This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/2JrvCfQOV4ZXnrTIWBdXJFkLuUs.roa File: 2JrvCfQOV4ZXnrTIWBdXJFkLuUs.roa (raw, json) Hash identifier: oY8xJamfMnGEV8NndDLYA4TQsbfWIC33a4tru6ptivk= Subject key identifier: D8:9A:EF:09:F4:0E:57:86:57:9E:B4:C8:58:17:57:24:59:0B:B9:4B Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401 Certificate serial: 019B7758B515B77E69093D83256B30F01C0B Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/2JrvCfQOV4ZXnrTIWBdXJFkLuUs.roa Signing time: Thu 01 Jan 2026 02:17:40 +0000 ROA not before: Thu 01 Jan 2026 02:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6735 IP address blocks: 62.68.0.0/19 maxlen: 24 195.245.0.0/18 maxlen: 24 2a09:48c0::/29 maxlen: 29 2a0e:ed80::/29 maxlen: 29 2a0f:8040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b5:15:b7:7e:69:09:3d:83:25:6b:30:f0:1c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401 Validity Not Before: Jan 1 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d89aef09f40e5786579eb4c858175724590bb94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:f0:d2:69:e5:0e:47:af:16:4c:c7:00:4e: 0c:fc:f4:65:46:92:3e:b8:65:bd:70:e8:2d:20:23: b9:6e:85:a2:8f:70:45:0a:41:f7:d3:88:c7:f8:29: f9:2b:18:d3:5e:41:5e:6c:81:b6:06:7e:70:6c:04: 64:93:ec:ce:71:96:6f:5f:95:49:bc:3c:ec:02:40: ec:50:e7:5a:d3:da:5d:36:9a:53:f2:d9:18:4e:65: a8:06:66:7b:92:1e:f1:a8:21:56:a7:06:c2:45:fc: b5:09:8f:fb:d2:e0:3c:4b:72:4c:c2:f3:3c:3f:35: 5d:98:41:8a:20:d4:c6:6a:54:82:fd:68:7f:55:be: 6e:7f:c0:82:16:56:2a:27:c6:df:ea:d0:59:e7:46: b9:a8:08:23:f8:2f:a6:0d:67:dc:8e:c4:2c:55:0c: 7e:ba:45:55:43:8d:c7:89:a5:cd:60:35:f7:76:47: 37:62:09:97:84:bf:50:b9:3f:c4:d2:60:39:2d:4a: 3f:4e:de:16:14:d4:30:10:4d:8e:a0:20:7a:84:95: 4a:8d:ad:ef:50:93:18:58:e1:53:96:61:81:14:29: 70:29:19:e6:22:e5:67:4a:1a:0f:1c:95:49:da:45: 0a:1f:e6:11:7e:75:9f:a2:82:65:e7:0c:6c:af:a6: 84:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9A:EF:09:F4:0E:57:86:57:9E:B4:C8:58:17:57:24:59:0B:B9:4B X509v3 Authority Key Identifier: keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/2JrvCfQOV4ZXnrTIWBdXJFkLuUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.68.0.0/19 195.245.0.0/18 IPv6: 2a09:48c0::/29 2a0e:ed80::/29 2a0f:8040::/29 Signature Algorithm: sha256WithRSAEncryption 49:64:ed:d7:5e:b0:27:43:05:66:7a:41:c5:36:60:f3:13:bb: 4d:c2:3f:77:d6:29:27:2c:8b:07:3a:de:dd:b6:99:3e:6b:02: 