This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/P2oeyWo8SpEDQbw0DLQ8DP_geQk.roa File: P2oeyWo8SpEDQbw0DLQ8DP_geQk.roa (raw, json) Hash identifier: PEQ4xvXLXvHc+J3GPvJUsqvRxaO/0pnd2viLxQ0rLmw= Subject key identifier: 3F:6A:1E:C9:6A:3C:4A:91:03:41:BC:34:0C:B4:3C:0C:FF:E0:79:09 Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189 Certificate serial: 019B7C12606616E682A6706ECB7E1E157CF9 Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/P2oeyWo8SpEDQbw0DLQ8DP_geQk.roa Signing time: Fri 02 Jan 2026 00:18:57 +0000 ROA not before: Fri 02 Jan 2026 00:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 194.11.133.0/24 maxlen: 24 194.11.134.0/24 maxlen: 24 194.11.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:60:66:16:e6:82:a6:70:6e:cb:7e:1e:15:7c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189 Validity Not Before: Jan 2 00:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f6a1ec96a3c4a910341bc340cb43c0cffe07909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5a:96:b1:88:cb:07:7b:32:ab:96:20:b2:7e: 28:f7:b9:71:51:b6:c0:4c:f4:d2:13:83:8e:c4:39: 93:1a:4b:dd:55:71:ed:f2:84:60:91:55:43:9e:bf: 31:93:c3:38:de:01:06:87:67:4f:e1:05:b1:48:c7: 40:65:6f:ca:f3:50:bb:f5:63:49:b2:0c:b2:11:f7: f0:54:90:c0:20:01:fc:4e:53:11:f2:4a:66:6d:fa: 63:88:79:58:b7:29:e4:59:d1:5d:a7:16:1b:95:83: 13:3c:dc:85:6c:6b:e8:22:fe:ac:20:0f:56:b8:34: 04:14:2a:79:f2:98:1c:d3:27:be:dd:00:22:31:d5: 75:f8:25:60:34:bb:2c:0e:6a:6a:c4:a9:ce:9a:de: 97:ce:d1:3d:7b:06:85:0f:48:10:26:84:8a:0e:7c: c6:f1:96:14:53:83:d4:1d:da:8e:55:4e:40:90:94: 37:ff:7a:5e:1a:06:45:d2:67:72:e6:e0:36:84:c2: 85:c8:2e:e3:b8:98:6e:50:62:8b:03:ba:81:2b:c7: e2:94:1b:72:54:6c:f3:4c:b1:24:f0:aa:2a:8e:77: 2d:50:00:1c:2b:da:5e:a4:cc:a2:96:21:08:b3:bc: 4c:1b:25:bf:72:77:f0:c3:e3:49:5a:ec:12:3a:a7: f7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6A:1E:C9:6A:3C:4A:91:03:41:BC:34:0C:B4:3C:0C:FF:E0:79:09 X509v3 Authority Key Identifier: keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/P2oeyWo8SpEDQbw0DLQ8DP_geQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.133.0-194.11.135.255 Signature Algorithm: sha256WithRSAEncryption 24:20:aa:45:64:9e:9e:d7:d0:46:f6:7a:54:16:42:54:bf:3a: 75:8f:f5:28:00:98:07:9f:35:d0:96:7f:52:e5:b9:4a:7c:17: ce:c0:d6:4b:c8:96:7b:94:ed:08:77:c9:24:2a:f4:56:bf:45: b1:c6:c8:ec:af:b4:07:43:47:ff:0c:ea:ca:a0:a1:3b:88:19: 89:7a:81:e9:ca:d1:37:cc:89:7c:e9:a8:f2:f1:11:73:28:32: 24:e3:4a:75:7f:ce:79:16:c2:f2:64:b4:da:b8:67:d2:3f:4e: fe:09:00:b0:d2:6f:72:58:90:9c:d7:b8:87:05:ec:b5:f8:d0: 24:f3:5b:3f:45:09:38:50:58:04:8a:c5:19:e4:c6:7b:62:4a: 2a:22:aa:07:6a:61:15:59:2a:83:84:49:11:ea:7d:98:7b:d0: d1:7f:e2:35:7a:7d:6f:4e:e6:d4:f8:00:05:84:9a:ea:38:b6: c7:d7:f0:4e:e6:91:ed:b8:32:90:c3:12:be:33:83:fb:2c:70: e8:69:7f:9e:c3:50:ef:47:9d:23:62:5c:b2:30:38:2a:44:e5: bf:cb:55:6d:ef:c3:f5:d5:e0:6f:71:e3:1f:92:62:69:77:19: b5:d2:57:14:90:e6:99:bc:35:40:71:a5:7e:dc:04:b1:1b:1d: d3:cf:c6:89 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EmBmFuaCpnBuy34eFXz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOWJlYjAxOTJkMGQzNDZhNWU2ODU4YWE3NDRiMDQzNGZl ZDMxODkwHhcNMjYwMTAyMDAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjZhMWVjOTZhM2M0YTkxMDM0MWJjMzQwY2I0M2MwY2ZmZTA3OTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VqWsYjLB3syq5Ygsn4o97lxUbbA TPTSE4OOxDmTGkvdVXHt8oRgkVVDnr8xk8M43gEGh2dP4QWxSMdAZW/K81C79WNJ sgyyEffwVJDAIAH8TlMR8kpmbfpjiHlYtynkWdFdpxYblYMTPNyFbGvoIv6sIA9W uDQEFCp58pgc0ye+3QAiMdV1+CVgNLssDmpqxKnOmt6XztE9ewaFD0gQJoSKDnzG 8ZYUU4PUHdqOVU5AkJQ3/3peGgZF0mdy5uA2hMKFyC7juJhuUGKLA7qBK8filBty VGzzTLEk8KoqjnctUAAcK9pepMyiliEIs7xMGyW/cnfww+NJWuwSOqf3AwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFD9qHslqPEqRA0G8NAy0PAz/4HkJMB8GA1UdIwQY MBaAFPyb6wGS0NNGpeaFiqdEsENP7TGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMTVkZTYtNDE3Ni00MmQyLThkYTIt NmI3MDE2OWNkYTFiLzEvUDJvZXlXbzhTcEVEUWJ3MERMUThEUF9nZVFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yMTVkZTYtNDE3Ni00MmQyLThkYTItNmI3MDE2OWNkYTFi LzEvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCC4UD BAPCC4AwDQYJKoZIhvcNAQELBQADggEBACQgqkVknp7X0Eb2elQWQlS/OnWP9SgA mAefNdCWf1LluUp8F87A1kvIlnuU7Qh3ySQq9Fa/RbHGyOyvtAdDR/8M6sqgoTuI GYl6genK0TfMiXzpqPLxEXMoMiTjSnV/znkWwvJktNq4Z9I/Tv4JALDSb3JYkJzX uIcF7LX40CTzWz9FCThQWASKxRnkxntiSioiqgdqYRVZKoOESRHqfZh70NF/4jV6 fW9O5tT4AAWEmuo4tsfX8E7mke24MpDDEr4zg/sscOhpf57DUO9HnSNiXLIwOCpE 5b/LVW3vw/XV4G9x4x+SYml3GbXSVxSQ5pm8NUBxpX7cBLEbHdPPxok= -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:34 2026 by rpki-client