This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/2ApePr27C2Mxz5cN7WWk4U2tDDk.roa File: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (raw, json) Hash identifier: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY= Subject key identifier: D8:0A:5E:3E:BD:BB:0B:63:31:CF:97:0D:ED:65:A4:E1:4D:AD:0C:39 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019B7E381BEF83F0E45EBDB8FAE151F62D8A Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/2ApePr27C2Mxz5cN7WWk4U2tDDk.roa Signing time: Fri 02 Jan 2026 10:19:24 +0000 ROA not before: Fri 02 Jan 2026 10:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44854 IP address blocks: 93.114.180.0/23 maxlen: 24 2a10:e300:20::/44 maxlen: 44 2a10:e300:26::/48 maxlen: 48 2a10:e300:27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1b:ef:83:f0:e4:5e:bd:b8:fa:e1:51:f6:2d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d80a5e3ebdbb0b6331cf970ded65a4e14dad0c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7d:2d:8a:39:ad:f8:e7:ed:cf:6b:00:0f:1d: ca:b0:a1:f4:fa:41:c6:3b:a1:52:65:e3:ad:42:f9: 84:8b:e0:d0:ea:87:a3:8d:dd:d8:d4:c7:08:4c:ca: f7:81:61:a2:67:fd:3f:7f:8d:02:2c:ff:f0:14:9a: 27:50:f3:f9:5c:59:6b:70:ce:76:b0:db:40:02:d1: 9b:4e:eb:da:70:c2:96:52:0b:7e:25:67:b6:07:dc: 9a:fe:cd:8a:b5:8c:45:37:93:c3:57:68:ff:49:1d: f0:5a:7d:81:2b:f6:f1:aa:57:5e:1b:59:18:98:65: f6:b2:c7:fe:ce:da:c3:7e:49:01:e4:16:f1:ec:0b: bf:b3:dd:39:b5:f8:e4:d3:87:56:7c:20:37:cf:c8: 81:ad:4e:13:65:76:3f:46:47:62:54:81:12:eb:10: d8:91:b5:f1:d8:ed:e7:1d:4c:3d:df:78:bd:f2:34: 96:d7:84:98:a5:f7:7d:74:89:87:8f:f6:a4:fa:aa: a3:b9:14:0c:10:c4:87:d4:82:0f:ab:19:c6:ac:5b: bf:d6:7c:43:96:b6:fe:16:41:e9:03:ca:37:f4:d0: 54:bc:2c:5d:67:e4:92:bf:47:a3:9c:6e:d3:86:17: df:a5:2e:f4:56:ac:3e:d5:7c:b2:c0:79:22:5e:bf: 36:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0A:5E:3E:BD:BB:0B:63:31:CF:97:0D:ED:65:A4:E1:4D:AD:0C:39 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/2ApePr27C2Mxz5cN7WWk4U2tDDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.114.180.0/23 IPv6: 2a10:e300:20::/44 Signature Algorithm: sha256WithRSAEncryption 75:01:8d:0a:0e:e8:53:e8:31:fe:c5:3b:b9:b5:53:f8:a8:6a: 9e:28:ab:6b:d7:02:67:3b:6d:1d:ea:e5:30:37:f4:e5:3b:7f: 1b:cf:e6:7d:1e:50:d7:1c:c5:40:fb:4a:a9:bb:f0:1a:2f:6d: 07:b4:2a:da:8b:4c:69:b8:67:76:21:29:92:72:1b:f4:3d:ad: 37:9a:59:a0:a8:48:44:96:d5:9f:60:ef:89:34:76:fa:37:94: 5f:4a:2d:81:c1:66:bc:b1:e9:50:17:67:e9:2e:a9:4f:2c:fd: ee:4f:b6:7a:35:53:f5:fa:f2:82:9a:74:bf:9b:2a:50:31:4d: 32:c9:80:8d:b4:5f:9f:95:49:0c:e9:8d:49:cb:ee:a3:d0:e6: 9f:bd:4c:ba:3c:d2:e8:87:d8:10:67:8c:86:34:e6:62:cf:27: 72:44:9d:cd:b7:6b:f0:0e:30:fe:7d:17:68:6a:6a:43:aa:91: a6:dd:7d:14:b4:e9:88:47:82:28:ec:a3:8a:bf:37:52:2e:65: 77:0b:ac:ca:21:be:ff:37:28:4f:a8:92:ee:f6:a6:31:02:58: 6f:c0:b6:ad:c9:11:08:bc:a1:bb:8f:e7:4c:f4:a5:3e:fa:91: d1:4a:d4:8b:b3:69:6e:f3:e7:08:ab:71:8a:c1:4c:10:ab:a6: 0a:3a:09:fc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OBvvg/DkXr24+uFR9i2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODBhNWUzZWJkYmIwYjYzMzFjZjk3MGRlZDY1YTRlMTRkYWQwYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA830tijmt+Oftz2sADx3KsKH0+kHG O6FSZeOtQvmEi+DQ6oejjd3Y1McITMr3gWGiZ/0/f40CLP/wFJonUPP5XFlrcM52 sNtAAtGbTuvacMKWUgt+JWe2B9ya/s2KtYxFN5PDV2j/SR3wWn2BK/bxqldeG1kY mGX2ssf+ztrDfkkB5Bbx7Au/s905tfjk04dWfCA3z8iBrU4TZXY/RkdiVIES6xDY kbXx2O3nHUw933i98jSW14SYpfd9dImHj/ak+qqjuRQMEMSH1IIPqxnGrFu/1nxD lrb+FkHpA8o39NBUvCxdZ+SSv0ejnG7ThhffpS70Vqw+1XyywHkiXr82kwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNgKXj69uwtjMc+XDe1lpOFNrQw5MB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvMkFwZVByMjdDMk14ejVjTjdXV2s0VTJ0RERrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBXXK0MA8E AgACMAkDBwQqEOMAACAwDQYJKoZIhvcNAQELBQADggEBAHUBjQoO6FPoMf7FO7m1 U/ioap4oq2vXAmc7bR3q5TA39OU7fxvP5n0eUNccxUD7Sqm78BovbQe0KtqLTGm4 Z3YhKZJyG/Q9rTeaWaCoSESW1Z9g74k0dvo3lF9KLYHBZryx6VAXZ+kuqU8s/e5P tno1U/X68oKadL+bKlAxTTLJgI20X5+VSQzpjUnL7qPQ5p+9TLo80uiH2BBnjIY0 5mLPJ3JEnc23a/AOMP59F2hqakOqkabdfRS06YhHgijso4q/N1IuZXcLrMohvv83 KE+oku72pjECWG/Atq3JEQi8obuP50z0pT76kdFK1IuzaW7z5wircYrBTBCrpgo6 Cfw= -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:35 2026 by rpki-client