This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/L2sVy84YNgdXdVRcFvky1jOyapo.roa File: L2sVy84YNgdXdVRcFvky1jOyapo.roa (raw, json) Hash identifier: 3nfkWDukO5seERRcNCHmDmoRPYQO0LEHGFHMMpgINH8= Subject key identifier: 2F:6B:15:CB:CE:18:36:07:57:75:54:5C:16:F9:32:D6:33:B2:6A:9A Certificate issuer: /CN=819b97b20ccb4f696518e47c437259a8913e72ae Certificate serial: 019B7AC7C405F173790ADBD83F7B5FFAB7F5 Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/L2sVy84YNgdXdVRcFvky1jOyapo.roa Signing time: Thu 01 Jan 2026 18:17:50 +0000 ROA not before: Thu 01 Jan 2026 18:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15894 IP address blocks: 194.41.0.0/24 maxlen: 24 217.28.96.0/21 maxlen: 21 217.28.104.0/22 maxlen: 22 217.28.108.0/22 maxlen: 22 2001:67c:39c::/48 maxlen: 48 2a02:ba8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c4:05:f1:73:79:0a:db:d8:3f:7b:5f:fa:b7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae Validity Not Before: Jan 1 18:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f6b15cbce1836075775545c16f932d633b26a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:b7:f5:e0:d1:de:44:89:f5:06:03:28:77: c1:6b:c4:22:a6:23:e6:4a:bb:5b:f9:32:0f:61:2c: bc:d1:77:52:96:b1:ac:a8:87:ed:d5:db:71:a6:a1: af:55:15:b3:43:54:e6:dc:57:15:9e:4d:c8:18:a1: a7:a9:c9:f2:63:e5:d1:ad:32:00:e8:da:e2:87:d4: 0f:3f:30:8f:21:19:23:d6:51:a3:e4:63:9f:4c:8d: ef:19:3b:44:dc:ca:40:f8:3a:8e:80:79:52:5e:d7: 92:1f:5f:44:7c:fb:e3:43:22:3a:cc:42:9a:36:70: 6c:2d:4d:07:32:ba:b6:45:5b:db:53:c8:84:11:5b: f3:82:be:07:18:f8:f9:ba:69:84:f6:70:be:ba:56: 0e:e9:1d:33:de:8c:08:de:4d:ff:4d:6d:87:98:3c: 8a:61:85:4d:89:4e:dc:97:0a:90:15:27:a2:29:0a: 2e:ca:31:b3:db:a7:69:d9:34:b9:22:a7:a8:d7:79: 41:6e:6a:7f:b7:08:37:83:ba:57:c9:d7:b5:fb:ef: 34:e5:5c:73:ff:83:95:28:59:b5:d2:51:55:e5:03: fb:b1:7f:63:e9:ed:6c:82:05:a8:16:45:0e:9d:2f: 81:21:cc:15:14:07:59:f7:93:17:28:23:04:64:24: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6B:15:CB:CE:18:36:07:57:75:54:5C:16:F9:32:D6:33:B2:6A:9A X509v3 Authority Key Identifier: keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/L2sVy84YNgdXdVRcFvky1jOyapo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.41.0.0/24 217.28.96.0/20 IPv6: 2001:67c:39c::/48 2a02:ba8::/32 Signature Algorithm: sha256WithRSAEncryption 22:ae:86:8e:45:fd:af:34:ec:33:4f:70:26:db:45:9e:4a:46: 28:b5:28:59:e7:04:2f:86:99:0c:4e:29:81:f7:d0:4e:2c:05: 