This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/2Bdi4XnLFiihlMAX_gDRRlR7QGM.roa File: 2Bdi4XnLFiihlMAX_gDRRlR7QGM.roa (raw, json) Hash identifier: VjiQO9aLNwn7skSw+PzxXhanmj53IG3y+tedhX+Sjas= Subject key identifier: D8:17:62:E1:79:CB:16:28:A1:94:C0:17:FE:00:D1:46:54:7B:40:63 Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Certificate serial: 019B7EA7294F8F03CE507BCE9209E58B53BD Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/2Bdi4XnLFiihlMAX_gDRRlR7QGM.roa Signing time: Fri 02 Jan 2026 12:20:42 +0000 ROA not before: Fri 02 Jan 2026 12:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31493 IP address blocks: 185.76.39.0/24 maxlen: 24 212.124.192.0/19 maxlen: 19 212.124.192.0/20 maxlen: 20 212.124.208.0/22 maxlen: 22 2a00:19e8::/29 maxlen: 29 2a00:19e8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:29:4f:8f:03:ce:50:7b:ce:92:09:e5:8b:53:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Validity Not Before: Jan 2 12:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d81762e179cb1628a194c017fe00d146547b4063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cf:53:d6:7e:ec:b8:52:b8:ad:73:01:ec:39: d8:e6:c3:99:83:ca:df:15:7b:4d:6b:6a:68:58:94: 9b:68:92:0f:ef:5b:c7:2f:c1:53:60:b2:7b:51:ac: 35:48:86:9c:db:7f:67:1f:06:d4:07:5e:43:04:e9: e2:66:69:81:ab:77:98:e7:18:a7:fe:1e:9b:9c:82: b1:27:28:12:a8:b3:0f:fe:bc:60:2b:b4:8a:39:47: 3c:f7:ec:18:bc:5d:5b:c3:5e:1a:02:d2:00:3e:b1: f7:a0:f1:57:f4:1b:f3:50:d9:51:5d:23:0b:7c:62: 40:d1:3a:1d:46:59:3b:27:39:b9:bf:0f:a0:d8:89: 9c:0d:41:9e:77:2e:f8:8a:73:23:65:6b:99:c3:f3: 18:f6:b0:09:d1:72:a1:45:ea:4f:7e:fb:32:b3:73: 8d:e9:42:c1:52:da:02:6b:02:c7:c4:4b:2f:3a:0b: e1:dd:f0:f6:34:3c:ab:95:12:7c:66:ee:32:f1:54: ad:b3:78:c3:72:7a:cc:de:c8:c1:97:ce:43:72:c5: 0f:a6:4b:2b:c6:37:7a:47:ff:2b:5f:80:6a:4d:3d: 2b:f1:8c:f6:64:ad:b4:dd:c1:e5:1a:5b:ad:a8:ac: 10:ad:22:74:07:24:d4:74:77:db:04:cd:f0:4c:7e: b0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:17:62:E1:79:CB:16:28:A1:94:C0:17:FE:00:D1:46:54:7B:40:63 X509v3 Authority Key Identifier: keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/2Bdi4XnLFiihlMAX_gDRRlR7QGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.39.0/24 212.124.192.0/19 IPv6: 2a00:19e8::/29 Signature Algorithm: sha256WithRSAEncryption b1:da:47:ab:d5:3e:c8:06:57:af:1a:f7:d5:52:e0:fa:7d:63: 83:66:0c:a5:a3:8e:09:00:6e:9c:99:ef:38:e0:98:4c:ab:ed: ab:6f:41:63:3c:f4:ba:8d:89:3f:1f:9a:be:d0:db:dd:6e:46: a1:05:66:0e:8e:5e:7d:d8:7f:30:96:c3:c9:af:2c:4f:2c:06: b8:b8:45:e2:23:2b:73:7d:ae:ee:87:ed:5e:a1:d8:a0:8b:c3: 1c:f7:98:62:33:cb:f5:a2:f5:69:59:f5:94:fa:50:16:0f:88: a6:05:c9:31:52:70:ad:e5:5c:c7:8c:5b:5a:dd:fe:f0:d3:9f: fc:89:c3:9c:4c:ed:fd:5a:53:24:2e:98:49:02:1a:90:d1:e8: e3:e0:be:46:36:96:59:c2:21:32:bd:62:d7:21:1f:24:dc:4b: 08:3a:cc:0e:72:bc:49:65:35:6d:61:97:09:49:32:c3:75:ba: bb:9e:aa:4a:96:4a:40:d8:18:84:e5:6d:73:1e:b8:10:eb:64: 9d:be:d1:1c:69:4d:8e:9e:69:bf:25:d8:f1:fe:70:cf:e4:80: e8:35:9a:8c:5f:66:b8:c3:2f:ac:63:c3:fd:07:2d:f5:b4:bd: fc:11:19:7b:b6:fe:7e:c1:d4:69:7e:3a:8b:1d:91:57:95:15: a9:90:19:76 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+pylPjwPOUHvOkgnli1O9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1 MGQ4MTMwHhcNMjYwMTAyMTIyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODE3NjJlMTc5Y2IxNjI4YTE5NGMwMTdmZTAwZDE0NjU0N2I0MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo89T1n7suFK4rXMB7DnY5sOZg8rf FXtNa2poWJSbaJIP71vHL8FTYLJ7Uaw1SIac239nHwbUB15DBOniZmmBq3eY5xin /h6bnIKxJygSqLMP/rxgK7SKOUc89+wYvF1bw14aAtIAPrH3oPFX9BvzUNlRXSML fGJA0TodRlk7Jzm5vw+g2ImcDUGedy74inMjZWuZw/MY9rAJ0XKhRepPfvsys3ON 6ULBUtoCawLHxEsvOgvh3fD2NDyrlRJ8Zu4y8VSts3jDcnrM3sjBl85DcsUPpksr xjd6R/8rX4BqTT0r8Yz2ZK203cHlGlutqKwQrSJ0ByTUdHfbBM3wTH6wAQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFNgXYuF5yxYooZTAF/4A0UZUe0BjMB8GA1UdIwQY MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0 LTJmYmIyMDhhZDE4Mi8xLzJCZGk0WG5MRmlpaGxNQVhfZ0RSUmxSN1FHTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0LTJmYmIyMDhhZDE4 Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAC5TCcD BAXUfMAwDQQCAAIwBwMFAyoAGegwDQYJKoZIhvcNAQELBQADggEBALHaR6vVPsgG V68a99VS4Pp9Y4NmDKWjjgkAbpyZ7zjgmEyr7atvQWM89LqNiT8fmr7Q291uRqEF Zg6OXn3YfzCWw8mvLE8sBri4ReIjK3N9ru6H7V6h2KCLwxz3mGIzy/Wi9WlZ9ZT6 UBYPiKYFyTFScK3lXMeMW1rd/vDTn/yJw5xM7f1aUyQumEkCGpDR6OPgvkY2llnC ITK9YtchHyTcSwg6zA5yvEllNW1hlwlJMsN1urueqkqWSkDYGITlbXMeuBDrZJ2+ 0RxpTY6eab8l2PH+cM/kgOg1moxfZrjDL6xjw/0HLfW0vfwRGXu2/n7B1Gl+Oosd kVeVFamQGXY= -----END CERTIFICATE-----Generated at Sun Jan 25 13:42:54 2026 by rpki-client