This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/2293WVx5FEzWqVXSDjmLVc7kfB8.roa File: 2293WVx5FEzWqVXSDjmLVc7kfB8.roa (raw, json) Hash identifier: Z0We1fzMf0PQYdkcSo2x/cAXZoyZ0rwm8YewHU6T5Q8= Subject key identifier: DB:6F:77:59:5C:79:14:4C:D6:A9:55:D2:0E:39:8B:55:CE:E4:7C:1F Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B79103F390B0D401E6D7E88C74A2C8C98 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/2293WVx5FEzWqVXSDjmLVc7kfB8.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214286 IP address blocks: 195.216.185.0/24 maxlen: 24 213.182.211.0/24 maxlen: 24 213.182.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3f:39:0b:0d:40:1e:6d:7e:88:c7:4a:2c:8c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db6f77595c79144cd6a955d20e398b55cee47c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:9c:23:df:c3:2d:f0:2c:6b:65:56:b6:b0: a1:4b:f7:4b:8e:26:4a:77:89:1c:71:ef:72:72:17: ac:92:a5:b9:e6:60:e2:2d:b4:a7:e9:fb:60:29:24: 84:ec:2f:31:b7:d5:ad:93:d0:56:9e:e3:73:b1:ab: 6c:46:10:32:de:d9:4e:57:fb:48:86:5b:af:ac:86: 0f:42:af:d3:e4:d1:50:89:f4:86:37:c6:35:ac:b2: 56:fd:7e:7c:59:33:0c:29:e1:2f:ea:ff:4c:bf:b4: e3:4a:81:21:ce:68:f4:8c:ed:38:c1:de:e6:1e:bc: 2c:53:61:98:8c:bb:11:8a:0b:c2:bd:03:3d:e1:01: bb:11:ce:1f:44:7a:c8:2a:ee:69:90:b5:cd:63:53: 42:e6:8b:7f:59:48:cf:82:0c:d6:2e:98:de:24:7d: 38:94:ae:87:c9:30:32:5a:b9:34:cd:d1:86:b7:99: f9:03:8c:58:cf:68:d4:bf:51:13:c5:54:ee:28:12: 26:e2:6f:48:dc:26:82:b6:a3:f7:b9:fd:7c:c9:f6: 55:13:cd:78:5c:c7:32:ca:88:2d:e7:ed:d1:68:7a: a1:62:0f:84:54:df:1e:9a:df:2d:2f:0d:d6:6d:ed: ec:7f:20:12:b8:19:e1:2f:73:2e:c5:f2:15:73:7d: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6F:77:59:5C:79:14:4C:D6:A9:55:D2:0E:39:8B:55:CE:E4:7C:1F X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/2293WVx5FEzWqVXSDjmLVc7kfB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.185.0/24 213.182.211.0/24 213.182.215.0/24 Signature Algorithm: sha256WithRSAEncryption 71:a7:a0:00:33:bb:37:f2:af:1b:a6:b5:44:a4:95:48:bb:5d: 69:1b:74:70:da:87:4d:71:cb:03:a1:52:4d:08:76:22:af:59: b6:66:ae:b7:55:f3:1e:af:02:48:99:d9:4c:46:87:b2:d8:2d: 00:26:b5:3f:48:c0:5e:73:e3:b5:c4:7b:a4:0d:04:32:78:49: 4e:32:b3:07:49:0b:51:62:1f:0c:28:b2:a1:58:81:31:43:c6: 5f:77:21:44:5e:56:09:0f:a5:01:65:e7:90:e7:5a:c7:f8:5d: 64:1b:3a:b5:bb:da:2f:e7:37:f2:b2:7e:5a:67:72:ce:2e:80: 49:9e:21:45:00:3a:7b:03:2b:1a:59:87:02:b9:58:49:a7:40: 10:d3:68:99:3f:b1:70:b5:b2:69:e1:90:79:87:31:5e:d6:1b: fa:25:8b:82:ab:8b:12:ef:4f:87:09:85:56:4e:66:03:92:21: a7:27:77:47:be:1d:71:15:74:b3:4c:1d:c2:62:07:22:e9:fb: 4d:41:fa:11:9c:89:65:3d:5e:2f:63:01:57:cb:f8:0c:5a:76: 5c:2b:1a:3c:82:e7:19:02:dd:6a:6d:4e:a3:48:7a:d2:c4:1a: f4:7e:80:1a:7e:a9:14:d0:86:04:64:98:c9:0a:05:4f:62:f1: 5f:0f:f7:af -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ED85Cw1AHm1+iMdKLIyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjZmNzc1OTVjNzkxNDRjZDZhOTU1ZDIwZTM5OGI1NWNlZTQ3YzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU2cI9/DLfAsa2VWtrChS/dLjiZK d4kcce9ycheskqW55mDiLbSn6ftgKSSE7C8xt9Wtk9BWnuNzsatsRhAy3tlOV/tI hluvrIYPQq/T5NFQifSGN8Y1rLJW/X58WTMMKeEv6v9Mv7TjSoEhzmj0jO04wd7m HrwsU2GYjLsRigvCvQM94QG7Ec4fRHrIKu5pkLXNY1NC5ot/WUjPggzWLpjeJH04 lK6HyTAyWrk0zdGGt5n5A4xYz2jUv1ETxVTuKBIm4m9I3CaCtqP3uf18yfZVE814 XMcyyogt5+3RaHqhYg+EVN8emt8tLw3Wbe3sfyASuBnhL3MuxfIVc31c+QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNtvd1lceRRM1qlV0g45i1XO5HwfMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvMjI5M1dWeDVGRXpXcVZYU0RqbUxWYzdrZkI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAw9i5AwQA 1bbTAwQA1bbXMA0GCSqGSIb3DQEBCwUAA4IBAQBxp6AAM7s38q8bprVEpJVIu11p G3Rw2odNccsDoVJNCHYir1m2Zq63VfMerwJImdlMRoey2C0AJrU/SMBec+O1xHuk DQQyeElOMrMHSQtRYh8MKLKhWIExQ8ZfdyFEXlYJD6UBZeeQ51rH+F1kGzq1u9ov 5zfysn5aZ3LOLoBJniFFADp7AysaWYcCuVhJp0AQ02iZP7FwtbJp4ZB5hzFe1hv6 JYuCq4sS70+HCYVWTmYDkiGnJ3dHvh1xFXSzTB3CYgci6ftNQfoRnIllPV4vYwFX y/gMWnZcKxo8gucZAt1qbU6jSHrSxBr0foAafqkU0IYEZJjJCgVPYvFfD/ev -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:23 2026 by rpki-client