This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2Dxv0ceuVCSvAt-3A4C9QygU5XY.roa File: 2Dxv0ceuVCSvAt-3A4C9QygU5XY.roa (raw, json) Hash identifier: 5iqMjEOKyyRj3l0yjqJtUnr/kuoRBNvH0NB/t4tRl9Y= Subject key identifier: D8:3C:6F:D1:C7:AE:54:24:AF:02:DF:B7:03:80:BD:43:28:14:E5:76 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C6833FB6B4F1759FB9A18130D72F1D Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2Dxv0ceuVCSvAt-3A4C9QygU5XY.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 84.236.196.0/24 maxlen: 24 88.148.29.0/24 maxlen: 24 93.115.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:83:3f:b6:b4:f1:75:9f:b9:a1:81:30:d7:2f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d83c6fd1c7ae5424af02dfb70380bd432814e576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:7a:b7:31:df:95:5e:85:11:ba:94:16:22: 7c:66:8a:8f:c0:21:3d:b1:fd:98:85:6a:49:7c:22: 5b:12:9a:7d:48:1a:0b:73:57:33:6e:13:ec:79:64: 10:aa:6f:39:08:f4:c6:ad:b9:be:e9:bd:62:69:f0: 90:c6:9c:a8:ac:c7:31:4e:56:ba:5d:48:bd:bc:4e: b0:df:cb:f5:0b:75:a1:de:80:46:b3:6a:90:c4:5f: 61:fa:59:af:f1:ee:dc:42:e2:cf:5d:3a:ff:79:99: b7:33:0e:4d:5c:d5:2a:18:3a:8d:90:d2:eb:f9:9f: a3:93:73:ba:e3:df:c5:38:d4:28:53:24:e7:fb:23: 98:a9:fe:34:b6:42:d9:28:e1:e1:6c:fa:9b:a1:dd: 2e:5e:78:79:c7:ab:78:a5:fd:10:be:6c:0a:b3:53: 11:9a:d1:a8:a0:bd:93:53:12:2f:b1:25:7b:00:5e: 38:04:5c:f3:af:d7:a0:38:80:33:64:83:c1:8b:54: d7:8a:d6:b6:7a:66:34:36:27:1c:13:7d:76:c2:4f: cc:7a:a2:bb:27:6f:9d:08:ed:04:a3:b2:02:7d:85: 05:15:35:af:89:ab:32:a2:5e:aa:5a:25:ec:95:5d: c9:4b:4f:e3:05:77:28:78:79:ee:69:97:01:c2:aa: b5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3C:6F:D1:C7:AE:54:24:AF:02:DF:B7:03:80:BD:43:28:14:E5:76 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2Dxv0ceuVCSvAt-3A4C9QygU5XY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.236.196.0/24 88.148.29.0/24 93.115.158.0/24 Signature Algorithm: sha256WithRSAEncryption 81:31:d3:1b:c5:41:57:24:d7:55:7f:98:ca:00:24:ba:7e:70: 68:5b:3a:e2:2c:f4:94:0e:e5:b6:7b:0e:74:34:54:55:3d:da: 1a:d7:29:06:c9:89:83:f4:aa:bd:b6:dd:1b:15:ac:83:01:3f: 8d:5b:13:f5:91:9b:5f:47:1d:75:ed:6a:91:a6:9f:75:42:4d: a1:e4:cd:1f:ab:97:05:37:29:d6:c3:f6:87:98:7d:b3:bf:19: 71:1a:47:8a:9b:c1:3a:78:d5:5d:63:d0:d1:c9:56:90:26:9c: 49:95:97:36:86:78:4d:48:98:73:74:28:35:0e:b3:08:7e:f3: 42:e0:24:cf:26:2c:50:7a:0f:93:77:03:38:88:90:93:62:7d: 4a:60:ea:39:ba:7a:f0:39:93:ab:9a:1b:7f:82:8f:01:93:97: 88:7e:e9:b2:82:7c:cb:1c:23:ae:af:7b:db:f6:98:ad:88:d4: 4b:bf:7e:fe:ca:7c:ee:d8:67:7f:5a:c4:61:27:e9:18:62:43: 3d:d2:a5:f5:cc:ce:83:51:c3:c1:00:6d:38:7c:a8:e5:95:b7: 61:bb:02:c6:48:76:6c:ad:66:3c:ba:bd:50:f0:b7:16:98:74: 6c:0c:41:ad:f0:c1:af:50:87:ee:5a:81:c2:f0:c8:f3:40:0d: a3:cf:1c:6b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xoM/trTxdZ+5oYEw1y8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODNjNmZkMWM3YWU1NDI0YWYwMmRmYjcwMzgwYmQ0MzI4MTRlNTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDl6tzHflV6FEbqUFiJ8ZoqPwCE9 sf2YhWpJfCJbEpp9SBoLc1czbhPseWQQqm85CPTGrbm+6b1iafCQxpyorMcxTla6 XUi9vE6w38v1C3Wh3oBGs2qQxF9h+lmv8e7cQuLPXTr/eZm3Mw5NXNUqGDqNkNLr +Z+jk3O649/FONQoUyTn+yOYqf40tkLZKOHhbPqbod0uXnh5x6t4pf0QvmwKs1MR mtGooL2TUxIvsSV7AF44BFzzr9egOIAzZIPBi1TXita2emY0NiccE312wk/MeqK7 J2+dCO0Eo7ICfYUFFTWviasyol6qWiXslV3JS0/jBXcoeHnuaZcBwqq1QwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNg8b9HHrlQkrwLftwOAvUMoFOV2MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvMkR4djBjZXVWQ1N2QXQtM0E0QzlReWdVNVhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVOzEAwQA WJQdAwQAXXOeMA0GCSqGSIb3DQEBCwUAA4IBAQCBMdMbxUFXJNdVf5jKACS6fnBo WzriLPSUDuW2ew50NFRVPdoa1ykGyYmD9Kq9tt0bFayDAT+NWxP1kZtfRx117WqR pp91Qk2h5M0fq5cFNynWw/aHmH2zvxlxGkeKm8E6eNVdY9DRyVaQJpxJlZc2hnhN SJhzdCg1DrMIfvNC4CTPJixQeg+TdwM4iJCTYn1KYOo5unrwOZOrmht/go8Bk5eI fumygnzLHCOur3vb9pitiNRLv37+ynzu2Gd/WsRhJ+kYYkM90qX1zM6DUcPBAG04 fKjllbdhuwLGSHZsrWY8ur1Q8LcWmHRsDEGt8MGvUIfuWoHC8MjzQA2jzxxr -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:30 2026 by rpki-client