This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/DCEcusp2eUGzG1BBOnYxv3yFd44.roa File: DCEcusp2eUGzG1BBOnYxv3yFd44.roa (raw, json) Hash identifier: bfsFhq6ej0vlB2f4W6DclWkdX8tD+q/PCkm2oIBGGDw= Subject key identifier: 0C:21:1C:BA:CA:76:79:41:B3:1B:50:41:3A:76:31:BF:7C:85:77:8E Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002 Certificate serial: 019B7CED54CD24ECBF4816B0D0DE1D652128 Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/DCEcusp2eUGzG1BBOnYxv3yFd44.roa Signing time: Fri 02 Jan 2026 04:18:07 +0000 ROA not before: Fri 02 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209370 IP address blocks: 176.222.26.0/24 maxlen: 24 176.222.31.0/24 maxlen: 24 185.31.236.0/24 maxlen: 24 185.31.237.0/24 maxlen: 24 185.31.238.0/24 maxlen: 24 185.31.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:54:cd:24:ec:bf:48:16:b0:d0:de:1d:65:21:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002 Validity Not Before: Jan 2 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c211cbaca767941b31b50413a7631bf7c85778e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:83:78:82:c5:19:e4:30:91:30:6a:12:d1: 86:dd:f7:50:64:69:a9:97:a3:d4:dc:22:cf:a9:8d: fd:51:2b:e3:8b:3c:08:5c:f4:dd:48:fb:81:2e:f2: 9c:b6:c1:a8:42:d9:67:19:9d:a4:7f:6a:6e:70:86: a9:f5:c0:59:20:f5:22:43:c5:18:1f:a4:24:a8:0d: b2:f5:12:9a:65:c7:b8:8c:31:fd:e6:50:00:8c:9c: fa:fa:3d:6b:20:0d:8a:53:28:d4:19:38:02:76:7c: e6:d7:3c:32:62:d6:1c:20:fc:4f:7e:eb:16:59:75: 4d:46:f2:f4:1b:15:8e:79:12:48:bf:74:9f:8e:3e: a1:9a:b8:aa:27:e5:e1:26:5f:69:91:5f:5e:7c:48: 4a:11:64:89:35:25:00:97:f2:53:cd:df:c9:28:21: 46:87:00:1a:56:bf:20:a3:6b:63:52:da:2c:0a:29: 73:ea:df:72:57:ee:b6:1e:e3:c5:5a:68:74:d4:8b: b3:c1:ae:c7:bd:89:4e:27:1d:8f:27:2b:6d:65:45: 99:39:3c:52:d5:20:e7:ff:ef:e4:b9:7e:2e:0f:f8: 7d:b9:02:f8:e1:90:d3:8c:6e:bc:b5:22:df:4f:ee: e5:56:39:c3:60:f5:e9:8e:ed:b9:a2:b8:27:e9:fd: 8c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:21:1C:BA:CA:76:79:41:B3:1B:50:41:3A:76:31:BF:7C:85:77:8E X509v3 Authority Key Identifier: keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/DCEcusp2eUGzG1BBOnYxv3yFd44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.222.26.0/24 176.222.31.0/24 185.31.236.0/22 Signature Algorithm: sha256WithRSAEncryption 25:a0:32:3d:1f:c8:32:06:10:fe:b3:09:bf:3c:25:c5:68:40: d9:82:33:19:6c:bd:5a:9c:ac:ce:72:6c:92:14:c9:b4:b5:74: 55:a9:2e:e2:fd:62:fc:d5:3d:9e:65:b3:0e:50:a3:2a:79:91: 3f:c0:86:98:7e:d5:94:d8:eb:f0:fe:e1:9b:7f:08:6e:01:0f: 84:55:a7:e1:56:2b:3d:ea:cd:47:b7:f4:ca:98:25:7f:e1:05: 1f:0d:68:36:22:2d:68:c9:53:69:0d:6f:6d:8e:f1:eb:4a:2d: 67:38:1b:cb:bc:cf:ae:45:c1:ac:7c:de:30:ef:7a:06:ed:2a: 9a:99:55:3c:f2:b8:2e:4d:7a:44:21:9c:ec:e9:37:6a:7d:1a: b3:d4:7b:a1:16:6b:bf:30:1f:ce:70:b2:60:d0:30:32:dd:35: c8:e0:7a:f6:be:d6:2a:6a:a9:3c:cc:79:75:75:95:18:5a:40: 9b:5b:1d:2e:f1:19:62:c4:71:db:58:f6:e1:56:9b:3b:21:f1: 6d:05:a1:1d:a6:d3:35:ad:fc:27:63:06:69:19:cb:4a:ad:33: 27:5f:4f:33:2e:8e:b3:2e:ce:74:48:f2:92:37:af:d2:ad:e4: 55:ad:d5:e1:ec:c9:ae:c7:84:5f:d0:e4:d7:97:3b:53:93:ce: 22:77:9b:66 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87VTNJOy/SBaw0N4dZSEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTJmOGU1MzYyN2FkYzI3Njc4MDYzYjkzZDNkOWZkNmVj ZTkwMDIwHhcNMjYwMTAyMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzIxMWNiYWNhNzY3OTQxYjMxYjUwNDEzYTc2MzFiZjdjODU3NzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjuDeILFGeQwkTBqEtGG3fdQZGmp l6PU3CLPqY39USvjizwIXPTdSPuBLvKctsGoQtlnGZ2kf2pucIap9cBZIPUiQ8UY H6QkqA2y9RKaZce4jDH95lAAjJz6+j1rIA2KUyjUGTgCdnzm1zwyYtYcIPxPfusW WXVNRvL0GxWOeRJIv3Sfjj6hmriqJ+XhJl9pkV9efEhKEWSJNSUAl/JTzd/JKCFG hwAaVr8go2tjUtosCilz6t9yV+62HuPFWmh01Iuzwa7HvYlOJx2PJyttZUWZOTxS 1SDn/+/kuX4uD/h9uQL44ZDTjG68tSLfT+7lVjnDYPXpju25orgn6f2MvwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAwhHLrKdnlBsxtQQTp2Mb98hXeOMB8GA1UdIwQY MBaAFK7i+OU2J63CdngGO5PT2f1uzpACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xOTNlZDItYjc3NC00MmYwLWFhM2Yt YTQ2NTY0MWE0OGZhLzEvRENFY3VzcDJlVUd6RzFCQk9uWXh2M3lGZDQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xOTNlZDItYjc3NC00MmYwLWFhM2YtYTQ2NTY0MWE0OGZh LzEvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsN4aAwQA sN4fAwQCuR/sMA0GCSqGSIb3DQEBCwUAA4IBAQAloDI9H8gyBhD+swm/PCXFaEDZ gjMZbL1anKzOcmySFMm0tXRVqS7i/WL81T2eZbMOUKMqeZE/wIaYftWU2Ovw/uGb fwhuAQ+EVafhVis96s1Ht/TKmCV/4QUfDWg2Ii1oyVNpDW9tjvHrSi1nOBvLvM+u RcGsfN4w73oG7SqamVU88rguTXpEIZzs6TdqfRqz1HuhFmu/MB/OcLJg0DAy3TXI 4Hr2vtYqaqk8zHl1dZUYWkCbWx0u8RlixHHbWPbhVps7IfFtBaEdptM1rfwnYwZp GctKrTMnX08zLo6zLs50SPKSN6/SreRVrdXh7Mmux4Rf0OTXlztTk84id5tm -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:22 2026 by rpki-client