This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa File: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (raw, json) Hash identifier: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0= Subject key identifier: D8:90:06:79:6A:8E:CF:EC:FC:15:52:9D:3C:2C:72:2E:D1:C9:34:50 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3DF70976D1770561FBE9FB2DAB6CD Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa Signing time: Thu 01 Jan 2026 22:18:15 +0000 ROA not before: Thu 01 Jan 2026 22:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5483 IP address blocks: 79.120.198.0/24 maxlen: 24 79.120.200.0/24 maxlen: 24 193.226.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:df:70:97:6d:17:70:56:1f:be:9f:b2:da:b6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d89006796a8ecfecfc15529d3c2c722ed1c93450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:57:b5:4b:b1:56:90:bc:43:81:eb:46:cc:fe: 0c:0c:eb:eb:14:b4:5f:6e:19:85:c4:8a:b3:8c:3c: 55:9f:a8:ba:b4:2b:83:a4:76:22:ea:53:69:ea:75: 20:be:85:38:e0:07:39:6c:d2:79:c9:b2:19:44:a0: 85:4e:80:ac:a6:70:de:2e:38:24:22:a1:1c:85:d8: 78:ae:8e:5d:b5:14:98:0a:fe:67:7e:d5:69:28:71: 16:f1:74:d5:f3:26:a1:e7:ac:da:65:38:7e:34:90: 3e:c6:bd:db:c2:7d:cb:ef:3b:7a:da:10:1e:24:26: ba:3d:76:4e:8d:bd:78:7b:95:05:fb:a6:16:c2:12: e7:a4:fa:49:68:5a:42:c5:64:d7:c7:f5:fb:d4:b0: 07:21:1f:ef:ba:d6:f7:03:1c:51:5f:06:a8:f5:61: e3:5c:f8:a0:29:d5:78:90:8f:c5:b1:61:eb:07:54: 40:cf:40:d3:ff:3f:15:0c:d2:61:4e:e2:06:02:a7: 52:e1:f3:5b:22:44:53:83:c8:34:38:6e:40:e0:0d: f0:05:e9:2f:58:a4:1f:65:4e:57:6d:d8:c1:0c:c6: 62:c5:dc:80:93:28:9c:51:b6:d2:e4:cd:23:5e:2c: 14:ed:db:9a:f7:c5:ba:67:8c:44:44:41:f8:77:34: 50:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:90:06:79:6A:8E:CF:EC:FC:15:52:9D:3C:2C:72:2E:D1:C9:34:50 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.120.198.0/24 79.120.200.0/24 193.226.237.0/24 Signature Algorithm: sha256WithRSAEncryption 59:b0:ed:75:0d:8f:5b:fe:1a:5a:fd:c0:ff:35:6e:50:29:43: 87:04:47:f6:93:0f:b9:3e:93:d3:c4:cc:ff:a2:95:c8:bf:49: 3b:9a:d7:67:1b:ae:d8:c8:5b:30:8b:62:b9:14:72:8c:3e:3a: a2:21:ce:cf:d9:2f:0f:29:fa:48:ce:37:6b:2e:f6:af:c0:43: 25:82:c9:91:2a:f6:d5:07:8b:46:ec:8a:c9:8d:02:d2:a8:29: db:62:53:9c:41:37:09:44:2e:37:96:3a:d0:c3:c8:4d:b1:93: 0a:bf:ea:a9:1f:ad:ba:15:9e:d3:20:64:4a:d3:f4:e9:a8:f0: 8c:aa:94:65:83:64:fb:83:16:2b:7c:e1:f9:db:10:55:d0:46: e7:eb:ba:56:ee:ba:c9:84:b3:d2:95:64:40:51:34:b0:b2:8a: 54:5e:6c:b8:21:ff:72:78:b9:c6:6d:e2:c9:1b:09:dc:b1:09: c3:06:13:b5:1f:b6:ad:32:f3:4c:00:73:37:0a:8f:e6:a6:01: 4f:25:f4:8f:03:95:ce:be:c1:b0:0b:de:1e:66:dc:83:65:99: c4:00:36:55:62:11:ec:5b:71:b3:54:eb:5f:c2:dd:bf:0f:35: e8:3e:f1:3f:71:b7:f3:71:b0:51:2e:14:fb:67:77:91:8d:f5: 84:7f:94:c3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o99wl20XcFYfvp+y2rbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODkwMDY3OTZhOGVjZmVjZmMxNTUyOWQzYzJjNzIyZWQxYzkzNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1e1S7FWkLxDgetGzP4MDOvrFLRf bhmFxIqzjDxVn6i6tCuDpHYi6lNp6nUgvoU44Ac5bNJ5ybIZRKCFToCspnDeLjgk IqEchdh4ro5dtRSYCv5nftVpKHEW8XTV8yah56zaZTh+NJA+xr3bwn3L7zt62hAe JCa6PXZOjb14e5UF+6YWwhLnpPpJaFpCxWTXx/X71LAHIR/vutb3AxxRXwao9WHj XPigKdV4kI/FsWHrB1RAz0DT/z8VDNJhTuIGAqdS4fNbIkRTg8g0OG5A4A3wBekv WKQfZU5XbdjBDMZixdyAkyicUbbS5M0jXiwU7dua98W6Z4xEREH4dzRQrwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNiQBnlqjs/s/BVSnTwsci7RyTRQMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvMkpBR2VXcU96LXo4RlZLZFBDeHlMdEhKTkZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT3jGAwQA T3jIAwQAweLtMA0GCSqGSIb3DQEBCwUAA4IBAQBZsO11DY9b/hpa/cD/NW5QKUOH BEf2kw+5PpPTxMz/opXIv0k7mtdnG67YyFswi2K5FHKMPjqiIc7P2S8PKfpIzjdr LvavwEMlgsmRKvbVB4tG7IrJjQLSqCnbYlOcQTcJRC43ljrQw8hNsZMKv+qpH626 FZ7TIGRK0/TpqPCMqpRlg2T7gxYrfOH52xBV0Ebn67pW7rrJhLPSlWRAUTSwsopU Xmy4If9yeLnGbeLJGwncsQnDBhO1H7atMvNMAHM3Co/mpgFPJfSPA5XOvsGwC94e ZtyDZZnEADZVYhHsW3GzVOtfwt2/DzXoPvE/cbfzcbBRLhT7Z3eRjfWEf5TD -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:53 2026 by rpki-client