This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/s2iiETsUpUtweaUwFZTgM9aDg7A.roa File: s2iiETsUpUtweaUwFZTgM9aDg7A.roa (raw, json) Hash identifier: /RumfnN7PhI2jQIZLF3QzcmABh/oQLcD7DbhwGLNMV0= Subject key identifier: B3:68:A2:11:3B:14:A5:4B:70:79:A5:30:15:94:E0:33:D6:83:83:B0 Certificate issuer: /CN=b84785791e07646f5cc58b15e86434cb9c24149d Certificate serial: 019B79EC707DC5199263725A0B21B67226D0 Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/s2iiETsUpUtweaUwFZTgM9aDg7A.roa Signing time: Thu 01 Jan 2026 14:18:16 +0000 ROA not before: Thu 01 Jan 2026 14:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62137 IP address blocks: 185.44.36.0/24 maxlen: 24 185.44.37.0/24 maxlen: 24 185.44.38.0/24 maxlen: 24 185.44.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:70:7d:c5:19:92:63:72:5a:0b:21:b6:72:26:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d Validity Not Before: Jan 1 14:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b368a2113b14a54b7079a5301594e033d68383b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6b:4b:f1:2e:9b:a9:b1:7d:b7:81:94:00:64: 4a:74:bd:bd:c8:84:e4:a9:13:c6:4f:a1:54:e4:68: 8c:6a:d9:d7:c4:69:7a:3a:58:72:dd:44:57:66:e5: 76:0d:c2:76:21:d4:5c:a2:1e:d5:38:76:fe:20:d0: 8d:6c:d0:49:68:b6:a5:2a:f5:af:26:f1:9a:f7:e8: a6:fe:38:da:23:7c:5c:c1:c0:b3:d2:39:f3:79:36: c8:f2:04:bf:77:81:11:ee:1c:18:a3:97:d7:a5:f9: 7a:11:9d:ae:4b:e2:87:8f:ba:76:41:6b:df:74:47: 55:fa:bd:ed:a3:69:4e:bc:02:1f:63:14:ee:01:1a: ce:57:ef:7f:da:9c:e3:3c:c8:ea:06:b8:4b:e8:96: 15:68:27:5b:f4:5d:36:ad:9e:3a:63:5c:ca:8e:02: 4f:a0:cd:7e:4f:06:10:57:73:0a:a5:21:bf:af:83: 91:f1:fd:0a:5a:97:f9:e7:f2:a6:c9:79:50:56:1a: c1:99:59:46:05:a5:d4:cd:f7:0c:27:5b:ee:04:8e: bf:50:5d:bb:37:af:8c:97:5c:c5:29:1e:a2:8b:c8: c2:9a:b5:6c:6a:d0:9c:54:d4:68:85:f1:07:35:5d: 93:ab:2d:ff:a3:9e:c8:f6:cc:f2:0f:b3:42:ee:f8: 07:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:68:A2:11:3B:14:A5:4B:70:79:A5:30:15:94:E0:33:D6:83:83:B0 X509v3 Authority Key Identifier: keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/s2iiETsUpUtweaUwFZTgM9aDg7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.36.0/22 Signature Algorithm: sha256WithRSAEncryption 10:a5:3d:1b:4c:20:7b:de:01:c4:62:0c:fe:e4:2c:42:e9:6c: 1e:29:0c:32:46:5c:bf:5f:3f:b2:42:68:53:8c:da:41:05:59: 88:cb:91:42:bf:14:4d:01:7a:9d:2a:52:0c:79:cf:06:42:6d: 