This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/2C-X2uadj7WRXm8t5tJaxHqVG08.roa File: 2C-X2uadj7WRXm8t5tJaxHqVG08.roa (raw, json) Hash identifier: gQBfeyRFTlWRJ0NIJIiAdSoSCyYg2yZW/gURVO4/TQE= Subject key identifier: D8:2F:97:DA:E6:9D:8F:B5:91:5E:6F:2D:E6:D2:5A:C4:7A:95:1B:4F Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019B7C804035F707E688C854B73FB183917B Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/2C-X2uadj7WRXm8t5tJaxHqVG08.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204700 IP address blocks: 185.241.104.0/22 maxlen: 22 185.241.104.0/24 maxlen: 24 185.241.105.0/24 maxlen: 24 185.241.106.0/24 maxlen: 24 185.241.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:40:35:f7:07:e6:88:c8:54:b7:3f:b1:83:91:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d82f97dae69d8fb5915e6f2de6d25ac47a951b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ef:1a:5b:9a:ee:32:2b:2b:53:4b:22:ed:7a: 9f:67:c2:ac:f8:40:5d:c3:53:1f:49:8a:92:b6:32: e6:59:5f:fb:9d:e0:32:8f:54:a9:33:d3:1e:3d:bf: 65:ef:ad:4a:53:63:72:6c:7b:ff:d6:56:a7:41:48: 18:66:b2:8c:27:c3:9c:d1:4a:a4:84:30:d5:cd:17: ed:4f:68:b3:88:56:ef:11:67:0b:ea:14:65:c3:59: 43:d8:d5:ad:0c:aa:bd:2d:b2:17:45:3b:5a:f8:dd: 03:35:13:2d:c8:58:11:59:dc:2b:89:2a:c1:df:6e: 1a:67:e7:d3:c9:7a:17:e6:3b:3a:a0:ba:d6:99:e6: d5:4f:2c:2e:41:26:da:24:7d:d6:38:a5:a5:74:02: ba:98:d7:69:91:c8:29:c0:9d:2e:d7:0f:fd:ad:7e: eb:9a:7d:56:39:06:5c:50:f4:01:81:74:7d:11:ad: 82:bf:77:a8:23:ca:9a:eb:2b:7c:88:c1:0d:e7:f6: 07:16:ab:53:79:20:0f:a8:47:8f:a0:e7:9f:57:8f: 10:a8:1c:2e:cc:db:6e:a3:46:ac:83:e6:d7:5e:cc: 0b:1c:8b:00:91:8d:57:23:c3:1e:a3:01:06:32:ba: 55:3c:5b:fc:b1:20:ae:42:e1:65:cc:cc:ef:19:e9: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2F:97:DA:E6:9D:8F:B5:91:5E:6F:2D:E6:D2:5A:C4:7A:95:1B:4F X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/2C-X2uadj7WRXm8t5tJaxHqVG08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.104.0/22 Signature Algorithm: sha256WithRSAEncryption 63:c9:04:02:27:d4:47:30:71:35:2b:8e:2d:ee:9c:59:f6:c0: 4f:d9:bd:11:54:e7:06:ec:a4:04:01:b3:10:f3:5a:29:9b:0b: f3:bd:49:6e:c0:1d:24:80:c2:6e:e5:ef:42:60:1b:e2:b6:4e: 8b:84:2a:a3:aa:e2:c0:a0:5c:bb:e9:e9:99:02:0f:c1:50:43: b4:c1:8e:85:ae:48:bf:1a:79:92:ad:77:a8:88:48:6a:53:b1: 6a:11:6f:6f:6b:cf:66:db:a5:5a:b7:57:7a:ba:7b:a1:52:61: 61:2a:3c:30:23:02:4f:42:a5:04:25:75:b6:9b:f6:67:26:1d: b2:60:d5:d3:fb:19:da:c6:18:1d:f5:8c:5b:49:14:47:74:ef: 62:6d:57:1d:31:bf:83:b2:e3:fb:d7:c3:7c:20:57:d2:db:74: fe:44:aa:fd:dc:36:46:28:a6:d4:e7:b6:b1:7e:a1:a6:32:96: 28:a6:d0:80:32:06:20:0a:4a:e5:e4:0a:9e:41:28:81:b6:ed: 21:b3:13:4d:e8:a0:a0:02:e0:98:03:17:3b:c9:16:92:96:25: 93:07:59:dd:1f:5e:49:55:cb:6b:4f:82:df:f7:72:c3:e4:b9: 3e:cd:7c:2c:b0:67:26:4e:93:e5:f7:04:50:7a:61:3d:97:00: 20:4b:94:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEA19wfmiMhUtz+xg5F7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODJmOTdkYWU2OWQ4ZmI1OTE1ZTZmMmRlNmQyNWFjNDdhOTUxYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO8aW5ruMisrU0si7XqfZ8Ks+EBd w1MfSYqStjLmWV/7neAyj1SpM9MePb9l761KU2NybHv/1lanQUgYZrKMJ8Oc0Uqk hDDVzRftT2iziFbvEWcL6hRlw1lD2NWtDKq9LbIXRTta+N0DNRMtyFgRWdwriSrB 324aZ+fTyXoX5js6oLrWmebVTywuQSbaJH3WOKWldAK6mNdpkcgpwJ0u1w/9rX7r mn1WOQZcUPQBgXR9Ea2Cv3eoI8qa6yt8iMEN5/YHFqtTeSAPqEePoOefV48QqBwu zNtuo0asg+bXXswLHIsAkY1XI8MeowEGMrpVPFv8sSCuQuFlzMzvGeni+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNgvl9rmnY+1kV5vLebSWsR6lRtPMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvMkMtWDJ1YWRqN1dSWG04dDV0SmF4SHFWRzA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufFoMA0G CSqGSIb3DQEBCwUAA4IBAQBjyQQCJ9RHMHE1K44t7pxZ9sBP2b0RVOcG7KQEAbMQ 81opmwvzvUluwB0kgMJu5e9CYBvitk6LhCqjquLAoFy76emZAg/BUEO0wY6Frki/ GnmSrXeoiEhqU7FqEW9va89m26Vat1d6unuhUmFhKjwwIwJPQqUEJXW2m/ZnJh2y YNXT+xnaxhgd9YxbSRRHdO9ibVcdMb+DsuP718N8IFfS23T+RKr93DZGKKbU57ax fqGmMpYoptCAMgYgCkrl5AqeQSiBtu0hsxNN6KCgAuCYAxc7yRaSliWTB1ndH15J VctrT4Lf93LD5Lk+zXwssGcmTpPl9wRQemE9lwAgS5Rw -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:36 2026 by rpki-client