This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/rcW2Ii7PaBs2Uy4l6LWyLkHdSMo.roa File: rcW2Ii7PaBs2Uy4l6LWyLkHdSMo.roa (raw, json) Hash identifier: 4rDXiZIxTJhAB4SWesiReJpAQSLBHJqIt+2m35EFqOU= Subject key identifier: AD:C5:B6:22:2E:CF:68:1B:36:53:2E:25:E8:B5:B2:2E:41:DD:48:CA Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019B7F836D3019627033ADF7E7663A0D6563 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/rcW2Ii7PaBs2Uy4l6LWyLkHdSMo.roa Signing time: Fri 02 Jan 2026 16:21:18 +0000 ROA not before: Fri 02 Jan 2026 16:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209720 IP address blocks: 31.40.166.0/24 maxlen: 24 92.118.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:6d:30:19:62:70:33:ad:f7:e7:66:3a:0d:65:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Jan 2 16:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adc5b6222ecf681b36532e25e8b5b22e41dd48ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:c4:be:ec:80:44:25:c0:01:e0:b3:99:df: 76:48:32:83:61:92:d2:32:ea:cd:55:af:79:8a:5a: a5:39:8b:7c:5b:13:9e:92:6c:50:61:18:72:ab:58: 59:f7:35:f9:21:e0:f1:19:06:c6:5b:e4:09:df:d2: 0e:f3:f7:96:8f:0a:4d:64:0a:6e:63:9d:15:ef:c0: 60:6e:3b:6c:66:26:e2:f3:14:f7:7c:35:85:3f:6f: f7:80:be:0a:a3:a9:d8:90:db:c4:9d:ae:5f:78:40: af:d3:16:89:28:4d:4c:78:35:61:65:7a:ec:bf:79: 44:c9:d6:16:c1:c0:98:56:46:26:7b:d8:55:07:d7: cf:04:c3:dc:81:be:69:29:5d:d9:79:ce:f8:58:0c: fd:be:fd:95:68:53:7b:1e:66:9b:7f:fb:1d:db:5e: 77:78:a3:f4:78:26:ed:bb:7f:b1:2a:11:9e:9c:2b: 76:70:ff:9a:90:64:fc:50:e9:e7:4c:08:2d:69:be: bb:ca:5b:45:af:70:d4:4f:0f:82:37:4c:9b:84:af: 12:63:2e:70:b0:da:63:c3:4d:67:da:a5:f3:5e:73: cb:b9:ac:07:e5:e4:9c:8c:f3:5a:9d:fa:5c:74:d2: f0:3e:96:9e:d0:e5:83:e3:13:d2:9e:dc:49:fb:53: 4e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C5:B6:22:2E:CF:68:1B:36:53:2E:25:E8:B5:B2:2E:41:DD:48:CA X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/rcW2Ii7PaBs2Uy4l6LWyLkHdSMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.166.0/24 92.118.134.0/24 Signature Algorithm: sha256WithRSAEncryption 03:2f:13:19:57:c5:47:3c:29:49:56:c4:e8:26:a1:27:39:ae: 8f:76:27:ed:92:c3:53:e2:5e:b8:bf:d6:7b:99:51:ba:ec:7a: 8d:94:b7:a6:1d:04:02:5d:9e:26:d7:5b:2a:27:36:88:ce:97: ef:8b:31:55:10:0a:b3:b6:02:06:77:9e:ee:9e:13:d7:c0:f0: e3:3e:b4:2e:d4:e4:a5:ea:7a:5d:59:58:4f:6d:7f:41:b5:fd: 70:92:74:3e:24:42:fe:26:42:17:bc:a8:b6:fe:f9:c2:7a:aa: ce:3f:b6:a3:85:35:f6:f7:2b:60:9f:46:c6:69:65:ef:83:73: fa:9b:f7:b6:98:90:dc:18:10:9d:0d:5c:74:46:47:6e:44:c3: d2:a2:8a:04:93:6d:13:86:87:df:f8:47:81:54:90:0f:d9:7e: 01:e6:c7:73:d8:ae:27:80:49:bd:3f:06:84:af:d1:56:17:51: 5c:7a:32:92:c2:b4:73:aa:b7:aa:f6:26:c2:1d:b5:7e:87:1a: e4:75:eb:73:2e:fd:fa:75:f6:21:58:7b:6b:9a:38:60:52:12: da:54:c3:70:b8:2e:84:c3:ec:da:ce:87:4e:e7:51:64:07:ae: 51:8c:24:e1:72:2a:cb:b1:2b:34:16:c0:f1:38:13:54:8d:98: 6d:6b:c2:c8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g20wGWJwM63352Y6DWVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjYwMTAyMTYyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGM1YjYyMjJlY2Y2ODFiMzY1MzJlMjVlOGI1YjIyZTQxZGQ0OGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uzEvuyARCXAAeCzmd92SDKDYZLS MurNVa95ilqlOYt8WxOekmxQYRhyq1hZ9zX5IeDxGQbGW+QJ39IO8/eWjwpNZApu Y50V78BgbjtsZibi8xT3fDWFP2/3gL4Ko6nYkNvEna5feECv0xaJKE1MeDVhZXrs v3lEydYWwcCYVkYme9hVB9fPBMPcgb5pKV3Zec74WAz9vv2VaFN7Hmabf/sd2153 eKP0eCbtu3+xKhGenCt2cP+akGT8UOnnTAgtab67yltFr3DUTw+CN0ybhK8SYy5w sNpjw01n2qXzXnPLuawH5eScjPNanfpcdNLwPpae0OWD4xPSntxJ+1NO6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK3FtiIuz2gbNlMuJei1si5B3UjKMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvcmNXMklpN1BhQnMyVXk0bDZMV3lMa0hkU01vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHyimAwQA XHaGMA0GCSqGSIb3DQEBCwUAA4IBAQADLxMZV8VHPClJVsToJqEnOa6PdiftksNT 4l64v9Z7mVG67HqNlLemHQQCXZ4m11sqJzaIzpfvizFVEAqztgIGd57unhPXwPDj PrQu1OSl6npdWVhPbX9Btf1wknQ+JEL+JkIXvKi2/vnCeqrOP7ajhTX29ytgn0bG aWXvg3P6m/e2mJDcGBCdDVx0RkduRMPSoooEk20Thoff+EeBVJAP2X4B5sdz2K4n gEm9PwaEr9FWF1FcejKSwrRzqreq9ibCHbV+hxrkdetzLv36dfYhWHtrmjhgUhLa VMNwuC6Ew+zazodO51FkB65RjCThcirLsSs0FsDxOBNUjZhta8LI -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:21 2026 by rpki-client