This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/2rNvx3N9jKo76idv1HsGHAcnnwk.roa File: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (raw, json) Hash identifier: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY= Subject key identifier: DA:B3:6F:C7:73:7D:8C:AA:3B:EA:27:6F:D4:7B:06:1C:07:27:9F:09 Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce Certificate serial: 019B7F1397A65BC32DD8B02F6326D0A08967 Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/2rNvx3N9jKo76idv1HsGHAcnnwk.roa Signing time: Fri 02 Jan 2026 14:19:08 +0000 ROA not before: Fri 02 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60661 IP address blocks: 83.96.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:97:a6:5b:c3:2d:d8:b0:2f:63:26:d0:a0:89:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce Validity Not Before: Jan 2 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dab36fc7737d8caa3bea276fd47b061c07279f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3b:4a:0c:f6:15:cf:bf:11:8c:94:6b:53:7d: 4f:fe:1e:00:cd:01:10:4b:31:40:ac:ff:77:ac:93: ab:38:39:b0:d4:38:03:bf:3f:66:67:54:ba:d4:e3: b8:38:3b:06:35:76:d2:1b:4f:a0:bf:08:92:11:f6: f5:46:a3:44:66:f3:13:d7:1b:b4:36:74:f9:b0:85: 87:78:cd:7c:b5:a9:53:2e:59:4d:74:6e:81:7c:e3: 63:c6:44:c8:5c:57:a4:c8:c5:c1:6a:df:12:5a:00: 5b:ad:ba:26:98:49:b3:43:7c:2a:d7:ef:75:cb:7c: d5:6c:6d:ad:88:7b:b1:52:de:ab:07:a5:56:80:6e: 6a:97:a7:b2:93:f2:7f:27:cc:72:23:bc:d3:2b:bc: e5:54:60:15:6d:e3:a8:ec:4d:0b:99:16:cb:25:b6: e1:8c:b0:b2:3b:2e:72:e9:5e:5c:dc:f3:76:00:ff: 1b:50:71:dc:b6:e1:44:c8:bc:31:5d:85:53:20:26: be:54:55:eb:85:c7:3b:34:79:e6:8c:22:56:d9:da: b3:45:35:4f:a7:91:49:d9:43:22:bd:d6:0b:17:cc: e7:9c:80:06:05:b9:c6:b5:d2:51:b7:a2:53:87:89: 70:45:be:98:8c:85:5f:f7:6c:c6:22:55:7a:b6:5f: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B3:6F:C7:73:7D:8C:AA:3B:EA:27:6F:D4:7B:06:1C:07:27:9F:09 X509v3 Authority Key Identifier: keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/2rNvx3N9jKo76idv1HsGHAcnnwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.96.31.0/24 Signature Algorithm: sha256WithRSAEncryption 80:18:9d:28:e5:d0:f9:b3:58:81:4e:bc:80:53:01:6f:56:dc: 5f:38:ff:c2:94:2f:1b:fb:ac:ee:e2:52:2b:7b:9f:a9:17:4e: 1e:5d:7c:da:6d:65:54:72:87:37:d9:ee:f1:80:46:03:fc:35: 51:3a:3a:9a:b0:ad:f6:c6:9e:8f:16:73:ff:36:21:ff:ee:0a: b6:97:0b:b1:65:51:79:ad:1f:d1:39:bd:42:ac:bc:2f:bb:62: 48:64:9e:d5:28:d2:45:1d:c5:f8:00:64:76:d1:59:82:a1:35: b2:85:8d:ff:44:89:14:f4:18:b0:08:29:56:06:88:28:df:3e: d3:44:b1:7a:26:0a:aa:cb:9d:01:66:b9:83:25:6c:68:fd:c7: 2d:ac:b2:a8:bf:17:90:69:b9:fd:ba:d6:0d:11:05:36:a5:bf: 7c:09:56:6b:12:d8:b6:37:64:8b:ec:7e:3a:d1:87:ec:82:d4: a6:5e:62:ef:4f:4f:62:a1:c3:df:18:b9:7a:95:f2:c3:dd:99: 34:1e:70:b8:46:71:9b:63:65:2f:aa:81:14:35:31:6c:7a:e1: 88:ed:3e:26:58:1a:76:e9:66:38:a2:05:98:49:01:c5:ba:c0: 65:bb:b1:b0:5b:6d:26:36:54:31:e8:bd:6c:9f:9a:9e:25:6e: 62:f1:47:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E5emW8Mt2LAvYybQoIlnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0 N2ZkY2UwHhcNMjYwMTAyMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWIzNmZjNzczN2Q4Y2FhM2JlYTI3NmZkNDdiMDYxYzA3Mjc5ZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjtKDPYVz78RjJRrU31P/h4AzQEQ SzFArP93rJOrODmw1DgDvz9mZ1S61OO4ODsGNXbSG0+gvwiSEfb1RqNEZvMT1xu0 NnT5sIWHeM18talTLllNdG6BfONjxkTIXFekyMXBat8SWgBbrbommEmzQ3wq1+91 y3zVbG2tiHuxUt6rB6VWgG5ql6eyk/J/J8xyI7zTK7zlVGAVbeOo7E0LmRbLJbbh jLCyOy5y6V5c3PN2AP8bUHHctuFEyLwxXYVTICa+VFXrhcc7NHnmjCJW2dqzRTVP p5FJ2UMivdYLF8znnIAGBbnGtdJRt6JTh4lwRb6YjIVf92zGIlV6tl/CEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNqzb8dzfYyqO+onb9R7BhwHJ58JMB8GA1UdIwQY MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt YjczYTM2ZDkzOWIyLzEvMnJOdngzTjlqS283NmlkdjFIc0dIQWNubndrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU2AfMA0G CSqGSIb3DQEBCwUAA4IBAQCAGJ0o5dD5s1iBTryAUwFvVtxfOP/ClC8b+6zu4lIr e5+pF04eXXzabWVUcoc32e7xgEYD/DVROjqasK32xp6PFnP/NiH/7gq2lwuxZVF5 rR/ROb1CrLwvu2JIZJ7VKNJFHcX4AGR20VmCoTWyhY3/RIkU9BiwCClWBogo3z7T RLF6Jgqqy50BZrmDJWxo/cctrLKovxeQabn9utYNEQU2pb98CVZrEti2N2SL7H46 0YfsgtSmXmLvT09iocPfGLl6lfLD3Zk0HnC4RnGbY2UvqoEUNTFseuGI7T4mWBp2 6WY4ogWYSQHFusBlu7GwW20mNlQx6L1sn5qeJW5i8UeQ -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:20 2026 by rpki-client