This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/2XIrFY7sSUmf0ZXtm7NFV38W-DM.roa File: 2XIrFY7sSUmf0ZXtm7NFV38W-DM.roa (raw, json) Hash identifier: VPm4JxETY4pUG2qbLQfLY9WMJOpVuE0GwkXWlkKqHlA= Subject key identifier: D9:72:2B:15:8E:EC:49:49:9F:D1:95:ED:9B:B3:45:57:7F:16:F8:33 Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237 Certificate serial: 019BF049D999F8CF2240FA37A1438660E647 Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/2XIrFY7sSUmf0ZXtm7NFV38W-DM.roa Signing time: Sat 24 Jan 2026 13:55:30 +0000 ROA not before: Sat 24 Jan 2026 13:55:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213981 IP address blocks: 185.38.175.0/24 maxlen: 24 212.104.142.0/24 maxlen: 24 2001:3a40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f0:49:d9:99:f8:cf:22:40:fa:37:a1:43:86:60:e6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237 Validity Not Before: Jan 24 13:55:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9722b158eec49499fd195ed9bb345577f16f833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:a6:b0:32:7f:19:0c:20:66:97:5a:c3:e5: d5:ab:e0:d6:89:0a:58:b3:28:d7:1d:ba:85:5f:b6: 72:26:e0:ea:25:65:2f:b2:3c:3a:3c:f3:f8:5a:0f: 6e:de:1c:0d:99:ae:37:3a:7d:a7:3f:0f:96:3e:e6: cc:ad:b3:10:3b:9c:9d:ee:d8:e8:b0:21:11:1f:c1: ce:f1:65:0b:75:fd:96:f0:49:65:73:b7:7a:58:79: ce:61:76:e8:7c:18:dd:71:71:8d:26:2b:0f:77:49: 62:f9:97:0f:1a:eb:a3:b0:39:a8:2d:ff:7c:7b:ab: 3f:1d:05:fa:a5:5a:5a:89:8c:6e:a9:43:bf:90:9b: 67:dc:01:b8:59:1e:af:29:72:fb:c7:b5:37:11:6e: b3:9f:6e:ac:52:94:9a:3d:fc:d9:5c:57:50:76:48: 71:e5:1a:03:3e:92:15:33:91:e6:03:ef:e8:17:9c: 05:7b:b9:37:7d:b9:e0:ea:59:1c:ed:2d:2d:d1:7d: b6:8a:e5:6f:98:b5:7a:6b:c0:a7:c8:7b:52:f5:1a: af:f1:25:ed:6d:6f:5a:76:f2:a0:93:e6:11:97:93: 1d:d1:e1:80:88:d0:66:be:19:29:04:85:e4:ac:c7: fc:14:56:32:ba:8d:69:d3:2c:e9:86:0a:db:f9:d2: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:72:2B:15:8E:EC:49:49:9F:D1:95:ED:9B:B3:45:57:7F:16:F8:33 X509v3 Authority Key Identifier: keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/2XIrFY7sSUmf0ZXtm7NFV38W-DM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.175.0/24 212.104.142.0/24 IPv6: 2001:3a40::/29 Signature Algorithm: sha256WithRSAEncryption 57:c8:f5:62:fd:7f:47:bc:75:b8:1b:70:07:3c:61:05:f1:16: c2:09:9e:32:31:57:fa:f3:4c:59:35:56:4d:2e:31:97:45:e8: d4:80:34:29:6a:7a:39:cb:64:57:11:84:ff:aa:03:66:75:54: 82:10:64:66:42:17:de:f5:d2:57:ae:55:e1:ba:53:79:f2:a0: e2:67:94:d7:69:ed:39:80:65:7e:49:65:36:4d:16:34:be:0a: 6c:ec:d6:9e:d0:fa:0f:75:aa:98:81:d0:ad:6e:6a:93:1a:43: f9:29:6a:51:9f:6f:89:62:bf:31:41:3a:b6:30:c8:94:9e:4c: c0:fa:53:e4:1b:70:4e:24:de:56:55:62:d5:bf:7c:d6:6f:3b: e7:44:9f:a2:f0:08:9b:e5:51:90:e0:21:a2:22:18:da:e5:94: a4:45:ac:a5:79:a9:d3:0e:ef:7e:d3:e7:8c:01:8a:01:fe:c8: 62:1b:a3:57:96:22:01:1c:c7:3c:f1:7d:2e:fd:3e:7e:3c:cc: d8:9c:07:a5:16:6d:df:8b:1a:c5:20:5f:d9:b4:cc:88:5a:4f: 0e:a8:2f:91:bd:6c:69:ed:ef:c5:ea:f0:54:0a:19:da:f7:76: 89:2e:09:da:70:05:7b:ea:ee:38:a9:d3:01:b7:09:29:1e:76: 6c:01:4f:f8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvwSdmZ+M8iQPo3oUOGYOZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMGNjM2YzNGJmZDQzYWM1Y2RmNjEwMzdiM2QxNmM5Njdk NzMyMzcwHhcNMjYwMTI0MTM1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTcyMmIxNThlZWM0OTQ5OWZkMTk1ZWQ5YmIzNDU1NzdmMTZmODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfWmsDJ/GQwgZpdaw+XVq+DWiQpY syjXHbqFX7ZyJuDqJWUvsjw6PPP4Wg9u3hwNma43On2nPw+WPubMrbMQO5yd7tjo sCERH8HO8WULdf2W8Ellc7d6WHnOYXbofBjdcXGNJisPd0li+ZcPGuujsDmoLf98 e6s/HQX6pVpaiYxuqUO/kJtn3AG4WR6vKXL7x7U3EW6zn26sUpSaPfzZXFdQdkhx 5RoDPpIVM5HmA+/oF5wFe7k3fbng6lkc7S0t0X22iuVvmLV6a8CnyHtS9Rqv8SXt bW9advKgk+YRl5Md0eGAiNBmvhkpBIXkrMf8FFYyuo1p0yzphgrb+dIMdwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNlyKxWO7ElJn9GV7ZuzRVd/FvgzMB8GA1UdIwQY MBaAFEIMw/NL/UOsXN9hA3s9Fsln1zI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYt NTkzZDBiYjc4YmU2LzEvMlhJckZZN3NTVW1mMFpYdG03TkZWMzhXLURNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYtNTkzZDBiYjc4YmU2 LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuSavAwQA 1GiOMA0EAgACMAcDBQMgATpAMA0GCSqGSIb3DQEBCwUAA4IBAQBXyPVi/X9HvHW4 G3AHPGEF8RbCCZ4yMVf680xZNVZNLjGXRejUgDQpano5y2RXEYT/qgNmdVSCEGRm Qhfe9dJXrlXhulN58qDiZ5TXae05gGV+SWU2TRY0vgps7Nae0PoPdaqYgdCtbmqT GkP5KWpRn2+JYr8xQTq2MMiUnkzA+lPkG3BOJN5WVWLVv3zWbzvnRJ+i8Aib5VGQ 4CGiIhja5ZSkRayleanTDu9+0+eMAYoB/shiG6NXliIBHMc88X0u/T5+PMzYnAel Fm3fixrFIF/ZtMyIWk8OqC+RvWxp7e/F6vBUChna93aJLgnacAV76u44qdMBtwkp HnZsAU/4 -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:34 2026 by rpki-client