This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/V2qGOcFGArZxDVhU93OkH7I5tZU.roa File: V2qGOcFGArZxDVhU93OkH7I5tZU.roa (raw, json) Hash identifier: Qx/eCdyI2+oie6BNIEJmjhm2r/dBvwBAeJ6b6LuahQY= Subject key identifier: 57:6A:86:39:C1:46:02:B6:71:0D:58:54:F7:73:A4:1F:B2:39:B5:95 Certificate issuer: /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee Certificate serial: 019B783446B4632FC32A2285C489E0E88649 Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/V2qGOcFGArZxDVhU93OkH7I5tZU.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215996 IP address blocks: 93.189.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:46:b4:63:2f:c3:2a:22:85:c4:89:e0:e8:86:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=576a8639c14602b6710d5854f773a41fb239b595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:a0:4b:40:db:62:f4:49:ff:e3:26:52:d0: 7c:58:72:f0:f2:b3:b8:c8:f8:7a:9c:ad:3e:e9:a2: c6:d7:64:25:23:76:21:fc:d4:6d:6a:53:dc:fb:48: 4e:b7:3e:bf:35:55:0b:1a:5d:b8:7f:fd:d6:be:f1: 54:e7:9c:e3:6c:1f:ec:85:e7:a3:8b:3d:fb:6c:e5: e4:64:c3:5d:fb:95:a4:e3:a0:cf:2e:3d:14:72:8d: 8e:00:00:b9:ca:e5:47:d0:62:bd:a3:2a:10:35:54: 01:1c:8d:17:cb:7e:c9:e0:96:bb:e2:5c:bf:b8:3d: f0:ea:8b:b2:37:8a:6f:af:dd:ed:b1:7b:cf:f6:bc: c0:13:97:15:fd:a3:74:11:59:cc:06:93:79:ab:67: df:b7:db:bd:d0:13:5d:47:04:24:0f:b5:3e:04:ae: 18:92:22:80:4b:b1:38:ab:2d:8f:0d:fb:aa:5e:35: 54:54:39:84:1a:70:01:25:b8:13:ab:3e:2b:53:0a: cd:44:01:7b:c2:32:5e:20:56:8c:b3:ce:15:e1:e4: 06:ea:a9:7a:0e:64:d0:d9:37:83:b0:fd:3b:21:f0: f6:c9:4e:5a:90:cd:20:86:c7:d6:a1:52:4e:11:e4: 90:94:b2:43:99:2a:d3:71:d2:0f:b8:58:4a:5b:59: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6A:86:39:C1:46:02:B6:71:0D:58:54:F7:73:A4:1F:B2:39:B5:95 X509v3 Authority Key Identifier: keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/V2qGOcFGArZxDVhU93OkH7I5tZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.189.152.0/24 Signature Algorithm: sha256WithRSAEncryption ca:a0:c0:a9:1f:e4:62:b2:11:e6:6a:21:8f:ef:d8:74:3d:68: 81:71:d2:f9:40:4d:45:59:5c:0a:3c:f6:59:cd:84:61:0b:11: 21:ff:ed:85:4f:c5:3d:f3:95:66:d7:53:c2:a3:b1:d7:65:55: b9:81:80:46:b3:70:e7:0e:96:8f:b2:27:33:de:2f:cf:85:af: 5d:31:46:1b:83:71:ac:71:36:e2:27:86:c2:7f:a9:33:33:b1: f2:4e:c6:8b:d8:92:ba:7e:11:24:38:b7:c6:53:f5:ad:34:2e: d1:c4:2e:c8:da:9a:41:87:4b:5d:a5:e4:cb:3e:45:1e:a9:9e: ab:9d:a0:dd:81:02:d1:f8:54:b2:ec:b4:11:ae:a1:88:57:e8: cf:be:09:2b:d6:8a:c5:ef:8c:df:67:27:b0:bb:4a:c9:0e:bf: e1:1e:6b:c5:a5:c2:1e:f2:e1:8d:a6:39:16:88:93:66:74:2d: 36:1d:bc:07:a5:a4:01:f0:9a:38:d0:ed:5d:24:82:ca:aa:ba: 45:79:a1:28:2c:07:e3:3f:41:70:f9:15:7a:36:4f:4a:0c:a5: 3e:58:b2:40:5b:dd:b8:75:30:bc:6c:ee:a4:93:4b:74:34:4d: c6:72:65:aa:53:c7:4a:47:58:b2:37:e2:1b:f1:76:b0:96:da: 25:e1:b4:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEa0Yy/DKiKFxIng6IZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliN2QyNDQxNmFhOGE0NzhiM2VkMzZlMmU2NTg1NWQ0MjI1 OWQ5ZWUwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzZhODYzOWMxNDYwMmI2NzEwZDU4NTRmNzczYTQxZmIyMzliNTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukqgS0DbYvRJ/+MmUtB8WHLw8rO4 yPh6nK0+6aLG12QlI3Yh/NRtalPc+0hOtz6/NVULGl24f/3WvvFU55zjbB/sheej iz37bOXkZMNd+5Wk46DPLj0Uco2OAAC5yuVH0GK9oyoQNVQBHI0Xy37J4Ja74ly/ uD3w6ouyN4pvr93tsXvP9rzAE5cV/aN0EVnMBpN5q2fft9u90BNdRwQkD7U+BK4Y kiKAS7E4qy2PDfuqXjVUVDmEGnABJbgTqz4rUwrNRAF7wjJeIFaMs84V4eQG6ql6 DmTQ2TeDsP07IfD2yU5akM0ghsfWoVJOEeSQlLJDmSrTcdIPuFhKW1k1pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFdqhjnBRgK2cQ1YVPdzpB+yObWVMB8GA1UdIwQY MBaAFJt9JEFqqKR4s+024uZYVdQiWdnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYt ZWYzYmJiMDU2NTVlLzEvVjJxR09jRkdBclp4RFZoVTkzT2tIN0k1dFpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYtZWYzYmJiMDU2NTVl LzEvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXb2YMA0G CSqGSIb3DQEBCwUAA4IBAQDKoMCpH+RishHmaiGP79h0PWiBcdL5QE1FWVwKPPZZ zYRhCxEh/+2FT8U985Vm11PCo7HXZVW5gYBGs3DnDpaPsicz3i/Pha9dMUYbg3Gs cTbiJ4bCf6kzM7HyTsaL2JK6fhEkOLfGU/WtNC7RxC7I2ppBh0tdpeTLPkUeqZ6r naDdgQLR+FSy7LQRrqGIV+jPvgkr1orF74zfZyewu0rJDr/hHmvFpcIe8uGNpjkW iJNmdC02HbwHpaQB8Jo40O1dJILKqrpFeaEoLAfjP0Fw+RV6Nk9KDKU+WLJAW924 dTC8bO6kk0t0NE3GcmWqU8dKR1iyN+Ib8Xawltol4bSh -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:26 2026 by rpki-client