This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/i2X0mHk6bAtPNecvn2NA6zmZj9U.roa File: i2X0mHk6bAtPNecvn2NA6zmZj9U.roa (raw, json) Hash identifier: mQLU4VLoVcMKqVZZfsB2FdV3V92h7zVuv01+LCyktYg= Subject key identifier: 8B:65:F4:98:79:3A:6C:0B:4F:35:E7:2F:9F:63:40:EB:39:99:8F:D5 Certificate issuer: /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864 Certificate serial: 019B78A37CB298336CC1252D2EFD8D794FA1 Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/i2X0mHk6bAtPNecvn2NA6zmZj9U.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63268 IP address blocks: 193.201.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7c:b2:98:33:6c:c1:25:2d:2e:fd:8d:79:4f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864 Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b65f498793a6c0b4f35e72f9f6340eb39998fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:14:54:5f:71:97:ad:76:4b:fa:ae:cb:07:d5: 58:33:80:58:63:b7:c8:76:98:42:82:26:e3:20:3f: 0d:44:2b:e2:cb:e3:84:94:6b:86:55:92:30:5b:ca: dc:e5:64:b7:c7:15:ba:4b:cc:40:68:db:8c:79:40: 54:55:97:79:d7:f5:37:6a:a0:d9:bd:f0:1a:62:c9: f5:be:92:92:d2:e4:41:1d:e2:7c:ec:de:5f:14:7b: af:1d:09:e4:0e:42:f5:d3:07:11:06:be:21:89:74: c0:84:dc:09:4b:ba:60:9d:d2:ab:44:4a:28:a3:60: ef:11:5f:d7:72:ac:64:15:e8:fb:e8:fe:ff:33:94: 7c:7b:6b:29:c4:e7:2b:a5:41:47:d2:2b:c0:0e:76: 13:fa:b2:f1:40:15:25:5a:a5:ec:33:68:e4:e8:e1: 27:39:08:5a:c7:98:a2:68:f2:8b:01:d6:9b:6b:4d: 92:3e:c4:96:ac:87:ca:3a:aa:1d:27:90:a6:bb:34: 09:0c:38:9d:6f:6c:a0:78:4a:71:83:62:a4:6e:74: 8a:2a:86:b8:dc:49:2f:87:95:b0:82:10:c9:9e:7a: c6:c6:23:68:5f:fb:97:70:57:e1:21:99:58:8d:c6: 5f:ce:47:81:be:8e:1e:a0:b3:c4:f0:dc:54:82:58: 29:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:65:F4:98:79:3A:6C:0B:4F:35:E7:2F:9F:63:40:EB:39:99:8F:D5 X509v3 Authority Key Identifier: keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/i2X0mHk6bAtPNecvn2NA6zmZj9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.56.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:3f:08:f2:a7:f4:a0:a3:38:2f:bd:52:de:32:9a:67:ed:91: 86:8a:55:9a:3c:0c:ab:63:47:a6:59:0d:43:ee:7b:dc:bc:89: 91:a1:2f:a3:08:d5:31:dc:a1:a1:5b:c2:08:09:b3:cf:d1:4e: 6f:30:31:88:17:ea:c6:ca:d8:3b:be:b7:15:b8:5d:1f:fb:75: 55:c7:73:02:ec:28:84:76:f2:ea:54:b2:07:53:63:2a:49:97: 59:ef:ed:f0:3a:c6:02:58:fe:20:4e:5b:22:67:0c:31:87:7e: c1:fb:e2:38:6e:05:ac:3a:a7:72:25:c1:49:1a:61:15:2a:f3: 53:a9:fa:96:82:56:dc:80:c7:29:49:fe:31:98:cb:6a:f4:94: c1:f3:82:71:07:08:64:4b:ae:db:50:32:3d:88:4a:64:3a:42: 9d:2b:83:1d:43:ce:c9:0c:b2:f3:cc:72:83:6c:e9:d0:c3:2b: 74:51:2f:ba:c4:20:3d:5d:82:87:1e:6c:1d:b6:63:fd:52:52: b9:53:99:a7:0c:44:41:45:59:ac:03:cf:73:a0:6d:a4:5b:06: 45:87:35:7b:8a:31:26:98:e8:e4:32:5f:5e:30:8f:3f:f5:5a: 1e:23:db:3d:94:9e:8d:80:d2:2f:4b:ca:7d:6d:ab:9e:68:72: 39:b7:83:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3yymDNswSUtLv2NeU+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZDE5OWMzZDIwZjQzNGQ4YzBhMGEyZWY1ZTUyMzQ2NjY1 Y2E4NjQwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjY1ZjQ5ODc5M2E2YzBiNGYzNWU3MmY5ZjYzNDBlYjM5OTk4ZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BRUX3GXrXZL+q7LB9VYM4BYY7fI dphCgibjID8NRCviy+OElGuGVZIwW8rc5WS3xxW6S8xAaNuMeUBUVZd51/U3aqDZ vfAaYsn1vpKS0uRBHeJ87N5fFHuvHQnkDkL10wcRBr4hiXTAhNwJS7pgndKrREoo o2DvEV/XcqxkFej76P7/M5R8e2spxOcrpUFH0ivADnYT+rLxQBUlWqXsM2jk6OEn OQhax5iiaPKLAdaba02SPsSWrIfKOqodJ5CmuzQJDDidb2ygeEpxg2KkbnSKKoa4 3Ekvh5WwghDJnnrGxiNoX/uXcFfhIZlYjcZfzkeBvo4eoLPE8NxUglgpCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFItl9Jh5OmwLTzXnL59jQOs5mY/VMB8GA1UdIwQY MBaAFBnRmcPSD0NNjAoKLvXlI0ZmXKhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2RHWnc5SVBRMDJNQ2dvdTllVWpSbVpjcUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81Yjc4ZjQtNzcxZC00NzU2LWEzODkt YjQyZmEwMGY1N2RlLzEvaTJYMG1IazZiQXRQTmVjdm4yTkE2em1aajlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81Yjc4ZjQtNzcxZC00NzU2LWEzODktYjQyZmEwMGY1N2Rl LzEvR2RHWnc5SVBRMDJNQ2dvdTllVWpSbVpjcUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwck4MA0G CSqGSIb3DQEBCwUAA4IBAQB6Pwjyp/SgozgvvVLeMppn7ZGGilWaPAyrY0emWQ1D 7nvcvImRoS+jCNUx3KGhW8IICbPP0U5vMDGIF+rGytg7vrcVuF0f+3VVx3MC7CiE dvLqVLIHU2MqSZdZ7+3wOsYCWP4gTlsiZwwxh37B++I4bgWsOqdyJcFJGmEVKvNT qfqWglbcgMcpSf4xmMtq9JTB84JxBwhkS67bUDI9iEpkOkKdK4MdQ87JDLLzzHKD bOnQwyt0US+6xCA9XYKHHmwdtmP9UlK5U5mnDERBRVmsA89zoG2kWwZFhzV7ijEm mOjkMl9eMI8/9VoeI9s9lJ6NgNIvS8p9baueaHI5t4PF -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:15 2026 by rpki-client