This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/w2BN5Okc8CAi7WJd5D6lCmGLa9o.roa File: w2BN5Okc8CAi7WJd5D6lCmGLa9o.roa (raw, json) Hash identifier: U6ZbAgCOETb02sjUGl8fc/vrWrB/9CMYg74fhgDMPO4= Subject key identifier: C3:60:4D:E4:E9:1C:F0:20:22:ED:62:5D:E4:3E:A5:0A:61:8B:6B:DA Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445 Certificate serial: 019B7C11D86D67CC271D68787F20D2AD4481 Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/w2BN5Okc8CAi7WJd5D6lCmGLa9o.roa Signing time: Fri 02 Jan 2026 00:18:22 +0000 ROA not before: Fri 02 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 80.241.56.0/21 maxlen: 24 80.241.60.0/24 maxlen: 24 91.198.250.0/24 maxlen: 24 91.223.20.0/24 maxlen: 24 185.97.172.0/22 maxlen: 24 195.10.208.0/24 maxlen: 24 2001:67c:2050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d8:6d:67:cc:27:1d:68:78:7f:20:d2:ad:44:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445 Validity Not Before: Jan 2 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3604de4e91cf02022ed625de43ea50a618b6bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8c:08:2b:4a:67:50:00:da:16:c5:2b:b9:bf: 2d:e4:51:fd:85:dc:a3:bb:18:8f:3d:90:72:05:f0: 53:10:b9:76:1c:5e:41:4c:44:d1:99:79:f1:40:77: cc:db:b3:cc:45:29:28:ff:3a:a8:80:4f:26:3e:4b: e3:d7:ed:02:df:8c:80:fb:eb:8f:f9:3c:0e:87:39: f4:55:6a:14:77:c1:22:4a:fb:62:b5:55:72:cc:4c: d9:57:d0:26:f1:3f:6e:31:05:60:3a:f2:92:d1:c5: 08:7d:5c:bb:50:da:34:61:14:e3:55:da:dc:d3:f2: 73:da:9d:84:ac:b8:44:66:c6:1f:10:ff:5f:f6:28: 99:24:01:0c:69:17:0d:0f:84:b2:f0:55:a9:99:3d: c4:50:c2:2a:2d:b4:4b:07:45:fe:17:d0:c7:d3:39: 75:5a:cd:6f:69:3b:92:da:02:44:cc:8e:71:e6:f8: 4a:c5:52:49:90:f3:1b:aa:99:51:7d:18:13:46:d7: 3d:b6:c7:6b:e8:0d:76:e0:b1:92:77:74:ef:8c:7e: d6:88:b0:22:81:b1:0b:43:40:5e:0c:8c:6e:1b:82: 68:af:dd:01:18:c7:56:61:08:97:36:e1:f7:e8:21: ed:01:c8:44:0a:5b:8e:d7:96:39:d7:77:ba:9c:2b: 49:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:60:4D:E4:E9:1C:F0:20:22:ED:62:5D:E4:3E:A5:0A:61:8B:6B:DA X509v3 Authority Key Identifier: keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/w2BN5Okc8CAi7WJd5D6lCmGLa9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.241.56.0/21 91.198.250.0/24 91.223.20.0/24 185.97.172.0/22 195.10.208.0/24 IPv6: 2001:67c:2050::/48 Signature Algorithm: sha256WithRSAEncryption a9:67:02:37:0f:69:06:bc:c5:03:57:ab:60:e8:5e:65:dc:b2: 