This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/2hflLbfqAWKpFyYGnXBTWiWqwxs.roa File: 2hflLbfqAWKpFyYGnXBTWiWqwxs.roa (raw, json) Hash identifier: lI9Xhzw78sH7hBtTcjJSosgoG/UbF5gG44NR4ynAOeo= Subject key identifier: DA:17:E5:2D:B7:EA:01:62:A9:17:26:06:9D:70:53:5A:25:AA:C3:1B Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf Certificate serial: 019B7DCA3D8329032857098EF43E9805041E Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/2hflLbfqAWKpFyYGnXBTWiWqwxs.roa Signing time: Fri 02 Jan 2026 08:19:24 +0000 ROA not before: Fri 02 Jan 2026 08:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211215 IP address blocks: 45.95.8.0/24 maxlen: 24 2a0c:3300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3d:83:29:03:28:57:09:8e:f4:3e:98:05:04:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf Validity Not Before: Jan 2 08:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da17e52db7ea0162a91726069d70535a25aac31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:df:5d:61:27:01:0e:c1:0e:a8:bc:78:e1:60: 43:8a:07:9b:e6:fc:46:36:7e:ca:0e:ab:98:ba:ee: 34:20:ea:8e:7d:8b:5f:df:e8:4b:08:c3:98:a4:5a: 08:8c:58:a1:71:47:73:ab:bd:74:00:07:33:a2:fc: bf:69:81:a0:01:01:74:b0:0a:e3:38:ff:ab:05:88: 54:c5:a2:0f:77:a9:6e:7a:a8:e9:da:c2:96:de:4e: e2:fb:65:b1:d4:ab:70:7b:40:b7:02:8f:55:f9:63: e3:fd:73:3f:d2:71:e6:b9:9d:03:97:d9:a7:75:c1: 52:1c:10:e4:05:0f:2e:97:68:93:d3:cf:1d:9c:58: 12:d4:7b:ca:54:48:e0:0b:a4:7e:4e:06:1c:e8:82: 90:92:aa:03:69:05:cc:69:eb:49:16:ae:6b:ec:35: cb:cd:8b:3a:02:da:aa:7c:d4:1c:67:1d:a5:b4:5c: ef:0a:52:20:b3:84:4c:45:f8:42:dd:8b:a4:c3:ea: d6:5c:eb:8d:31:12:80:b0:dd:e8:10:c9:27:3c:79: 87:75:15:8e:44:8b:01:12:0e:10:57:7b:42:3b:1e: 47:51:3b:b6:fb:bc:ab:0d:1d:10:c5:2b:9d:45:08: 6a:b9:28:1c:4e:ce:c2:4f:50:15:8d:8e:72:43:9a: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:17:E5:2D:B7:EA:01:62:A9:17:26:06:9D:70:53:5A:25:AA:C3:1B X509v3 Authority Key Identifier: keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/2hflLbfqAWKpFyYGnXBTWiWqwxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.8.0/24 IPv6: 2a0c:3300::/32 Signature Algorithm: sha256WithRSAEncryption 5f:00:0f:17:be:ea:b7:0e:43:b1:cd:e4:4a:c6:9f:0e:38:7e: 85:34:c2:28:16:0d:72:35:90:13:be:db:d3:4c:74:6c:e6:0b: 76:85:33:7c:56:0a:68:b4:40:e9:20:98:84:61:38:3d:07:f6: 39:f6:27:5b:2c:40:02:62:9b:2e:84:51:f6:4f:20:be:ee:07: 14:9e:f6:4d:a3:86:57:f9:16:15:e5:d0:56:78:c0:6a:be:b9: 81:33:db:a0:92:dc:c1:a6:db:47:76:69:48:93:da:de:15:9b: c8:9e:77:fc:b9:58:ad:c9:7e:bb:72:16:ff:fe:1c:59:a6:f6: 38:bd:ec:f4:df:52:6f:d5:9f:8f:f8:b7:e5:b6:7e:00:f1:09: 4f:86:5b:f7:bf:7c:40:4d:31:76:6a:de:a1:7c:66:da:ce:7f: ff:5f:60:a5:45:bc:b6:4b:7d:15:65:31:a6:3f:89:3f:69:9d: 85:2c:13:cc:0a:74:42:f1:80:2e:f7:03:31:5a:dc:51:b9:4c: 0f:9e:90:5c:b1:50:28:ed:c4:f0:8d:0d:98:45:85:3a:1f:11: 81:eb:26:21:9f:41:2a:3a:f5:5f:44:75:e7:78:7d:6b:bf:be: f4:05:ab:3e:e3:ad:73:3d:10:d4:01:cf:1e:bb:10:e1:d9:77: b1:ea:fd:4a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yj2DKQMoVwmO9D6YBQQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmVlZTc4YTAwODRkODMxZGUxYTI1MDAxODNlMTY0ODk1 MTZjY2YwHhcNMjYwMTAyMDgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTE3ZTUyZGI3ZWEwMTYyYTkxNzI2MDY5ZDcwNTM1YTI1YWFjMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt9dYScBDsEOqLx44WBDigeb5vxG Nn7KDquYuu40IOqOfYtf3+hLCMOYpFoIjFihcUdzq710AAczovy/aYGgAQF0sArj OP+rBYhUxaIPd6lueqjp2sKW3k7i+2Wx1Ktwe0C3Ao9V+WPj/XM/0nHmuZ0Dl9mn dcFSHBDkBQ8ul2iT088dnFgS1HvKVEjgC6R+TgYc6IKQkqoDaQXMaetJFq5r7DXL zYs6AtqqfNQcZx2ltFzvClIgs4RMRfhC3Yukw+rWXOuNMRKAsN3oEMknPHmHdRWO RIsBEg4QV3tCOx5HUTu2+7yrDR0QxSudRQhquSgcTs7CT1AVjY5yQ5qJHwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNoX5S236gFiqRcmBp1wU1olqsMbMB8GA1UdIwQY MBaAFM8u7nigCE2DHeGiUAGD4WSJUWzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kN2U2NjAtNjkxMi00MzgwLWFiNGYt NzE4YjljNDBmZDI1LzEvMmhmbExiZnFBV0twRnlZR25YQlRXaVdxd3hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kN2U2NjAtNjkxMi00MzgwLWFiNGYtNzE4YjljNDBmZDI1 LzEvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALV8IMA0E AgACMAcDBQAqDDMAMA0GCSqGSIb3DQEBCwUAA4IBAQBfAA8Xvuq3DkOxzeRKxp8O OH6FNMIoFg1yNZATvtvTTHRs5gt2hTN8VgpotEDpIJiEYTg9B/Y59idbLEACYpsu hFH2TyC+7gcUnvZNo4ZX+RYV5dBWeMBqvrmBM9ugktzBpttHdmlIk9reFZvInnf8 uVityX67chb//hxZpvY4vez031Jv1Z+P+Lfltn4A8QlPhlv3v3xATTF2at6hfGba zn//X2ClRby2S30VZTGmP4k/aZ2FLBPMCnRC8YAu9wMxWtxRuUwPnpBcsVAo7cTw jQ2YRYU6HxGB6yYhn0EqOvVfRHXneH1rv770Bas+461zPRDUAc8euxDh2Xex6v1K -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:39 2026 by rpki-client