This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/2X2qjtlvWrh-i63OX0duW0X7RUQ.roa File: 2X2qjtlvWrh-i63OX0duW0X7RUQ.roa (raw, json) Hash identifier: fEDF/KXuTjDM56u/FoBt/YnMpIHjrDBH/KrLWrRIe+4= Subject key identifier: D9:7D:AA:8E:D9:6F:5A:B8:7E:8B:AD:CE:5F:47:6E:5B:45:FB:45:44 Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Certificate serial: 019B79ED61250A011B645B1CD4B13356ABE2 Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/2X2qjtlvWrh-i63OX0duW0X7RUQ.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8426 IP address blocks: 93.93.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:61:25:0a:01:1b:64:5b:1c:d4:b1:33:56:ab:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d97daa8ed96f5ab87e8badce5f476e5b45fb4544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:20:43:ac:86:7c:e8:08:9c:c0:6f:f7:1b:32: 98:ed:3e:a8:0d:40:ce:ce:49:9c:77:b2:35:6e:51: 99:81:1a:5b:1d:eb:c6:90:7c:9a:52:99:53:f8:40: 08:a1:59:ac:8c:62:38:76:56:37:12:af:30:c2:6e: d5:60:6b:02:2c:b3:be:b4:16:ea:44:42:8a:35:60: 9f:30:f0:75:2a:ec:ab:6f:31:19:f2:98:11:ec:de: 24:2b:e5:11:68:4c:e5:d0:d6:1b:7a:33:f4:cf:8e: 26:63:53:94:9c:f0:db:dd:a6:d2:42:18:a8:df:90: e5:60:d9:7f:60:1d:a0:51:a9:fa:b6:bb:e5:74:a8: e8:3c:ce:d5:e9:d2:93:e3:66:6c:ed:ec:37:1a:80: e9:63:8f:51:a1:46:7d:5f:f5:20:5c:43:34:d5:7d: 10:a7:e2:33:4f:c0:66:b3:7a:84:89:de:7e:35:d6: e1:6a:97:e5:75:ef:80:3d:f2:de:f0:ac:3f:2a:99: 7f:e9:20:a5:2d:f6:d7:26:27:5d:16:32:12:1c:0a: bc:d6:69:a3:74:7b:6b:c3:6f:c0:8e:dd:ce:84:16: e5:4c:15:90:c9:5e:43:d7:9b:17:34:ae:29:f6:6c: 95:6c:3d:35:b6:06:80:43:6f:bb:1f:02:63:0d:f7: 6a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7D:AA:8E:D9:6F:5A:B8:7E:8B:AD:CE:5F:47:6E:5B:45:FB:45:44 X509v3 Authority Key Identifier: keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/2X2qjtlvWrh-i63OX0duW0X7RUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.93.224.0/21 Signature Algorithm: sha256WithRSAEncryption 97:57:39:e9:c2:49:92:37:43:29:2b:08:ca:52:e3:0f:8a:ea: f2:4b:92:99:66:1f:4a:6d:06:1a:6c:8c:9f:9d:b9:9d:04:1c: a9:60:92:66:90:d2:5b:b3:ef:6b:aa:30:17:c7:6e:3b:8c:cf: 8c:b5:7a:d7:87:4b:e1:f7:70:f8:e7:b1:61:fa:76:a8:b8:8d: 0a:72:16:ff:7e:17:01:b7:a7:76:3f:77:9b:e8:a8:f3:99:5d: 43:a4:ad:20:41:8e:99:50:f2:ac:5b:32:e9:e4:d0:2d:df:a7: c4:cc:c5:b8:0d:b2:b5:d1:5e:b9:03:5a:11:ea:2a:d9:3a:ac: d1:a6:63:b9:ad:4d:75:9d:e0:23:67:fd:0d:81:86:7b:59:93: 0b:6b:7d:41:2d:20:24:dd:95:35:4d:70:84:00:3c:f8:49:db: 93:7c:02:b4:e9:a1:1f:13:54:de:89:1c:b2:c5:c4:08:5d:16: 95:22:74:15:ec:01:42:d0:ca:76:64:91:e2:a9:12:84:48:b1: 34:b9:3b:63:42:82:13:22:93:a7:0b:80:3a:07:5c:7e:10:c4: b4:ff:0f:c8:f3:1a:26:22:1f:a4:20:0a:97:67:fa:08:10:47: 68:20:c4:c7:c2:70:84:26:e1:ce:1b:77:b1:cf:78:6a:0e:34: d1:cb:cb:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WElCgEbZFsc1LEzVqviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzJkYzllNTI0OWZiNDFjNDdkZjQ5MTQxMjFhOWIxYTZh ZWYxZmYwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTdkYWE4ZWQ5NmY1YWI4N2U4YmFkY2U1ZjQ3NmU1YjQ1ZmI0NTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCBDrIZ86AicwG/3GzKY7T6oDUDO zkmcd7I1blGZgRpbHevGkHyaUplT+EAIoVmsjGI4dlY3Eq8wwm7VYGsCLLO+tBbq REKKNWCfMPB1KuyrbzEZ8pgR7N4kK+URaEzl0NYbejP0z44mY1OUnPDb3abSQhio 35DlYNl/YB2gUan6trvldKjoPM7V6dKT42Zs7ew3GoDpY49RoUZ9X/UgXEM01X0Q p+IzT8Bms3qEid5+Ndbhapflde+APfLe8Kw/Kpl/6SClLfbXJiddFjISHAq81mmj dHtrw2/Ajt3OhBblTBWQyV5D15sXNK4p9myVbD01tgaAQ2+7HwJjDfdqlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNl9qo7Zb1q4foutzl9HbltF+0VEMB8GA1UdIwQY MBaAFGwy3J5SSftBxH30kUEhqbGmrvH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUt M2ZiYzk3NTllYjZhLzEvMlgycWp0bHZXcmgtaTYzT1gwZHVXMFg3UlVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUtM2ZiYzk3NTllYjZh LzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXV3gMA0G CSqGSIb3DQEBCwUAA4IBAQCXVznpwkmSN0MpKwjKUuMPiuryS5KZZh9KbQYabIyf nbmdBBypYJJmkNJbs+9rqjAXx247jM+MtXrXh0vh93D457Fh+naouI0Kchb/fhcB t6d2P3eb6KjzmV1DpK0gQY6ZUPKsWzLp5NAt36fEzMW4DbK10V65A1oR6irZOqzR pmO5rU11neAjZ/0NgYZ7WZMLa31BLSAk3ZU1TXCEADz4SduTfAK06aEfE1TeiRyy xcQIXRaVInQV7AFC0Mp2ZJHiqRKESLE0uTtjQoITIpOnC4A6B1x+EMS0/w/I8xom Ih+kIAqXZ/oIEEdoIMTHwnCEJuHOG3exz3hqDjTRy8sq -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:39 2026 by rpki-client