This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/S2LndCNixy083ZTjbNt_shK0ePU.roa File: S2LndCNixy083ZTjbNt_shK0ePU.roa (raw, json) Hash identifier: /dwxq7l7Ax9j0ZmPcwmkPrxtmD1WAiHSHcUMVp1m05I= Subject key identifier: 4B:62:E7:74:23:62:C7:2D:3C:DD:94:E3:6C:DB:7F:B2:12:B4:78:F5 Certificate issuer: /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686 Certificate serial: 019B7D5CE3E2F744CCEF78A3E1222C23E07B Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/S2LndCNixy083ZTjbNt_shK0ePU.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50818 IP address blocks: 82.196.16.0/22 maxlen: 24 82.196.16.0/24 maxlen: 24 82.196.17.0/24 maxlen: 24 82.196.18.0/24 maxlen: 24 82.196.19.0/24 maxlen: 24 82.196.20.0/22 maxlen: 22 82.196.20.0/24 maxlen: 24 185.9.21.0/24 maxlen: 24 185.20.42.0/24 maxlen: 24 217.18.82.0/24 maxlen: 24 2a03:42c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e3:e2:f7:44:cc:ef:78:a3:e1:22:2c:23:e0:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b62e7742362c72d3cdd94e36cdb7fb212b478f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:63:29:5b:63:c1:34:42:75:48:ef:ae:7b: 58:44:27:d2:6e:d6:c7:ab:ec:e9:07:09:5d:53:81: 5b:a9:9d:68:f8:f1:f8:66:2b:bf:10:3f:c9:a3:4d: 1d:9e:ba:12:88:35:1d:e7:7a:cd:93:7f:00:f3:b8: db:21:b0:7d:e9:de:33:8a:13:1f:d3:01:61:ed:9a: 6a:d9:7d:1c:97:3f:3e:79:31:bb:f0:26:3f:93:a8: 29:01:16:ed:ee:32:c6:05:c4:59:3c:a7:7e:10:e5: 87:b3:02:40:f7:e1:29:3d:89:a8:d7:7f:9e:7b:87: cf:83:1a:e4:13:75:e5:78:7f:b9:63:37:6b:b0:6c: e6:9f:f1:03:cb:72:f5:b7:89:8a:c9:7b:fa:4c:d4: 86:e8:c4:61:d5:6a:83:da:0c:e9:b4:9a:51:b3:61: 9d:6a:5c:87:87:ec:a0:93:37:62:ff:f4:7b:00:d6: bb:9d:57:d7:56:5e:c9:4d:e4:6b:7e:d8:85:ea:5a: 8e:e7:4e:c0:01:e0:c7:3e:7d:ad:d2:f2:78:3d:3a: fb:86:a0:7a:19:fb:30:b7:5c:a2:d8:57:74:be:f0: 1b:ce:0a:05:1e:48:07:fd:72:7b:55:b6:cb:1c:03: 52:7d:98:ca:a4:ca:f0:91:c8:f7:de:52:6d:c4:0d: 85:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:62:E7:74:23:62:C7:2D:3C:DD:94:E3:6C:DB:7F:B2:12:B4:78:F5 X509v3 Authority Key Identifier: keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/S2LndCNixy083ZTjbNt_shK0ePU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.196.16.0/21 185.9.21.0/24 185.20.42.0/24 217.18.82.0/24 IPv6: 2a03:42c0::/32 Signature Algorithm: sha256WithRSAEncryption bc:95:af:c6:d0:af:b1:38:13:ec:ef:24:96:01:81:38:40:f8: ae:cd:4b:38:71:5a:56:c4:48:1f:43:2b:97:bc:96:80:69:b7: 3c:a7:0d:b4:b3:c5:93:d5:66:88:d5:50:00:73:b6:24:fe:5b: 55:6a:4b:30:d4:e1:68:87:4d:1d:1d:65:6a:9e:c6:15:5b:ff: 64:fa:ab:c6:65:e2:a7:14:61:78:65:2e:34:c0:19:31:96:99: 2c:9c:22:50:1c:80:99:9e:46:3d:9b:ac:91:48:8d:d0:4f:0b: 28:b9:85:e8:a5:0c:b5:8b:fd:de:28:73:60:bc:a2:dc:7e:0f: aa:ed:43:0f:05:e9:83:c4:b6:bb:8e:de:c0:7d:eb:7c:b3:13: 6e:73:4b:25:5a:a0:0b:00:af:66:54:87:29:90:5c:4d:ae:37: 07:a6:de:80:3f:57:f0:f7:21:51:a8:32:eb:fe:53:06:90:ba: 87:98:2d:09:f6:dd:e3:bf:30:66:70:2b:1c:c4:f3:ce:1d:69: 64:cd:7f:18:e2:cf:91:b9:dc:99:43:70:54:5b:89:c6:2b:8a: aa:63:b3:1d:a5:a2:e8:ea:77:91:6f:29:a6:88:1c:8f:6e:2e: 5c:d2:5e:c4:e3:54:51:7c:d7:e0:c0:94:42:ad:1d:84:30:67: 62:f6:15:71 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9XOPi90TM73ij4SIsI+B7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NWFlNmM1OWMzNWU0NjAzODdkYWViY2ZiODY2ZjhhMWVi YjM2ODYwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjYyZTc3NDIzNjJjNzJkM2NkZDk0ZTM2Y2RiN2ZiMjEyYjQ3OGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCZjKVtjwTRCdUjvrntYRCfSbtbH q+zpBwldU4FbqZ1o+PH4Ziu/ED/Jo00dnroSiDUd53rNk38A87jbIbB96d4zihMf 0wFh7Zpq2X0clz8+eTG78CY/k6gpARbt7jLGBcRZPKd+EOWHswJA9+EpPYmo13+e e4fPgxrkE3XleH+5YzdrsGzmn/EDy3L1t4mKyXv6TNSG6MRh1WqD2gzptJpRs2Gd alyHh+ygkzdi//R7ANa7nVfXVl7JTeRrftiF6lqO507AAeDHPn2t0vJ4PTr7hqB6 Gfswt1yi2Fd0vvAbzgoFHkgH/XJ7VbbLHANSfZjKpMrwkcj33lJtxA2FaQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFEti53QjYsctPN2U42zbf7IStHj1MB8GA1UdIwQY MBaAFJha5sWcNeRgOH2uvPuGb4oeuzaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEt YzdmZTYyMjI3ZGYzLzEvUzJMbmRDTml4eTA4M1pUamJOdF9zaEswZVBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEtYzdmZTYyMjI3ZGYz LzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDUsQQAwQA uQkVAwQAuRQqAwQA2RJSMA0EAgACMAcDBQAqA0LAMA0GCSqGSIb3DQEBCwUAA4IB AQC8la/G0K+xOBPs7ySWAYE4QPiuzUs4cVpWxEgfQyuXvJaAabc8pw20s8WT1WaI 1VAAc7Yk/ltVaksw1OFoh00dHWVqnsYVW/9k+qvGZeKnFGF4ZS40wBkxlpksnCJQ HICZnkY9m6yRSI3QTwsouYXopQy1i/3eKHNgvKLcfg+q7UMPBemDxLa7jt7Afet8 sxNuc0slWqALAK9mVIcpkFxNrjcHpt6AP1fw9yFRqDLr/lMGkLqHmC0J9t3jvzBm cCscxPPOHWlkzX8Y4s+RudyZQ3BUW4nGK4qqY7MdpaLo6neRbymmiByPbi5c0l7E 41RRfNfgwJRCrR2EMGdi9hVx -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:54 2026 by rpki-client