This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/2p_MSB5aNHumaKfYN1tMK3QplXs.roa File: 2p_MSB5aNHumaKfYN1tMK3QplXs.roa (raw, json) Hash identifier: UN2v4qeX/yLlS8F+HWJDtro6RjRbrWRJJSxi6nWaH2s= Subject key identifier: DA:9F:CC:48:1E:5A:34:7B:A6:68:A7:D8:37:5B:4C:2B:74:29:95:7B Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199 Certificate serial: 019B7DCAAD4AE7B379BE3D31BA2F8CFB401B Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/2p_MSB5aNHumaKfYN1tMK3QplXs.roa Signing time: Fri 02 Jan 2026 08:19:53 +0000 ROA not before: Fri 02 Jan 2026 08:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213023 IP address blocks: 185.189.180.0/24 maxlen: 24 2a0b:f380::/48 maxlen: 48 2a0b:f380:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ad:4a:e7:b3:79:be:3d:31:ba:2f:8c:fb:40:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199 Validity Not Before: Jan 2 08:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da9fcc481e5a347ba668a7d8375b4c2b7429957b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:67:96:34:62:de:37:af:38:fa:9a:09:51: 88:22:d6:9d:77:8c:c5:74:b9:dc:30:7a:1d:4b:c4: 37:b8:e2:11:f9:a8:ee:0b:33:28:fa:00:2d:72:1b: 06:68:9e:14:02:5f:58:fc:42:d0:9c:52:e3:cd:c0: 37:17:10:6d:69:6b:37:9f:6c:be:90:be:8d:f4:51: 38:ff:77:fa:d7:18:cf:fe:eb:e2:ee:f4:13:d7:e8: 4b:ca:a7:92:66:41:87:c2:e3:93:bd:b3:9a:53:4f: b2:4a:7c:39:d8:bf:3f:f4:b9:2d:38:c8:f2:f7:79: 0c:9c:33:cb:db:9e:4c:6b:d0:f2:05:07:4b:55:5b: 27:71:0f:0a:0f:74:cf:f4:37:b7:1d:33:24:57:7a: 66:62:52:a0:2c:09:62:d8:53:bf:04:ea:2c:7c:1b: da:03:8d:e3:a9:3d:92:a9:40:94:9a:6f:d9:c4:76: 5e:ce:92:24:cb:24:c7:aa:bf:19:a5:56:2b:fc:1c: ec:69:53:c4:af:de:1d:05:2c:6c:87:83:d6:99:d4: 64:d7:8b:3c:91:4b:49:31:7e:7c:6f:a6:73:c5:d4: 07:bb:3c:90:af:75:ca:26:6e:39:da:31:37:ae:b6: 7f:fe:00:fa:0b:12:51:42:36:7c:59:09:c2:81:3f: 6d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9F:CC:48:1E:5A:34:7B:A6:68:A7:D8:37:5B:4C:2B:74:29:95:7B X509v3 Authority Key Identifier: keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/2p_MSB5aNHumaKfYN1tMK3QplXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.180.0/24 IPv6: 2a0b:f380::/48 2a0b:f380:a::/48 Signature Algorithm: sha256WithRSAEncryption 21:08:ec:21:5c:10:03:ba:b0:29:67:4f:e8:da:20:e5:f5:bf: 93:67:7c:b0:a4:dd:70:c9:1d:8c:c8:8a:b8:b6:05:3f:69:eb: 88:e1:ed:5b:f9:f1:58:77:0a:d6:b1:03:61:6b:2d:52:2a:b2: c0:25:7a:e5:06:1d:d0:56:3b:35:c6:a7:35:7d:e1:a1:65:ba: 13:5d:40:5c:6e:33:2e:bf:83:3f:85:3c:c2:4f:79:7f:63:12: 27:39:9c:2e:d0:a8:08:13:ab:04:b3:14:85:e5:72:11:03:90: 48:01:01:21:1c:bd:e1:80:6d:96:f8:80:ee:09:fd:04:91:da: 57:c1:f0:3b:3d:c2:ec:07:ad:26:0e:2a:e0:35:df:e8:25:6a: 6b:bd:46:64:ec:4e:03:46:7b:cb:20:3d:7e:3b:d9:f7:26:d4: fb:7d:6a:75:ac:6c:8f:90:fc:8b:43:ab:be:b5:d2:28:5a:7d: 5b:80:cf:50:07:11:c0:9d:a6:a3:8f:00:47:db:d2:cb:7c:1c: dc:58:1f:c7:aa:66:9f:80:e4:70:85:1b:db:53:00:03:1b:a1: e1:b6:6c:11:94:f1:6a:aa:76:0b:35:7c:11:71:42:3d:a1:6b: 7e:fa:d6:2c:2e:26:b2:d6:13:9c:f2:a6:f5:94:66:d1:70:3c: f1:fa:d2:ac -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9yq1K57N5vj0xui+M+0AbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MDNlNWY4NDA1ZDYwODViOGRmNGJmY2UxZGQ5YmIzZTc4 YzIxOTkwHhcNMjYwMTAyMDgxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTlmY2M0ODFlNWEzNDdiYTY2OGE3ZDgzNzViNGMyYjc0Mjk5NTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubxnljRi3jevOPqaCVGIItadd4zF dLncMHodS8Q3uOIR+ajuCzMo+gAtchsGaJ4UAl9Y/ELQnFLjzcA3FxBtaWs3n2y+ kL6N9FE4/3f61xjP/uvi7vQT1+hLyqeSZkGHwuOTvbOaU0+ySnw52L8/9LktOMjy 93kMnDPL255Ma9DyBQdLVVsncQ8KD3TP9De3HTMkV3pmYlKgLAli2FO/BOosfBva A43jqT2SqUCUmm/ZxHZezpIkyyTHqr8ZpVYr/BzsaVPEr94dBSxsh4PWmdRk14s8 kUtJMX58b6ZzxdQHuzyQr3XKJm452jE3rrZ//gD6CxJRQjZ8WQnCgT9tCQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNqfzEgeWjR7pmin2DdbTCt0KZV7MB8GA1UdIwQY MBaAFFQD5fhAXWCFuN9L/OHdm7PnjCGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hZWU4ZDktMjFlZC00ZGI3LWJkNzAt MTVhNDJhYzllZmE4LzEvMnBfTVNCNWFOSHVtYUtmWU4xdE1LM1FwbFhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hZWU4ZDktMjFlZC00ZGI3LWJkNzAtMTVhNDJhYzllZmE4 LzEvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAub20MBgE AgACMBIDBwAqC/OAAAADBwAqC/OAAAowDQYJKoZIhvcNAQELBQADggEBACEI7CFc EAO6sClnT+jaIOX1v5NnfLCk3XDJHYzIiri2BT9p64jh7Vv58Vh3CtaxA2FrLVIq ssAleuUGHdBWOzXGpzV94aFluhNdQFxuMy6/gz+FPMJPeX9jEic5nC7QqAgTqwSz FIXlchEDkEgBASEcveGAbZb4gO4J/QSR2lfB8Ds9wuwHrSYOKuA13+glamu9RmTs TgNGe8sgPX472fcm1Pt9anWsbI+Q/ItDq7610ihafVuAz1AHEcCdpqOPAEfb0st8 HNxYH8eqZp+A5HCFG9tTAAMboeG2bBGU8Wqqdgs1fBFxQj2ha3761iwuJrLWE5zy pvWUZtFwPPH60qw= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:14 2026 by rpki-client