p3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNzNhMDRhN2QwZWIyZGY0N2RhZjBjMzlmYmE3NWUzNjVj ODg1M2QwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzY4OWM1MGNlODI3OWU3YTNiOGM4MWM1MmZjN2Y5MDM2ODBlN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxAfNtXHRGNhhM0VqQ8VXg+gx47s pJnhpsUKMX2DO9q917MwUZIZaCIZROz4DujSKvVUTZaNShlE+G/n5NePnqvDxSDT zIuT0yUUxri/Uy7NnZ6Z4pdouSze1CET0uqMSJnUbuydwzYh/kovmU2jHqLgIIrv 1jEkP8ACp4xTuTUgyOIKcfQwgJr4Q8UmoEXYL6e7A3RZ/uhWPHGO4sW0JCinYzuo Db0IN88UKL//DLoFyxmkVNh6XIcAe6yW5McZLB3gQBLvpGksETMjxFfOOOgEogdd Dg5ECXsRtgssBDW7NjFIyK0xFeS89KucbOB6wOI+V9b5PkOxSMPMPSswjwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFAdonFDOgnnno7jIHFL8f5A2gOeuMB8GA1UdIwQY MBaAFGxzoEp9DrLfR9rww5+6deNlyIU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMt Zjk2MzMyOTJjOTc3LzEvQjJpY1VNNkNlZWVqdU1nY1V2eF9rRGFBNTY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMtZjk2MzMyOTJjOTc3 LzEvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQFib/gMAwD BAbBskADBATBsmAwDQQCAAIwBwMFACoBAIgwDQYJKoZIhvcNAQELBQADggEBACIL sNnNOy+dF75Db7abaqs6QqMb+on9JOcWjClPkuaQjNKyybadTTqcLfsl1VuiTRYM Y7Kq+03FQ0M9a5PKNR6VzE3c7HhDbS4oAL6zfXlDZ6ltDBdypdjEITlGusTc5v83 wuDFhNbGjk7fQOW2XWGdLsn9ZEhxcSZ3HzHagbUHZtu9hhHl/g4A8GmfsB5aZEBK SHcwxqcxFhFaCe9N+8FsP3wIvKExmlOGn1S+yddQf5/POekrYy8MEeBJvjaAtRUh Sv5slvTMvucmiAR899mMK6q5q+yMy4mDounx1haxTkqyp3yghTXhTrQlCDpzT05t TlRSaWAG0kDRuboll8w= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:33 2026 by rpki-client