52:9c:bb:0e:b8:ce:c1:c3:ff:ed:d5:42:a1:4b:b3:f5:95:52: 23:2d:12:f5:f3:db:89:b9:10:32:04:ba:b1:2a:ee:ca:a8:e7: e1:d2:01:59:65:9a:27:bb:3a:1d:a7:7a:72:0f:3f:ab:15:c9: 37:65:4c:9f:2e:87:0e:99:91:a8:e3:a2:3a:a8:95:a8:8f:cd: 4c:d0:d1:ae:4b:fd:bc:fe:75:c6:77:ae:9c:8f:0c:73:8e:7d: 28:6b:40:02:0e:2c:73:45:87:47:1a:b2:ec:e1:25:e4:6e:bf: bb:0e:40:c6:c9:bc:a4:db:88:0d:45:89:a4:da:2a:0d:e6:de: c4:30:66:a6:08:6d:2e:cb:fc:fb:a0:85:a2:62:b2:21:78:c4: 62:0a:2b:da:42:59:a8:74:62:87:6a:1a:db:f8:d7:25:a1:ea: dd:f6:c3:7b:a1:82:24:4d:93:1a:46:a5:e3:3d:e2:66:c1:9b: bc:0f:44:b5:76:b9:32:de:08:4b:13:31:89:c8:ed:7b:7b:ac: 66:d7:9a:63:da:99:ba:44:e0:24:b6:aa:dc:72:50:42:f7:8b: 5f:cf:21:cd -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt3WLUVt35pCT2DJWsw8BwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjY2Q1MmE2YTdmOTU3MTcxYjE1ZjdiZTVlMjA5MTY0Mjgz Njk0MDEwHhcNMjYwMTAxMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODlhZWYwOWY0MGU1Nzg2NTc5ZWI0Yzg1ODE3NTcyNDU5MGJiOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlszw0mnlDkevFkzHAE4M/PRlRpI+ uGW9cOgtICO5boWij3BFCkH304jH+Cn5KxjTXkFebIG2Bn5wbARkk+zOcZZvX5VJ vDzsAkDsUOda09pdNppT8tkYTmWoBmZ7kh7xqCFWpwbCRfy1CY/70uA8S3JMwvM8 PzVdmEGKINTGalSC/Wh/Vb5uf8CCFlYqJ8bf6tBZ50a5qAgj+C+mDWfcjsQsVQx+ ukVVQ43HiaXNYDX3dkc3YgmXhL9QuT/E0mA5LUo/Tt4WFNQwEE2OoCB6hJVKja3v UJMYWOFTlmGBFClwKRnmIuVnShoPHJVJ2kUKH+YRfnWfooJl5wxsr6aEbQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFNia7wn0DleGV560yFgXVyRZC7lLMB8GA1UdIwQY MBaAFLzNUqan+VcXGxX3vl4gkWQoNpQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lZWFiOWEtZDIwNy00YjJlLWE1MjUt ZTgyM2UxN2JiNWNjLzEvMkpydkNmUU9WNFpYbnJUSVdCZFhKRmtMdVVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9lZWFiOWEtZDIwNy00YjJlLWE1MjUtZTgyM2UxN2JiNWNj LzEvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTASBAIAATAMAwQFPkQAAwQG w/UAMBsEAgACMBUDBQMqCUjAAwUDKg7tgAMFAyoPgEAwDQYJKoZIhvcNAQELBQAD ggEBAElk7ddesCdDBWZ6QcU2YPMTu03CP3fWKScsiwc63t22mT5rAlKcuw64zsHD /+3VQqFLs/WVUiMtEvXz24m5EDIEurEq7sqo5+HSAVllmie7Oh2nenIPP6sVyTdl TJ8uhw6ZkajjojqolaiPzUzQ0a5L/bz+dcZ3rpyPDHOOfShrQAIOLHNFh0casuzh JeRuv7sOQMbJvKTbiA1FiaTaKg3m3sQwZqYIbS7L/PughaJisiF4xGIKK9pCWah0 YodqGtv41yWh6t32w3uhgiRNkxpGpeM94mbBm7wPRLV2uTLeCEsTMYnI7Xt7rGbX mmPambpE4CS2qtxyUEL3i1/PIc0= -----END CERTIFICATE-----Generated at Mon Jan 26 18:53:39 2026 by rpki-client