87:cc:f6:dd:02:9e:07:aa:fd:e3:cb:05:01:b4:b6:82:4e:11: 0c:7f:83:2e:72:51:0e:21:6c:4b:a4:a2:7e:e1:05:f1:15:5a: 9c:27:09:fb:d7:e6:10:0a:a6:de:be:03:13:07:56:f9:23:40: dc:96:ef:b6:ed:27:6b:a9:43:8b:49:ab:b8:95:d1:34:35:cb: 07:e1:75:72:24:29:12:47:67:0d:58:00:61:9d:6a:e8:28:13: 18:ef:bb:a3:9e:4c:9e:b4:60:31:ec:82:cb:72:ab:dc:54:b3: 8d:9c:29:d1:76:26:2d:1c:ff:2f:8c:3e:17:97:51:d0:99:25: 51:cd:cd:2e:d0:03:e3:3d:fe:b7:60:06:11:67:10:ee:26:ce: 48:a7:15:6d:c9:02:72:20:1a:94:a9:6f:c5:1a:5b:02:eb:4a: 07:46:4f:83:f8:a0:8e:b4:91:7e:02:3e:5e:25:b9:6a:3c:63: a8:4a:a7:c9:e3:f3:de:10:ed:d0:6a:7c:e5:1b:22:ca:e9:bc: de:77:05:39:90:f8:eb:da:85:30:d2:db:4c:4d:d1:9c:90:ea: 01:bd:0c:26 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6x8QF8XN5CtvYP3tf+rf1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOWI5N2IyMGNjYjRmNjk2NTE4ZTQ3YzQzNzI1OWE4OTEz ZTcyYWUwHhcNMjYwMTAxMTgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjZiMTVjYmNlMTgzNjA3NTc3NTU0NWMxNmY5MzJkNjMzYjI2YTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwy39eDR3kSJ9QYDKHfBa8QipiPm Srtb+TIPYSy80XdSlrGsqIft1dtxpqGvVRWzQ1Tm3FcVnk3IGKGnqcnyY+XRrTIA 6Nrih9QPPzCPIRkj1lGj5GOfTI3vGTtE3MpA+DqOgHlSXteSH19EfPvjQyI6zEKa NnBsLU0HMrq2RVvbU8iEEVvzgr4HGPj5ummE9nC+ulYO6R0z3owI3k3/TW2HmDyK YYVNiU7clwqQFSeiKQouyjGz26dp2TS5Iqeo13lBbmp/twg3g7pXyde1++805Vxz /4OVKFm10lFV5QP7sX9j6e1sggWoFkUOnS+BIcwVFAdZ95MXKCMEZCSTRQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFC9rFcvOGDYHV3VUXBb5MtYzsmqaMB8GA1UdIwQY MBaAFIGbl7IMy09pZRjkfENyWaiRPnKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1p1WHNnekxUMmxsR09SOFEzSlpxSkUtY3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83NzRmMzctMGU1Ny00OWU2LTg4NjUt YTY0YmE0YjhmYTE5LzEvTDJzVnk4NFlOZ2RYZFZSY0Z2a3kxak95YXBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83NzRmMzctMGU1Ny00OWU2LTg4NjUtYTY0YmE0YjhmYTE5 LzEvZ1p1WHNnekxUMmxsR09SOFEzSlpxSkUtY3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAwikAAwQE 2RxgMBYEAgACMBADBwAgAQZ8A5wDBQAqAguoMA0GCSqGSIb3DQEBCwUAA4IBAQAi roaORf2vNOwzT3Am20WeSkYotShZ5wQvhpkMTimB99BOLAWHzPbdAp4Hqv3jywUB tLaCThEMf4MuclEOIWxLpKJ+4QXxFVqcJwn71+YQCqbevgMTB1b5I0Dclu+27Sdr qUOLSau4ldE0NcsH4XVyJCkSR2cNWABhnWroKBMY77ujnkyetGAx7ILLcqvcVLON nCnRdiYtHP8vjD4Xl1HQmSVRzc0u0APjPf63YAYRZxDuJs5IpxVtyQJyIBqUqW/F GlsC60oHRk+D+KCOtJF+Aj5eJblqPGOoSqfJ4/PeEO3QanzlGyLK6bzedwU5kPjr 2oUw0ttMTdGckOoBvQwm -----END CERTIFICATE-----Generated at Mon Jan 26 15:36:39 2026 by rpki-client