This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x2PPjB2QKajOBs-GQZKEHrR4nWU.roa File: x2PPjB2QKajOBs-GQZKEHrR4nWU.roa (raw, json) Hash identifier: uumzPlrHonje5Ww+avo6bD/zTHsVsheuHP9JhFd7D34= Subject key identifier: C7:63:CF:8C:1D:90:29:A8:CE:06:CF:86:41:92:84:1E:B4:78:9D:65 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F850BD201AD65354378C22238983810 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x2PPjB2QKajOBs-GQZKEHrR4nWU.roa Signing time: Fri 02 Jan 2026 16:23:04 +0000 ROA not before: Fri 02 Jan 2026 16:23:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210390 IP address blocks: 95.46.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:0b:d2:01:ad:65:35:43:78:c2:22:38:98:38:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c763cf8c1d9029a8ce06cf864192841eb4789d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:2c:d2:ad:2a:50:35:23:e2:44:30:62:5b: 09:14:98:6a:69:70:25:29:29:d4:91:d5:29:12:59: b2:16:1d:d1:94:18:e4:1e:6b:b3:07:01:8b:d3:c8: a8:8f:b4:76:6a:8c:43:bb:c3:d6:67:86:e3:32:94: d7:b8:f4:7f:2a:7c:42:78:88:80:db:03:38:a9:f1: 21:1b:3f:3e:f6:f0:ce:22:f2:72:0d:f3:2c:7a:31: bb:0b:24:2d:70:33:9f:cc:2b:53:75:6c:22:69:4d: 20:bc:f9:cc:fd:5c:54:d1:63:03:8d:f2:df:e9:75: 56:d5:4c:4c:b5:1f:ff:17:3d:05:0e:24:09:c3:75: 7d:81:a6:1d:89:21:be:bf:c5:36:e0:e1:df:9a:a2: a8:80:38:dc:f4:69:cb:e6:de:bc:b2:d4:83:f8:9e: ab:c9:25:3f:9f:90:17:bf:e5:0f:a8:fa:c2:0b:15: 90:c6:ec:cb:5c:80:3e:b9:83:e3:ff:53:87:55:2b: e5:37:02:fd:f0:2b:74:ba:e4:0e:cb:80:27:51:3c: 52:a3:b1:38:5d:30:86:57:09:39:04:cc:f0:10:6d: ad:08:1b:28:25:a2:3a:05:ae:80:53:6c:e4:89:8e: d7:a8:07:23:b6:e3:77:95:a7:1c:70:0b:44:fc:0e: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:63:CF:8C:1D:90:29:A8:CE:06:CF:86:41:92:84:1E:B4:78:9D:65 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x2PPjB2QKajOBs-GQZKEHrR4nWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.96.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:55:c7:b0:5a:72:12:9c:ae:02:84:ee:61:34:38:10:33:21: 3d:cf:a2:b8:85:35:3a:c3:48:60:6f:de:9f:41:5f:95:ca:7b: c6:de:3b:7d:05:96:49:5d:e5:0f:1d:c8:3f:86:6e:ef:6a:01: a5:65:84:56:2b:a5:b7:db:f2:97:1f:a1:73:ee:2c:29:c5:f6: 8e:bd:23:16:2a:9c:83:32:57:19:6c:70:a6:50:eb:b8:93:0d: d6:1c:85:7e:d9:1a:1f:67:52:cf:a0:fe:0d:0a:1e:75:7c:22: 85:1f:80:b6:8a:ab:87:47:30:c1:f8:89:29:80:62:52:34:27: e6:ee:b8:7a:69:14:a4:04:70:d4:7f:ca:16:4f:d9:fc:4f:5b: cb:27:b6:bb:91:a8:e7:85:88:00:c6:1a:45:23:86:8c:7e:2f: 84:1e:f2:5f:87:f7:27:63:73:8c:4f:88:1b:ca:7b:d2:90:2a: c4:b9:64:d1:87:f2:b3:a6:77:e2:53:00:a2:f4:1e:50:46:e3: d6:a6:10:18:81:73:cc:8a:43:af:e9:77:98:cd:c7:90:15:b5: 1d:b1:fe:10:19:0a:b8:58:c8:67:76:42:e2:b3:44:d3:bc:6e: 47:aa:fa:df:fd:8e:e4:9c:ea:61:2d:68:96:65:9c:9b:10:63: dc:8d:4e:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hQvSAa1lNUN4wiI4mDgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzYzY2Y4YzFkOTAyOWE4Y2UwNmNmODY0MTkyODQxZWI0Nzg5ZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrgs0q0qUDUj4kQwYlsJFJhqaXAl KSnUkdUpElmyFh3RlBjkHmuzBwGL08ioj7R2aoxDu8PWZ4bjMpTXuPR/KnxCeIiA 2wM4qfEhGz8+9vDOIvJyDfMsejG7CyQtcDOfzCtTdWwiaU0gvPnM/VxU0WMDjfLf 6XVW1UxMtR//Fz0FDiQJw3V9gaYdiSG+v8U24OHfmqKogDjc9GnL5t68stSD+J6r ySU/n5AXv+UPqPrCCxWQxuzLXIA+uYPj/1OHVSvlNwL98Ct0uuQOy4AnUTxSo7E4 XTCGVwk5BMzwEG2tCBsoJaI6Ba6AU2zkiY7XqAcjtuN3lacccAtE/A6SmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMdjz4wdkCmozgbPhkGShB60eJ1lMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEveDJQUGpCMlFLYWpPQnMtR1FaS0VIclI0bldVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy5gMA0G CSqGSIb3DQEBCwUAA4IBAQA6VcewWnISnK4ChO5hNDgQMyE9z6K4hTU6w0hgb96f QV+VynvG3jt9BZZJXeUPHcg/hm7vagGlZYRWK6W32/KXH6Fz7iwpxfaOvSMWKpyD MlcZbHCmUOu4kw3WHIV+2RofZ1LPoP4NCh51fCKFH4C2iquHRzDB+IkpgGJSNCfm 7rh6aRSkBHDUf8oWT9n8T1vLJ7a7kajnhYgAxhpFI4aMfi+EHvJfh/cnY3OMT4gb ynvSkCrEuWTRh/KzpnfiUwCi9B5QRuPWphAYgXPMikOv6XeYzceQFbUdsf4QGQq4 WMhndkLis0TTvG5Hqvrf/Y7knOphLWiWZZybEGPcjU6y -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:42 2026 by rpki-client