This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/2baORnCmpGNOwW4MrOGBHcB_A3o.roa File: 2baORnCmpGNOwW4MrOGBHcB_A3o.roa (raw, json) Hash identifier: 4c7N8lX48QcCXmd9kRAsTEkI6RiyveF89rAIHp8ni6A= Subject key identifier: D9:B6:8E:46:70:A6:A4:63:4E:C1:6E:0C:AC:E1:81:1D:C0:7F:03:7A Certificate issuer: /CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5 Certificate serial: 019B7E385BC8374ECA7775B8C24BAA141CD0 Authority key identifier: B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/2baORnCmpGNOwW4MrOGBHcB_A3o.roa Signing time: Fri 02 Jan 2026 10:19:41 +0000 ROA not before: Fri 02 Jan 2026 10:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47473 IP address blocks: 93.186.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5b:c8:37:4e:ca:77:75:b8:c2:4b:aa:14:1c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5 Validity Not Before: Jan 2 10:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9b68e4670a6a4634ec16e0cace1811dc07f037a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:af:78:7d:94:d3:a7:6f:e2:d0:9d:1e:c2: f7:94:52:a9:04:de:62:40:4a:b7:8b:61:da:f6:ad: 51:57:7f:de:8a:32:cd:97:c5:6c:51:47:19:fc:e8: a4:1c:d5:0c:6d:8c:73:3b:6e:5e:5e:19:62:3f:a0: 49:3a:73:f4:15:da:44:1c:9c:e5:ba:f6:be:84:96: 3a:2c:6e:b4:4a:10:cc:19:01:ea:4d:04:7f:62:e1: f5:a7:02:21:13:1f:0f:cd:87:47:f8:d9:81:c5:66: 10:12:55:ca:67:8a:b2:c6:9f:60:f2:da:d6:31:64: be:04:b5:a8:7f:17:33:75:69:02:00:3d:b4:24:f1: c2:f4:d7:e1:34:1d:9c:42:6c:14:af:2e:0b:54:ec: b5:2c:6f:2b:32:04:5e:4c:54:3f:78:e1:35:09:64: 32:ce:fb:90:c5:15:46:6e:59:f1:e7:92:4b:3f:8e: 5f:da:58:e6:fc:a0:c3:f8:a9:c0:72:cc:92:e9:83: 7d:20:62:ec:39:f8:81:3b:1c:ed:de:2d:f4:be:73: 31:3c:5a:80:c6:70:e4:12:2f:46:5d:57:af:8b:b7: 01:75:f9:ae:93:9a:78:f5:6f:81:bc:4c:fa:bb:92: a8:c0:61:d2:85:72:21:5b:9c:90:bc:c8:ef:c7:4d: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B6:8E:46:70:A6:A4:63:4E:C1:6E:0C:AC:E1:81:1D:C0:7F:03:7A X509v3 Authority Key Identifier: keyid:B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/2baORnCmpGNOwW4MrOGBHcB_A3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.186.80.0/20 Signature Algorithm: sha256WithRSAEncryption 15:55:93:43:82:6a:0f:39:c3:55:ab:29:10:e9:a5:42:96:96: 9b:73:0b:f0:df:8e:57:6c:a6:33:ca:0f:b5:eb:93:88:87:d4: ec:f9:84:8c:aa:03:3f:e5:a4:c9:6f:51:1d:ec:a7:ba:78:0a: 3c:dd:2d:e0:c7:01:75:34:df:ab:30:da:ec:f5:28:da:ca:32: 36:34:9a:b0:2f:cf:3f:f5:dc:5a:65:e0:99:c6:de:3e:38:1c: f9:ed:72:fb:c1:a7:35:a1:ff:6c:8e:ea:c2:ca:57:40:ae:85: 27:ca:07:36:6c:e1:6e:02:13:7e:6b:d4:85:79:13:8c:10:b4: 84:55:91:81:0a:fe:ae:78:73:94:92:d4:75:87:30:78:08:7b: 5a:eb:bf:31:c1:ba:36:9d:35:75:ba:95:a8:73:fc:7d:2c:9c: bc:24:17:5b:c9:84:c6:3e:54:71:62:1e:c0:02:c3:9a:c3:00: 9b:28:52:a6:bf:18:23:72:b8:73:6d:0a:63:f7:9e:ea:dd:d8: 19:33:9a:64:9e:64:96:6f:16:df:ea:2a:58:9a:93:75:17:cf: 9d:b8:12:fc:80:68:f3:c6:96:74:4a:69:9b:c3:2c:51:d9:c2: 76:f1:76:7d:ac:71:87:57:c4:40:52:08:8a:87:ca:eb:a6:e8: fc:af:57:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OFvIN07Kd3W4wkuqFBzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NDBkYjg2Yjk4YjVjYjMyNzBhNDhjZjdmYTAyM2M4N2Fj YWI5YzUwHhcNMjYwMTAyMTAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWI2OGU0NjcwYTZhNDYzNGVjMTZlMGNhY2UxODExZGMwN2YwMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXeveH2U06dv4tCdHsL3lFKpBN5i QEq3i2Ha9q1RV3/eijLNl8VsUUcZ/OikHNUMbYxzO25eXhliP6BJOnP0FdpEHJzl uva+hJY6LG60ShDMGQHqTQR/YuH1pwIhEx8PzYdH+NmBxWYQElXKZ4qyxp9g8trW MWS+BLWofxczdWkCAD20JPHC9NfhNB2cQmwUry4LVOy1LG8rMgReTFQ/eOE1CWQy zvuQxRVGblnx55JLP45f2ljm/KDD+KnAcsyS6YN9IGLsOfiBOxzt3i30vnMxPFqA xnDkEi9GXVevi7cBdfmuk5p49W+BvEz6u5KowGHShXIhW5yQvMjvx039ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNm2jkZwpqRjTsFuDKzhgR3AfwN6MB8GA1UdIwQY MBaAFLhA24a5i1yzJwpIz3+gI8h6yrnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUVEYmhybUxYTE1uQ2tqUGY2QWp5SHJLdWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xMWZmYmUtMzc5Zi00ZmRlLWE4NGEt YzdiZDZjMjYzNzQ0LzEvMmJhT1JuQ21wR05Pd1c0TXJPR0JIY0JfQTNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xMWZmYmUtMzc5Zi00ZmRlLWE4NGEtYzdiZDZjMjYzNzQ0 LzEvdUVEYmhybUxYTE1uQ2tqUGY2QWp5SHJLdWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXbpQMA0G CSqGSIb3DQEBCwUAA4IBAQAVVZNDgmoPOcNVqykQ6aVClpabcwvw345XbKYzyg+1 65OIh9Ts+YSMqgM/5aTJb1Ed7Ke6eAo83S3gxwF1NN+rMNrs9SjayjI2NJqwL88/ 9dxaZeCZxt4+OBz57XL7wac1of9sjurCyldAroUnygc2bOFuAhN+a9SFeROMELSE VZGBCv6ueHOUktR1hzB4CHta678xwbo2nTV1upWoc/x9LJy8JBdbyYTGPlRxYh7A AsOawwCbKFKmvxgjcrhzbQpj957q3dgZM5pknmSWbxbf6ipYmpN1F8+duBL8gGjz xpZ0SmmbwyxR2cJ28XZ9rHGHV8RAUgiKh8rrpuj8r1dK -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:11 2026 by rpki-client