This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa File: Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa (raw, json) Hash identifier: gG4qjMeD/GD4iye01V4m4U9isqUINl3gT+i69LWAi7I= Subject key identifier: 67:6B:84:41:B1:3B:2F:6A:43:57:52:7D:D0:5F:96:1E:9F:85:79:17 Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb Certificate serial: 019B7EA49C26DF4B8D6780B93C98AF5CC53B Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa Signing time: Fri 02 Jan 2026 12:17:55 +0000 ROA not before: Fri 02 Jan 2026 12:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16243 IP address blocks: 193.176.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:9c:26:df:4b:8d:67:80:b9:3c:98:af:5c:c5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb Validity Not Before: Jan 2 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=676b8441b13b2f6a4357527dd05f961e9f857917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:33:b9:c0:0b:b2:a4:ea:2b:4a:56:e5:26: 5f:0b:81:a8:e2:34:61:c6:c5:14:e2:01:89:4f:f9: 2d:82:43:77:e2:14:41:13:d4:e6:8c:be:fc:f2:1f: 53:bf:37:da:2a:e4:b4:12:c4:8d:21:a1:3e:8a:34: f1:34:42:d9:c5:4d:67:58:a7:a6:bc:e9:ec:06:c0: af:b5:e0:95:34:f1:40:fc:70:69:98:2b:0a:67:44: a0:5e:3f:12:0e:2d:ff:2b:3b:17:8a:37:b2:f9:b7: 4d:a1:56:ca:55:2b:0f:46:99:c0:1b:9e:56:3a:cd: 67:2b:ce:71:21:2b:56:cc:88:8f:25:e6:f0:42:7e: b8:a5:fc:7e:d1:22:23:3f:fb:fa:1b:71:5e:54:cb: 5d:fd:88:03:74:58:2b:8b:59:0a:6e:81:cb:d3:12: 22:77:0e:cf:42:0b:27:51:09:cf:a6:b3:ec:4c:30: d9:f7:6e:9f:42:3d:25:86:eb:0a:e3:8f:bf:1b:e8: 65:14:b9:c2:55:2b:b6:17:cb:b0:0e:20:00:81:42: f3:27:9b:2e:ea:df:46:0f:45:5e:17:20:f5:9d:c5: 2c:c9:0e:d3:a0:1d:17:0e:9d:90:a9:50:3f:1a:6f: b1:95:77:41:72:16:ef:c1:a8:e0:b2:7f:91:2a:17: d0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6B:84:41:B1:3B:2F:6A:43:57:52:7D:D0:5F:96:1E:9F:85:79:17 X509v3 Authority Key Identifier: keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.5.0/24 Signature Algorithm: sha256WithRSAEncryption a7:1a:03:71:ac:cf:f6:f2:c9:6b:2a:ed:37:6e:c1:21:5a:7c: a8:2b:21:3d:9e:48:92:07:cd:33:d1:ca:54:12:3d:f0:5a:7c: 8b:c2:ab:5e:05:22:fe:8c:8a:a9:a1:3e:5b:e4:15:01:42:46: dc:7e:26:44:14:c3:39:76:e1:e8:aa:85:fa:45:d8:1c:7f:2e: 97:6e:1c:22:f0:20:e7:e4:c6:ee:89:fd:c6:de:f8:97:c1:23: 6f:39:8b:4b:c8:74:aa:0a:af:fb:f9:fb:bd:f1:4c:d2:a6:11: af:19:a8:52:21:d2:60:82:53:da:e8:1f:40:ed:fc:a2:8f:b9: a0:86:86:76:fc:5d:7f:00:67:43:7c:78:5a:ae:81:33:cd:0f: c2:5d:7c:7c:4d:4a:ee:25:5c:06:82:6e:0a:9f:ee:5d:46:26: d8:9b:37:4d:5a:0e:46:23:4c:69:f1:29:71:e1:b1:a3:14:4a: 69:47:e2:06:73:c0:96:13:30:8b:22:b2:5a:ad:3a:1c:cc:b1: 8e:8c:29:ec:33:45:f3:44:a6:e9:a9:30:a2:4c:bd:a6:cf:16: 79:a4:43:27:1e:21:0e:b0:1c:2c:ac:53:d2:ee:43:14:b7:5d: 63:b1:e5:f4:98:6b:73:98:37:8f:48:d9:e9:76:6e:0e:0c:8c: d5:55:5d:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pJwm30uNZ4C5PJivXMU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNzIwMDU0NGY5M2E2NzVmYzhjNzg0MTg1Njk4MGUzOGEz NTI5Y2IwHhcNMjYwMTAyMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzZiODQ0MWIxM2IyZjZhNDM1NzUyN2RkMDVmOTYxZTlmODU3OTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SszucALsqTqK0pW5SZfC4Go4jRh xsUU4gGJT/ktgkN34hRBE9TmjL788h9TvzfaKuS0EsSNIaE+ijTxNELZxU1nWKem vOnsBsCvteCVNPFA/HBpmCsKZ0SgXj8SDi3/KzsXijey+bdNoVbKVSsPRpnAG55W Os1nK85xIStWzIiPJebwQn64pfx+0SIjP/v6G3FeVMtd/YgDdFgri1kKboHL0xIi dw7PQgsnUQnPprPsTDDZ926fQj0lhusK44+/G+hlFLnCVSu2F8uwDiAAgULzJ5su 6t9GD0VeFyD1ncUsyQ7ToB0XDp2QqVA/Gm+xlXdBchbvwajgsn+RKhfQNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGdrhEGxOy9qQ1dSfdBflh6fhXkXMB8GA1UdIwQY MBaAFKJyAFRPk6Z1/Ix4QYVpgOOKNSnLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iYzFjNzQtMWUwYS00MDU1LTgwYjgt ZWZhN2Y4OWJkMGI5LzEvWjJ1RVFiRTdMMnBEVjFKOTBGLVdIcC1GZVJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iYzFjNzQtMWUwYS00MDU1LTgwYjgtZWZhN2Y4OWJkMGI5 LzEvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbAFMA0G CSqGSIb3DQEBCwUAA4IBAQCnGgNxrM/28slrKu03bsEhWnyoKyE9nkiSB80z0cpU Ej3wWnyLwqteBSL+jIqpoT5b5BUBQkbcfiZEFMM5duHoqoX6Rdgcfy6Xbhwi8CDn 5Mbuif3G3viXwSNvOYtLyHSqCq/7+fu98UzSphGvGahSIdJgglPa6B9A7fyij7mg hoZ2/F1/AGdDfHharoEzzQ/CXXx8TUruJVwGgm4Kn+5dRibYmzdNWg5GI0xp8Slx 4bGjFEppR+IGc8CWEzCLIrJarToczLGOjCnsM0XzRKbpqTCiTL2mzxZ5pEMnHiEO sBwsrFPS7kMUt11jseX0mGtzmDePSNnpdm4ODIzVVV24 -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:00 2026 by rpki-client