This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/2DNY0VHjCzgXwvjQNfwSv13IiMs.roa File: 2DNY0VHjCzgXwvjQNfwSv13IiMs.roa (raw, json) Hash identifier: 8hJ99PzYGO7rhyJIiR2XiqspVTy1Mvm/8YAqXh3HlZM= Subject key identifier: D8:33:58:D1:51:E3:0B:38:17:C2:F8:D0:35:FC:12:BF:5D:C8:88:CB Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Certificate serial: 019B7AC8E236F7B80B9866E56CA87F606104 Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/2DNY0VHjCzgXwvjQNfwSv13IiMs.roa Signing time: Thu 01 Jan 2026 18:19:03 +0000 ROA not before: Thu 01 Jan 2026 18:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42927 IP address blocks: 46.22.160.0/24 maxlen: 24 46.22.163.0/24 maxlen: 24 46.22.164.0/23 maxlen: 23 46.22.167.0/24 maxlen: 24 46.22.168.0/24 maxlen: 24 46.22.169.0/24 maxlen: 24 46.22.170.0/24 maxlen: 24 46.22.173.0/24 maxlen: 24 80.82.16.0/23 maxlen: 23 80.82.18.0/23 maxlen: 23 80.82.20.0/23 maxlen: 23 80.82.22.0/23 maxlen: 23 80.82.22.0/24 maxlen: 24 80.82.25.0/24 maxlen: 24 80.82.26.0/23 maxlen: 23 80.82.28.0/24 maxlen: 24 80.82.29.0/24 maxlen: 24 80.82.30.0/23 maxlen: 23 91.189.248.0/21 maxlen: 21 91.189.250.0/24 maxlen: 24 91.189.253.0/24 maxlen: 24 94.124.0.0/21 maxlen: 21 94.124.0.0/24 maxlen: 24 94.124.1.0/24 maxlen: 24 94.124.2.0/23 maxlen: 23 94.124.4.0/24 maxlen: 24 94.124.5.0/24 maxlen: 24 94.124.6.0/24 maxlen: 24 94.124.7.0/24 maxlen: 24 94.124.8.0/21 maxlen: 21 185.28.16.0/22 maxlen: 22 185.28.16.0/24 maxlen: 24 185.28.18.0/23 maxlen: 23 2a02:f78::/32 maxlen: 32 2a02:f7f:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e2:36:f7:b8:0b:98:66:e5:6c:a8:7f:60:61:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Validity Not Before: Jan 1 18:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d83358d151e30b3817c2f8d035fc12bf5dc888cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:d0:82:1d:b0:c1:84:c2:e0:da:31:39:75: 50:2c:e9:a2:c4:38:a7:91:f8:75:68:09:75:47:7f: c7:4a:8a:3d:1b:66:81:da:4f:5d:16:54:1e:a9:53: ee:db:77:9a:d5:24:36:e8:5e:ac:02:fb:97:8f:cd: 29:53:8c:53:24:26:45:12:78:08:43:fa:69:46:1b: 36:66:12:00:76:d6:d1:74:cc:52:bb:58:3e:8c:29: 84:4a:15:fb:68:d1:05:8b:e9:a1:aa:20:f2:34:a9: b9:b7:b5:5f:2c:6d:c5:d3:9e:b9:e6:1e:ce:9d:f0: 9b:e3:bb:fc:d1:68:cc:fb:4a:60:bd:a3:b1:ac:9e: e1:61:09:42:f2:1e:23:ce:c8:3d:a8:c2:77:66:d9: 16:3a:9f:a7:74:ed:89:9f:d7:b1:34:39:08:59:3e: b9:b6:2f:e3:bf:a2:b4:6d:8a:03:2f:34:db:c3:28: 2f:b5:0f:d3:6d:01:b8:73:39:f6:e6:e4:d0:9a:3b: bd:9f:aa:cf:3e:c1:63:5b:cb:c4:3b:10:aa:dd:89: ef:18:4e:86:82:a2:a4:04:05:e2:45:52:93:ac:23: 70:b0:12:aa:7d:c8:14:ad:4f:2e:6e:4a:12:84:64: 19:ff:3d:83:1d:6e:89:18:f0:f8:4f:68:3d:53:41: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:33:58:D1:51:E3:0B:38:17:C2:F8:D0:35:FC:12:BF:5D:C8:88:CB