This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/2Cp0m0oboXHVnEkkibc7MZ0iVno.roa File: 2Cp0m0oboXHVnEkkibc7MZ0iVno.roa (raw, json) Hash identifier: 0rfuIAzK1SMPi5hQRwB+Vwr/Z1zW0RzBLtrMrDa24eI= Subject key identifier: D8:2A:74:9B:4A:1B:A1:71:D5:9C:49:24:89:B7:3B:31:9D:22:56:7A Certificate issuer: /CN=08fc9fd44b794a842e29a7188b4a8c6e472e1d50 Certificate serial: 019BE60909D2171E48E2AF80246B590E23C5 Authority key identifier: 08:FC:9F:D4:4B:79:4A:84:2E:29:A7:18:8B:4A:8C:6E:47:2E:1D:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/2Cp0m0oboXHVnEkkibc7MZ0iVno.roa Signing time: Thu 22 Jan 2026 14:08:30 +0000 ROA not before: Thu 22 Jan 2026 14:08:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8388 IP address blocks: 193.218.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.mft rsync://rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:09:09:d2:17:1e:48:e2:af:80:24:6b:59:0e:23:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fc9fd44b794a842e29a7188b4a8c6e472e1d50 Validity Not Before: Jan 22 14:08:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d82a749b4a1ba171d59c492489b73b319d22567a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:45:d3:9b:0b:00:32:48:bb:a0:0e:eb:51: 83:02:8b:a4:7d:04:10:42:a1:4b:16:cc:ab:60:57: b3:a8:98:e7:b4:57:c1:82:c8:e4:05:b5:56:3e:a2: d3:54:25:fb:b2:93:3d:c1:c1:77:7a:7b:09:43:97: 44:4f:b5:2e:99:6c:8a:fa:58:d5:4d:2a:00:fd:f7: 08:2b:18:b4:96:06:9a:cd:be:51:7e:85:c5:b8:65: 32:20:f1:de:b0:85:8e:3c:e7:d2:b0:95:b4:15:0e: 99:26:f3:cf:19:b8:4d:a5:64:de:c2:82:78:c5:b7: 1f:02:db:aa:eb:6c:e1:17:ed:a2:ff:64:5b:11:5c: 19:5c:3e:92:44:ce:03:9d:23:0b:c1:a9:ea:df:8c: 06:1f:df:20:63:93:6e:d5:c2:ef:3d:2a:09:e1:46: e0:6b:e7:1f:d4:65:3f:df:f7:aa:3f:d8:7c:ae:dc: 5f:6d:6c:0f:83:37:92:52:02:f4:f0:31:ac:2a:6b: 28:94:6b:c0:45:60:61:36:82:21:c9:27:f9:5f:2e: cf:31:10:75:6b:c7:91:d6:92:4f:f2:ba:ba:3b:39: f8:93:60:8e:78:69:9c:44:b9:f2:89:2a:ff:a9:22: 33:ee:d0:96:ee:bd:b4:ff:1e:14:b9:e3:90:a8:5f: 75:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2A:74:9B:4A:1B:A1:71:D5:9C:49:24:89:B7:3B:31:9D:22:56:7A X509v3 Authority Key Identifier: keyid:08:FC:9F:D4:4B:79:4A:84:2E:29:A7:18:8B:4A:8C:6E:47:2E:1D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyf1Et5SoQuKacYi0qMbkcuHVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/2Cp0m0oboXHVnEkkibc7MZ0iVno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/421440-f82d-4fa7-a049-f32ba486339a/1/CPyf1Et5SoQuKacYi0qMbkcuHVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.87.0/24 Signature