This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/c289qpn3kfSqkxAic7Rhdy4xyoM.roa File: c289qpn3kfSqkxAic7Rhdy4xyoM.roa (raw, json) Hash identifier: JY4yDIwrrSAVR6qr9xMoxwUu8BhoP0KRD9HYde2M8sU= Subject key identifier: 73:6F:3D:AA:99:F7:91:F4:AA:93:10:22:73:B4:61:77:2E:31:CA:83 Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23 Certificate serial: 019B7EA517A85124A51A3D9ED37EF85CAA50 Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/c289qpn3kfSqkxAic7Rhdy4xyoM.roa Signing time: Fri 02 Jan 2026 12:18:27 +0000 ROA not before: Fri 02 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61155 IP address blocks: 94.142.160.0/22 maxlen: 22 2a04:d3c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:17:a8:51:24:a5:1a:3d:9e:d3:7e:f8:5c:aa:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23 Validity Not Before: Jan 2 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=736f3daa99f791f4aa93102273b461772e31ca83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6e:82:01:99:d4:7e:b1:fc:79:50:3d:ac:54: e2:df:60:3b:04:8c:83:e0:b6:94:c3:a0:3f:5e:4a: a2:86:af:f7:ab:1b:c7:ad:7b:03:f1:ce:9a:36:b4: ef:5f:4a:f8:81:4e:90:5a:92:39:e2:f8:04:74:8f: f6:c7:7f:5c:18:a4:c4:ad:20:96:56:6d:0e:c9:27: fd:32:0e:73:09:65:2d:f2:f3:3c:67:b7:41:eb:0c: d8:08:cf:b2:8b:07:d0:e2:67:8f:ef:61:62:e7:c7: 9a:96:53:85:74:6a:df:dd:e3:19:56:45:3e:b2:8c: 9c:2f:27:12:59:62:dc:1f:c9:c0:a2:b1:0f:d1:1b: c0:73:c2:ba:fa:46:54:f6:46:08:28:af:39:17:a4: 26:7b:f5:83:99:68:e8:a2:4c:72:f6:1b:55:7e:d5: 3c:80:9a:67:6e:f8:93:fd:eb:47:9e:72:45:6b:8b: 47:31:cb:3d:46:7e:fe:67:be:08:a4:90:da:86:f3: ef:1b:d1:dc:9c:2b:b5:82:59:99:a0:81:f7:b0:b7: 9e:e7:b1:e9:91:51:88:a1:67:de:47:e3:21:ab:58: 22:40:02:18:45:e1:a9:d7:ef:00:66:9b:b1:45:41: d4:86:70:ab:23:98:1b:67:f1:de:72:8b:86:21:ba: 26:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6F:3D:AA:99:F7:91:F4:AA:93:10:22:73:B4:61:77:2E:31:CA:83 X509v3 Authority Key Identifier: keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/c289qpn3kfSqkxAic7Rhdy4xyoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.160.0/22 IPv6: 2a04:d3c0::/29 Signature Algorithm: sha256WithRSAEncryption 64:29:64:74:a0:36:29:5b:de:29:ae:47:48:d5:43:38:de:18: 3a:e4:ff:95:f5:b1:45:89:be:b7:02:69:51:02:35:9e:e7:4c: 66:be:aa:30:45:d4:ff:1c:2c:e4:f7:52:ba:0b:6f:0a:18:d9: a9:55:6c:65:24:f8:24:a6:67:6a:9a:84:fc:72:8a:30:7f:fd: 1b:2e:56:e5:e3:f3:b5:b7:31:b5:3b:f4:45:2a:2f:23:a4:1d: 8a:f9:74:9b:23:6a:0e:ff:1f:fd:81:af:aa:17:68:fe:0e:ec: 4b:3a:7b:6f:96:53:6a:ae:b5:57:7f:3e:07:63:b6:da:dd:79: 86:b9:36:c5:34:da:f0:14:55:6c:2c:ec:9d:cf:d2:8a:bd:99: 80:7c:6c:2f:6c:6d:8a:2d:e1:91:ba:ca:bf:5f:67:8b:e8:3a: b0:28:f6:0a:51:3e:88:da:85:d5:25:a7:a8:51:8a:6f:e1:58: e0:ea:1e:dc:84:54:b0:c0:a6:db:99:79:9f:25:ec:44:81:09: fb:ad:e3:05:63:cd:a4:9d:fa:86:fe:4d:4f:46:9a:22:da:78: 03:e9:cc:8b:0b:a5:b8:05:2d:34:67:99:c8:74:20:42:82:7c: 41:6d:39:5d:b7:00:4a:9d:78:60:a2:5a:b8:d8:b1:34:de:fe: de:1e:0c:70 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pReoUSSlGj2e0374XKpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTVmNjgyYmM2ZDU3N2RmYzNjMTBlY2VlMjcxODM4MWZl ZTNiMjMwHhcNMjYwMTAyMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzZmM2RhYTk5Zjc5MWY0YWE5MzEwMjI3M2I0NjE3NzJlMzFjYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW6CAZnUfrH8eVA9rFTi32A7BIyD 4LaUw6A/Xkqihq/3qxvHrXsD8c6aNrTvX0r4gU6QWpI54vgEdI/2x39cGKTErSCW Vm0OySf9Mg5zCWUt8vM8Z7dB6wzYCM+yiwfQ4meP72Fi58eallOFdGrf3eMZVkU+ soycLycSWWLcH8nAorEP0RvAc8K6+kZU9kYIKK85F6Qme/WDmWjookxy9htVftU8 gJpnbviT/etHnnJFa4tHMcs9Rn7+Z74IpJDahvPvG9HcnCu1glmZoIH3sLee57Hp kVGIoWfeR+Mhq1giQAIYReGp1+8AZpuxRUHUhnCrI5gbZ/HecouGIbom6QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHNvPaqZ95H0qpMQInO0YXcuMcqDMB8GA1UdIwQY MBaAFCuV9oK8bVd9/DwQ7O4nGDgf7jsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMt ZTAxYTU2ZjU4ZDM3LzEvYzI4OXFwbjNrZlNxa3hBaWM3UmhkeTR4eW9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMtZTAxYTU2ZjU4ZDM3 LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXo6gMA0E AgACMAcDBQMqBNPAMA0GCSqGSIb3DQEBCwUAA4IBAQBkKWR0oDYpW94prkdI1UM4 3hg65P+V9bFFib63AmlRAjWe50xmvqowRdT/HCzk91K6C28KGNmpVWxlJPgkpmdq moT8coowf/0bLlbl4/O1tzG1O/RFKi8jpB2K+XSbI2oO/x/9ga+qF2j+DuxLOntv llNqrrVXfz4HY7ba3XmGuTbFNNrwFFVsLOydz9KKvZmAfGwvbG2KLeGRusq/X2eL 6DqwKPYKUT6I2oXVJaeoUYpv4Vjg6h7chFSwwKbbmXmfJexEgQn7reMFY82knfqG /k1PRpoi2ngD6cyLC6W4BS00Z5nIdCBCgnxBbTldtwBKnXhgolq42LE03v7eHgxw -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:52 2026 by rpki-client