This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/g2QaSslIEgo7FZj53UBiSTtFk-4.roa File: g2QaSslIEgo7FZj53UBiSTtFk-4.roa (raw, json) Hash identifier: 6A+YhHwe2IJ834GJkC/1/7bS6gTkAl2WRDOeCCEHr98= Subject key identifier: 83:64:1A:4A:C9:48:12:0A:3B:15:98:F9:DD:40:62:49:3B:45:93:EE Certificate issuer: /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050 Certificate serial: 019B791069CB6CD986E352354D65BEB015DB Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/g2QaSslIEgo7FZj53UBiSTtFk-4.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207656 IP address blocks: 193.218.118.0/24 maxlen: 24 193.218.119.0/24 maxlen: 24 2a0f:e586::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:69:cb:6c:d9:86:e3:52:35:4d:65:be:b0:15:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83641a4ac948120a3b1598f9dd4062493b4593ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9a:b0:e3:63:4c:14:42:b8:ac:e4:e4:c3:8c: 0b:2b:78:90:fa:49:bd:98:f6:3e:e7:05:39:43:87: 36:17:67:f8:d1:ba:e0:79:5e:1b:35:87:99:20:ca: 23:a3:5e:c6:96:67:60:7a:78:8f:5e:ff:f5:a9:b0: b3:4e:79:f2:78:d7:45:80:a4:a3:e8:0b:5e:51:5a: 2c:3b:5f:14:89:f8:54:22:4e:49:8b:3b:29:d8:d5: fe:52:95:b1:11:3b:1f:11:05:56:ab:aa:2e:0d:2b: c4:88:de:18:d0:f9:88:11:db:ca:1f:ea:fe:68:ba: 36:16:a7:12:6b:8a:f6:e8:3b:29:cb:92:d5:ab:d6: 33:e7:15:ce:9c:80:2c:31:2c:9b:a2:5b:f2:52:b3: 75:ec:9a:e4:9c:09:2c:ae:7e:df:e2:fe:19:1c:e4: 30:9a:6f:7f:34:96:4e:a6:ed:65:ad:f9:e4:f0:d3: 05:4d:8f:d9:d3:ca:32:1f:20:ae:2c:11:f3:c9:46: 48:1d:b4:20:b9:55:09:07:f8:6f:51:21:05:a5:19: 8b:36:7b:a0:a2:90:32:76:2e:42:4d:63:3f:54:56: 1e:23:8c:48:e1:4c:f0:3a:12:53:64:70:77:35:4a: 00:50:0b:5d:eb:d8:90:f6:4c:ed:45:9d:32:df:9a: 38:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:64:1A:4A:C9:48:12:0A:3B:15:98:F9:DD:40:62:49:3B:45:93:EE X509v3 Authority Key Identifier: keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/g2QaSslIEgo7FZj53UBiSTtFk-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.118.0/23 IPv6: 2a0f:e586::/32 Signature Algorithm: sha256WithRSAEncryption 3c:e6:08:2a:ac:57:7d:a8:d8:74:59:78:8d:df:4e:43:0f:22: c9:82:20:73:8d:ce:3b:1e:02:f8:76:32:51:03:9a:48:75:af: 12:2d:56:78:04:0d:f5:fc:cc:79:e5:07:c6:a4:1b:0d:05:77: 48:04:f4:b4:90:3f:aa:a4:cc:ee:58:6a:ae:ac:21:65:b0:aa: fb:98:33:f0:f7:fd:5a:7e:23:ce:26:59:fb:10:fb:32:8b:8b: 94:dd:12:b2:3f:26:0a:17:51:be:a6:5c:8a:84:93:95:cb:d9: dd:9b:b6:1b:32:e5:e5:58:f2:7e:a9:fc:cf:7f:52:5b:c9:ae: b2:d3:0e:d4:14:21:53:ad:6c:a3:2b:ab:21:e6:57:04:f9:14: d1:50:e8:45:70:c4:93:ff:38:a1:dc:11:40:49:62:1b:f5:4b: ea:53:60:1f:21:ec:d1:59:2a:a6:d7:50:ba:e3:ac:f9:b4:6b: 52:46:83:a7:59:f8:45:f0:86:8b:38:84:80:6b:14:4c:fc:73: b4:c3:8f:de:21:cf:1e:2d:94:b6:d8:71:89:a2:e7:72:f7:db: 01:8e:a2:9e:23:5b:4d:ac:ed:54:ae:51:42:a3:3a:74:bf:b1: 1d:2f:de:8d:9c:1a:33:78:da:b4:8b:81:8b:84:bf:c6:2d:db: c6:53:6d:34 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EGnLbNmG41I1TWW+sBXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmQ3ZDk3NDNkZTJlZmEyZjYzMzM3OGEyNjhmNThmMmFh MTYwNTAwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzY0MWE0YWM5NDgxMjBhM2IxNTk4ZjlkZDQwNjI0OTNiNDU5M2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5qw42NMFEK4rOTkw4wLK3iQ+km9 mPY+5wU5Q4c2F2f40brgeV4bNYeZIMojo17GlmdgeniPXv/1qbCzTnnyeNdFgKSj 6AteUVosO18UifhUIk5Jizsp2NX+UpWxETsfEQVWq6ouDSvEiN4Y0PmIEdvKH+r+ aLo2FqcSa4r26Dspy5LVq9Yz5xXOnIAsMSybolvyUrN17JrknAksrn7f4v4ZHOQw mm9/NJZOpu1lrfnk8NMFTY/Z08oyHyCuLBHzyUZIHbQguVUJB/hvUSEFpRmLNnug opAydi5CTWM/VFYeI4xI4UzwOhJTZHB3NUoAUAtd69iQ9kztRZ0y35o4kwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFINkGkrJSBIKOxWY+d1AYkk7RZPuMB8GA1UdIwQY MBaAFC0tfZdD3i76L2MzeKJo9Y8qoWBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFMxOWwwUGVMdm92WXpONG9tajFqeXFoWUZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jZjdjMTktMWM3ZC00ZWJlLWI0ZGQt Y2JjY2Y5MDQ1NWZlLzEvZzJRYVNzbElFZ283RlpqNTNVQmlTVHRGay00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9jZjdjMTktMWM3ZC00ZWJlLWI0ZGQtY2JjY2Y5MDQ1NWZl LzEvTFMxOWwwUGVMdm92WXpONG9tajFqeXFoWUZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwdp2MA0E AgACMAcDBQAqD+WGMA0GCSqGSIb3DQEBCwUAA4IBAQA85ggqrFd9qNh0WXiN305D DyLJgiBzjc47HgL4djJRA5pIda8SLVZ4BA31/Mx55QfGpBsNBXdIBPS0kD+qpMzu WGqurCFlsKr7mDPw9/1afiPOJln7EPsyi4uU3RKyPyYKF1G+plyKhJOVy9ndm7Yb MuXlWPJ+qfzPf1Jbya6y0w7UFCFTrWyjK6sh5lcE+RTRUOhFcMST/zih3BFASWIb 9UvqU2AfIezRWSqm11C646z5tGtSRoOnWfhF8IaLOISAaxRM/HO0w4/eIc8eLZS2 2HGJoudy99sBjqKeI1tNrO1UrlFCozp0v7EdL96NnBozeNq0i4GLhL/GLdvGU200 -----END CERTIFICATE-----Generated at Mon Jan 26 14:21:37 2026 by rpki-client