This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/2IHxfDPgXpqFUuW2HHMtTesRlVk.roa File: 2IHxfDPgXpqFUuW2HHMtTesRlVk.roa (raw, json) Hash identifier: 6i0KTZ22dHSsBD0sAIXWyUQ8dif7FeqnVvrlTF59RFs= Subject key identifier: D8:81:F1:7C:33:E0:5E:9A:85:52:E5:B6:1C:73:2D:4D:EB:11:95:59 Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Certificate serial: 019B7B36328C26DC88EB04D0F54585364E19 Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/2IHxfDPgXpqFUuW2HHMtTesRlVk.roa Signing time: Thu 01 Jan 2026 20:18:28 +0000 ROA not before: Thu 01 Jan 2026 20:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136787 IP address blocks: 195.210.100.0/24 maxlen: 24 195.210.101.0/24 maxlen: 24 195.210.102.0/24 maxlen: 24 195.210.103.0/24 maxlen: 24 195.210.116.0/24 maxlen: 24 195.210.117.0/24 maxlen: 24 195.210.118.0/24 maxlen: 24 195.210.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:32:8c:26:dc:88:eb:04:d0:f5:45:85:36:4e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Validity Not Before: Jan 1 20:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d881f17c33e05e9a8552e5b61c732d4deb119559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:51:cf:1b:bf:35:9e:0e:25:61:c9:66:87: fc:7d:c8:fc:05:b5:2c:fd:22:4b:61:76:df:8e:81: 47:d9:e6:b2:bb:46:e4:5a:71:21:e9:e6:a2:61:73: 4a:09:06:e4:34:65:ae:73:4b:aa:b9:8e:a9:1f:d7: 9b:63:51:bf:94:e2:97:96:d6:59:d7:d5:27:f1:c6: 51:1a:06:7e:c5:23:28:aa:aa:f3:78:74:4b:7f:76: 38:be:f0:6b:4a:0a:45:a7:b0:de:f2:6d:96:cd:f3: 13:2d:0c:0f:b5:58:e9:ca:04:b6:84:5b:46:0f:52: e5:b2:29:d6:3a:07:ab:4b:51:2a:67:39:50:69:84: 36:23:5c:8b:a7:4b:b9:47:78:59:0c:9c:1c:6b:cf: d2:08:40:7a:88:9b:0b:da:47:57:bc:7a:b6:d9:70: 41:8d:a0:d6:a6:8e:e4:ad:27:69:cd:f1:f2:82:f2: 69:11:28:62:59:23:8e:27:b8:85:d2:fb:3d:c6:4a: 38:55:a5:f8:fa:f6:98:e2:d5:11:bb:e2:8e:c8:4f: 31:38:b1:81:8b:9d:07:28:34:01:68:ba:0c:ba:6c: b5:13:ef:f6:bc:01:10:69:4e:a0:68:26:9e:d9:1a: 35:4f:b8:6f:6e:1a:a8:97:fc:6f:34:ab:27:74:76: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:81:F1:7C:33:E0:5E:9A:85:52:E5:B6:1C:73:2D:4D:EB:11:95:59 X509v3 Authority Key Identifier: keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/2IHxfDPgXpqFUuW2HHMtTesRlVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.210.100.0/22 195.210.116.0/22 Signature Algorithm: sha256WithRSAEncryption 21:f2:2a:7b:f2:66:a6:ef:58:97:65:94:6e:4d:f3:20:90:c1: ff:bb:ec:c6:0b:92:8b:c9:7c:e8:83:eb:d0:66:f5:a8:83:1c: e9:99:60:03:7e:c3:c7:31:01:87:88:a1:b2:e3:cc:f3:07:b7: ff:7d:47:04:ca:e6:61:76:40:68:d7:39:d4:90:79:ab:fb:1f: 41:0e:5c:b4:11:53:87:06:ac:07:22:65:7d:b4:c5:d7:16:f3: b0:39:18:f9:e3:a8:1e:0a:1a:93:b4:1c:51:22:b3:51:67:d4: ce:79:f5:d8:34:de:93:7a:aa:8d:7c:93:9f:2d:7a:b2:eb:53: 70:97:1d:13:2e:7d:65:4b:26:81:78:1c:3f:93:de:b5:a9:5d: 48:af:4b:b3:5b:df:0d:28:a5:7b:25:53:61:db:2a:3b:b8:16: 30:00:e5:16:a8:27:ad:95:c5:4c:68:84:91:de:5b:67:fa:97: c9:2a:a1:b7:54:e8:c4:12:ba:3d:e3:cb:bc:8f:3e:d8:f2:23: 5c:a0:94:ff:ed:50:f4:f7:8e:b3:19:43:00:c1:fe:14:a4:03: 71:51:fd:75:4b:55:50:61:7c:3a:35:53:a2:07:37:4e:93:56: 58:89:e0:12:c0:e2:b7:2a:97:87:50:46:d9:4d:d5:f2:8d:1d: a6:04:05:5d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NjKMJtyI6wTQ9UWFNk4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYjg0ZDlmOGY5ZTMzMTU2NTg5YTVlYmY3MjIyMDNhODk5 ZTBhNTEwHhcNMjYwMTAxMjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODgxZjE3YzMzZTA1ZTlhODU1MmU1YjYxYzczMmQ0ZGViMTE5NTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjhRzxu/NZ4OJWHJZof8fcj8BbUs /SJLYXbfjoFH2eayu0bkWnEh6eaiYXNKCQbkNGWuc0uquY6pH9ebY1G/lOKXltZZ 19Un8cZRGgZ+xSMoqqrzeHRLf3Y4vvBrSgpFp7De8m2WzfMTLQwPtVjpygS2hFtG D1LlsinWOgerS1EqZzlQaYQ2I1yLp0u5R3hZDJwca8/SCEB6iJsL2kdXvHq22XBB jaDWpo7krSdpzfHygvJpEShiWSOOJ7iF0vs9xko4VaX4+vaY4tURu+KOyE8xOLGB i50HKDQBaLoMumy1E+/2vAEQaU6gaCae2Ro1T7hvbhqol/xvNKsndHZuRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNiB8Xwz4F6ahVLlthxzLU3rEZVZMB8GA1UdIwQY MBaAFP64TZ+PnjMVZYml6/ciIDqJngpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMt YWYxY2MyMzE3ZTM5LzEvMklIeGZEUGdYcHFGVXVXMkhITXRUZXNSbFZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMtYWYxY2MyMzE3ZTM5 LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCw9JkAwQC w9J0MA0GCSqGSIb3DQEBCwUAA4IBAQAh8ip78mam71iXZZRuTfMgkMH/u+zGC5KL yXzog+vQZvWogxzpmWADfsPHMQGHiKGy48zzB7f/fUcEyuZhdkBo1znUkHmr+x9B Dly0EVOHBqwHImV9tMXXFvOwORj546geChqTtBxRIrNRZ9TOefXYNN6TeqqNfJOf LXqy61Nwlx0TLn1lSyaBeBw/k961qV1Ir0uzW98NKKV7JVNh2yo7uBYwAOUWqCet lcVMaISR3ltn+pfJKqG3VOjEEro948u8jz7Y8iNcoJT/7VD0946zGUMAwf4UpANx Uf11S1VQYXw6NVOiBzdOk1ZYieASwOK3KpeHUEbZTdXyjR2mBAVd -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:28 2026 by rpki-client