This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/02YEKq1IDPEF8lBAQFD4RLUmuKw.roa File: 02YEKq1IDPEF8lBAQFD4RLUmuKw.roa (raw, json) Hash identifier: TS/pQGf2LaMx5573KYxQQhCXKrO448hCMH6JUvctiu8= Subject key identifier: D3:66:04:2A:AD:48:0C:F1:05:F2:50:40:40:50:F8:44:B5:26:B8:AC Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96 Certificate serial: 019B77596E23266BC7A5173DBF718B6A95E3 Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/02YEKq1IDPEF8lBAQFD4RLUmuKw.roa Signing time: Thu 01 Jan 2026 02:18:28 +0000 ROA not before: Thu 01 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 193.104.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6e:23:26:6b:c7:a5:17:3d:bf:71:8b:6a:95:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d366042aad480cf105f250404050f844b526b8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:75:fc:8a:41:9c:03:f0:fe:23:f5:8c:7c: 05:2c:8a:33:f8:93:53:a9:41:dd:b5:31:44:52:bd: 99:da:3a:24:2a:ab:68:0e:94:92:25:5b:88:50:b9: 68:4f:88:1a:f9:5e:24:41:dd:5c:b1:d5:5c:84:b4: e8:b6:4f:5f:bf:5f:7b:28:72:19:18:77:6c:e1:eb: 56:a2:a4:73:39:f5:2d:1c:0a:fd:21:9d:0b:56:41: 8f:9d:33:45:08:5e:a4:d1:a5:3f:af:9e:ae:84:c1: 4d:d8:93:a7:42:bd:8a:84:d9:d7:15:2f:23:3a:2c: c2:05:cf:b7:7d:73:45:a5:23:34:31:c6:27:d0:7e: e9:19:00:1a:b6:07:b4:dc:af:46:75:d4:ad:b4:41: 7d:aa:fe:4a:87:f3:71:be:e9:eb:77:29:3d:33:93: c8:6a:7c:0d:9b:e2:a2:42:03:d5:32:8d:8a:24:d7: e6:d0:b2:be:d3:97:5d:43:76:4b:26:f1:2f:e0:91: 3a:d8:63:2a:41:39:56:a4:fe:37:8c:47:45:a8:6b: 0e:3d:e8:ef:27:6a:ab:c5:d6:0f:5f:e5:d8:c4:e7: d3:bc:60:34:f9:a5:fc:56:09:ae:29:e2:4f:c0:ca: 5d:1d:49:cb:be:9c:13:39:25:7f:fd:9e:b1:fe:fd: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:66:04:2A:AD:48:0C:F1:05:F2:50:40:40:50:F8:44:B5:26:B8:AC X509v3 Authority Key Identifier: keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/02YEKq1IDPEF8lBAQFD4RLUmuKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.33.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:13:f3:a2:f9:71:3a:38:51:ca:eb:f8:eb:3a:60:4d:5d:75: a9:39:da:30:f9:a6:27:c4:e2:32:c1:20:4a:0e:fe:b7:c8:12: 11:69:2a:f8:47:2c:5a:ce:d3:3d:18:02:df:91:87:0b:af:ec: 79:9d:48:fe:53:de:66:46:e5:2a:29:ba:66:ce:b4:9b:4a:1f: e6:02:5e:79:89:35:c9:46:7b:ae:67:b6:85:1d:c6:4c:d0:34: d7:ec:9f:ad:7c:f3:56:9f:ae:57:f7:c5:74:31:30:4a:23:6e: fe:ad:14:4f:a3:49:de:75:54:f1:5f:27:f4:e5:89:bf:2d:bd: a6:54:0a:12:ef:97:70:8d:9c:ca:51:c3:c2:fe:ad:8d:b1:69: b4:93:16:37:c3:2c:e5:df:92:05:ae:50:cf:82:5b:2d:21:a7: df:98:16:44:ab:be:12:35:1a:75:51:a3:db:1a:58:ee:ce:21: 42:a1:00:b8:79:0a:1e:7b:19:36:ea:da:68:ef:e0:1e:98:7a: 3a:b0:76:0a:ac:2a:a3:b2:48:d5:ac:cb:ef:df:b8:ed:b7:77: 18:8d:7a:ef:b5:bd:29:96:28:01:77:21:07:24:32:35:98:33: b9:a7:65:92:c2:7c:e6:8c:59:e4:24:af:93:a0:24:97:0b:3a: 71:2b:24:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WW4jJmvHpRc9v3GLapXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxY2E2NzYxMDI4NmFiNzM4Zjg2Y2U5MzVmZGY1ZWQ2MjBm MDJkOTYwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzY2MDQyYWFkNDgwY2YxMDVmMjUwNDA0MDUwZjg0NGI1MjZiOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWN1/IpBnAPw/iP1jHwFLIoz+JNT qUHdtTFEUr2Z2jokKqtoDpSSJVuIULloT4ga+V4kQd1csdVchLTotk9fv197KHIZ GHds4etWoqRzOfUtHAr9IZ0LVkGPnTNFCF6k0aU/r56uhMFN2JOnQr2KhNnXFS8j OizCBc+3fXNFpSM0McYn0H7pGQAatge03K9GddSttEF9qv5Kh/Nxvunrdyk9M5PI anwNm+KiQgPVMo2KJNfm0LK+05ddQ3ZLJvEv4JE62GMqQTlWpP43jEdFqGsOPejv J2qrxdYPX+XYxOfTvGA0+aX8VgmuKeJPwMpdHUnLvpwTOSV//Z6x/v1bwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNNmBCqtSAzxBfJQQEBQ+ES1JrisMB8GA1UdIwQY MBaAFNHKZ2EChqtzj4bOk1/fXtYg8C2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUt MzViZmY5NmRhNGM1LzEvMDJZRUtxMUlEUEVGOGxCQVFGRDRSTFVtdUt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUtMzViZmY5NmRhNGM1 LzEvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWghMA0G CSqGSIb3DQEBCwUAA4IBAQBfE/Oi+XE6OFHK6/jrOmBNXXWpOdow+aYnxOIywSBK Dv63yBIRaSr4RyxaztM9GALfkYcLr+x5nUj+U95mRuUqKbpmzrSbSh/mAl55iTXJ RnuuZ7aFHcZM0DTX7J+tfPNWn65X98V0MTBKI27+rRRPo0nedVTxXyf05Ym/Lb2m VAoS75dwjZzKUcPC/q2NsWm0kxY3wyzl35IFrlDPglstIaffmBZEq74SNRp1UaPb GljuziFCoQC4eQoeexk26tpo7+AemHo6sHYKrCqjskjVrMvv37jtt3cYjXrvtb0p ligBdyEHJDI1mDO5p2WSwnzmjFnkJK+ToCSXCzpxKyQX -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:20 2026 by rpki-client