Algorithm: sha256WithRSAEncryption 97:93:95:d5:9d:eb:3f:4a:a1:25:dd:c6:40:86:35:81:07:15: f1:8d:16:df:a2:d6:ef:f6:3c:c3:7a:98:dd:01:7f:9a:24:8d: 6b:9c:91:94:f9:30:29:f8:44:b9:74:a6:1c:40:6a:d3:20:58: c8:be:6f:92:b4:f0:21:f2:ee:3e:f2:d0:70:98:aa:81:3a:0f: f1:b6:cc:28:fb:5e:be:f2:1b:33:4a:dd:13:60:9c:1f:26:a7: 3a:03:cb:21:06:f2:24:1d:dc:5c:21:de:00:f4:30:59:4e:24: 6e:1f:e5:02:10:18:dc:4c:35:b8:53:f4:49:3d:16:f4:be:9c: f3:5a:89:6d:8a:58:56:60:9c:56:d6:3b:04:62:0b:5e:f2:ca: e7:64:a7:62:4c:c3:4d:59:0d:fa:31:de:7b:f4:d5:7c:76:0d: fa:4d:75:3e:ee:80:ed:0f:9a:ef:44:56:5b:75:00:50:57:35: 2e:f9:95:df:da:c8:9a:1d:91:d0:05:54:5b:29:8b:fb:c7:6a: 56:73:da:83:3d:80:fc:7e:24:61:b1:04:4b:23:1a:07:62:6b: 05:89:11:9f:5e:27:45:82:6f:be:c7:96:f5:a7:db:da:be:65: 9b:33:e0:94:df:09:36:10:e1:a3:ca:c1:37:92:a0:bf:c7:7b: 41:1d:ab:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvmCQnSFx5I4q+AJGtZDiPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmM5ZmQ0NGI3OTRhODQyZTI5YTcxODhiNGE4YzZlNDcy ZTFkNTAwHhcNMjYwMTIyMTQwODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODJhNzQ5YjRhMWJhMTcxZDU5YzQ5MjQ4OWI3M2IzMTlkMjI1NjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOZF05sLADJIu6AO61GDAoukfQQQ QqFLFsyrYFezqJjntFfBgsjkBbVWPqLTVCX7spM9wcF3ensJQ5dET7UumWyK+ljV TSoA/fcIKxi0lgaazb5RfoXFuGUyIPHesIWOPOfSsJW0FQ6ZJvPPGbhNpWTewoJ4 xbcfAtuq62zhF+2i/2RbEVwZXD6SRM4DnSMLwanq34wGH98gY5Nu1cLvPSoJ4Ubg a+cf1GU/3/eqP9h8rtxfbWwPgzeSUgL08DGsKmsolGvARWBhNoIhySf5Xy7PMRB1 a8eR1pJP8rq6Ozn4k2COeGmcRLnyiSr/qSIz7tCW7r20/x4UueOQqF91FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNgqdJtKG6Fx1ZxJJIm3OzGdIlZ6MB8GA1UdIwQY MBaAFAj8n9RLeUqELimnGItKjG5HLh1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1B5ZjFFdDVTb1F1S2FjWWkwcU1ia2N1SFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MjE0NDAtZjgyZC00ZmE3LWEwNDkt ZjMyYmE0ODYzMzlhLzEvMkNwMG0wb2JvWEhWbkVra2liYzdNWjBpVm5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80MjE0NDAtZjgyZC00ZmE3LWEwNDktZjMyYmE0ODYzMzlh LzEvQ1B5ZjFFdDVTb1F1S2FjWWkwcU1ia2N1SFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwdpXMA0G CSqGSIb3DQEBCwUAA4IBAQCXk5XVnes/SqEl3cZAhjWBBxXxjRbfotbv9jzDepjd AX+aJI1rnJGU+TAp+ES5dKYcQGrTIFjIvm+StPAh8u4+8tBwmKqBOg/xtswo+16+ 8hszSt0TYJwfJqc6A8shBvIkHdxcId4A9DBZTiRuH+UCEBjcTDW4U/RJPRb0vpzz WoltilhWYJxW1jsEYgte8srnZKdiTMNNWQ36Md579NV8dg36TXU+7oDtD5rvRFZb dQBQVzUu+ZXf2siaHZHQBVRbKYv7x2pWc9qDPYD8fiRhsQRLIxoHYmsFiRGfXidF gm++x5b1p9vavmWbM+CU3wk2EOGjysE3kqC/x3tBHauz -----END CERTIFICATE-----Generated at Mon Feb 9 19:45:39 2026 by rpki-client