This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2aWNMQQRfEOt76Vh5XDrNXZmAlk.roa File: 2aWNMQQRfEOt76Vh5XDrNXZmAlk.roa (raw, json) Hash identifier: aGcEkbs8B9XGL0F0LNugSEY85pIuqgOQdV7ekqsiVOg= Subject key identifier: D9:A5:8D:31:04:11:7C:43:AD:EF:A5:61:E5:70:EB:35:76:66:02:59 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8DB959FE50A897BB5461865045AE Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2aWNMQQRfEOt76Vh5XDrNXZmAlk.roa Signing time: Fri 02 Jan 2026 04:18:21 +0000 ROA not before: Fri 02 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202439 IP address blocks: 151.237.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8d:b9:59:fe:50:a8:97:bb:54:61:86:50:45:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9a58d3104117c43adefa561e570eb3576660259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:34:f1:11:09:10:03:e9:f9:f0:62:8e:f4: be:08:3c:b8:fd:0c:bf:28:6a:cc:a5:96:ea:3e:25: 9c:4f:59:80:a6:fc:c1:96:a6:db:42:3f:b5:ce:33: 9b:1a:b2:d4:78:a3:73:7f:52:1e:9c:3f:10:06:be: 08:f2:e4:16:47:a5:85:3d:b4:ba:0a:10:34:57:9d: 69:89:7f:8e:dc:92:f7:cc:28:0d:f2:1e:ad:57:19: 27:31:29:20:ed:e1:a8:28:5e:8f:a8:2c:48:7f:49: e6:6d:a7:64:99:41:5d:f3:d6:d5:fa:88:ed:cb:cf: 89:4b:10:64:cd:01:19:f0:a6:8a:e7:a6:77:89:f8: e5:39:df:47:e3:50:e4:f9:20:b2:e5:0c:f6:39:1f: 17:b8:cb:da:b9:3d:3f:7d:f9:4d:3c:71:15:31:18: 7b:55:e2:bd:c4:cd:6e:86:35:71:bf:ef:ee:c8:84: d9:1f:8f:00:86:a4:11:b4:9a:ff:e3:53:db:12:d0: d3:f5:2a:2d:cb:22:4a:28:6f:f6:d4:ef:2d:9c:70: 95:36:62:30:b8:3b:5a:92:96:25:e4:52:2c:20:38: 45:ea:ce:59:1b:f3:c8:c4:e0:da:9c:80:e7:63:fd: 78:5a:fe:64:4a:b3:7d:48:4a:8d:15:0b:90:a4:18: 92:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A5:8D:31:04:11:7C:43:AD:EF:A5:61:E5:70:EB:35:76:66:02:59 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2aWNMQQRfEOt76Vh5XDrNXZmAlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.237.138.0/23 Signature Algorithm: sha256WithRSAEncryption c2:da:72:ec:10:b2:db:c5:45:8e:11:2b:eb:86:7b:f2:b9:65: 1b:31:9d:71:81:4f:0c:6f:c3:30:37:42:bd:be:7c:69:45:ab: a7:a6:4c:4e:12:16:0d:30:98:be:c2:96:83:59:ae:dd:35:8e: e6:6e:63:ed:c4:c1:3e:e7:cc:dc:dc:a0:d0:07:43:5f:77:65: 22:ae:8e:cf:46:fa:e3:bb:99:07:e7:8a:13:98:9b:7c:33:bc: 2c:d5:19:3c:d8:61:26:24:ca:a6:fc:c4:10:f8:0c:6c:ad:be: 4d:3f:1c:cf:c4:d0:3c:d6:62:71:67:08:d4:50:1a:aa:ae:03: bf:5a:0d:c6:3b:92:48:38:dd:53:72:84:7f:9e:6b:57:c9:d5: 21:d5:cb:34:bb:6e:d5:9c:2f:c4:18:d9:38:03:67:41:fd:3f: 5f:b7:42:ca:8d:d0:75:98:ca:4f:7b:ad:23:10:df:41:51:58: 92:0b:d3:45:f7:df:c5:f0:23:ca:d8:5a:f4:b2:fa:5b:94:f1: b1:cc:bc:42:31:d1:37:98:d7:13:e6:f1:0f:46:b3:ed:66:69: 18:78:1d:55:2f:df:ef:b7:5b:27:ed:f8:24:d0:4a:2a:82:71: c1:69:56:2b:ab:7d:f7:58:76:a1:fc:5a:da:f7:11:a6:a2:cc: be:b4:05:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Y25Wf5QqJe7VGGGUEWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWE1OGQzMTA0MTE3YzQzYWRlZmE1NjFlNTcwZWIzNTc2NjYwMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEA08REJEAPp+fBijvS+CDy4/Qy/ KGrMpZbqPiWcT1mApvzBlqbbQj+1zjObGrLUeKNzf1IenD8QBr4I8uQWR6WFPbS6 ChA0V51piX+O3JL3zCgN8h6tVxknMSkg7eGoKF6PqCxIf0nmbadkmUFd89bV+ojt y8+JSxBkzQEZ8KaK56Z3ifjlOd9H41Dk+SCy5Qz2OR8XuMvauT0/fflNPHEVMRh7 VeK9xM1uhjVxv+/uyITZH48AhqQRtJr/41PbEtDT9SotyyJKKG/21O8tnHCVNmIw uDtakpYl5FIsIDhF6s5ZG/PIxODanIDnY/14Wv5kSrN9SEqNFQuQpBiSqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNmljTEEEXxDre+lYeVw6zV2ZgJZMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvMmFXTk1RUVJmRU90NzZWaDVYRHJOWFptQWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl+2KMA0G CSqGSIb3DQEBCwUAA4IBAQDC2nLsELLbxUWOESvrhnvyuWUbMZ1xgU8Mb8MwN0K9 vnxpRaunpkxOEhYNMJi+wpaDWa7dNY7mbmPtxME+58zc3KDQB0Nfd2Uiro7PRvrj u5kH54oTmJt8M7ws1Rk82GEmJMqm/MQQ+Axsrb5NPxzPxNA81mJxZwjUUBqqrgO/ Wg3GO5JION1TcoR/nmtXydUh1cs0u27VnC/EGNk4A2dB/T9ft0LKjdB1mMpPe60j EN9BUViSC9NF99/F8CPK2Fr0svpblPGxzLxCMdE3mNcT5vEPRrPtZmkYeB1VL9/v t1sn7fgk0EoqgnHBaVYrq333WHah/Fra9xGmosy+tAW/ -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:49 2026 by rpki-client