38:c5:d1:b0:44:1d:91:ee:75:ad:a5:20:74:a4:7b:d4:04:e0: 84:49:43:7a:5c:14:0f:8d:c5:1e:a2:5d:43:d7:13:d4:98:e7: d6:91:1f:89:6b:ad:b9:8f:3b:0b:65:23:85:e3:11:d1:1f:01: 54:2e:35:71:c1:66:ae:61:85:00:b2:c7:04:c3:e4:63:95:d5: 40:08:24:14:ee:12:96:50:7b:34:17:3f:85:6a:cd:7f:4a:24: 33:7f:73:fa:c8:93:ef:3c:7c:2d:1c:a2:d2:3e:c1:a1:05:69: 81:92:d8:9d:97:39:cf:83:e7:6f:f1:b1:c0:ea:e1:10:d1:e7: 6e:0e:a8:aa:3e:9b:4a:a6:a7:85:16:b5:99:f5:87:24:1c:73: 2f:f8:d1:61:0a:34:58:3a:14:2f:39:fe:d9:34:b5:b5:06:c1: c3:e6:a4:53:8f:fb:fe:3e:30:26:4c:d8:58:24:1b:29:59:00: 23:1e:cd:24:01:ad:f6:fa:41:b6:52:9c:0a:e0:4f:f0:b5:70: 3c:fb:82:67:b2:2e:44:9a:de:d7:14:f9:31:e5:0b:85:4b:9d: 68:9c:a4:0d:58:6b:2c:2f:25:a6:1a:26:f5:a9:9f:f3:02:05: 77:ce:80:d2 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt8EdhtZ8wnHWh4fyDSrUSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NzllYjlkZDYyZDUxYWZhNTAxMmVmYTFhOWQxMGM2NjQw MGM0NDUwHhcNMjYwMTAyMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzYwNGRlNGU5MWNmMDIwMjJlZDYyNWRlNDNlYTUwYTYxOGI2YmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YwIK0pnUADaFsUrub8t5FH9hdyj uxiPPZByBfBTELl2HF5BTETRmXnxQHfM27PMRSko/zqogE8mPkvj1+0C34yA++uP +TwOhzn0VWoUd8EiSvtitVVyzEzZV9Am8T9uMQVgOvKS0cUIfVy7UNo0YRTjVdrc 0/Jz2p2ErLhEZsYfEP9f9iiZJAEMaRcND4Sy8FWpmT3EUMIqLbRLB0X+F9DH0zl1 Ws1vaTuS2gJEzI5x5vhKxVJJkPMbqplRfRgTRtc9tsdr6A124LGSd3TvjH7WiLAi gbELQ0BeDIxuG4Jor90BGMdWYQiXNuH36CHtAchECluO15Y513e6nCtJWwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFMNgTeTpHPAgIu1iXeQ+pQphi2vaMB8GA1UdIwQY MBaAFHh5653WLVGvpQEu+hqdEMZkAMRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yYzU4ZmEtMDZkNS00ZDM5LThiNWQt NzRhY2Y4MmFmNTk2LzEvdzJCTjVPa2M4Q0FpN1dKZDVENmxDbUdMYTlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yYzU4ZmEtMDZkNS00ZDM5LThiNWQtNzRhY2Y4MmFmNTk2 LzEvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQDUPE4AwQA W8b6AwQAW98UAwQCuWGsAwQAwwrQMA8EAgACMAkDBwAgAQZ8IFAwDQYJKoZIhvcN AQELBQADggEBAKlnAjcPaQa8xQNXq2DoXmXcsjjF0bBEHZHuda2lIHSke9QE4IRJ Q3pcFA+NxR6iXUPXE9SY59aRH4lrrbmPOwtlI4XjEdEfAVQuNXHBZq5hhQCyxwTD 5GOV1UAIJBTuEpZQezQXP4VqzX9KJDN/c/rIk+88fC0cotI+waEFaYGS2J2XOc+D 52/xscDq4RDR524OqKo+m0qmp4UWtZn1hyQccy/40WEKNFg6FC85/tk0tbUGwcPm pFOP+/4+MCZM2FgkGylZACMezSQBrfb6QbZSnArgT/C1cDz7gmeyLkSa3tcU+THl C4VLnWicpA1YaywvJaYaJvWpn/MCBXfOgNI= -----END CERTIFICATE-----Generated at Sun Jan 25 10:28:04 2026 by rpki-client