This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/g2k94sbrfkriJ_TYzjO-TqZlMBM.roa File: g2k94sbrfkriJ_TYzjO-TqZlMBM.roa (raw, json) Hash identifier: 1ZkSwSDFlimbj/n4XoixvGsfM3nfxp389BDAwVqw2BM= Subject key identifier: 83:69:3D:E2:C6:EB:7E:4A:E2:27:F4:D8:CE:33:BE:4E:A6:65:30:13 Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2 Certificate serial: 019B7A5B43B0F9AE2273631276C9D8B392CF Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/g2k94sbrfkriJ_TYzjO-TqZlMBM.roa Signing time: Thu 01 Jan 2026 16:19:20 +0000 ROA not before: Thu 01 Jan 2026 16:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29695 IP address blocks: 193.161.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:43:b0:f9:ae:22:73:63:12:76:c9:d8:b3:92:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2 Validity Not Before: Jan 1 16:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83693de2c6eb7e4ae227f4d8ce33be4ea6653013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:f6:41:6e:d6:02:10:f8:fd:d9:96:85:b0: 3d:2f:bf:f0:d6:d7:7f:fa:7d:f3:e9:d0:e3:a2:b5: e5:35:6e:1d:46:2d:f5:f7:4d:1b:1e:42:65:0e:68: 0d:79:3f:55:61:b5:0b:94:8f:99:7b:99:11:c5:ce: fe:b2:2d:f0:7a:9c:7b:a7:82:a7:17:91:6f:0d:e1: 7b:90:be:1d:18:57:55:91:b7:b8:25:f0:9f:1f:e6: e8:bd:b9:b6:7f:8e:3f:ad:87:7b:c3:b1:a5:e9:f9: db:a7:99:48:68:5f:78:ee:7f:c4:bb:1e:95:a5:e1: 38:47:88:bc:b1:3e:07:16:7a:70:ce:d4:b8:1c:84: 3e:f8:d2:9d:6e:41:4e:a0:68:61:88:a8:69:cd:f9: b8:c0:8f:b6:3c:b8:93:70:56:c5:dd:8d:72:21:3c: 20:71:c1:88:af:35:58:15:8a:b5:89:c6:dd:2e:b9: f8:9d:65:b0:90:21:01:59:17:86:1f:af:5e:78:0b: c2:86:f7:5a:94:6c:a7:e5:c0:a5:2e:52:0b:17:ba: a3:92:c6:35:d8:b0:dd:8c:51:a7:ac:55:0b:8c:c6: 58:7e:a5:8d:6b:dd:1c:75:32:d0:fb:9a:87:20:10: 5b:b8:84:25:c3:5a:90:5f:40:09:a6:1e:50:08:d9: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:69:3D:E2:C6:EB:7E:4A:E2:27:F4:D8:CE:33:BE:4E:A6:65:30:13 X509v3 Authority Key Identifier: keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/g2k94sbrfkriJ_TYzjO-TqZlMBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.208.0/22 Signature Algorithm: sha256WithRSAEncryption 79:96:78:37:88:4e:78:6e:6b:22:06:0d:5e:b0:04:80:54:9a: 30:ce:54:52:54:4d:55:47:86:37:fd:d3:e2:5f:df:27:02:9f: 6e:04:3f:b8:b8:c6:ea:f4:88:37:f2:54:d4:8e:4b:7a:73:69: f0:3f:c6:09:50:cc:cc:67:49:ec:9d:18:b5:60:d1:33:15:7e: e4:51:c5:95:fd:fd:16:42:64:3c:00:50:ef:67:61:07:0a:6e: cf:db:51:00:b4:54:46:51:d5:a4:20:a8:3e:f7:46:9e:c3:81: ec:14:31:67:6b:66:2a:93:c8:04:a0:32:1f:a5:31:f7:7b:44: bf:ea:c0:a7:7a:be:e7:47:3b:4f:bc:a8:96:18:7a:41:00:4d: 92:88:bc:2a:8d:b7:14:03:43:86:a0:72:7f:59:fc:ec:2e:1e: 71:8b:be:44:29:60:10:f4:ec:5b:f0:ed:78:6d:c2:58:bf:97: 45:61:6c:2c:97:ef:fa:87:41:46:e5:46:2e:7f:68:b2:7d:fd: 12:9c:91:99:2a:ec:4a:aa:c4:ec:86:f9:4a:7a:ac:cf:d3:1b: 5b:21:74:50:de:38:ef:8d:df:07:6d:f0:a3:10:78:58:56:e4: c5:85:07:ca:0a:44:2b:35:8a:e7:70:b4:84:95:12:62:a9:d9: ba:4b:22:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0Ow+a4ic2MSdsnYs5LPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDU0YzQ1NmNlNjhiYThmZWNhZDU0MmFhYjk2MTBiMWVj YzEyZTIwHhcNMjYwMTAxMTYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzY5M2RlMmM2ZWI3ZTRhZTIyN2Y0ZDhjZTMzYmU0ZWE2NjUzMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxb2QW7WAhD4/dmWhbA9L7/w1td/ +n3z6dDjorXlNW4dRi31900bHkJlDmgNeT9VYbULlI+Ze5kRxc7+si3wepx7p4Kn F5FvDeF7kL4dGFdVkbe4JfCfH+bovbm2f44/rYd7w7Gl6fnbp5lIaF947n/Eux6V peE4R4i8sT4HFnpwztS4HIQ++NKdbkFOoGhhiKhpzfm4wI+2PLiTcFbF3Y1yITwg ccGIrzVYFYq1icbdLrn4nWWwkCEBWReGH69eeAvChvdalGyn5cClLlILF7qjksY1 2LDdjFGnrFULjMZYfqWNa90cdTLQ+5qHIBBbuIQlw1qQX0AJph5QCNmYlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFINpPeLG635K4if02M4zvk6mZTATMB8GA1UdIwQY MBaAFOJFTEVs5ouo/srVQqq5YQsezBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQt OWY5N2IwZmM0ODMyLzEvZzJrOTRzYnJma3JpSl9UWXpqTy1UcVpsTUJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQtOWY5N2IwZmM0ODMy LzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwaHQMA0G CSqGSIb3DQEBCwUAA4IBAQB5lng3iE54bmsiBg1esASAVJowzlRSVE1VR4Y3/dPi X98nAp9uBD+4uMbq9Ig38lTUjkt6c2nwP8YJUMzMZ0nsnRi1YNEzFX7kUcWV/f0W QmQ8AFDvZ2EHCm7P21EAtFRGUdWkIKg+90aew4HsFDFna2Yqk8gEoDIfpTH3e0S/ 6sCner7nRztPvKiWGHpBAE2SiLwqjbcUA0OGoHJ/WfzsLh5xi75EKWAQ9Oxb8O14 bcJYv5dFYWwsl+/6h0FG5UYuf2iyff0SnJGZKuxKqsTshvlKeqzP0xtbIXRQ3jjv jd8HbfCjEHhYVuTFhQfKCkQrNYrncLSElRJiqdm6SyKW -----END CERTIFICATE-----Generated at Sun Jan 25 21:02:57 2026 by rpki-client