This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/2KekhlWBejdFD7GFVdo-rq9I-Lk.roa File: 2KekhlWBejdFD7GFVdo-rq9I-Lk.roa (raw, json) Hash identifier: u86VEt28YlwVGTomKAy9b0M7sMBBTGVJ9+WMRB1kQKY= Subject key identifier: D8:A7:A4:86:55:81:7A:37:45:0F:B1:85:55:DA:3E:AE:AF:48:F8:B9 Certificate issuer: /CN=f344a9f3665084f5009921ac52d119750beed4b4 Certificate serial: 019B78A30384ECD410FC2F827FC96201A309 Authority key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/2KekhlWBejdFD7GFVdo-rq9I-Lk.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 194.13.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:03:84:ec:d4:10:fc:2f:82:7f:c9:62:01:a3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f344a9f3665084f5009921ac52d119750beed4b4 Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8a7a48655817a37450fb18555da3eaeaf48f8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ac:3d:56:44:7f:ba:6e:41:6d:09:92:55:a8: 32:08:cc:68:2d:98:8e:f2:33:5a:5b:3f:f3:a5:fe: 46:2f:95:ed:ac:9b:d8:f8:50:fe:a8:7c:2a:a1:cb: 9b:c2:0e:4c:7e:70:e2:ff:41:41:2f:6d:b7:f9:10: 98:9a:d9:c5:a2:54:bc:2c:4b:52:01:5f:7d:9c:22: 81:95:e3:ca:dc:aa:53:5e:3d:10:8a:11:46:af:49: 3a:00:2b:f8:9f:7b:64:1b:6e:ec:27:6b:11:94:d4: b8:27:cb:52:9c:fb:c6:ed:97:b9:a2:7c:c6:2b:43: f2:76:e4:e6:7d:cc:b4:1e:20:5e:33:3b:32:eb:27: 27:00:48:e8:a8:15:a5:7c:68:0e:4a:b4:10:6b:c2: c9:16:e2:4b:dc:d1:55:a9:43:e5:0b:8b:ad:9b:d6: 11:6b:25:9a:d7:fc:03:4e:86:18:38:9d:a5:3f:7f: 2c:4e:e1:47:17:b6:f3:44:3d:91:5e:84:fd:3e:a4: 7d:b8:8b:5a:a2:05:0b:fa:21:c7:bf:c3:62:d3:ca: 16:30:4d:ae:12:de:a0:97:19:39:b2:b4:44:cb:87: 9a:5d:d6:67:d9:fa:40:6d:64:d0:e7:b6:93:2b:1f: 45:17:3d:35:e0:42:b9:0f:01:09:e1:f9:05:6b:5c: cf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A7:A4:86:55:81:7A:37:45:0F:B1:85:55:DA:3E:AE:AF:48:F8:B9 X509v3 Authority Key Identifier: keyid:F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/2KekhlWBejdFD7GFVdo-rq9I-Lk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.13.116.0/22 Signature Algorithm: sha256WithRSAEncryption 44:08:bb:ed:e6:1b:1c:28:e6:41:95:05:3c:ad:eb:f8:77:b1: 1b:4b:ff:39:2b:65:6b:8a:69:79:e9:88:d7:ed:64:b4:57:fe: 4e:85:1e:88:2b:62:0c:62:aa:a5:30:fa:87:ff:db:03:35:65: f6:4c:3a:5a:86:6b:9f:31:b1:09:6c:97:7c:1b:eb:ec:56:a4: 92:af:f6:e2:e2:75:44:17:f4:88:a0:40:e8:07:be:65:8d:43: 71:7f:62:e1:12:36:47:85:c0:e8:ee:1f:de:f1:59:56:fd:f1: cd:c5:fd:b2:94:4a:2e:91:dd:d0:46:c4:23:a1:c5:30:1d:7e: 3b:b4:1f:1a:76:5d:65:bf:eb:72:91:ae:ab:b8:09:bc:23:45: 38:b8:00:40:fc:10:88:bf:cc:73:d9:a5:c6:42:64:a6:85:38: 98:af:33:95:4e:3c:94:62:d0:6d:6c:7d:6b:5b:0b:c6:b8:5a: 3c:51:aa:55:15:36:20:2d:89:c3:7a:bb:a9:9c:fb:30:b8:d1: 2d:01:7d:75:1b:3a:33:d5:f7:65:a8:f2:4a:68:2a:b4:4b:bf: 36:de:a6:34:51:cc:f7:19:b4:75:2d:84:36:d6:97:ad:1c:b5: a0:ad:cf:7d:1a:a1:76:0c:cb:b4:de:b0:e2:60:46:3c:f2:31: e0:b8:6a:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owOE7NQQ/C+Cf8liAaMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNDRhOWYzNjY1MDg0ZjUwMDk5MjFhYzUyZDExOTc1MGJl ZWQ0YjQwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGE3YTQ4NjU1ODE3YTM3NDUwZmIxODU1NWRhM2VhZWFmNDhmOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6w9VkR/um5BbQmSVagyCMxoLZiO 8jNaWz/zpf5GL5XtrJvY+FD+qHwqocubwg5MfnDi/0FBL223+RCYmtnFolS8LEtS AV99nCKBlePK3KpTXj0QihFGr0k6ACv4n3tkG27sJ2sRlNS4J8tSnPvG7Ze5onzG K0PyduTmfcy0HiBeMzsy6ycnAEjoqBWlfGgOSrQQa8LJFuJL3NFVqUPlC4utm9YR ayWa1/wDToYYOJ2lP38sTuFHF7bzRD2RXoT9PqR9uItaogUL+iHHv8Ni08oWME2u Et6glxk5srREy4eaXdZn2fpAbWTQ57aTKx9FFz014EK5DwEJ4fkFa1zPuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNinpIZVgXo3RQ+xhVXaPq6vSPi5MB8GA1UdIwQY MBaAFPNEqfNmUIT1AJkhrFLRGXUL7tS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODBTcDgyWlFoUFVBbVNHc1V0RVpkUXZ1MUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83MTZhOTAtZDI5NS00OTAzLTkwZjkt ZDhjN2VmMTU1MTFkLzEvMktla2hsV0JlamRGRDdHRlZkby1ycTlJLUxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83MTZhOTAtZDI5NS00OTAzLTkwZjktZDhjN2VmMTU1MTFk LzEvODBTcDgyWlFoUFVBbVNHc1V0RVpkUXZ1MUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwg10MA0G CSqGSIb3DQEBCwUAA4IBAQBECLvt5hscKOZBlQU8rev4d7EbS/85K2Vriml56YjX 7WS0V/5OhR6IK2IMYqqlMPqH/9sDNWX2TDpahmufMbEJbJd8G+vsVqSSr/bi4nVE F/SIoEDoB75ljUNxf2LhEjZHhcDo7h/e8VlW/fHNxf2ylEoukd3QRsQjocUwHX47 tB8adl1lv+tyka6ruAm8I0U4uABA/BCIv8xz2aXGQmSmhTiYrzOVTjyUYtBtbH1r WwvGuFo8UapVFTYgLYnDerupnPswuNEtAX11Gzoz1fdlqPJKaCq0S7823qY0Ucz3 GbR1LYQ21petHLWgrc99GqF2DMu03rDiYEY88jHguGoh -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:04 2026 by rpki-client