This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/aP2-Feb22DDe9b731OjQtkUPH78.roa File: aP2-Feb22DDe9b731OjQtkUPH78.roa (raw, json) Hash identifier: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8= Subject key identifier: 68:FD:BE:15:E6:F6:D8:30:DE:F5:BE:F7:D4:E8:D0:B6:45:0F:1F:BF Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C77A98784FB0869CD36C879F7373F8 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/aP2-Feb22DDe9b731OjQtkUPH78.roa Signing time: Thu 01 Jan 2026 04:18:40 +0000 ROA not before: Thu 01 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207066 IP address blocks: 176.103.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:7a:98:78:4f:b0:86:9c:d3:6c:87:9f:73:73:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68fdbe15e6f6d830def5bef7d4e8d0b6450f1fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c5:22:23:3e:ff:1b:dc:02:1b:e1:cd:84:23: ca:a1:87:22:86:90:49:ba:63:d9:8b:6a:ed:8a:1e: e4:d7:5d:0d:65:61:90:69:2d:56:76:9a:eb:9c:8e: e6:4c:1f:cc:37:79:ae:ce:5d:34:57:1f:e8:d1:94: ab:fd:6d:92:f4:f1:69:40:5e:c3:cc:27:12:eb:98: f2:9f:5c:60:24:f3:37:ca:cd:05:6b:43:95:0f:a3: 1d:a8:39:2e:24:35:9f:2c:50:90:23:7f:4c:fc:be: a6:b0:88:7f:c3:61:fa:2e:67:43:64:f1:36:2c:dd: c7:61:73:0a:0f:1b:ae:28:43:dc:76:5d:bd:c3:2e: 7c:bb:11:ec:07:ab:47:f5:78:79:7b:3c:b3:b3:02: fb:fa:fb:31:31:f3:cb:b8:7b:db:61:87:8d:2e:15: 00:ad:b7:a1:d7:32:a0:03:dd:de:0a:4a:48:34:c9: 22:7c:ad:68:03:0a:4a:2b:7b:14:4b:39:a6:47:14: 80:fb:02:8c:8b:42:1b:2a:a7:54:6d:3c:31:cc:ff: 94:af:08:ad:a3:dd:9a:2e:26:f1:ae:9e:a6:de:a6: 3f:7c:e7:bb:e8:7f:d9:8f:00:1b:c8:1c:75:90:33: 8f:ec:cd:3a:7f:f4:31:3a:7b:f2:24:dd:2d:b8:7d: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FD:BE:15:E6:F6:D8:30:DE:F5:BE:F7:D4:E8:D0:B6:45:0F:1F:BF X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/aP2-Feb22DDe9b731OjQtkUPH78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.103.185.0/24 Signature Algorithm: sha256WithRSAEncryption 52:a3:b4:d3:b4:77:82:27:d1:95:f3:b8:5e:8c:06:49:77:0e: ad:3e:c2:ac:4a:69:72:b7:68:a5:a9:b7:79:a3:c0:11:07:ac: 2d:2e:85:ab:85:25:95:16:b2:1d:c5:4b:7b:b9:8e:2f:9d:ef: 0f:65:65:8e:64:b3:e0:9a:47:54:dd:4b:c4:1f:f5:1f:90:ed: f1:23:d1:95:81:79:af:d6:9b:fd:01:17:f9:ee:46:ad:44:d6: 38:00:53:87:83:2b:0f:d8:1c:71:ea:93:ea:76:87:8c:45:22: a6:11:63:2f:8c:be:91:d4:39:be:ac:d1:df:a7:e2:d6:bc:49: 3f:09:e5:e1:9d:7e:5d:b8:01:2d:a0:14:42:03:4f:4c:90:8e: c2:80:03:5b:0b:b9:51:0d:22:2c:f1:47:b3:5d:75:50:bd:b2: e5:42:58:a9:89:83:80:79:07:81:a1:23:f2:ba:0b:75:7a:13: b7:41:14:46:9e:b7:13:03:d5:0f:ca:3b:39:ca:eb:80:4e:3d: 45:7c:8e:e9:1b:b0:66:81:ec:e0:1d:f5:e3:6d:17:81:37:0c: 65:6d:d2:08:cb:ad:64:19:9b:5d:43:d1:7d:b1:2f:f7:19:85: 4f:d6:96:45:a3:23:d3:99:75:d7:de:b7:b6:72:c7:e4:75:6c: b1:db:e0:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3qYeE+whpzTbIefc3P4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGZkYmUxNWU2ZjZkODMwZGVmNWJlZjdkNGU4ZDBiNjQ1MGYxZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98UiIz7/G9wCG+HNhCPKoYcihpBJ umPZi2rtih7k110NZWGQaS1WdprrnI7mTB/MN3muzl00Vx/o0ZSr/W2S9PFpQF7D zCcS65jyn1xgJPM3ys0Fa0OVD6MdqDkuJDWfLFCQI39M/L6msIh/w2H6LmdDZPE2 LN3HYXMKDxuuKEPcdl29wy58uxHsB6tH9Xh5ezyzswL7+vsxMfPLuHvbYYeNLhUA rbeh1zKgA93eCkpINMkifK1oAwpKK3sUSzmmRxSA+wKMi0IbKqdUbTwxzP+Urwit o92aLibxrp6m3qY/fOe76H/ZjwAbyBx1kDOP7M06f/QxOnvyJN0tuH1E3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGj9vhXm9tgw3vW+99To0LZFDx+/MB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvYVAyLUZlYjIyRERlOWI3MzFPalF0a1VQSDc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGe5MA0G CSqGSIb3DQEBCwUAA4IBAQBSo7TTtHeCJ9GV87hejAZJdw6tPsKsSmlyt2ilqbd5 o8ARB6wtLoWrhSWVFrIdxUt7uY4vne8PZWWOZLPgmkdU3UvEH/UfkO3xI9GVgXmv 1pv9ARf57katRNY4AFOHgysP2Bxx6pPqdoeMRSKmEWMvjL6R1Dm+rNHfp+LWvEk/ CeXhnX5duAEtoBRCA09MkI7CgANbC7lRDSIs8UezXXVQvbLlQlipiYOAeQeBoSPy ugt1ehO3QRRGnrcTA9UPyjs5yuuATj1FfI7pG7BmgezgHfXjbReBNwxlbdIIy61k GZtdQ9F9sS/3GYVP1pZFoyPTmXXX3re2csfkdWyx2+AL -----END CERTIFICATE-----Generated at Sun Jan 25 11:58:10 2026 by rpki-client