This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/0NrSrWJ-O8aYoYy6d254UK8VxJE.roa File: 0NrSrWJ-O8aYoYy6d254UK8VxJE.roa (raw, json) Hash identifier: hCuB3dIhCpdptwM9it5xWdDmCSKrB4IVEUm5lFB1wK8= Subject key identifier: D0:DA:D2:AD:62:7E:3B:C6:98:A1:8C:BA:77:6E:78:50:AF:15:C4:91 Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a Certificate serial: 019B7F147A202E55FA53676AF019B5B6726E Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/0NrSrWJ-O8aYoYy6d254UK8VxJE.roa Signing time: Fri 02 Jan 2026 14:20:07 +0000 ROA not before: Fri 02 Jan 2026 14:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15436 IP address blocks: 81.88.96.0/21 maxlen: 24 193.109.117.0/24 maxlen: 24 193.109.121.0/24 maxlen: 24 193.109.125.0/24 maxlen: 24 193.201.0.0/24 maxlen: 24 193.201.1.0/24 maxlen: 24 193.201.2.0/24 maxlen: 24 193.201.3.0/24 maxlen: 24 193.201.4.0/24 maxlen: 24 193.201.5.0/24 maxlen: 24 193.201.6.0/24 maxlen: 24 193.201.7.0/24 maxlen: 24 2a02:c18::/32 maxlen: 48 2a02:c18::/48 maxlen: 48 2a02:c18:1::/48 maxlen: 48 2a02:c18:2::/48 maxlen: 48 2a02:c18:6::/48 maxlen: 48 2a02:c18:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:7a:20:2e:55:fa:53:67:6a:f0:19:b5:b6:72:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a Validity Not Before: Jan 2 14:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0dad2ad627e3bc698a18cba776e7850af15c491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:59:8c:92:6e:2b:a9:d6:67:d9:17:31:7e:86: c4:98:36:70:82:56:7e:cc:25:da:b7:58:11:f3:1e: 75:d4:e2:b9:04:4f:a6:94:36:22:b1:24:6b:ec:ce: 72:3f:f5:bc:41:7d:f3:e1:5d:5d:c7:65:f0:5d:e8: a5:cb:c7:d2:99:a0:3f:cf:b6:38:6f:23:29:bc:dc: bd:da:a3:bf:39:f6:1b:79:f2:2f:32:b7:a5:86:d0: 75:65:44:7f:cf:ae:ba:85:1c:cf:d7:39:ba:21:b4: bd:35:ad:d1:e3:63:b0:79:58:96:d4:19:a5:c7:53: 44:56:e9:d1:9d:9c:7d:07:60:bf:79:f2:86:46:24: 0e:ce:8f:99:75:76:b0:be:14:8c:2b:a2:bc:3f:cb: 54:41:65:74:f2:b2:f0:70:ec:06:23:5e:61:93:a9: 87:00:57:3b:c4:e9:9e:fc:05:71:1e:ee:26:9a:74: eb:2f:62:fa:a2:24:59:35:2b:cb:15:2c:cc:70:c0: 54:c9:db:e5:ed:24:f0:0e:8c:81:86:7d:6f:2f:04: e8:66:f9:d6:5f:dc:86:03:09:2c:21:5c:2d:f5:b4: aa:aa:ff:56:b5:27:7e:73:2f:20:bf:cb:e9:bb:d3: c9:f0:ca:92:10:eb:4a:e7:f2:35:3e:61:77:d1:d5: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DA:D2:AD:62:7E:3B:C6:98:A1:8C:BA:77:6E:78:50:AF:15:C4:91 X509v3 Authority Key Identifier: keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/0NrSrWJ-O8aYoYy6d254UK8VxJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.88.96.0/21 