This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/IJ2P19IcEVD5TXJ_fPVhgYBm_qY.roa File: IJ2P19IcEVD5TXJ_fPVhgYBm_qY.roa (raw, json) Hash identifier: N2VSLUJTgIas4vbaZK4n5fSPJQ+7roJjvsDns30p6Kc= Subject key identifier: 20:9D:8F:D7:D2:1C:11:50:F9:4D:72:7F:7C:F5:61:81:80:66:FE:A6 Certificate issuer: /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a Certificate serial: 019B7F15A45045EBA42090647F734EB8486C Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/IJ2P19IcEVD5TXJ_fPVhgYBm_qY.roa Signing time: Fri 02 Jan 2026 14:21:23 +0000 ROA not before: Fri 02 Jan 2026 14:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202515 IP address blocks: 193.57.28.0/23 maxlen: 23 193.57.28.0/24 maxlen: 24 193.57.29.0/24 maxlen: 24 193.57.30.0/24 maxlen: 24 193.57.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a4:50:45:eb:a4:20:90:64:7f:73:4e:b8:48:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=209d8fd7d21c1150f94d727f7cf561818066fea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b7:bb:13:21:94:20:bd:21:34:5f:b6:ec:f0: 4d:bf:e5:a7:de:c6:9e:04:ea:10:80:29:7a:cf:65: f9:19:55:c2:3d:d5:37:64:a1:e1:2e:3b:42:c5:0e: b7:0c:84:77:62:43:75:f8:f4:39:51:c0:eb:69:5d: 7a:6f:42:c7:96:fd:4d:05:92:90:43:0e:d4:50:f6: 31:9d:8b:c2:a5:57:91:5f:3d:78:6f:8c:54:82:75: ef:d5:27:a8:bd:5d:09:9e:f4:ff:d0:5e:10:04:72: 24:18:a9:2f:0e:3e:4e:b5:32:63:7e:2b:72:17:a6: da:3f:65:34:14:0e:d5:d2:91:33:eb:1f:99:43:86: 65:e9:ec:55:fd:3c:50:e1:24:33:88:ce:5d:1b:83: 31:c9:5d:98:4a:35:f7:f5:83:e4:0e:0d:9e:2e:d2: 27:5a:4b:0d:dd:fa:b5:e5:f9:ec:7a:49:9f:40:5e: d1:03:d9:04:52:0d:0c:cf:fe:03:69:6f:aa:7e:90: 2e:55:41:af:5b:ea:c3:9f:41:6f:4b:ee:7e:7c:12: aa:b2:62:56:fd:b9:01:0f:ee:ac:4e:72:4c:74:8c: 57:2a:c4:b1:9d:0c:cf:14:fe:e2:da:fa:da:2d:f7: 67:e0:23:3a:75:88:38:f5:2f:5c:1c:bb:8a:0a:00: af:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9D:8F:D7:D2:1C:11:50:F9:4D:72:7F:7C:F5:61:81:80:66:FE:A6 X509v3 Authority Key Identifier: keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/IJ2P19IcEVD5TXJ_fPVhgYBm_qY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.28.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:8e:86:37:a3:47:58:2b:f0:b6:0a:37:d5:0e:0e:cd:34:20: 21:d0:b2:72:6a:61:43:4e:9f:c4:f1:ef:22:e1:e6:39:d3:6b: 47:2c:51:5a:6c:68:67:58:22:11:07:9d:c2:73:1c:dc:e7:3e: 02:4e:ad:5e:f0:fb:57:5e:59:d2:d2:10:8a:ba:4a:be:7f:e7: ab:06:1d:d4:11:9b:82:6d:82:23:f4:38:57:23:d4:f0:bf:44: 4d:2c:ac:19:03:82:ec:a9:d9:72:07:a0:26:37:8e:e0:28:53: d2:83:1d:63:c3:c4:2a:af:d3:90:e2:be:80:4d:9c:6f:9a:b6: 23:ec:7b:46:c5:ff:3d:86:7b:8a:a7:60:63:db:38:c8:af:dd: 44:2b:4f:23:f3:a4:63:08:74:17:86:2a:78:10:c2:30:bf:ef: 88:0a:42:eb:48:96:b1:b0:fa:22:b7:57:00:2e:0c:9e:ce:f8: 00:49:94:65:4f:ee:df:73:9d:ce:e6:d8:f1:3f:30:50:2c:71: 45:97:ad:38:ce:c6:51:22:e8:71:56:20:0d:55:16:9f:bd:ac: 75:37:06:4f:5c:13:ec:2f:17:6e:3a:cf:ef:c7:cd:ab:21:59: 29:64:8c:1c:9b:be:e3:5e:2b:16:30:8f:4f:c7:4f:c8:0c:34: dd:8f:6c:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FaRQReukIJBkf3NOuEhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMGE4OGQ3ZTVhNTY1ZWE3MTljZmM0MGQ4YmI2M2VlMTY3 MTg1NmEwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDlkOGZkN2QyMWMxMTUwZjk0ZDcyN2Y3Y2Y1NjE4MTgwNjZmZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7e7EyGUIL0hNF+27PBNv+Wn3sae BOoQgCl6z2X5GVXCPdU3ZKHhLjtCxQ63DIR3YkN1+PQ5UcDraV16b0LHlv1NBZKQ Qw7UUPYxnYvCpVeRXz14b4xUgnXv1SeovV0JnvT/0F4QBHIkGKkvDj5OtTJjfity F6baP2U0FA7V0pEz6x+ZQ4Zl6exV/TxQ4SQziM5dG4MxyV2YSjX39YPkDg2eLtIn WksN3fq15fnsekmfQF7RA9kEUg0Mz/4DaW+qfpAuVUGvW+rDn0FvS+5+fBKqsmJW /bkBD+6sTnJMdIxXKsSxnQzPFP7i2vraLfdn4CM6dYg49S9cHLuKCgCvwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCCdj9fSHBFQ+U1yf3z1YYGAZv6mMB8GA1UdIwQY MBaAFMAKiNflpWXqcZz8QNi7Y+4WcYVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYt ZGUzYzhkOTUzZWM1LzEvSUoyUDE5SWNFVkQ1VFhKX2ZQVmhnWUJtX3FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYtZGUzYzhkOTUzZWM1 LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwTkcMA0G CSqGSIb3DQEBCwUAA4IBAQCfjoY3o0dYK/C2CjfVDg7NNCAh0LJyamFDTp/E8e8i 4eY502tHLFFabGhnWCIRB53Ccxzc5z4CTq1e8PtXXlnS0hCKukq+f+erBh3UEZuC bYIj9DhXI9Twv0RNLKwZA4LsqdlyB6AmN47gKFPSgx1jw8Qqr9OQ4r6ATZxvmrYj 7HtGxf89hnuKp2Bj2zjIr91EK08j86RjCHQXhip4EMIwv++ICkLrSJaxsPoit1cA LgyezvgASZRlT+7fc53O5tjxPzBQLHFFl604zsZRIuhxViANVRafvax1NwZPXBPs LxduOs/vx82rIVkpZIwcm77jXisWMI9Px0/IDDTdj2yw -----END CERTIFICATE-----Generated at Wed Jan 7 22:49:07 2026 by rpki-client