X509v3 Authority Key Identifier: keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/2DNY0VHjCzgXwvjQNfwSv13IiMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.160.0/24 46.22.163.0-46.22.165.255 46.22.167.0-46.22.170.255 46.22.173.0/24 80.82.16.0/21 80.82.25.0-80.82.31.255 91.189.248.0/21 94.124.0.0/20 185.28.16.0/22 IPv6: 2a02:f78::/32 2a02:f7f:14::/48 Signature Algorithm: sha256WithRSAEncryption 24:02:96:43:f0:8e:1e:a8:c9:eb:56:35:bf:b7:1e:97:8f:26: f7:ef:e6:5d:72:59:80:50:4c:cc:d1:8d:14:7b:2d:f3:02:43: a5:c6:92:b8:f8:13:e0:d3:cb:ea:c4:77:8f:1c:ff:9d:26:04: 8c:25:d0:01:2f:7a:26:b9:32:e2:cb:e9:2e:3c:fa:e6:29:57: 8b:65:56:d6:f0:25:a0:2e:37:12:40:09:fa:17:c6:49:91:20: 96:2a:3c:6e:33:4f:3e:5e:7a:14:89:ee:1b:9f:9e:59:89:24: 5a:d8:8b:f4:20:bb:27:85:93:58:72:62:1c:e7:d6:00:79:0b: d3:8d:71:78:4a:4a:09:39:7d:29:b6:c9:86:81:b6:ca:b9:87: 13:63:77:3a:ec:55:1b:f8:dd:ad:00:79:e5:b8:11:16:02:7f: 51:34:22:39:0e:0a:4b:79:6d:a5:d3:fa:e9:67:e3:6a:76:d9: fd:29:1a:7e:d4:ad:04:3f:31:46:c6:92:97:0e:d2:19:bf:93: 23:51:c3:80:ab:57:d8:db:af:6e:52:b9:01:1b:18:f0:b9:7e: f1:46:7c:26:52:bc:b0:a2:bd:b6:7c:d7:30:ca:c8:3c:95:4c: b0:a7:72:65:f1:78:ac:63:76:9c:84:eb:24:25:04:59:3c:03: 7e:60:19:d6 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt6yOI297gLmGblbKh/YGEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll MGEyMzgwHhcNMjYwMTAxMTgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODMzNThkMTUxZTMwYjM4MTdjMmY4ZDAzNWZjMTJiZjVkYzg4OGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdvQgh2wwYTC4NoxOXVQLOmixDin kfh1aAl1R3/HSoo9G2aB2k9dFlQeqVPu23ea1SQ26F6sAvuXj80pU4xTJCZFEngI Q/ppRhs2ZhIAdtbRdMxSu1g+jCmEShX7aNEFi+mhqiDyNKm5t7VfLG3F05655h7O nfCb47v80WjM+0pgvaOxrJ7hYQlC8h4jzsg9qMJ3ZtkWOp+ndO2Jn9exNDkIWT65 ti/jv6K0bYoDLzTbwygvtQ/TbQG4czn25uTQmju9n6rPPsFjW8vEOxCq3YnvGE6G gqKkBAXiRVKTrCNwsBKqfcgUrU8ubkoShGQZ/z2DHW6JGPD4T2g9U0GOqQIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFNgzWNFR4ws4F8L40DX8Er9dyIjLMB8GA1UdIwQY MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt Nzg3OTFjOTM1NmEzLzEvMkROWTBWSGpDemdYd3ZqUU5md1N2MTNJaU1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBUBAIAATBOAwQALhagMAwD BAAuFqMDBAEuFqQwDAMEAC4WpwMEAC4WqgMEAC4WrQMEA1BSEDAMAwQAUFIZAwQF UFIAAwQDW734AwQEXnwAAwQCuRwQMBYEAgACMBADBQAqAg94AwcAKgIPfwAUMA0G CSqGSIb3DQEBCwUAA4IBAQAkApZD8I4eqMnrVjW/tx6Xjyb37+ZdclmAUEzM0Y0U ey3zAkOlxpK4+BPg08vqxHePHP+dJgSMJdABL3omuTLiy+kuPPrmKVeLZVbW8CWg LjcSQAn6F8ZJkSCWKjxuM08+XnoUie4bn55ZiSRa2Iv0ILsnhZNYcmIc59YAeQvT jXF4SkoJOX0ptsmGgbbKuYcTY3c67FUb+N2tAHnluBEWAn9RNCI5DgpLeW2l0/rp Z+Nqdtn9KRp+1K0EPzFGxpKXDtIZv5MjUcOAq1fY269uUrkBGxjwuX7xRnwmUryw or22fNcwysg8lUywp3Jl8XisY3achOskJQRZPAN+YBnW -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:46 2026 by rpki-client