This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa File: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (raw, json) Hash identifier: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc= Subject key identifier: 3D:1D:01:13:66:DC:02:A7:47:F9:0A:4A:73:5D:15:3B:DB:3F:F5:8B Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15CC1BED04E373E7E0BD7DE8FE5604 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212669 IP address blocks: 178.239.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cc:1b:ed:04:e3:73:e7:e0:bd:7d:e8:fe:56:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d1d011366dc02a747f90a4a735d153bdb3ff58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:e5:c2:98:a6:bb:e1:58:92:da:9e:ab:c8: b7:57:d7:4e:05:e0:d3:eb:ca:a6:dc:57:73:ea:8c: be:32:02:97:b8:c6:2c:5a:c4:41:40:e8:ca:4d:0a: ce:ed:46:df:2c:fc:f9:fd:7c:e2:04:39:86:34:5f: 84:e3:69:1a:b2:09:5f:53:fd:2f:df:df:c9:90:dd: da:38:29:4d:a0:39:78:67:2f:2a:a1:5d:a5:80:27: f5:98:d8:6a:35:ca:72:f0:28:c9:12:1e:ae:5d:19: 12:aa:ed:9b:1d:26:c2:cb:2f:34:b9:fa:14:fd:ba: 9e:5f:18:9a:59:81:99:1c:6e:51:9d:47:ae:5d:c1: 32:d9:3b:bc:78:e8:77:41:5a:91:6e:55:98:80:2f: c1:af:73:50:cf:65:d4:de:c4:24:e7:46:c8:5d:9b: 62:9d:8c:93:8e:33:89:c4:bb:f4:a9:49:92:c7:9d: 0f:cb:50:a7:1e:e7:c3:e6:a3:69:eb:60:7d:ed:d9: c9:d2:34:61:46:90:1d:9b:04:e5:e0:c5:14:1a:65: 89:81:c4:3e:a4:1a:19:11:b9:2b:b0:dd:00:07:53: b7:8d:cf:6d:96:48:ee:0a:ba:a8:7d:3d:16:6e:bc: dc:53:84:de:d8:26:ac:bf:59:66:89:d6:2f:ed:d8: f7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1D:01:13:66:DC:02:A7:47:F9:0A:4A:73:5D:15:3B:DB:3F:F5:8B X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.30.0/23 Signature Algorithm: sha256WithRSAEncryption 81:f1:52:62:34:34:96:f0:ce:37:d0:4d:48:44:19:68:3a:a8: 8d:3e:d6:c2:0a:d4:19:9d:38:e5:4a:fa:f1:67:a4:fd:02:0e: ea:3b:e9:4a:fd:0f:54:8c:7a:6f:7b:f7:f1:45:34:35:81:90: c7:e7:7d:47:83:34:3c:66:9f:0b:46:d7:27:2d:75:26:a1:59: 74:aa:8c:84:00:eb:14:d4:22:fb:d6:8c:00:70:58:6c:fd:7b: 23:12:48:fc:1f:f7:95:db:7d:e0:73:fd:9e:9b:95:9e:b0:2f: 24:d7:5b:e7:f1:66:9a:cb:0e:64:35:b7:b1:68:b5:01:35:43: 02:2a:9f:53:9a:e1:93:f5:f5:81:3a:be:10:bd:18:fa:5c:6f: 7e:91:d6:cd:97:e4:a3:21:66:76:55:4a:bb:1e:05:ac:16:22: be:bc:84:a2:51:2c:38:4d:75:b2:fe:60:1c:1b:cb:a8:91:d7: 08:87:1b:18:ae:58:a2:b1:88:7e:d0:12:4a:1a:9b:3b:23:67: 61:fe:8b:84:48:b5:0d:de:a2:46:d0:8b:f4:bd:82:09:06:6b: 64:6c:f5:e0:9a:d1:f4:b0:76:a7:14:0a:02:d1:59:38:bd:34: 7f:b6:fa:db:83:4a:db:29:be:77:0b:fa:92:7d:f3:f3:bd:72: b1:9c:f3:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fcwb7QTjc+fgvX3o/lYEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDFkMDExMzY2ZGMwMmE3NDdmOTBhNGE3MzVkMTUzYmRiM2ZmNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX3lwpimu+FYktqeq8i3V9dOBeDT 68qm3Fdz6oy+MgKXuMYsWsRBQOjKTQrO7UbfLPz5/XziBDmGNF+E42kasglfU/0v 39/JkN3aOClNoDl4Zy8qoV2lgCf1mNhqNcpy8CjJEh6uXRkSqu2bHSbCyy80ufoU /bqeXxiaWYGZHG5RnUeuXcEy2Tu8eOh3QVqRblWYgC/Br3NQz2XU3sQk50bIXZti nYyTjjOJxLv0qUmSx50Py1CnHufD5qNp62B97dnJ0jRhRpAdmwTl4MUUGmWJgcQ+ pBoZEbkrsN0AB1O3jc9tlkjuCrqofT0WbrzcU4Te2Casv1lmidYv7dj3dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD0dARNm3AKnR/kKSnNdFTvbP/WLMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvUFIwQkUyYmNBcWRILVFwS2MxMFZPOXNfOVlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsu8eMA0G CSqGSIb3DQEBCwUAA4IBAQCB8VJiNDSW8M430E1IRBloOqiNPtbCCtQZnTjlSvrx Z6T9Ag7qO+lK/Q9UjHpve/fxRTQ1gZDH531HgzQ8Zp8LRtcnLXUmoVl0qoyEAOsU 1CL71owAcFhs/XsjEkj8H/eV233gc/2em5WesC8k11vn8Waayw5kNbexaLUBNUMC Kp9TmuGT9fWBOr4QvRj6XG9+kdbNl+SjIWZ2VUq7HgWsFiK+vISiUSw4TXWy/mAc G8uokdcIhxsYrliisYh+0BJKGps7I2dh/ouESLUN3qJG0Iv0vYIJBmtkbPXgmtH0 sHanFAoC0Vk4vTR/tvrbg0rbKb53C/qSffPzvXKxnPMc -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:51 2026 by rpki-client