193.109.117.0/24 193.109.121.0/24 193.109.125.0/24 193.201.0.0/21 IPv6: 2a02:c18::/32 Signature Algorithm: sha256WithRSAEncryption 07:1e:9a:a5:4f:9c:ff:11:a4:a1:10:cb:04:90:95:6b:dd:6c: e8:7a:f6:66:b7:e3:95:36:84:7c:e7:67:97:22:e7:7a:3b:29: ba:45:b6:73:90:1f:ec:78:f5:e4:4b:4f:23:18:38:ce:94:41: 7d:48:aa:71:74:01:78:c5:37:fa:e7:b7:89:f1:4d:d3:f5:7c: 14:6d:bb:f1:5a:c9:c1:4a:1c:66:ca:ba:30:6a:54:53:fc:bf: bc:3b:6d:89:61:a3:96:84:9f:2d:0b:fc:e8:4b:79:ae:92:30: 43:49:35:7e:8b:f1:29:55:f0:40:69:92:8d:d3:8c:65:d0:ee: 03:7f:d8:1a:ec:70:57:03:76:f4:ab:e3:8c:4b:6c:64:0f:4a: 15:ea:f3:74:07:da:bc:3a:f2:68:32:33:79:94:19:82:10:c4: df:73:f8:32:01:e4:94:76:be:e3:2a:4c:61:26:3f:6e:06:ac: cf:46:d8:de:0d:fe:db:0d:d0:ca:a9:c8:d1:53:8a:44:93:61: 65:0a:ad:6e:e8:e4:f7:1c:a8:01:bc:ad:c5:8b:ec:d4:52:55: 78:8b:c2:f2:4c:4d:6e:3a:5d:1e:a6:25:a6:36:59:66:8e:61: d7:6f:d5:88:d1:78:98:da:70:b3:52:50:b6:05:b0:90:9d:47: 59:a3:c2:1b -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt/FHogLlX6U2dq8Bm1tnJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMjZmNDc2ZDYwODYyNWFkMWZlMDZlNTJiOTc0YTlmNjZm MDE0MWEwHhcNMjYwMTAyMTQyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGRhZDJhZDYyN2UzYmM2OThhMThjYmE3NzZlNzg1MGFmMTVjNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFmMkm4rqdZn2RcxfobEmDZwglZ+ zCXat1gR8x511OK5BE+mlDYisSRr7M5yP/W8QX3z4V1dx2XwXeily8fSmaA/z7Y4 byMpvNy92qO/OfYbefIvMrelhtB1ZUR/z666hRzP1zm6IbS9Na3R42OweViW1Bml x1NEVunRnZx9B2C/efKGRiQOzo+ZdXawvhSMK6K8P8tUQWV08rLwcOwGI15hk6mH AFc7xOme/AVxHu4mmnTrL2L6oiRZNSvLFSzMcMBUydvl7STwDoyBhn1vLwToZvnW X9yGAwksIVwt9bSqqv9WtSd+cy8gv8vpu9PJ8MqSEOtK5/I1PmF30dUByQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFNDa0q1ifjvGmKGMundueFCvFcSRMB8GA1UdIwQY MBaAFIom9HbWCGJa0f4G5SuXSp9m8BQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2It ZDg0NmQxMDZiNWY3LzEvME5yU3JXSi1POGFZb1l5NmQyNTRVSzhWeEpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2ItZDg0NmQxMDZiNWY3 LzEvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDUVhgAwQA wW11AwQAwW15AwQAwW19AwQDwckAMA0EAgACMAcDBQAqAgwYMA0GCSqGSIb3DQEB CwUAA4IBAQAHHpqlT5z/EaShEMsEkJVr3WzoevZmt+OVNoR852eXIud6Oym6RbZz kB/sePXkS08jGDjOlEF9SKpxdAF4xTf657eJ8U3T9XwUbbvxWsnBShxmyrowalRT /L+8O22JYaOWhJ8tC/zoS3mukjBDSTV+i/EpVfBAaZKN04xl0O4Df9ga7HBXA3b0 q+OMS2xkD0oV6vN0B9q8OvJoMjN5lBmCEMTfc/gyAeSUdr7jKkxhJj9uBqzPRtje Df7bDdDKqcjRU4pEk2FlCq1u6OT3HKgBvK3Fi+zUUlV4i8LyTE1uOl0epiWmNllm jmHXb9WI0XiY2nCzUlC2BbCQnUdZo8Ib -----END CERTIFICATE-----Generated at Mon Jan 26 07:58:04 2026 by rpki-client