This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/2eNvopF8zuujhbVWFj84iBcGOKg.roa File: 2eNvopF8zuujhbVWFj84iBcGOKg.roa (raw, json) Hash identifier: uI77+EA1ovgrcVZx5IfCVaUK2rYQNJ3HCVastU7wils= Subject key identifier: D9:E3:6F:A2:91:7C:CE:EB:A3:85:B5:56:16:3F:38:88:17:06:38:A8 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C7FFF946AE0BC41D4BFF773C844B232 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/2eNvopF8zuujhbVWFj84iBcGOKg.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2286 IP address blocks: 193.251.192.0/22 maxlen: 24 193.251.196.0/23 maxlen: 24 193.251.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ff:94:6a:e0:bc:41:d4:bf:f7:73:c8:44:b2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9e36fa2917cceeba385b556163f3888170638a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:12:ef:91:02:37:bd:81:37:a8:d7:ca:bb:d5: b9:83:31:97:53:8c:42:5e:28:d0:fe:75:17:31:41: 0f:61:3a:71:22:7e:3a:0d:f5:ea:d4:1d:f2:a2:e0: a8:b9:95:d8:da:5e:5b:8e:d8:73:80:ca:84:81:2f: 6a:05:93:45:17:42:24:18:2d:ed:8b:8d:92:68:50: 9e:49:c9:d0:66:f5:28:6a:4f:ed:fe:90:e0:a2:28: 55:25:5e:ce:e7:29:db:9c:da:65:bc:59:b2:5b:5e: d0:f3:43:97:6e:ea:3f:bf:72:ce:78:e0:4d:f0:73: 6f:24:26:76:4a:ca:70:08:f6:c5:85:23:02:02:8a: d9:24:ac:16:cc:a2:7b:3b:35:cd:c8:e5:90:bd:1b: b2:76:e6:28:86:2b:40:98:c2:35:e1:7c:22:00:ba: ae:ad:62:1b:4f:ef:e6:57:17:06:14:23:36:52:35: ad:e6:89:4a:dd:c0:44:86:08:cf:b7:c5:b3:80:ec: fb:b1:ed:ab:58:42:72:b3:3f:dd:4d:86:9b:7d:ef: 71:80:9d:e1:97:17:f1:1d:0f:16:41:a6:9e:96:60: c2:23:23:c4:20:2d:8c:a7:d9:c7:94:66:7d:60:2b: 24:34:62:ca:47:7c:c6:32:f6:ba:f9:ff:77:4d:2c: c1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E3:6F:A2:91:7C:CE:EB:A3:85:B5:56:16:3F:38:88:17:06:38:A8 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/2eNvopF8zuujhbVWFj84iBcGOKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.251.192.0-193.251.197.255 193.251.224.0/22 Signature Algorithm: sha256WithRSAEncryption 94:45:e4:13:00:cf:5f:5b:69:99:00:3b:12:6e:4d:3d:1a:b3: 82:7f:72:d7:4e:c9:f1:5b:fe:58:19:3a:63:6c:36:59:39:20: a4:4b:c2:b6:0a:77:18:69:7e:21:3e:ce:e8:54:cf:c5:37:a5: 35:fc:7a:f5:88:41:05:60:1b:0c:ce:26:5b:fe:64:a3:d1:d6: e6:f2:2e:1b:27:17:c8:58:bd:d1:7d:56:82:48:5f:6b:d3:4e: 3e:a2:f2:25:0b:2c:31:34:95:c4:f9:fb:9e:1a:18:7c:12:ce: a8:8e:ea:a5:c8:15:13:8c:0c:b3:5b:d3:f7:f9:e4:56:99:5c: a0:7f:b9:46:cf:b0:54:ad:e5:30:31:57:37:74:69:ec:4a:ff: b2:35:f7:72:30:4d:fb:1b:78:90:62:b0:42:e2:99:9f:de:e8: e8:83:eb:5e:05:ae:d2:96:68:ca:af:08:8f:94:13:2e:1d:4f: c2:d9:5b:d6:90:ec:1b:dc:c8:25:10:44:d6:80:f0:c4:9d:ef: 6c:4a:aa:df:42:17:d1:d0:5d:9a:26:19:4b:29:6f:00:e5:15: 5d:e4:52:9e:36:63:9a:8f:9d:fd:1e:97:9e:3d:e2:8a:f0:08: 02:a8:3d:5a:28:69:a5:a6:6f:5f:64:ff:61:47:43:8a:2b:ef: 9c:4c:52:6e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8f/+UauC8QdS/93PIRLIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWUzNmZhMjkxN2NjZWViYTM4NWI1NTYxNjNmMzg4ODE3MDYzOGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBLvkQI3vYE3qNfKu9W5gzGXU4xC XijQ/nUXMUEPYTpxIn46DfXq1B3youCouZXY2l5bjthzgMqEgS9qBZNFF0IkGC3t i42SaFCeScnQZvUoak/t/pDgoihVJV7O5ynbnNplvFmyW17Q80OXbuo/v3LOeOBN 8HNvJCZ2SspwCPbFhSMCAorZJKwWzKJ7OzXNyOWQvRuyduYohitAmMI14XwiALqu rWIbT+/mVxcGFCM2UjWt5olK3cBEhgjPt8WzgOz7se2rWEJysz/dTYabfe9xgJ3h lxfxHQ8WQaaelmDCIyPEIC2Mp9nHlGZ9YCskNGLKR3zGMva6+f93TSzBuQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNnjb6KRfM7ro4W1VhY/OIgXBjioMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvMmVOdm9wRjh6dXVqaGJWV0ZqODRpQmNHT0tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAbB+8AD BAHB+8QDBALB++AwDQYJKoZIhvcNAQELBQADggEBAJRF5BMAz19baZkAOxJuTT0a s4J/ctdOyfFb/lgZOmNsNlk5IKRLwrYKdxhpfiE+zuhUz8U3pTX8evWIQQVgGwzO Jlv+ZKPR1ubyLhsnF8hYvdF9VoJIX2vTTj6i8iULLDE0lcT5+54aGHwSzqiO6qXI FROMDLNb0/f55FaZXKB/uUbPsFSt5TAxVzd0aexK/7I193IwTfsbeJBisELimZ/e 6OiD614FrtKWaMqvCI+UEy4dT8LZW9aQ7BvcyCUQRNaA8MSd72xKqt9CF9HQXZom GUspbwDlFV3kUp42Y5qPnf0el5494orwCAKoPVooaaWmb19k/2FHQ4or75xMUm4= -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:06 2026 by rpki-client