This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/A_68etnfks3PakbL9Hb45owYZ-w.roa File: A_68etnfks3PakbL9Hb45owYZ-w.roa (raw, json) Hash identifier: 8UV8lYEu6iu3XIgtRfYywNlrJ6Qvyca/nSSa6hHK38E= Subject key identifier: 03:FE:BC:7A:D9:DF:92:CD:CF:6A:46:CB:F4:76:F8:E6:8C:18:67:EC Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89 Certificate serial: 019B78A2BB81C81BCAF1E2C3EB3C757DFAAB Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/A_68etnfks3PakbL9Hb45owYZ-w.roa Signing time: Thu 01 Jan 2026 08:18:09 +0000 ROA not before: Thu 01 Jan 2026 08:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43455 IP address blocks: 193.46.82.0/24 maxlen: 24 2001:67c:1498::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:bb:81:c8:1b:ca:f1:e2:c3:eb:3c:75:7d:fa:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89 Validity Not Before: Jan 1 08:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03febc7ad9df92cdcf6a46cbf476f8e68c1867ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:85:fc:d7:76:d2:01:23:c1:80:62:41:b3: b9:ca:ac:62:c4:cd:cb:00:bf:3f:dd:41:6b:34:ee: 7c:f4:f0:07:81:b1:b2:89:89:de:18:9d:d8:71:0f: 5d:f7:74:83:95:81:f7:a7:0f:26:99:89:f9:5d:07: f4:dd:60:8a:a2:62:ad:e5:73:40:9a:9f:49:96:35: b1:fd:aa:b1:37:c6:6d:83:2a:38:a5:39:a1:17:86: 6c:43:0f:1d:68:41:b3:40:42:99:d8:42:ad:1c:be: d1:38:9c:c8:f4:7b:00:68:7f:28:a4:98:2e:a2:55: 93:b6:e3:6b:9e:b5:de:46:3b:c5:bf:a3:58:42:ca: fe:78:35:3b:fb:b0:99:1f:f1:e5:0e:3f:24:67:61: ba:31:7e:c5:2c:cc:6b:34:ab:fa:87:76:43:61:b9: a5:cb:d4:fe:46:da:34:ed:fa:ed:e6:c2:01:08:6d: 0c:33:bd:40:bd:89:5f:1a:36:b5:3f:3f:4b:ec:b0: b7:39:9c:1c:0c:4b:7f:09:be:82:d6:7f:e7:01:cb: 75:e6:bb:3f:d8:1e:14:e7:89:a7:35:d8:b1:bb:62: c0:f6:9a:ae:76:2c:40:50:89:66:e2:90:72:ee:1f: 2b:f3:aa:84:c0:fe:0b:6b:00:a1:00:4e:41:42:a2: 38:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FE:BC:7A:D9:DF:92:CD:CF:6A:46:CB:F4:76:F8:E6:8C:18:67:EC X509v3 Authority Key Identifier: keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/A_68etnfks3PakbL9Hb45owYZ-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.82.0/24 IPv6: 2001:67c:1498::/48 Signature Algorithm: sha256WithRSAEncryption 51:2b:56:e7:2a:93:8c:b1:67:70:41:43:d3:c7:07:09:6b:d1: 4a:43:a0:75:0b:ab:2d:6e:e8:fc:2a:03:bb:8f:60:38:b2:d4: 07:b8:db:e5:32:96:e8:dd:cc:7d:42:bc:28:bb:dd:a7:8a:c9: ac:27:a6:4d:07:6d:97:a0:43:45:46:98:cf:11:31:36:25:db: 46:69:16:70:c8:21:0b:0d:00:1b:b8:75:6b:05:4b:22:c6:76: d1:38:4c:bf:d1:08:58:b9:ed:98:5f:b5:3f:12:0c:a3:43:3a: f3:f5:62:40:d6:73:32:4d:7b:6e:66:3c:f0:f3:df:39:b5:f2: 0f:98:be:4d:14:82:6c:c2:f4:74:b8:9c:2f:ae:2e:0f:ae:ff: af:e9:a1:cc:f2:d7:0e:7a:f5:0b:00:63:e6:c3:c6:f9:2f:a6: 2a:62:03:7d:66:ed:d2:9b:70:e0:8d:fa:6b:54:1b:13:b2:cc: 2d:6d:2b:ac:66:36:2e:92:fe:19:1a:48:cd:fd:9d:1b:a5:51: 58:ae:b6:ef:75:69:74:42:86:3d:88:22:92:c9:14:1c:87:b2: 05:d4:52:a0:6d:94:aa:b3:92:e5:5d:2b:6b:2b:04:03:da:8b: 68:d3:7a:92:dc:4f:a1:36:12:fe:8f:41:a2:e4:7f:85:80:02: 75:ad:2a:a9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4oruByBvK8eLD6zx1ffqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYmFhYWM1MTM5ODJiM2MyNGQzNjBjNmQ0NjVjZjgyNDIw NTZhODkwHhcNMjYwMTAxMDgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2ZlYmM3YWQ5ZGY5MmNkY2Y2YTQ2Y2JmNDc2ZjhlNjhjMTg2N2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/GF/Nd20gEjwYBiQbO5yqxixM3L AL8/3UFrNO589PAHgbGyiYneGJ3YcQ9d93SDlYH3pw8mmYn5XQf03WCKomKt5XNA mp9JljWx/aqxN8Ztgyo4pTmhF4ZsQw8daEGzQEKZ2EKtHL7ROJzI9HsAaH8opJgu olWTtuNrnrXeRjvFv6NYQsr+eDU7+7CZH/HlDj8kZ2G6MX7FLMxrNKv6h3ZDYbml y9T+Rto07frt5sIBCG0MM71AvYlfGja1Pz9L7LC3OZwcDEt/Cb6C1n/nAct15rs/ 2B4U54mnNdixu2LA9pqudixAUIlm4pBy7h8r86qEwP4LawChAE5BQqI4EwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAP+vHrZ35LNz2pGy/R2+OaMGGfsMB8GA1UdIwQY MBaAFC66qsUTmCs8JNNgxtRlz4JCBWqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80MmFkMDItZDQ4YS00MWFjLWE4MGIt MjEwMmQ5NmVlMzU1LzEvQV82OGV0bmZrczNQYWtiTDlIYjQ1b3dZWi13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC80MmFkMDItZDQ4YS00MWFjLWE4MGItMjEwMmQ5NmVlMzU1 LzEvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwS5SMA8E AgACMAkDBwAgAQZ8FJgwDQYJKoZIhvcNAQELBQADggEBAFErVucqk4yxZ3BBQ9PH Bwlr0UpDoHULqy1u6PwqA7uPYDiy1Ae42+UylujdzH1CvCi73aeKyawnpk0HbZeg Q0VGmM8RMTYl20ZpFnDIIQsNABu4dWsFSyLGdtE4TL/RCFi57ZhftT8SDKNDOvP1 YkDWczJNe25mPPDz3zm18g+Yvk0UgmzC9HS4nC+uLg+u/6/poczy1w569QsAY+bD xvkvpipiA31m7dKbcOCN+mtUGxOyzC1tK6xmNi6S/hkaSM39nRulUViutu91aXRC hj2IIpLJFByHsgXUUqBtlKqzkuVdK2srBAPai2jTepLcT6E2Ev6PQaLkf4WAAnWt Kqk= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:33 2026 by rpki-client