This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/t2c4lmTqC9uGYzleHqLG4klFeZ8.roa File: t2c4lmTqC9uGYzleHqLG4klFeZ8.roa (raw, json) Hash identifier: fRL26pE0Lx95YEnYyPGswoxFOLVpoZdxz9ASbz1R9mA= Subject key identifier: B7:67:38:96:64:EA:0B:DB:86:63:39:5E:1E:A2:C6:E2:49:45:79:9F Certificate issuer: /CN=ffabc23595fd80447d98f5ec3513161bd2473fc6 Certificate serial: 019B76EB917E5FA09DDF2C15F3B6E20FB191 Authority key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/t2c4lmTqC9uGYzleHqLG4klFeZ8.roa Signing time: Thu 01 Jan 2026 00:18:28 +0000 ROA not before: Thu 01 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203568 IP address blocks: 193.222.252.0/23 maxlen: 23 193.223.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:91:7e:5f:a0:9d:df:2c:15:f3:b6:e2:0f:b1:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b767389664ea0bdb8663395e1ea2c6e24945799f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:0b:bc:7e:8e:3a:fa:f9:10:c2:48:2d:0b: 45:53:92:bf:76:c3:6b:bc:b5:08:16:6f:0e:35:1f: f1:36:89:1d:d9:52:af:3d:4d:34:35:06:41:42:74: c1:de:4c:58:5e:3f:0e:ab:b7:05:a2:e1:9d:a2:9d: 44:62:40:7c:0f:26:a2:e9:36:38:f6:e8:1c:6b:f1: 60:eb:2c:c9:6a:e7:c6:72:ad:3c:ba:6d:99:10:fd: 30:63:15:47:e1:ec:e6:cb:2c:f2:dc:0d:8b:e7:b0: 09:70:ea:9f:74:9e:5b:d8:f9:9c:e7:cf:d4:aa:51: cb:0d:2f:b4:33:ea:65:72:f5:21:4e:97:19:6c:f5: aa:a4:9d:f5:ef:b8:c6:86:8d:b7:23:43:e9:e1:88: fa:32:9b:80:47:3c:ef:03:a4:a5:bc:23:6d:9b:e6: da:48:2a:5c:31:16:12:bf:8c:e6:9d:93:5d:3f:07: 5a:ed:a9:e6:1e:50:ab:2a:52:4c:08:e7:86:34:ff: db:a5:71:c5:07:9e:fc:d0:c2:cd:65:24:00:0f:96: 9e:8a:00:8c:02:8a:30:65:b0:a0:3b:42:fe:93:3c: da:cc:cb:87:46:44:70:24:55:4d:fc:0b:bb:14:18: 25:ef:3e:bf:4b:8d:70:b9:d0:d8:74:40:a1:47:1a: ff:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:67:38:96:64:EA:0B:DB:86:63:39:5E:1E:A2:C6:E2:49:45:79:9F X509v3 Authority Key Identifier: keyid:FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/t2c4lmTqC9uGYzleHqLG4klFeZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.222.252.0/23 193.223.70.0/23 Signature Algorithm: sha256WithRSAEncryption 51:58:85:7e:05:7e:ff:2b:38:01:27:f6:ce:ef:3d:90:81:18: 46:4e:f0:b7:e9:24:c0:e2:6a:34:1a:c0:31:c2:91:7a:97:bb: 92:eb:95:48:93:cb:cd:5f:51:aa:47:20:59:a1:1e:8c:7a:af: a8:7d:1f:2c:fb:1d:99:15:7e:94:0a:7c:f6:02:0c:6d:2f:57: 4e:5b:de:b8:3c:9e:e6:f4:a7:47:7b:76:d9:c7:ca:8f:5d:0a: 3f:40:15:7f:eb:9a:9d:fd:c0:9c:c0:88:07:4f:29:ab:e9:7d: 96:62:c5:28:0e:ba:55:1a:9e:8b:3e:d3:37:27:45:9b:5e:ed: 54:90:25:5a:71:b9:fd:41:27:f9:26:20:29:3b:08:31:ac:9b: b1:65:8b:48:d4:b4:9d:78:14:6f:48:d9:aa:23:59:e2:5e:4a: c1:60:96:27:20:d3:c2:aa:b5:cf:45:6f:7c:d6:4e:8a:37:9a: 04:1a:fd:3a:75:f6:ee:bd:9c:d4:76:3f:64:a0:67:0c:6c:62: cf:5c:a8:60:66:69:6f:5a:2f:dc:c2:45:11:b0:4c:3a:1b:19: 2a:50:0b:5b:d4:86:c7:ec:13:a9:52:65:5b:d0:b3:e4:2e:2d: 0c:5d:d0:7c:ce:22:61:4a:4d:bf:be:10:26:f9:f7:12:9f:07: 4a:47:4e:ff -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt265F+X6Cd3ywV87biD7GRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYWJjMjM1OTVmZDgwNDQ3ZDk4ZjVlYzM1MTMxNjFiZDI0 NzNmYzYwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzY3Mzg5NjY0ZWEwYmRiODY2MzM5NWUxZWEyYzZlMjQ5NDU3OTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlQLvH6OOvr5EMJILQtFU5K/dsNr vLUIFm8ONR/xNokd2VKvPU00NQZBQnTB3kxYXj8Oq7cFouGdop1EYkB8Dyai6TY4 9ugca/Fg6yzJaufGcq08um2ZEP0wYxVH4ezmyyzy3A2L57AJcOqfdJ5b2Pmc58/U qlHLDS+0M+plcvUhTpcZbPWqpJ3177jGho23I0Pp4Yj6MpuARzzvA6SlvCNtm+ba SCpcMRYSv4zmnZNdPwda7anmHlCrKlJMCOeGNP/bpXHFB5780MLNZSQAD5aeigCM AoowZbCgO0L+kzzazMuHRkRwJFVN/Au7FBgl7z6/S41wudDYdEChRxr/WQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLdnOJZk6gvbhmM5Xh6ixuJJRXmfMB8GA1UdIwQY MBaAFP+rwjWV/YBEfZj17DUTFhvSRz/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZ2Q05aWDlnRVI5bVBYc05STVdHOUpIUDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xOTEyMTktNDdjOS00YjFiLThlNDYt ZGQ4YTY4ZGJkM2I2LzEvdDJjNGxtVHFDOXVHWXpsZUhxTEc0a2xGZVo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xOTEyMTktNDdjOS00YjFiLThlNDYtZGQ4YTY4ZGJkM2I2 LzEvXzZ2Q05aWDlnRVI5bVBYc05STVdHOUpIUDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwd78AwQB wd9GMA0GCSqGSIb3DQEBCwUAA4IBAQBRWIV+BX7/KzgBJ/bO7z2QgRhGTvC36STA 4mo0GsAxwpF6l7uS65VIk8vNX1GqRyBZoR6Meq+ofR8s+x2ZFX6UCnz2AgxtL1dO W964PJ7m9KdHe3bZx8qPXQo/QBV/65qd/cCcwIgHTymr6X2WYsUoDrpVGp6LPtM3 J0WbXu1UkCVacbn9QSf5JiApOwgxrJuxZYtI1LSdeBRvSNmqI1niXkrBYJYnINPC qrXPRW981k6KN5oEGv06dfbuvZzUdj9koGcMbGLPXKhgZmlvWi/cwkURsEw6Gxkq UAtb1IbH7BOpUmVb0LPkLi0MXdB8ziJhSk2/vhAm+fcSnwdKR07/ -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:41 2026 by rpki-client