This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/G9p0ZqoMQwRhL8Rw931Y7IDvL9I.roa File: G9p0ZqoMQwRhL8Rw931Y7IDvL9I.roa (raw, json) Hash identifier: felwcBy1trqJlfgkKZ8Njtq1KvtD2UmM0AyTZrNQ0nY= Subject key identifier: 1B:DA:74:66:AA:0C:43:04:61:2F:C4:70:F7:7D:58:EC:80:EF:2F:D2 Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46 Certificate serial: 019B7C7F98FB4B4C11055B82108E01EA1BA8 Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/G9p0ZqoMQwRhL8Rw931Y7IDvL9I.roa Signing time: Fri 02 Jan 2026 02:18:15 +0000 ROA not before: Fri 02 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210619 IP address blocks: 185.137.221.0/24 maxlen: 24 185.137.223.0/24 maxlen: 24 2a0a:a501::/32 maxlen: 32 2a0a:a501::/48 maxlen: 48 2a0a:a502::/32 maxlen: 32 2a0a:a502::/48 maxlen: 48 2a0a:a503::/32 maxlen: 32 2a0a:a504::/32 maxlen: 32 2a0a:a505::/32 maxlen: 32 2a0a:a507::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:98:fb:4b:4c:11:05:5b:82:10:8e:01:ea:1b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46 Validity Not Before: Jan 2 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bda7466aa0c4304612fc470f77d58ec80ef2fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:ea:f2:08:0a:3f:b3:61:8c:86:8b:bc:bf: 77:73:3d:49:74:77:09:4e:ff:b1:96:93:97:29:7f: 93:2f:55:55:e4:3d:47:ef:57:30:f4:8f:06:2b:8e: 10:9d:37:65:1e:29:f1:b0:81:45:72:af:90:9b:c2: e1:58:67:69:0c:a8:05:35:d9:25:87:75:0d:1f:e1: c2:4e:f8:21:fd:d2:bb:62:52:af:44:93:c9:70:b0: 7f:9a:54:6a:0a:03:a7:16:f6:13:49:5a:80:94:aa: c2:f3:ae:c4:a1:62:4f:a5:7f:47:b4:c1:e0:44:36: e2:f5:14:fe:53:e9:05:3b:f4:c4:4d:2b:54:98:7d: 4f:02:0c:34:01:ab:bf:70:50:f4:6f:f6:20:37:33: b3:4c:11:a3:9d:d2:ac:54:6b:83:ad:3e:d5:2a:5c: c2:4b:b1:d4:b8:a5:5d:90:1d:d6:b1:f4:03:c4:65: 12:65:f5:46:92:59:bb:e2:7b:40:47:cc:09:48:2f: 3f:df:c4:61:5a:de:3f:c0:60:09:1e:48:37:8d:8e: 57:7f:51:fa:51:15:97:97:21:7f:03:3d:5d:57:09: da:d7:1a:ca:32:16:5b:c3:3c:32:6d:be:c5:6d:51: 52:8d:3f:37:5f:b1:18:15:2c:3b:30:59:02:e2:02: 04:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DA:74:66:AA:0C:43:04:61:2F:C4:70:F7:7D:58:EC:80:EF:2F:D2 X509v3 Authority Key Identifier: keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/G9p0ZqoMQwRhL8Rw931Y7IDvL9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.221.0/24 185.137.223.0/24 IPv6: 2a0a:a501::-2a0a:a505:ffff:ffff:ffff:ffff:ffff:ffff 2a0a:a507::/32 Signature Algorithm: