This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/2C3deW4KUFYWsCudtLk1fi-2CXo.roa File: 2C3deW4KUFYWsCudtLk1fi-2CXo.roa (raw, json) Hash identifier: BWFS5Z0+c+KKg6rdLDGOkOT2Tw/Z8zwQ4KtVqJ44yO8= Subject key identifier: D8:2D:DD:79:6E:0A:50:56:16:B0:2B:9D:B4:B9:35:7E:2F:B6:09:7A Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4 Certificate serial: 019B7C80403843AA347E55BBD7C2F834BC6B Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/2C3deW4KUFYWsCudtLk1fi-2CXo.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51441 IP address blocks: 89.46.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:40:38:43:aa:34:7e:55:bb:d7:c2:f8:34:bc:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d82ddd796e0a505616b02b9db4b9357e2fb6097a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f9:12:1d:8a:28:35:86:82:3d:70:52:88:b0: 84:f1:70:64:a4:71:8a:10:4c:9d:29:03:3e:98:10: f4:24:4c:7b:44:a2:dc:5a:ac:f1:53:9e:47:00:94: 92:66:bb:c0:f7:a4:c2:89:3e:be:ee:96:32:e3:2d: c3:1d:5d:21:58:f5:7b:26:a6:33:e6:a6:23:61:69: 81:12:fd:9c:19:b8:01:54:24:29:af:c5:68:a8:09: f5:ee:ee:2c:6a:a5:c2:24:ea:fc:d8:71:90:b3:c3: 5d:98:d1:72:af:79:98:6e:e4:fa:87:01:30:19:c7: 36:8e:07:ce:18:42:37:79:4e:2c:1a:8c:31:7f:be: 48:39:96:b9:2e:9c:a8:47:24:cc:6a:da:7a:e5:21: fc:ba:e7:e2:ca:11:96:2a:4d:29:47:62:cd:ef:b2: e2:c9:74:4e:e8:85:1d:fb:f6:93:53:22:a2:af:c5: 8b:ac:49:98:8d:56:17:ad:f2:d8:73:4f:c5:4b:e1: 64:cf:2e:08:5b:7a:da:23:dc:8a:6a:9b:5b:0b:be: 4e:5b:63:7a:88:3e:5b:e2:22:1f:b8:e7:9f:02:2f: 4f:7c:33:23:2a:db:44:b1:bb:cc:b2:5e:60:14:57: 11:45:37:6c:bd:32:1d:51:3c:d9:a5:ce:98:51:45: 65:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2D:DD:79:6E:0A:50:56:16:B0:2B:9D:B4:B9:35:7E:2F:B6:09:7A X509v3 Authority Key Identifier: keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/2C3deW4KUFYWsCudtLk1fi-2CXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.46.244.0/24 Signature Algorithm: sha256WithRSAEncryption 36:aa:90:43:e9:11:b3:45:3c:0b:cd:60:58:f2:57:79:ad:fb: c3:28:1c:55:05:d5:06:15:1f:89:e4:00:07:64:1e:28:ed:18: 32:58:f5:63:03:45:24:6f:ef:32:30:5a:3e:18:7b:f7:5e:44: 59:84:4c:cd:cd:50:b3:f7:cb:6c:d2:37:a9:5d:e2:89:6a:38: 17:ee:9f:a1:7a:47:a0:ac:f7:4a:a1:76:27:21:1c:e4:b1:f7: 3a:e0:4b:c2:5d:1e:65:78:bf:a9:7f:b5:8d:da:1b:f2:bc:24: f2:15:dc:21:04:62:55:88:d2:c6:3e:85:47:71:8b:a4:a9:ed: 93:92:7e:d1:18:77:e7:b8:1e:53:86:2a:ca:5a:5b:f3:b2:fc: 62:d7:25:9f:d0:aa:c0:2e:3e:15:05:b0:c7:5a:13:22:14:8c: 6c:44:c6:62:37:f3:1c:e4:ab:0c:e8:83:95:b8:ce:17:71:d1: 51:58:3c:0a:18:7f:a6:1d:dc:a6:ac:80:e7:d8:8c:15:f1:d4: cf:f1:78:82:96:8c:90:ad:35:85:c3:34:6a:30:5f:a5:26:aa: 53:89:a9:7b:f4:14:4c:b5:9e:af:7d:bd:64:b1:bc:fd:5e:f2: 26:b5:8e:de:a9:5b:bd:aa:86:80:94:91:98:cb:00:40:ef:1e: 6f:41:e1:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEA4Q6o0flW718L4NLxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjQyZTgwNjAyYWVkZjU4YTNjN2E4MTg4M2MxYTM0ZjY5 ZDJmYjQwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODJkZGQ3OTZlMGE1MDU2MTZiMDJiOWRiNGI5MzU3ZTJmYjYwOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vkSHYooNYaCPXBSiLCE8XBkpHGK EEydKQM+mBD0JEx7RKLcWqzxU55HAJSSZrvA96TCiT6+7pYy4y3DHV0hWPV7JqYz 5qYjYWmBEv2cGbgBVCQpr8VoqAn17u4saqXCJOr82HGQs8NdmNFyr3mYbuT6hwEw Gcc2jgfOGEI3eU4sGowxf75IOZa5LpyoRyTMatp65SH8uufiyhGWKk0pR2LN77Li yXRO6IUd+/aTUyKir8WLrEmYjVYXrfLYc0/FS+Fkzy4IW3raI9yKaptbC75OW2N6 iD5b4iIfuOefAi9PfDMjKttEsbvMsl5gFFcRRTdsvTIdUTzZpc6YUUVlDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNgt3XluClBWFrArnbS5NX4vtgl6MB8GA1UdIwQY MBaAFOv0LoBgKu31ijx6gYg8GjT2nS+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2Mt MTkwM2VkYWZhOGJmLzEvMkMzZGVXNEtVRllXc0N1ZHRMazFmaS0yQ1hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2MtMTkwM2VkYWZhOGJm LzEvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS70MA0G CSqGSIb3DQEBCwUAA4IBAQA2qpBD6RGzRTwLzWBY8ld5rfvDKBxVBdUGFR+J5AAH ZB4o7RgyWPVjA0Ukb+8yMFo+GHv3XkRZhEzNzVCz98ts0jepXeKJajgX7p+hekeg rPdKoXYnIRzksfc64EvCXR5leL+pf7WN2hvyvCTyFdwhBGJViNLGPoVHcYukqe2T kn7RGHfnuB5ThirKWlvzsvxi1yWf0KrALj4VBbDHWhMiFIxsRMZiN/Mc5KsM6IOV uM4XcdFRWDwKGH+mHdymrIDn2IwV8dTP8XiCloyQrTWFwzRqMF+lJqpTial79BRM tZ6vfb1ksbz9XvImtY7eqVu9qoaAlJGYywBA7x5vQeGM -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:00 2026 by rpki-client