This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/0YbW8HGBIEKTAQ0r0cJenKdydBQ.roa File: 0YbW8HGBIEKTAQ0r0cJenKdydBQ.roa (raw, json) Hash identifier: vBliYXFqhxyaJZryhwDIOYnS/wn1Knpp33OKiyDn4/Y= Subject key identifier: D1:86:D6:F0:71:81:20:42:93:01:0D:2B:D1:C2:5E:9C:A7:72:74:14 Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c Certificate serial: 019B79ED40041B8087D1492F9E9C12C6F63F Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/0YbW8HGBIEKTAQ0r0cJenKdydBQ.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211200 IP address blocks: 92.119.39.0/24 maxlen: 24 194.180.60.0/22 maxlen: 22 194.180.60.0/24 maxlen: 24 194.180.61.0/24 maxlen: 24 194.180.62.0/24 maxlen: 24 194.180.63.0/24 maxlen: 24 2a0b:e340::/32 maxlen: 32 2a0b:e341::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:40:04:1b:80:87:d1:49:2f:9e:9c:12:c6:f6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d186d6f07181204293010d2bd1c25e9ca7727414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:a3:ee:3f:ec:c7:79:fb:26:ab:28:5d:80: cd:54:f6:74:f3:9c:d2:cd:35:ed:85:f2:3a:50:06: ef:d8:ec:36:86:3c:ff:60:37:67:56:38:13:2b:0e: 35:91:20:15:d6:1c:1b:4b:6d:13:18:d6:b0:d3:43: 34:b7:df:45:b0:3f:7e:4d:d5:44:fa:8d:1c:a1:fe: ba:ef:03:29:db:6d:6b:ea:dc:2a:7a:5f:94:49:2a: 9a:5f:f2:f8:c6:64:bd:ec:92:fc:a5:14:b4:05:6e: d7:60:37:4d:d7:4f:88:6e:52:60:47:87:af:1d:1d: 7c:78:6e:85:0e:d4:e3:54:82:2a:62:1e:1b:b8:46: a2:df:96:e0:1e:65:a1:12:f9:19:04:85:33:04:db: 71:8d:bb:89:e4:40:c9:79:01:e2:93:d8:ce:6b:aa: 86:7a:09:d7:1d:f2:d9:b1:b4:41:db:16:2b:06:c2: 23:ac:96:17:21:cc:d2:ba:ee:b7:9f:74:ab:5c:31: 1b:96:f6:5c:fa:8b:de:be:51:b4:de:5c:d7:18:0e: 95:95:da:47:42:11:60:84:6f:55:dd:91:2e:3a:67: 1f:6b:c7:1d:64:04:95:47:91:1e:d8:b0:7d:e4:6b: a9:45:32:23:89:54:24:7a:c1:10:d7:57:96:f4:ab: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:86:D6:F0:71:81:20:42:93:01:0D:2B:D1:C2:5E:9C:A7:72:74:14 X509v3 Authority Key Identifier: keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/0YbW8HGBIEKTAQ0r0cJenKdydBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.39.0/24 194.180.60.0/22 IPv6: 2a0b:e340::/31 Signature Algorithm: sha256WithRSAEncryption 1e:55:79:18:84:4b:d6:76:1b:68:8d:dc:e4:84:77:59:af:68: b7:20:40:2c:2e:35:4a:54:40:cb:e0:52:80:4b:ce:38:42:62: d4:71:55:59:9d:aa:2a:ed:33:c6:7c:10:3c:03:50:2f:fb:e2: d1:84:c6:66:1b:0a:6c:78:de:e9:12:88:30:56:49:69:a2:20: 97:d5:54:db:2c:2e:13:c5:de:b1:32:f7:8e:4d:14:78:7c:4b: 94:d2:40:e9:83:d0:35:e2:88:dd:6d:22:9c:e7:3e:06:ce:47: 6a:55:5f:00:67:ad:ce:57:20:e1:5f:a9:13:4b:7a:37:fa:8a: e4:85:bc:73:3f:f8:09:e1:f9:37:32:37:7e:3e:80:1e:f6:36: 31:a8:4b:d9:cb:d9:37:03:4f:4c:43:14:18:9f:73:30:d7:ac: d2:ad:bd:7a:e8:41:f3:b6:df:93:2c:98:26:ad:c5:43:06:ef: 84:09:a9:2a:9b:6a:0c:3e:60:27:9b:9a:01:b3:04:fc:be:10: de:21:87:fe:e2:69:0b:f3:91:0a:1b:ba:69:a2:da:b7:8d:d3: 62:d3:f2:20:b9:50:76:30:9a:f8:da:20:e5:86:ee:97:90:8b: 40:f8:af:2b:2c:98:a2:27:9f:99:87:52:d6:4d:06:f4:48:16: 9c:99:e3:72 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57UAEG4CH0UkvnpwSxvY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMDIwOTRjMjIxMGQ4YjIxNzE1Zjk4ZGY4NTk4YjM1MzIw OGQxMGMwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTg2ZDZmMDcxODEyMDQyOTMwMTBkMmJkMWMyNWU5Y2E3NzI3NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpmj7j/sx3n7JqsoXYDNVPZ085zS zTXthfI6UAbv2Ow2hjz/YDdnVjgTKw41kSAV1hwbS20TGNaw00M0t99FsD9+TdVE +o0cof667wMp221r6twqel+USSqaX/L4xmS97JL8pRS0BW7XYDdN10+IblJgR4ev HR18eG6FDtTjVIIqYh4buEai35bgHmWhEvkZBIUzBNtxjbuJ5EDJeQHik9jOa6qG egnXHfLZsbRB2xYrBsIjrJYXIczSuu63n3SrXDEblvZc+ovevlG03lzXGA6VldpH QhFghG9V3ZEuOmcfa8cdZASVR5Ee2LB95GupRTIjiVQkesEQ11eW9KslnwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNGG1vBxgSBCkwENK9HCXpyncnQUMB8GA1UdIwQY MBaAFDwCCUwiENiyFxX5jfhZizUyCNEMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDIt MTczNzRiZmZiNzFhLzEvMFliVzhIR0JJRUtUQVEwcjBjSmVuS2R5ZEJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDItMTczNzRiZmZiNzFh LzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXHcnAwQC wrQ8MA0EAgACMAcDBQEqC+NAMA0GCSqGSIb3DQEBCwUAA4IBAQAeVXkYhEvWdhto jdzkhHdZr2i3IEAsLjVKVEDL4FKAS844QmLUcVVZnaoq7TPGfBA8A1Av++LRhMZm GwpseN7pEogwVklpoiCX1VTbLC4Txd6xMveOTRR4fEuU0kDpg9A14ojdbSKc5z4G zkdqVV8AZ63OVyDhX6kTS3o3+orkhbxzP/gJ4fk3Mjd+PoAe9jYxqEvZy9k3A09M QxQYn3Mw16zSrb166EHztt+TLJgmrcVDBu+ECakqm2oMPmAnm5oBswT8vhDeIYf+ 4mkL85EKG7ppotq3jdNi0/IguVB2MJr42iDlhu6XkItA+K8rLJiiJ5+Zh1LWTQb0 SBacmeNy -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:58 2026 by rpki-client