This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/2nrajJ_yv_dX81exv7yBMNyH8yo.roa File: 2nrajJ_yv_dX81exv7yBMNyH8yo.roa (raw, json) Hash identifier: t7KBzcC8fOA4irztrKLv7wWkLL3ua8z+hTVJRAnssbA= Subject key identifier: DA:7A:DA:8C:9F:F2:BF:F7:57:F3:57:B1:BF:BC:81:30:DC:87:F3:2A Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019BE9EFE072F760BA9B972C49E1BC437774 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/2nrajJ_yv_dX81exv7yBMNyH8yo.roa Signing time: Fri 23 Jan 2026 08:19:30 +0000 ROA not before: Fri 23 Jan 2026 08:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 144.56.90.0/24 maxlen: 24 144.56.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:ef:e0:72:f7:60:ba:9b:97:2c:49:e1:bc:43:77:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 23 08:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da7ada8c9ff2bff757f357b1bfbc8130dc87f32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:7a:9e:01:af:6e:3b:99:2f:8f:a5:9c:88: 1e:ff:88:c4:ab:c4:a5:7e:c3:0b:e2:b3:b0:77:2e: 2c:64:bf:ec:83:24:7f:55:99:7e:ad:ba:b8:85:3d: b3:e8:27:1a:f1:93:10:dd:0c:4b:43:1f:e7:cb:17: 95:95:7f:03:09:b5:58:6a:fb:af:be:db:56:15:5b: f0:fb:f7:aa:58:f8:b5:a3:c2:0e:75:e7:e8:b0:8c: ce:f7:b0:a0:a0:85:77:f2:bc:9e:02:3d:05:9c:39: 5a:4a:1a:ae:f9:a2:9b:eb:20:09:d3:98:fe:03:5a: 4d:a6:3f:8e:ef:51:62:0c:ec:26:76:eb:f3:97:84: df:d8:d6:b6:96:31:19:cc:b8:22:88:e8:ac:3c:59: c0:e2:0b:21:eb:53:4f:41:c6:a9:26:92:9b:75:69: 6e:e1:0a:74:e7:e4:5e:ae:11:4e:cc:c0:a6:2d:7d: d5:8e:dd:a1:ba:a7:89:6e:e9:fe:e3:3b:22:e4:86: e7:8a:58:16:dd:39:80:41:7e:7e:90:a8:9d:c0:8f: 29:d5:1d:9d:e8:c6:ce:ea:97:50:68:ec:c7:fd:8f: 42:a1:0d:2c:6b:4d:fe:94:8d:45:65:e5:89:49:d7: 36:61:e7:2c:c0:77:74:57:1d:cc:80:7f:d0:09:ae: 00:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7A:DA:8C:9F:F2:BF:F7:57:F3:57:B1:BF:BC:81:30:DC:87:F3:2A X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/2nrajJ_yv_dX81exv7yBMNyH8yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.90.0/24 144.56.110.0/24 Signature Algorithm: sha256WithRSAEncryption 35:c3:a1:2c:24:f3:fd:f2:f5:d8:3e:50:e7:b7:93:2d:b5:8b: a0:48:00:78:27:fd:83:d6:87:41:f9:d2:cb:13:bb:0e:d1:ae: c7:08:05:52:e8:ff:22:aa:b6:d4:c3:2b:24:2f:61:85:2e:e8: a7:73:16:a7:cf:27:94:ee:09:ff:12:6e:78:b7:ae:68:a5:4d: 8f:f4:06:9e:77:47:2d:3c:37:15:02:2f:af:0e:61:31:50:87: 0b:a8:69:42:65:4f:d2:8f:1c:20:d4:12:99:3a:14:8d:b0:ee: d6:0b:9b:1e:53:72:8a:46:5d:8a:d7:d2:f4:58:96:1c:3f:c5: 73:07:49:e2:ee:6e:6a:a5:93:b1:89:4d:ab:fc:09:86:58:35: 0d:96:2b:07:70:ed:72:a6:a1:37:cb:d3:fa:e4:e9:7c:33:6e: de:2f:2b:4f:7d:99:40:c6:09:09:a7:ce:30:7a:a0:23:e0:cf: 68:7e:2f:16:ef:fd:e9:1d:ee:73:53:92:a5:72:64:97:d7:69: 1e:74:37:85:0a:46:67:f8:05:d8:09:7d:e7:36:0b:1d:29:13: d4:df:f4:d7:7c:0e:c3:dd:32:80:10:25:09:74:41:33:57:7d: 32:ef:3a:33:63:b9:08:32:f9:d3:af:5e:e5:fa:17:2f:43:e4: c8:46:7d:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvp7+By92C6m5csSeG8Q3d0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTIzMDgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTdhZGE4YzlmZjJiZmY3NTdmMzU3YjFiZmJjODEzMGRjODdmMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqV6ngGvbjuZL4+lnIge/4jEq8Sl fsML4rOwdy4sZL/sgyR/VZl+rbq4hT2z6Cca8ZMQ3QxLQx/nyxeVlX8DCbVYavuv vttWFVvw+/eqWPi1o8IOdefosIzO97CgoIV38ryeAj0FnDlaShqu+aKb6yAJ05j+ A1pNpj+O71FiDOwmduvzl4Tf2Na2ljEZzLgiiOisPFnA4gsh61NPQcapJpKbdWlu 4Qp05+RerhFOzMCmLX3Vjt2huqeJbun+4zsi5IbnilgW3TmAQX5+kKidwI8p1R2d 6MbO6pdQaOzH/Y9CoQ0sa03+lI1FZeWJSdc2YecswHd0Vx3MgH/QCa4AKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNp62oyf8r/3V/NXsb+8gTDch/MqMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvMm5yYWpKX3l2X2RYODFleHY3eUJNTnlIOHlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkDhaAwQA kDhuMA0GCSqGSIb3DQEBCwUAA4IBAQA1w6EsJPP98vXYPlDnt5MttYugSAB4J/2D 1odB+dLLE7sO0a7HCAVS6P8iqrbUwyskL2GFLuincxanzyeU7gn/Em54t65opU2P 9Aaed0ctPDcVAi+vDmExUIcLqGlCZU/Sjxwg1BKZOhSNsO7WC5seU3KKRl2K19L0 WJYcP8VzB0ni7m5qpZOxiU2r/AmGWDUNlisHcO1ypqE3y9P65Ol8M27eLytPfZlA xgkJp84weqAj4M9ofi8W7/3pHe5zU5KlcmSX12kedDeFCkZn+AXYCX3nNgsdKRPU 3/TXfA7D3TKAECUJdEEzV30y7zozY7kIMvnTr17l+hcvQ+TIRn3Q -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:18 2026 by rpki-client