This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/N2hJlPxzOaiP-0JOcE7E0Kk14z8.roa File: N2hJlPxzOaiP-0JOcE7E0Kk14z8.roa (raw, json) Hash identifier: lBlro6ZfcBUQahYTWw9cYvjI96CLCeStJjQ3Cmlkpxs= Subject key identifier: 37:68:49:94:FC:73:39:A8:8F:FB:42:4E:70:4E:C4:D0:A9:35:E3:3F Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019B7B3699A074CE1A8EACBFFFB3D023C872 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/N2hJlPxzOaiP-0JOcE7E0Kk14z8.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39444 IP address blocks: 85.31.211.0/24 maxlen: 24 85.31.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:99:a0:74:ce:1a:8e:ac:bf:ff:b3:d0:23:c8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37684994fc7339a88ffb424e704ec4d0a935e33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:f0:3d:1d:de:b0:a2:7f:8c:ef:2f:92:1e: 6c:10:e3:40:c5:ac:46:e0:c0:c9:5b:cb:46:aa:ba: fe:71:14:52:ed:54:f9:26:2c:94:da:14:f9:b3:58: b9:2c:57:6b:cf:da:80:a2:28:ce:17:f7:dc:d8:7a: 81:6f:7f:1c:c7:70:06:25:0c:84:49:cb:79:18:65: e8:88:f3:a1:e2:d7:d8:01:25:90:37:47:e2:96:e2: ce:91:00:b9:2b:24:5a:bb:3e:a4:3a:7a:b1:f5:a1: 2c:f2:67:f6:da:67:b1:cc:0a:fc:df:22:c0:62:2d: e0:58:37:db:db:24:b8:6f:34:df:10:3c:6e:ee:0a: ce:4a:bb:c1:98:f1:ad:1f:2f:62:3c:10:02:7c:02: c2:d3:db:b6:2d:ac:ec:d8:3a:4d:61:49:76:87:3d: 2f:be:a5:73:90:31:62:e7:c5:9b:61:a2:c4:8e:42: fc:db:14:df:35:f0:53:6d:c4:38:96:e7:87:9e:6e: 68:35:27:42:66:37:1c:9c:b2:46:d3:9a:12:d4:61: db:78:a9:14:5b:d9:8f:3f:55:ef:54:30:61:9b:32: c3:55:09:c1:f7:8f:91:61:90:1e:7f:54:e0:5b:00: 75:c7:38:24:49:45:92:bb:42:5d:2f:64:af:71:64: 65:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:68:49:94:FC:73:39:A8:8F:FB:42:4E:70:4E:C4:D0:A9:35:E3:3F X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/N2hJlPxzOaiP-0JOcE7E0Kk14z8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.211.0-85.31.212.255 Signature Algorithm: sha256WithRSAEncryption 83:33:2b:eb:37:16:18:88:0a:d5:8a:a8:81:01:e4:5c:6f:e0: ce:36:72:47:f8:b3:b7:eb:43:a9:3b:72:18:4b:3d:60:e7:6a: f7:71:dc:d5:a8:d2:49:87:b3:d3:e0:5e:98:3c:65:68:1d:fd: 29:59:da:5d:4d:a6:4f:78:11:40:ed:cc:a4:80:dd:08:40:8f: d8:7c:8c:8c:bf:c6:7d:86:7a:a4:ff:74:56:71:e7:5a:92:2b: 14:a7:b4:8c:be:63:e4:d1:1e:5e:b4:31:ee:bf:04:31:09:31: a1:49:f9:d6:1e:c6:11:96:ed:a3:6a:9a:46:2f:02:5d:cf:f2: 74:89:60:1a:0d:1e:07:85:2f:7f:72:91:f8:69:04:4b:4e:c9: be:19:3a:7d:38:4d:29:81:db:9b:f4:15:39:64:bb:10:20:25: 23:af:93:d0:40:11:9e:f0:f0:4a:21:63:62:07:cf:f1:cd:e2: 53:bd:f2:76:3c:13:47:19:da:bb:54:93:30:b4:e4:26:53:05: 92:11:2a:1d:bd:6d:5c:a4:ac:96:d0:56:39:59:dd:de:2e:de: 35:c5:06:81:05:a4:c9:74:88:04:a9:0a:68:62:90:75:d0:10: ec:83:79:1c:5b:4e:ac:e4:db:c7:14:90:9d:71:eb:d2:72:97: ae:d6:b3:3c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NpmgdM4ajqy//7PQI8hyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzY4NDk5NGZjNzMzOWE4OGZmYjQyNGU3MDRlYzRkMGE5MzVlMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJXwPR3esKJ/jO8vkh5sEONAxaxG 4MDJW8tGqrr+cRRS7VT5JiyU2hT5s1i5LFdrz9qAoijOF/fc2HqBb38cx3AGJQyE Sct5GGXoiPOh4tfYASWQN0filuLOkQC5KyRauz6kOnqx9aEs8mf22mexzAr83yLA Yi3gWDfb2yS4bzTfEDxu7grOSrvBmPGtHy9iPBACfALC09u2Lazs2DpNYUl2hz0v vqVzkDFi58WbYaLEjkL82xTfNfBTbcQ4lueHnm5oNSdCZjccnLJG05oS1GHbeKkU W9mPP1XvVDBhmzLDVQnB94+RYZAef1TgWwB1xzgkSUWSu0JdL2SvcWRllwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDdoSZT8czmoj/tCTnBOxNCpNeM/MB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvTjJoSmxQeHpPYWlQLTBKT2NFN0UwS2sxNHo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABVH9MD BABVH9QwDQYJKoZIhvcNAQELBQADggEBAIMzK+s3FhiICtWKqIEB5Fxv4M42ckf4 s7frQ6k7chhLPWDnavdx3NWo0kmHs9PgXpg8ZWgd/SlZ2l1Npk94EUDtzKSA3QhA j9h8jIy/xn2GeqT/dFZx51qSKxSntIy+Y+TRHl60Me6/BDEJMaFJ+dYexhGW7aNq mkYvAl3P8nSJYBoNHgeFL39ykfhpBEtOyb4ZOn04TSmB25v0FTlkuxAgJSOvk9BA EZ7w8EohY2IHz/HN4lO98nY8E0cZ2rtUkzC05CZTBZIRKh29bVykrJbQVjlZ3d4u 3jXFBoEFpMl0iASpCmhikHXQEOyDeRxbTqzk28cUkJ1x69Jyl67Wszw= -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:05 2026 by rpki-client