This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa File: 2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa (raw, json) Hash identifier: +NoOXUEn4TaHsF+2ba/PR75YfFJyamS/9W3TcNyhHlY= Subject key identifier: D9:0F:B8:DE:E8:8D:F0:BE:12:52:D6:3A:AC:19:DB:AA:B4:0F:DF:04 Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd Certificate serial: 019B77C667EA1852D861917088BFC673A020 Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205368 IP address blocks: 46.182.172.0/23 maxlen: 23 46.182.172.0/24 maxlen: 24 46.182.173.0/24 maxlen: 24 46.182.174.0/24 maxlen: 24 91.237.150.0/24 maxlen: 24 185.215.52.0/22 maxlen: 22 185.215.52.0/24 maxlen: 24 185.215.54.0/24 maxlen: 24 185.215.55.0/24 maxlen: 24 2a02:29f8::/32 maxlen: 32 2a0b:a3c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:67:ea:18:52:d8:61:91:70:88:bf:c6:73:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d90fb8dee88df0be1252d63aac19dbaab40fdf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:c8:cc:7b:74:e0:84:a2:bb:31:64:1c:9e: 3d:f0:41:26:81:12:6b:7e:c2:06:4c:55:bd:b7:8e: ce:cc:42:62:f3:6f:21:67:f7:49:d8:fe:2d:0e:26: 5c:ad:46:1c:12:0b:bc:8e:a6:bb:d4:82:b7:7c:bb: 2b:14:af:40:9a:bb:21:32:9f:f5:61:cb:b0:a0:89: d2:1f:86:4b:b1:e0:64:df:c1:5a:72:bd:c1:eb:ab: 27:0b:ca:c5:cb:f5:c3:57:1b:98:52:dd:09:2a:48: a6:45:af:17:ba:d3:f9:df:ae:45:8e:c0:41:41:a5: cd:14:67:52:09:f5:54:b5:54:20:ae:fc:e1:f9:c4: fe:1c:e9:05:74:d8:50:97:fc:70:20:d4:9e:25:d5: 94:c6:23:94:f7:a2:c3:d6:bd:dd:10:53:cf:a0:87: 45:19:6f:92:ad:de:72:61:69:b2:ae:5b:fd:4a:fe: 69:a4:2b:f8:29:7b:a0:08:5e:83:1f:b6:e3:1e:fe: 23:52:ef:5e:d2:63:c5:f8:a2:dd:31:31:85:ff:98: 0f:a7:fb:28:28:56:ce:07:76:11:bc:db:b6:fa:e3: f2:c8:06:3d:c1:96:31:c0:b9:35:1b:02:b6:59:99: 6a:d8:dc:2a:3a:5a:d9:5f:04:c8:d1:0f:f9:8b:53: df:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0F:B8:DE:E8:8D:F0:BE:12:52:D6:3A:AC:19:DB:AA:B4:0F:DF:04 X509v3 Authority Key Identifier: keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.172.0-46.182.174.255 91.237.150.0/24 185.215.52.0/22 IPv6: 2a02:29f8::/32 2a0b:a3c0::/29 Signature Algorithm: sha256WithRSAEncryption 90:da:6d:46:71:41:54:13:3a:27:a7:8e:1f:de:96:ab:7e:79: 9b:de:66:72:0c:e7:43:16:40:55:99:75:45:74:7c:b7:e4:06: c8:db:c4:49:2b:28:0f:f8:ee:72:32:5d:90:55:e2:86:81:dd: fe:00:e8:74:81:55:d4:04:1f:b4:58:00:af:6a:79:53:7c:21: 4c:f0:88:58:18:ac:b1:f3:86:05:e9:cf:03:06:47:cd:63:d7: 9e:56:c0:06:be:a2:0f:fe:fd:ad:e4:f1:18:2b:a3:a2:5e:77: 0e:2b:f1:07:c4:a2:0e:b0:25:69:99:94:70:2a:d5:5c:b3:dc: a0:28:de:12:23:a3:cc:55:0f:bd:de:f4:6e:dd:0a:4d:43:17: 08:50:85:0c:6b:a7:12:67:ad:2f:aa:c7:23:9a:39:da:d2:60: a7:f3:31:3e:02:19:bd:7b:2c:98:30:0e:bb:82:3d:58:df:72: e4:88:fc:36:9e:6a:84:d5:47:4a:7c:26:32:2a:af:db:f2:19: cd:3e:aa:9c:2a:59:23:09:7e:bd:b9:54:91:f8:57:b9:75:f6: dc:0c:f9:d3:fb:5d:f1:7d:d5:8e:cf:77:f5:96:33:41:05:c5: a8:bf:46:d1:50:11:53:91:9a:35:dd:1c:66:09:54:2e:f3:52: 90:24:10:2f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt3xmfqGFLYYZFwiL/Gc6AgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDRjZDdkZjg0YzMxOWQxOWFmMzViMTEwNGYxNzNlYmEy YzZkYmQwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTBmYjhkZWU4OGRmMGJlMTI1MmQ2M2FhYzE5ZGJhYWI0MGZkZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbvIzHt04ISiuzFkHJ498EEmgRJr fsIGTFW9t47OzEJi828hZ/dJ2P4tDiZcrUYcEgu8jqa71IK3fLsrFK9AmrshMp/1 YcuwoInSH4ZLseBk38Facr3B66snC8rFy/XDVxuYUt0JKkimRa8XutP5365FjsBB QaXNFGdSCfVUtVQgrvzh+cT+HOkFdNhQl/xwINSeJdWUxiOU96LD1r3dEFPPoIdF GW+Srd5yYWmyrlv9Sv5ppCv4KXugCF6DH7bjHv4jUu9e0mPF+KLdMTGF/5gPp/so KFbOB3YRvNu2+uPyyAY9wZYxwLk1GwK2WZlq2NwqOlrZXwTI0Q/5i1PfcwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFNkPuN7ojfC+ElLWOqwZ26q0D98EMB8GA1UdIwQY MBaAFMEEzX34TDGdGa81sRBPFz66LG29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQt N2VmZjhmMWU5MWNkLzEvMlEtNDN1aU44TDRTVXRZNnJCbmJxclFQM3dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQtN2VmZjhmMWU5MWNk LzEvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAgBAIAATAaMAwDBAIutqwD BAAutq4DBABb7ZYDBAK51zQwFAQCAAIwDgMFACoCKfgDBQMqC6PAMA0GCSqGSIb3 DQEBCwUAA4IBAQCQ2m1GcUFUEzonp44f3parfnmb3mZyDOdDFkBVmXVFdHy35AbI 28RJKygP+O5yMl2QVeKGgd3+AOh0gVXUBB+0WACvanlTfCFM8IhYGKyx84YF6c8D BkfNY9eeVsAGvqIP/v2t5PEYK6OiXncOK/EHxKIOsCVpmZRwKtVcs9ygKN4SI6PM VQ+93vRu3QpNQxcIUIUMa6cSZ60vqscjmjna0mCn8zE+Ahm9eyyYMA67gj1Y33Lk iPw2nmqE1UdKfCYyKq/b8hnNPqqcKlkjCX69uVSR+Fe5dfbcDPnT+13xfdWOz3f1 ljNBBcWov0bRUBFTkZo13RxmCVQu81KQJBAv -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:13 2026 by rpki-client