36:d1:51:d4:e2:e8:e3:cb:6e:a2:18:28:9b:1e:9d:f5:4a:f0: 6f:32:dc:b8:81:84:3d:aa:91:7a:05:4b:50:9c:b3:f4:13:5b: 00:4b:fc:56:2b:2f:2b:64:9c:ee:b4:99:17:11:09:0f:80:91: 8a:6f:f0:9b:d1:54:11:47:c7:48:d3:21:9c:ca:f4:37:54:d8: 78:da:c8:58:67:91:28:07:36:95:43:e8:aa:7c:6c:e2:67:ef: 13:13:2e:28:67:fe:75:56:3b:ef:64:07:9e:b0:75:bc:de:ac: 97:16:65:1a:6f:ca:95:a4:9f:73:19:a3:55:f4:d0:40:b1:18: 08:1e:b8:24:d8:45:38:e1:23:79:f5:b5:c3:b1:77:84:cd:4c: 5c:d5:bb:00:fc:03:1f:09:0e:54:6e:8f:a0:61:e1:78:13:2d: 07:db:a4:78:06:cc:58:86:5b:12:e1:10:89:93:3f:18:ab:d5: 58:f1:4a:36:e1:ad:d2:6b:4d:4a:1e:56:c6:e5:f7:a4:af:57: 74:56:78:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57HB9xRmSY3JaCyG2cibQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NDc4NTc5MWUwNzY0NmY1Y2M1OGIxNWU4NjQzNGNiOWMy NDE0OWQwHhcNMjYwMTAxMTQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzY4YTIxMTNiMTRhNTRiNzA3OWE1MzAxNTk0ZTAzM2Q2ODM4M2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2tL8S6bqbF9t4GUAGRKdL29yITk qRPGT6FU5GiMatnXxGl6Olhy3URXZuV2DcJ2IdRcoh7VOHb+INCNbNBJaLalKvWv JvGa9+im/jjaI3xcwcCz0jnzeTbI8gS/d4ER7hwYo5fXpfl6EZ2uS+KHj7p2QWvf dEdV+r3to2lOvAIfYxTuARrOV+9/2pzjPMjqBrhL6JYVaCdb9F02rZ46Y1zKjgJP oM1+TwYQV3MKpSG/r4OR8f0KWpf55/KmyXlQVhrBmVlGBaXUzfcMJ1vuBI6/UF27 N6+Ml1zFKR6ii8jCmrVsatCcVNRohfEHNV2Tqy3/o57I9szyD7NC7vgHMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLNoohE7FKVLcHmlMBWU4DPWg4OwMB8GA1UdIwQY MBaAFLhHhXkeB2RvXMWLFehkNMucJBSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUVlRmVSNEhaRzljeFlzVjZHUTB5NXdrRkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kZjgxMDUtMThlZS00MTcyLWI2YmIt MGRjMzNhY2MxZGJhLzEvczJpaUVUc1VwVXR3ZWFVd0ZaVGdNOWFEZzdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kZjgxMDUtMThlZS00MTcyLWI2YmItMGRjMzNhY2MxZGJh LzEvdUVlRmVSNEhaRzljeFlzVjZHUTB5NXdrRkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSwkMA0G CSqGSIb3DQEBCwUAA4IBAQAQpT0bTCB73gHEYgz+5CxC6WweKQwyRly/Xz+yQmhT jNpBBVmIy5FCvxRNAXqdKlIMec8GQm020VHU4ujjy26iGCibHp31SvBvMty4gYQ9 qpF6BUtQnLP0E1sAS/xWKy8rZJzutJkXEQkPgJGKb/Cb0VQRR8dI0yGcyvQ3VNh4 2shYZ5EoBzaVQ+iqfGziZ+8TEy4oZ/51VjvvZAeesHW83qyXFmUab8qVpJ9zGaNV 9NBAsRgIHrgk2EU44SN59bXDsXeEzUxc1bsA/AMfCQ5Ubo+gYeF4Ey0H26R4BsxY hlsS4RCJkz8Yq9VY8Uo24a3Sa01KHlbG5fekr1d0Vniv -----END CERTIFICATE-----Generated at Mon Jan 26 08:57:46 2026 by rpki-client