This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/2h8d-DrVCK64S_qT3ZD8rSRsXeI.roa File: 2h8d-DrVCK64S_qT3ZD8rSRsXeI.roa (raw, json) Hash identifier: /XMM9a+MeJ+qwcYo0Me1RQoxkB8fnAmvN/lrGdFZFIA= Subject key identifier: DA:1F:1D:F8:3A:D5:08:AE:B8:4B:FA:93:DD:90:FC:AD:24:6C:5D:E2 Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 019B797EF9F441CABB011FF8382437D7C0D2 Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/2h8d-DrVCK64S_qT3ZD8rSRsXeI.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44654 IP address blocks: 37.252.208.0/23 maxlen: 23 37.252.208.0/24 maxlen: 24 37.252.209.0/24 maxlen: 24 37.252.210.0/23 maxlen: 23 37.252.210.0/24 maxlen: 24 37.252.211.0/24 maxlen: 24 37.252.212.0/23 maxlen: 23 37.252.212.0/24 maxlen: 24 37.252.213.0/24 maxlen: 24 37.252.215.0/24 maxlen: 24 109.205.8.0/21 maxlen: 24 109.205.9.0/24 maxlen: 24 185.36.124.0/22 maxlen: 24 185.36.124.0/23 maxlen: 23 185.36.126.0/24 maxlen: 24 185.36.127.0/24 maxlen: 24 2a02:d8::/32 maxlen: 48 2a02:d8:8::/48 maxlen: 48 2a02:d8:9::/48 maxlen: 48 2a02:d8:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f9:f4:41:ca:bb:01:1f:f8:38:24:37:d7:c0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da1f1df83ad508aeb84bfa93dd90fcad246c5de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:69:9e:3e:c7:6d:d9:4c:23:97:35:a5:66:02: 42:df:d9:62:b9:53:7d:85:e3:9b:76:1b:a8:04:fc: cd:3f:0c:58:d2:09:18:54:f9:32:5c:0d:9b:d0:43: 49:3b:b4:22:84:24:b7:80:a9:a9:2b:86:e1:ea:2f: 6d:d3:60:d8:56:d1:2f:4d:00:f7:86:ac:97:de:f1: c4:4b:c5:23:4b:ea:bb:60:f0:bf:92:f5:ea:e5:3b: d2:8b:57:e9:51:7f:32:f9:43:38:4c:91:a8:78:ba: 61:3d:52:27:02:84:a7:16:a1:62:7c:e5:46:d1:59: e9:ae:5e:f9:58:dc:82:d7:75:7e:d7:4e:1c:6d:e0: dd:0d:67:20:06:48:51:57:f4:ae:c3:09:6b:2f:9a: be:88:9c:b4:ae:fd:7b:b3:ba:83:3e:e9:b5:c2:31: 59:9d:aa:8e:3b:3e:9f:4e:83:75:67:d9:35:f3:9a: f5:e7:c3:ce:64:91:f0:3d:c3:f1:1c:98:3f:3b:32: 6f:bc:15:62:34:e5:21:25:a1:7f:8c:9b:52:76:e5: de:04:bf:44:10:71:19:9b:5f:a7:78:20:29:68:77: 7c:39:37:58:f1:4c:cb:47:27:93:d6:5a:9d:90:fa: c9:a2:4b:00:28:81:7c:d8:23:1f:e4:bf:04:b0:f2: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1F:1D:F8:3A:D5:08:AE:B8:4B:FA:93:DD:90:FC:AD:24:6C:5D:E2 X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/2h8d-DrVCK64S_qT3ZD8rSRsXeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.208.0-37.252.213.255 37.252.215.0/24 109.205.8.0/21 185.36.124.0/22 IPv6: 2a02:d8::/32 Signature Algorithm: sha256WithRSAEncryption 41:c8:b6:87:6f:a9:33:53:2b:fc:01:e7:a9:4b:7a:43:ef:eb: 5e:7e:6f:9e:10:60:73:90:0d:39:c1:7b:d2:d6:1d:8f:4f:b2: 0e:79:dc:6b:98:94:b9:ff:28:aa:30:36:25:ec:b8:8c:f3:47: c1:7e:df:a6:b7:35:54:fe:90:3d:8b:70:4d:67:f0:d3:83:94: ea:a1:16:0c:34:da:83:f1:25:50:42:da:30:84:31:c6:0b:16: 05:97:de:d7:6d:00:8b:38:e9:96:e0:a4:6b:7c:78:0d:ab:40: 88:ad:58:e6:ce:19:6e:83:89:a3:8d:c6:47:fc:be:82:5c:ee: 07:7c:88:1a:4d:92:b7:e0:db:53:75:29:8d:17:a2:e7:6b:86: f7:e6:74:1b:2f:d5:a7:74:f9:66:d6:1b:e3:49:9b:e4:a5:53: 94:68:cb:c4:14:f2:95:5b:c5:52:7c:2f:f4:8c:45:18:b3:91: ec:ec:62:60:b0:81:41:db:20:07:3f:d4:52:bb:91:d1:30:3d: 1f:8f:c0:79:56:34:74:05:9b:8c:87:2d:f7:8f:49:2f:99:18: 94:6b:4e:76:55:8d:f8:dd:fc:00:fa:65:57:9b:f1:19:3f:f9: 9e:e6:46:be:95:78:85:fc:f6:e4:e6:07:2b:3d:7f:28:95:42: e8:db:a6:0f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt5fvn0Qcq7AR/4OCQ318DSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTFmMWRmODNhZDUwOGFlYjg0YmZhOTNkZDkwZmNhZDI0NmM1ZGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GmePsdt2UwjlzWlZgJC39liuVN9 heObdhuoBPzNPwxY0gkYVPkyXA2b0ENJO7QihCS3gKmpK4bh6i9t02DYVtEvTQD3 hqyX3vHES8UjS+q7YPC/kvXq5TvSi1fpUX8y+UM4TJGoeLphPVInAoSnFqFifOVG 0Vnprl75WNyC13V+104cbeDdDWcgBkhRV/SuwwlrL5q+iJy0rv17s7qDPum1wjFZ naqOOz6fToN1Z9k185r158POZJHwPcPxHJg/OzJvvBViNOUhJaF/jJtSduXeBL9E EHEZm1+neCApaHd8OTdY8UzLRyeT1lqdkPrJoksAKIF82CMf5L8EsPIU4QIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFNofHfg61QiuuEv6k92Q/K0kbF3iMB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvMmg4ZC1EclZDSzY0U19xVDNaRDhyU1JzWGVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAQl/NAD BAEl/NQDBAAl/NcDBANtzQgDBAK5JHwwDQQCAAIwBwMFACoCANgwDQYJKoZIhvcN AQELBQADggEBAEHItodvqTNTK/wB56lLekPv615+b54QYHOQDTnBe9LWHY9Psg55 3GuYlLn/KKowNiXsuIzzR8F+36a3NVT+kD2LcE1n8NODlOqhFgw02oPxJVBC2jCE McYLFgWX3tdtAIs46ZbgpGt8eA2rQIitWObOGW6DiaONxkf8voJc7gd8iBpNkrfg 21N1KY0XoudrhvfmdBsv1ad0+WbWG+NJm+SlU5Roy8QU8pVbxVJ8L/SMRRizkezs YmCwgUHbIAc/1FK7kdEwPR+PwHlWNHQFm4yHLfePSS+ZGJRrTnZVjfjd/AD6ZVeb 8Rk/+Z7mRr6VeIX89uTmBys9fyiVQujbpg8= -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:02 2026 by rpki-client