This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2rD0WR-YB1imX5QtjqeR1D5VvrU.roa File: 2rD0WR-YB1imX5QtjqeR1D5VvrU.roa (raw, json) Hash identifier: 4lxKkvHsAj8M6+Ts9/ybw5pViOKwPCDb7fDaxtLOi2A= Subject key identifier: DA:B0:F4:59:1F:98:07:58:A6:5F:94:2D:8E:A7:91:D4:3E:55:BE:B5 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019BE050323EDAFC1ACBDA0BD837A4716AAC Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2rD0WR-YB1imX5QtjqeR1D5VvrU.roa Signing time: Wed 21 Jan 2026 11:28:30 +0000 ROA not before: Wed 21 Jan 2026 11:28:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39582 IP address blocks: 78.135.80.0/24 maxlen: 24 185.17.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:50:32:3e:da:fc:1a:cb:da:0b:d8:37:a4:71:6a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 21 11:28:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dab0f4591f980758a65f942d8ea791d43e55beb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:c7:58:0e:23:ed:ce:29:be:0a:ef:e4:35: 41:ab:eb:9d:c0:64:53:c4:9d:2b:3d:3c:e9:97:f2: d6:b9:0e:fe:c6:2a:4f:3f:8d:9b:0e:c9:c3:25:a7: 99:f3:a6:80:c8:6c:73:e3:ce:80:da:b4:f9:3f:37: 66:cb:28:a1:a4:44:78:64:66:c0:fc:50:7b:c3:0c: 45:c2:97:d4:59:93:c6:7b:60:67:3a:31:e7:bd:96: f3:a9:da:a3:33:81:1c:e7:1c:99:1b:8a:b7:a0:d4: 77:58:a6:bf:47:47:1b:97:07:96:fa:f0:96:1a:bb: e1:f3:31:0c:8c:25:42:61:ae:8e:b0:ac:66:e8:c2: 6f:30:c5:b4:99:18:6b:06:5b:3d:7e:9c:76:49:55: 0e:33:f9:14:fc:8e:4e:bf:08:00:c1:7a:e2:7b:d7: 4a:7b:8a:c0:ad:76:72:71:c6:7f:60:43:db:eb:00: 79:18:44:54:ab:50:4a:61:e3:70:d8:d9:27:15:04: 83:65:9a:c2:94:af:50:a3:37:b9:51:a9:57:1e:22: 13:a7:89:68:a6:d5:ed:1d:43:95:5b:1c:cf:4d:2d: f1:a1:04:46:84:92:fd:1a:b6:9e:c5:40:5c:06:d6: b8:cc:04:9e:40:c9:6b:35:3e:ed:c6:00:38:28:b4: 30:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B0:F4:59:1F:98:07:58:A6:5F:94:2D:8E:A7:91:D4:3E:55:BE:B5 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2rD0WR-YB1imX5QtjqeR1D5VvrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.80.0/24 185.17.136.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:b0:63:b1:fa:38:d4:51:7a:e3:6d:6d:1f:ee:54:72:ea:31: 35:3e:b3:c1:f1:38:a5:fd:e2:d3:6c:82:d0:45:4c:63:00:72: 8c:33:bb:bf:29:80:70:b6:a9:fb:50:30:b1:c6:0c:c0:87:7f: 7e:af:99:77:43:23:ec:d0:b8:f1:66:01:d6:14:72:0b:dc:65: 8c:89:83:d6:c1:e7:8e:c1:6e:00:91:f5:10:e5:9e:6c:46:58: 74:f4:7a:36:99:b0:86:a0:c5:4c:7e:ad:e6:4c:d6:f5:f3:6f: 42:30:12:3c:bc:d1:3a:07:65:cd:0d:3e:62:54:8d:3e:63:f5: e3:93:79:71:8b:d0:10:f5:92:93:fe:c9:cb:09:86:39:b4:6d: 4a:f4:20:c4:5a:b7:16:13:37:7f:f7:cb:d3:06:c3:c5:52:a5: ea:03:9f:c6:9a:a4:8d:62:ea:f8:62:a4:d0:56:99:7c:fa:85: 2e:42:a3:c7:26:91:82:e0:65:d2:c4:b8:8e:d1:1e:e8:a4:bb: a9:94:37:18:fe:36:89:1a:da:46:dd:c2:5f:ee:f0:4a:21:20: 2c:29:35:a9:99:b8:27:38:fd:0d:72:35:4b:cf:f0:98:0e:e9: 3c:18:40:4d:af:05:b0:a5:69:61:ca:67:dd:ec:50:b6:60:9d: a2:d1:aa:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvgUDI+2vway9oL2DekcWqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTIxMTEyODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWIwZjQ1OTFmOTgwNzU4YTY1Zjk0MmQ4ZWE3OTFkNDNlNTViZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5rHWA4j7c4pvgrv5DVBq+udwGRT xJ0rPTzpl/LWuQ7+xipPP42bDsnDJaeZ86aAyGxz486A2rT5PzdmyyihpER4ZGbA /FB7wwxFwpfUWZPGe2BnOjHnvZbzqdqjM4Ec5xyZG4q3oNR3WKa/R0cblweW+vCW Grvh8zEMjCVCYa6OsKxm6MJvMMW0mRhrBls9fpx2SVUOM/kU/I5OvwgAwXrie9dK e4rArXZyccZ/YEPb6wB5GERUq1BKYeNw2NknFQSDZZrClK9Qoze5UalXHiITp4lo ptXtHUOVWxzPTS3xoQRGhJL9GraexUBcBta4zASeQMlrNT7txgA4KLQwlQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNqw9FkfmAdYpl+ULY6nkdQ+Vb61MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvMnJEMFdSLVlCMWltWDVRdGpxZVIxRDVWdnJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATodQAwQA uRGIMA0GCSqGSIb3DQEBCwUAA4IBAQA/sGOx+jjUUXrjbW0f7lRy6jE1PrPB8Til /eLTbILQRUxjAHKMM7u/KYBwtqn7UDCxxgzAh39+r5l3QyPs0LjxZgHWFHIL3GWM iYPWweeOwW4AkfUQ5Z5sRlh09Ho2mbCGoMVMfq3mTNb1829CMBI8vNE6B2XNDT5i VI0+Y/Xjk3lxi9AQ9ZKT/snLCYY5tG1K9CDEWrcWEzd/98vTBsPFUqXqA5/GmqSN Yur4YqTQVpl8+oUuQqPHJpGC4GXSxLiO0R7opLuplDcY/jaJGtpG3cJf7vBKISAs KTWpmbgnOP0NcjVLz/CYDuk8GEBNrwWwpWlhymfd7FC2YJ2i0ap6 -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:17 2026 by rpki-client