This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/C2p4m5oAHBR4b9U98n94_vKEpDw.roa File: C2p4m5oAHBR4b9U98n94_vKEpDw.roa (raw, json) Hash identifier: k7x5kSsiwndiFj3n5RLjj9QM21o5JvrjtmVJtRBC0sk= Subject key identifier: 0B:6A:78:9B:9A:00:1C:14:78:6F:D5:3D:F2:7F:78:FE:F2:84:A4:3C Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Certificate serial: 019B7D5CBFEF642462CD4C9864F58D5F3066 Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/C2p4m5oAHBR4b9U98n94_vKEpDw.roa Signing time: Fri 02 Jan 2026 06:19:49 +0000 ROA not before: Fri 02 Jan 2026 06:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 82.116.96.0/19 maxlen: 24 95.174.128.0/19 maxlen: 24 212.9.32.0/19 maxlen: 24 217.10.64.0/20 maxlen: 24 217.116.112.0/20 maxlen: 24 2001:ab0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bf:ef:64:24:62:cd:4c:98:64:f5:8d:5f:30:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Validity Not Before: Jan 2 06:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b6a789b9a001c14786fd53df27f78fef284a43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:44:e3:07:46:2d:f0:38:72:93:d3:57:f4: a1:3b:03:f4:22:73:7c:e0:df:60:17:ee:aa:74:d6: 96:89:9a:42:ad:9a:9e:35:9a:f5:98:d4:73:75:b3: 92:f3:97:7a:21:57:e4:4b:82:f8:64:02:74:d6:0a: 8a:ad:40:a8:2a:e0:35:6a:2e:4f:77:eb:1d:94:9d: 37:a9:da:10:ca:93:74:ae:4e:5f:ff:88:bd:df:8b: 78:0a:ef:d9:11:5a:ca:e3:5f:7e:23:d7:33:c8:ed: 04:3c:4b:f2:70:08:2d:5c:87:7b:89:96:4a:e8:20: 21:e5:1d:bd:ff:89:5f:78:19:74:7e:8d:30:b6:40: d4:c9:75:25:87:ca:c1:50:dd:4d:c5:cd:e5:7c:3c: fb:ff:1b:0c:1f:f8:32:7a:36:c6:3f:7c:45:a3:c0: c0:70:2d:2b:8c:fa:5c:7a:b8:0e:b4:e2:3a:40:f4: 09:72:11:33:4d:6d:c4:d3:8a:7f:a2:4c:79:9b:e2: 1e:5e:de:de:17:c5:25:93:a3:26:ed:77:fa:08:3a: 89:7a:be:c5:fc:5a:c4:35:e7:4c:e1:94:71:f0:a8: 20:6e:d5:15:70:a2:6d:2d:2d:3d:2a:cb:68:50:ce: 2c:9a:ce:b3:d6:52:02:1a:1d:3d:a5:99:11:ed:fe: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6A:78:9B:9A:00:1C:14:78:6F:D5:3D:F2:7F:78:FE:F2:84:A4:3C X509v3 Authority Key Identifier: keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/C2p4m5oAHBR4b9U98n94_vKEpDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.116.96.0/19 95.174.128.0/19 212.9.32.0/19 217.10.64.0/20 217.116.112.0/20 IPv6: 2001:ab0::/29 Signature Algorithm: sha256WithRSAEncryption 15:68:ec:f7:6d:1a:44:a8:aa:61:17:15:9f:b2:d9:02:20:21: dc:b8:06:a7:c0:a1:e9:13:12:55:6b:0a:f5:7a:9c:63:76:e1: 38:0e:50:da:72:d9:c7:16:30:11:7a:ab:20:90:c4:98:4e:d4: b3:d6:d9:49:1b:c9:84:0f:2b:35:de:1a:c4:f5:ff:ad:95:27: fa:30:10:94:58:c5:8e:f4:87:6f:fb:54:02:1b:26:fa:21:e5: 7a:5a:57:49:6d:39:d9:49:58:18:5b:b3:41:7f:90:3f:d4:f9: 3a:e5:62:c0:ea:2d:c1:fa:26:47:4f:da:84:ad:d4:c6:97:a9: 8c:6a:73:21:08:bb:c1:97:53:c1:a8:a0:38:75:15:7e:57:f6: a5:0e:c9:4a:ed:e2:fe:51:8f:67:d7:07:8e:df:c2:32:e1:7d: cf:ae:a2:ea:b1:f6:aa:32:b4:b8:97:5c:11:f8:fa:04:40:f0: 90:31:2e:c1:f5:bd:59:69:95:d6:43:65:0c:c6:92:db:f1:87: 8e:b4:3e:12:e4:01:ae:21:79:e0:ec:2a:71:bc:f7:ed:d2:0c: be:fd:97:f9:01:ba:cf:d6:be:31:51:4e:87:bd:14:63:bd:e8: 2d:2c:9c:6c:2a:bc:1a:d2:47:d3:11:92:d0:cb:c5:c1:18:ca: de:bc:1e:51 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt9XL/vZCRizUyYZPWNXzBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0 MmY1MGQwHhcNMjYwMTAyMDYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjZhNzg5YjlhMDAxYzE0Nzg2ZmQ1M2RmMjdmNzhmZWYyODRhNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDlE4wdGLfA4cpPTV/ShOwP0InN8 4N9gF+6qdNaWiZpCrZqeNZr1mNRzdbOS85d6IVfkS4L4ZAJ01gqKrUCoKuA1ai5P d+sdlJ03qdoQypN0rk5f/4i934t4Cu/ZEVrK419+I9czyO0EPEvycAgtXId7iZZK 6CAh5R29/4lfeBl0fo0wtkDUyXUlh8rBUN1Nxc3lfDz7/xsMH/gyejbGP3xFo8DA cC0rjPpcergOtOI6QPQJchEzTW3E04p/okx5m+IeXt7eF8Ulk6Mm7Xf6CDqJer7F /FrENedM4ZRx8KggbtUVcKJtLS09KstoUM4sms6z1lICGh09pZkR7f6h4QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFAtqeJuaABwUeG/VPfJ/eP7yhKQ8MB8GA1UdIwQY MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt MDlmZjc5MzA4YmJlLzEvQzJwNG01b0FIQlI0YjlVOThuOTRfdktFcER3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFUnRgAwQF X66AAwQF1AkgAwQE2QpAAwQE2XRwMA0EAgACMAcDBQMgAQqwMA0GCSqGSIb3DQEB CwUAA4IBAQAVaOz3bRpEqKphFxWfstkCICHcuAanwKHpExJVawr1epxjduE4DlDa ctnHFjAReqsgkMSYTtSz1tlJG8mEDys13hrE9f+tlSf6MBCUWMWO9Idv+1QCGyb6 IeV6WldJbTnZSVgYW7NBf5A/1Pk65WLA6i3B+iZHT9qErdTGl6mManMhCLvBl1PB qKA4dRV+V/alDslK7eL+UY9n1weO38Iy4X3PrqLqsfaqMrS4l1wR+PoEQPCQMS7B 9b1ZaZXWQ2UMxpLb8YeOtD4S5AGuIXng7CpxvPft0gy+/Zf5AbrP1r4xUU6HvRRj vegtLJxsKrwa0kfTEZLQy8XBGMrevB5R -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:06 2026 by rpki-client