This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/Cpe2_Ojc_FZLY2oGHgVbMwJjk9A.roa File: Cpe2_Ojc_FZLY2oGHgVbMwJjk9A.roa (raw, json) Hash identifier: QYPBK9tLe2NLf5ToJsGlVRXUrRctKZptQZU1FwtQfmU= Subject key identifier: 0A:97:B6:FC:E8:DC:FC:56:4B:63:6A:06:1E:05:5B:33:02:63:93:D0 Certificate issuer: /CN=258f0753c033c1af091866d094264512696ca68b Certificate serial: 019B7EA6E32047B6F8DB367794767A68FDC2 Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/Cpe2_Ojc_FZLY2oGHgVbMwJjk9A.roa Signing time: Fri 02 Jan 2026 12:20:24 +0000 ROA not before: Fri 02 Jan 2026 12:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197615 IP address blocks: 89.234.242.0/23 maxlen: 23 89.234.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e3:20:47:b6:f8:db:36:77:94:76:7a:68:fd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258f0753c033c1af091866d094264512696ca68b Validity Not Before: Jan 2 12:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a97b6fce8dcfc564b636a061e055b33026393d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3b:24:3f:76:95:02:00:f4:2d:c9:6b:1f:a7: 70:c0:66:6d:f6:82:ec:06:85:bc:f3:83:93:75:40: 5b:7d:1a:ca:f2:6d:a6:6f:84:fb:3d:5a:d1:c0:66: 75:06:17:a7:35:94:b6:f6:44:ab:35:e6:52:ec:c6: ad:0b:b2:37:f6:d9:6b:b8:0b:49:f6:9a:d4:7f:85: 61:89:72:30:70:e3:23:1c:d4:e0:b3:8e:86:17:a4: 68:b2:a7:81:99:b6:17:b9:86:ab:73:e8:8e:97:09: ec:a2:3b:2a:49:1b:0f:3d:a3:80:4f:2d:66:06:09: e6:e6:29:7f:34:3a:af:29:90:67:7a:af:8d:22:37: 71:ef:b8:26:c5:a7:56:c8:85:ee:57:36:ce:af:ce: c1:6f:a9:a7:e1:1e:f2:85:73:59:11:a8:2a:24:b6: ea:b4:0a:68:8b:af:72:c0:1c:8e:a8:90:d1:80:26: 4a:c5:62:3f:f0:3a:2b:3c:c7:a5:2d:29:76:d9:5f: 9a:11:42:89:4b:2b:36:97:ca:8c:8f:92:a6:77:8f: 0a:d5:3e:f1:10:4c:5d:ad:6f:45:05:8c:43:fd:40: 66:b3:96:ab:d5:00:87:1a:00:4d:df:ec:ab:36:43: a9:a6:df:7a:eb:16:22:29:31:89:16:16:e2:01:03: f8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:97:B6:FC:E8:DC:FC:56:4B:63:6A:06:1E:05:5B:33:02:63:93:D0 X509v3 Authority Key Identifier: keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/Cpe2_Ojc_FZLY2oGHgVbMwJjk9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.234.242.0-89.234.245.255 Signature Algorithm: sha256WithRSAEncryption 5c:1f:c2:57:95:7e:f0:f0:18:a6:b4:8f:a5:14:99:40:99:7d: b1:7d:3e:a4:ec:7e:9a:f6:df:68:61:13:9f:80:ef:a8:18:4d: ed:e8:98:3a:a7:45:a1:89:30:f5:5b:9d:6a:cf:19:d4:aa:f0: 7d:cb:7a:01:9f:13:31:ed:f4:90:75:2d:a4:e1:f7:0b:7e:60: a3:e8:56:13:ac:1d:a3:6f:6a:a7:78:39:52:a4:d0:18:e4:95: 8f:d8:82:4c:17:cc:41:d5:32:71:7f:d5:3e:fc:3a:77:ec:f9: 84:9e:b3:e0:55:09:0b:d5:78:4c:6a:21:ff:66:ab:5f:e0:ad: 3b:c3:28:55:09:b1:13:16:df:b5:8b:04:fe:b4:11:f3:65:a5: 2e:48:f9:5d:0f:62:60:f6:30:1b:05:13:6f:79:aa:b6:2f:36: c0:26:e9:fe:e3:e3:06:49:f2:b1:dc:07:56:f7:b0:1a:8c:a8: 4e:43:15:7c:77:1c:37:cf:f7:72:fc:45:ae:53:49:38:1c:73: 7e:f6:8b:94:9c:11:68:fd:49:27:4a:80:51:9a:66:29:a2:21: 41:91:f0:38:ad:4d:42:37:13:4a:bf:71:a3:43:65:fb:6b:1f: 60:d4:7d:eb:24:b0:36:34:5c:c0:9e:c8:d3:be:06:aa:b7:9a: 52:71:24:95 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+puMgR7b42zZ3lHZ6aP3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OGYwNzUzYzAzM2MxYWYwOTE4NjZkMDk0MjY0NTEyNjk2 Y2E2OGIwHhcNMjYwMTAyMTIyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTk3YjZmY2U4ZGNmYzU2NGI2MzZhMDYxZTA1NWIzMzAyNjM5M2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTskP3aVAgD0LclrH6dwwGZt9oLs BoW884OTdUBbfRrK8m2mb4T7PVrRwGZ1BhenNZS29kSrNeZS7MatC7I39tlruAtJ 9prUf4VhiXIwcOMjHNTgs46GF6RosqeBmbYXuYarc+iOlwnsojsqSRsPPaOATy1m Bgnm5il/NDqvKZBneq+NIjdx77gmxadWyIXuVzbOr87Bb6mn4R7yhXNZEagqJLbq tApoi69ywByOqJDRgCZKxWI/8DorPMelLSl22V+aEUKJSys2l8qMj5Kmd48K1T7x EExdrW9FBYxD/UBms5ar1QCHGgBN3+yrNkOppt966xYiKTGJFhbiAQP4ZwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAqXtvzo3PxWS2NqBh4FWzMCY5PQMB8GA1UdIwQY MBaAFCWPB1PAM8GvCRhm0JQmRRJpbKaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlk4SFU4QXp3YThKR0diUWxDWkZFbWxzcG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYmFlODctODJlYi00NTFmLTgwNDQt MmMyZjBkMjRmOTM2LzEvQ3BlMl9PamNfRlpMWTJvR0hnVmJNd0pqazlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zYmFlODctODJlYi00NTFmLTgwNDQtMmMyZjBkMjRmOTM2 LzEvSlk4SFU4QXp3YThKR0diUWxDWkZFbWxzcG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFZ6vID BAFZ6vQwDQYJKoZIhvcNAQELBQADggEBAFwfwleVfvDwGKa0j6UUmUCZfbF9PqTs fpr232hhE5+A76gYTe3omDqnRaGJMPVbnWrPGdSq8H3LegGfEzHt9JB1LaTh9wt+ YKPoVhOsHaNvaqd4OVKk0BjklY/YgkwXzEHVMnF/1T78Onfs+YSes+BVCQvVeExq If9mq1/grTvDKFUJsRMW37WLBP60EfNlpS5I+V0PYmD2MBsFE295qrYvNsAm6f7j 4wZJ8rHcB1b3sBqMqE5DFXx3HDfP93L8Ra5TSTgcc372i5ScEWj9SSdKgFGaZimi IUGR8DitTUI3E0q/caNDZftrH2DUfesksDY0XMCeyNO+Bqq3mlJxJJU= -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:33 2026 by rpki-client