This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/0ID-AnVUhFUiMemh1sbAkCtku7k.roa File: 0ID-AnVUhFUiMemh1sbAkCtku7k.roa (raw, json) Hash identifier: AbzQcdesjBBWIHYWJC9zLMR7O1b0U/MWLPaNjpcLcdw= Subject key identifier: D0:80:FE:02:75:54:84:55:22:31:E9:A1:D6:C6:C0:90:2B:64:BB:B9 Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861 Certificate serial: 019B7B35F308F71CC347418ED0E37C74A128 Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/0ID-AnVUhFUiMemh1sbAkCtku7k.roa Signing time: Thu 01 Jan 2026 20:18:11 +0000 ROA not before: Thu 01 Jan 2026 20:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214932 IP address blocks: 188.95.14.0/23 maxlen: 23 2a14:40c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f3:08:f7:1c:c3:47:41:8e:d0:e3:7c:74:a1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861 Validity Not Before: Jan 1 20:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d080fe02755484552231e9a1d6c6c0902b64bbb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4d:3b:f3:ce:82:fc:25:cd:aa:44:24:6b:2c: 4c:ff:bc:ac:9c:04:95:d6:dd:72:f3:4f:79:00:3a: 38:a1:eb:8c:82:27:96:11:e6:fa:70:fa:59:74:f9: 8e:78:03:02:a4:c1:98:47:0f:d1:ae:51:8e:cf:18: f2:86:42:bf:f3:9e:c1:3e:ec:a4:3e:83:cf:86:55: 7a:ae:b2:36:a3:7b:0e:cd:d3:ca:fb:a4:eb:9c:7f: b5:b2:8b:96:83:12:28:10:5f:75:4a:3b:df:f7:50: 1c:d9:39:bb:52:9e:d6:da:c8:25:4e:88:5f:25:28: 3e:46:39:03:1c:2a:be:9b:d7:c5:cd:68:77:67:ed: 0e:11:25:cd:11:e8:0a:94:61:79:e9:e8:cf:b8:f3: f3:e4:8d:e5:14:d3:cd:33:3f:8c:97:63:db:86:8a: b1:fb:8f:4b:1d:d9:cf:b4:52:e5:d8:22:26:2b:15: e7:78:5b:09:2e:5d:c4:fc:39:95:a1:73:2c:e0:f1: 4c:aa:c0:c6:33:57:7d:10:4b:4e:b4:f4:6d:fb:f7: 5b:2c:ae:90:84:54:52:d3:d4:b5:30:36:cf:20:e8: b8:d5:1d:8f:ad:6b:26:c2:b3:f1:4f:fd:ea:ba:2a: a3:7d:b6:e2:e7:9e:ec:66:70:4a:48:82:b0:fc:4f: 56:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:80:FE:02:75:54:84:55:22:31:E9:A1:D6:C6:C0:90:2B:64:BB:B9 X509v3 Authority Key Identifier: keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/0ID-AnVUhFUiMemh1sbAkCtku7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.14.0/23 IPv6: 2a14:40c0::/29 Signature Algorithm: sha256WithRSAEncryption 73:77:19:6a:0a:5d:d8:29:b3:01:eb:ba:c8:51:a4:da:bf:47: eb:12:bc:9c:1b:fc:63:29:52:65:81:3c:1a:d0:b3:86:81:8c: bd:fc:1a:d9:10:d7:e0:01:02:1e:20:a1:8d:f0:0f:75:44:9d: 9f:cb:80:b9:3f:fa:27:c0:2c:ad:7c:90:2a:4f:f7:3f:8a:84: 9d:c9:d5:3b:81:7d:69:fc:b2:b0:b9:f7:d2:f1:cc:80:ff:5a: e3:32:d5:86:34:3b:54:44:e2:f1:45:7f:1a:2d:9a:04:42:7d: c3:8f:bc:f4:49:e3:77:13:81:8a:ea:a9:a1:68:34:fc:c9:92: 79:b7:2e:87:13:e2:d0:b7:4e:78:ec:6c:87:82:e2:89:38:8a: f5:30:bf:30:39:50:87:c5:a3:f0:3c:56:49:ab:68:60:29:2b: 7a:16:06:ed:aa:6e:64:49:c8:2d:24:40:58:5b:9f:03:09:1b: f4:23:10:ef:0a:b3:f3:b3:be:33:d8:a6:65:30:a0:3e:92:ee: 87:3a:d5:c6:c1:70:24:45:7e:39:24:88:a9:52:a8:e4:e9:b6: 40:e3:f3:6c:b6:6f:e6:4f:1c:88:d5:09:6a:67:99:66:dc:74: 5d:ba:02:0e:24:fa:97:a9:33:c3:33:48:a8:ef:24:6e:6e:86: 3d:b5:ab:d0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NfMI9xzDR0GO0ON8dKEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxOGFmMjZmOWEzNjY1M2Y0ZDk5NjcxOWQ0YTQxMGZlODRh ZjQ4NjEwHhcNMjYwMTAxMjAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDgwZmUwMjc1NTQ4NDU1MjIzMWU5YTFkNmM2YzA5MDJiNjRiYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk07886C/CXNqkQkayxM/7ysnASV 1t1y8095ADo4oeuMgieWEeb6cPpZdPmOeAMCpMGYRw/RrlGOzxjyhkK/857BPuyk PoPPhlV6rrI2o3sOzdPK+6TrnH+1souWgxIoEF91Sjvf91Ac2Tm7Up7W2sglTohf JSg+RjkDHCq+m9fFzWh3Z+0OESXNEegKlGF56ejPuPPz5I3lFNPNMz+Ml2Pbhoqx +49LHdnPtFLl2CImKxXneFsJLl3E/DmVoXMs4PFMqsDGM1d9EEtOtPRt+/dbLK6Q hFRS09S1MDbPIOi41R2PrWsmwrPxT/3quiqjfbbi557sZnBKSIKw/E9W/wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNCA/gJ1VIRVIjHpodbGwJArZLu5MB8GA1UdIwQY MBaAFCGK8m+aNmU/TZlnGdSkEP6Er0hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAt MTg0NTg2NjAyODg3LzEvMElELUFuVlVoRlVpTWVtaDFzYkFrQ3RrdTdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAtMTg0NTg2NjAyODg3 LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBvF8OMA0E AgACMAcDBQMqFEDAMA0GCSqGSIb3DQEBCwUAA4IBAQBzdxlqCl3YKbMB67rIUaTa v0frErycG/xjKVJlgTwa0LOGgYy9/BrZENfgAQIeIKGN8A91RJ2fy4C5P/onwCyt fJAqT/c/ioSdydU7gX1p/LKwuffS8cyA/1rjMtWGNDtUROLxRX8aLZoEQn3Dj7z0 SeN3E4GK6qmhaDT8yZJ5ty6HE+LQt0547GyHguKJOIr1ML8wOVCHxaPwPFZJq2hg KSt6Fgbtqm5kScgtJEBYW58DCRv0IxDvCrPzs74z2KZlMKA+ku6HOtXGwXAkRX45 JIipUqjk6bZA4/Nstm/mTxyI1QlqZ5lm3HRdugIOJPqXqTPDM0io7yRuboY9tavQ -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:36 2026 by rpki-client