This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/0EAd0NIVQFpYF8Sfry0-sg27DIU.roa File: 0EAd0NIVQFpYF8Sfry0-sg27DIU.roa (raw, json) Hash identifier: AM+vkkVy+PRlTYsSrmQEunL3834jj/6I3kNZmcTiVSQ= Subject key identifier: D0:40:1D:D0:D2:15:40:5A:58:17:C4:9F:AF:2D:3E:B2:0D:BB:0C:85 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB4DDCDFE32539344BF936DB510978 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/0EAd0NIVQFpYF8Sfry0-sg27DIU.roa Signing time: Thu 01 Jan 2026 00:18:10 +0000 ROA not before: Thu 01 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43395 IP address blocks: 2.188.232.0/23 maxlen: 23 2.188.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4d:dc:df:e3:25:39:34:4b:f9:36:db:51:09:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0401dd0d215405a5817c49faf2d3eb20dbb0c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:28:b4:3a:19:c0:93:b9:e4:d7:a6:3b:dc: ac:a0:f7:69:36:c8:87:15:b6:31:9f:f9:dc:9d:18: 0e:a8:47:3d:e3:61:65:35:f3:5b:02:6d:aa:ea:1a: 9f:59:9a:d8:81:ca:e4:40:ca:f2:aa:e7:4b:45:a2: 85:34:b0:f3:c1:a0:2a:24:7f:43:8a:5e:58:dd:46: 9e:ee:3f:54:bc:b6:ce:bb:8b:fb:d1:35:3b:8e:0f: e9:44:9e:0c:21:bf:4e:44:49:ee:e7:7f:ce:da:c5: 4c:66:ed:a9:31:23:e8:6a:da:1f:5b:b2:5e:0f:38: 70:65:c8:01:c9:ff:15:4e:58:b5:34:3b:5b:9f:21: 35:10:d6:03:35:9f:cb:d3:ca:bf:7f:d5:bb:65:d1: ca:0b:e6:83:12:1a:26:5e:02:6c:43:7e:1a:10:83: 53:4a:f4:b3:2e:f1:65:0d:a2:cd:e3:92:00:c5:51: 23:9d:ac:7c:cb:44:cc:c3:44:a5:dd:6c:8a:e1:af: 62:66:1d:70:12:51:39:c4:a3:81:f9:88:7a:b7:f3: 33:fd:3c:21:d4:af:eb:45:4d:fc:7a:8c:05:bf:58: 09:53:ce:38:18:91:71:7a:b4:b7:5d:44:a1:f9:ac: fe:e4:e4:77:76:59:fb:b5:f1:f8:3c:4b:9b:d8:a6: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:40:1D:D0:D2:15:40:5A:58:17:C4:9F:AF:2D:3E:B2:0D:BB:0C:85 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/0EAd0NIVQFpYF8Sfry0-sg27DIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.188.232.0/23 2.188.236.0/23 Signature Algorithm: sha256WithRSAEncryption 33:4e:cf:26:94:75:da:6c:7e:5a:4d:68:f2:d4:48:ff:c6:9a: 02:82:6b:bc:a8:84:18:e9:54:b6:11:6b:29:42:62:31:c4:7a: 6f:b9:ec:4d:49:d9:69:05:37:93:5d:f5:60:de:75:b1:ac:5c: 6b:92:1c:69:b9:5f:98:7c:52:54:92:92:db:5b:5a:e1:bf:04: b8:58:74:56:36:41:6e:d6:8d:7a:d1:bf:1f:fb:22:d0:58:9a: 11:66:fc:a8:bb:74:54:6b:6b:06:31:28:0c:95:d9:31:35:03: 28:72:02:39:02:be:9b:f3:e7:d4:4d:de:3f:c1:29:f7:b2:51: c9:95:dc:04:c3:81:55:f0:6a:d0:8f:7b:0d:5e:25:6c:03:47: 43:32:56:ac:95:90:32:d1:03:2d:b4:19:9c:b6:21:e5:0d:59: cf:d4:50:fd:2e:db:0a:9f:ee:28:24:44:06:c9:fe:6c:88:32: 28:bc:06:1e:4f:ac:e6:bd:c2:55:04:2c:cf:b4:0c:a3:60:9b: 58:92:3f:66:31:99:54:02:d3:97:de:1f:6d:4d:6b:dd:fa:f2: c8:7d:b0:01:e3:c5:68:60:a8:82:7a:69:52:57:a6:19:1e:a7: 8e:7a:0c:c1:b0:9d:ae:84:d1:7b:dc:df:89:95:bb:32:64:2f: 35:ce:b7:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt2603c3+MlOTRL+TbbUQl4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDQwMWRkMGQyMTU0MDVhNTgxN2M0OWZhZjJkM2ViMjBkYmIwYzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsacotDoZwJO55NemO9ysoPdpNsiH FbYxn/ncnRgOqEc942FlNfNbAm2q6hqfWZrYgcrkQMryqudLRaKFNLDzwaAqJH9D il5Y3Uae7j9UvLbOu4v70TU7jg/pRJ4MIb9OREnu53/O2sVMZu2pMSPoatofW7Je DzhwZcgByf8VTli1NDtbnyE1ENYDNZ/L08q/f9W7ZdHKC+aDEhomXgJsQ34aEINT SvSzLvFlDaLN45IAxVEjnax8y0TMw0Sl3WyK4a9iZh1wElE5xKOB+Yh6t/Mz/Twh 1K/rRU38eowFv1gJU844GJFxerS3XUSh+az+5OR3dln7tfH4PEub2KYVywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNBAHdDSFUBaWBfEn68tPrINuwyFMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvMEVBZDBOSVZRRnBZRjhTZnJ5MC1zZzI3RElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBArzoAwQB ArzsMA0GCSqGSIb3DQEBCwUAA4IBAQAzTs8mlHXabH5aTWjy1Ej/xpoCgmu8qIQY 6VS2EWspQmIxxHpvuexNSdlpBTeTXfVg3nWxrFxrkhxpuV+YfFJUkpLbW1rhvwS4 WHRWNkFu1o160b8f+yLQWJoRZvyou3RUa2sGMSgMldkxNQMocgI5Ar6b8+fUTd4/ wSn3slHJldwEw4FV8GrQj3sNXiVsA0dDMlaslZAy0QMttBmctiHlDVnP1FD9LtsK n+4oJEQGyf5siDIovAYeT6zmvcJVBCzPtAyjYJtYkj9mMZlUAtOX3h9tTWvd+vLI fbAB48VoYKiCemlSV6YZHqeOegzBsJ2uhNF73N+JlbsyZC81zrf2 -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:24 2026 by rpki-client