sha256WithRSAEncryption a3:15:5b:09:8b:e0:cd:27:8b:6c:43:9e:32:48:97:96:fe:5a: 84:c7:a4:17:99:3b:f6:19:a6:a0:7b:3f:40:a7:62:0f:dc:e9: 32:21:54:31:56:db:91:12:24:46:e2:64:a3:a9:46:4f:18:c0: 76:01:87:db:11:8e:22:6a:60:df:c8:84:f6:c2:f8:8e:ca:48: 6f:42:8f:e4:f2:b6:da:c7:b2:44:29:80:45:4f:b0:2f:32:f4: f4:d3:29:46:47:a8:fb:e6:85:5f:1a:69:59:5e:08:de:ec:3e: b5:94:83:b4:33:29:a5:f7:67:6f:cb:a3:f7:37:7c:57:ff:4c: 61:cd:72:1a:65:fc:0b:28:07:6d:c4:03:29:da:66:a0:4d:ba: 38:8f:9b:5f:46:fe:0e:27:49:7c:fb:2c:7a:a0:7c:13:ea:da: b5:3e:d7:dd:50:a1:ec:47:6b:85:25:7a:8c:01:2d:3c:cc:68: 94:61:e7:29:2c:fc:fd:c7:1d:18:c3:c4:b1:b7:f4:bd:63:e0: d4:b7:53:ad:74:ae:00:60:30:75:53:32:22:d7:ec:ef:9b:db: b2:b1:02:c7:d6:4d:b3:2c:34:37:ba:bc:dd:44:50:49:7b:b7: 59:e3:49:90:28:75:17:d0:2b:08:5f:bd:9c:44:f0:fc:46:7f: ee:c0:c8:4c -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt8f5j7S0wRBVuCEI4B6huoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmN2E0NjRiODk0ODQxYjNiOTQwZTBiMzU3Yjg2NWUzOTNi MWRkNDYwHhcNMjYwMTAyMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmRhNzQ2NmFhMGM0MzA0NjEyZmM0NzBmNzdkNThlYzgwZWYyZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiXq8ggKP7NhjIaLvL93cz1JdHcJ Tv+xlpOXKX+TL1VV5D1H71cw9I8GK44QnTdlHinxsIFFcq+Qm8LhWGdpDKgFNdkl h3UNH+HCTvgh/dK7YlKvRJPJcLB/mlRqCgOnFvYTSVqAlKrC867EoWJPpX9HtMHg RDbi9RT+U+kFO/TETStUmH1PAgw0Aau/cFD0b/YgNzOzTBGjndKsVGuDrT7VKlzC S7HUuKVdkB3WsfQDxGUSZfVGklm74ntAR8wJSC8/38RhWt4/wGAJHkg3jY5Xf1H6 URWXlyF/Az1dVwna1xrKMhZbwzwybb7FbVFSjT83X7EYFSw7MFkC4gIEnQIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFBvadGaqDEMEYS/EcPd9WOyA7y/SMB8GA1UdIwQY MBaAFC96RkuJSEGzuUDgs1e4ZeOTsd1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEt MTAxNDRjMWJjYWZjLzEvRzlwMFpxb01Rd1JoTDhSdzkzMVk3SUR2TDlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEtMTAxNDRjMWJjYWZj LzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzASBAIAATAMAwQAuYndAwQA uYnfMB0EAgACMBcwDgMFACoKpQEDBQEqCqUEAwUAKgqlBzANBgkqhkiG9w0BAQsF AAOCAQEAoxVbCYvgzSeLbEOeMkiXlv5ahMekF5k79hmmoHs/QKdiD9zpMiFUMVbb kRIkRuJko6lGTxjAdgGH2xGOImpg38iE9sL4jspIb0KP5PK22seyRCmARU+wLzL0 9NMpRkeo++aFXxppWV4I3uw+tZSDtDMppfdnb8uj9zd8V/9MYc1yGmX8CygHbcQD KdpmoE26OI+bX0b+DidJfPsseqB8E+ratT7X3VCh7EdrhSV6jAEtPMxolGHnKSz8 /ccdGMPEsbf0vWPg1LdTrXSuAGAwdVMyItfs75vbsrECx9ZNsyw0N7q83URQSXu3 WeNJkCh1F9ArCF+9nETw/EZ/7sDITA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:00 2026 by rpki-client