This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/2HdBpWh-50_goW8h6khUnhcxRKk.roa File: 2HdBpWh-50_goW8h6khUnhcxRKk.roa (raw, json) Hash identifier: 9TImXcQ/0dWYKklrZF5PPoqL8egVUtFJy8Sg7tiR7+A= Subject key identifier: D8:77:41:A5:68:7E:E7:4F:E0:A1:6F:21:EA:48:54:9E:17:31:44:A9 Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697 Certificate serial: 019B77C67D3F15924AF1F3CDC9C20E93FC0E Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/2HdBpWh-50_goW8h6khUnhcxRKk.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201755 IP address blocks: 2.58.104.0/24 maxlen: 24 2.58.105.0/24 maxlen: 24 2.58.106.0/24 maxlen: 24 2.58.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7d:3f:15:92:4a:f1:f3:cd:c9:c2:0e:93:fc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d87741a5687ee74fe0a16f21ea48549e173144a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:a3:4b:40:e0:7a:de:10:62:4e:e7:51:de: 2e:e8:3f:cb:c4:76:74:8e:19:83:0d:1f:4e:07:ac: 93:90:39:8c:0d:b8:6f:91:5e:e7:c8:26:25:8f:47: 35:35:ec:4f:c7:12:85:cd:43:8d:6e:ee:69:ef:4f: 94:20:fc:e8:61:48:9c:4f:2f:d7:a7:29:8f:ad:5a: 8f:4a:46:d8:53:82:f2:2c:c1:b6:fe:96:08:f2:70: 38:e6:a9:5e:08:f2:3a:01:c2:85:ef:14:b0:de:bf: c0:80:cd:21:52:d0:38:41:e1:ec:2a:61:80:cf:0d: a6:6a:05:b0:a1:0c:15:12:ed:0a:65:0d:14:ad:af: 94:96:e9:f4:65:4c:98:88:6d:9c:8b:b4:c5:c9:c2: 08:fe:c9:99:03:6c:fe:b3:fe:59:09:87:58:50:67: 53:7f:21:df:8c:23:4a:b3:9f:28:8b:74:2c:d2:6d: 6e:2b:a0:e2:dd:fc:80:6b:c9:ec:98:a4:30:0c:60: 88:3a:8c:16:7d:8d:32:76:b0:18:ba:bb:97:65:6c: 36:0b:33:1d:8d:44:f0:08:64:8d:d4:5d:3e:43:53: b2:ef:51:ab:cf:b0:a4:ab:8a:f5:63:10:8c:5f:35: 6f:ed:61:f8:6b:b1:64:c9:c1:45:33:6b:a1:29:80: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:77:41:A5:68:7E:E7:4F:E0:A1:6F:21:EA:48:54:9E:17:31:44:A9 X509v3 Authority Key Identifier: keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/2HdBpWh-50_goW8h6khUnhcxRKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.104.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:f3:5f:34:47:52:02:30:db:26:54:93:74:f1:5c:b1:7e:2a: 40:35:44:15:d8:1e:82:a6:3c:a2:c5:72:44:02:02:59:d0:89: cb:29:ee:18:ec:a6:15:29:fd:7d:df:73:95:b2:b1:a8:1c:66: a7:98:d1:77:29:21:13:36:0a:a7:7b:c7:d7:2f:f1:ad:c3:fa: 6e:0a:fa:8e:ab:6f:54:90:07:19:12:5c:b0:9c:33:f4:58:a8: 5b:bb:f8:dd:a3:a9:1a:91:3d:e4:67:1a:49:2a:f9:09:6a:4c: e2:12:b9:53:ca:00:c7:b5:ba:f5:5d:59:c8:ea:73:c9:46:a3: 43:e2:b2:52:04:ba:ad:bf:a6:8b:54:1e:74:9b:8a:51:8f:a3: de:b5:6f:b7:93:92:71:39:cf:6b:23:d1:1f:23:54:78:02:87: 41:a1:11:11:91:35:20:a9:c2:a6:4c:80:05:28:c1:fe:0a:47: d5:ca:63:da:bd:06:22:06:f4:de:6b:84:9c:25:75:4e:60:67: b1:84:c2:69:ff:d5:0c:aa:48:27:dd:a4:23:88:c6:b0:7e:b3: a0:bb:2c:02:46:a6:ca:d7:87:b8:4c:a9:92:5e:ab:65:3c:8d: 5d:0e:83:c1:e7:c8:72:40:61:d8:aa:08:10:6f:73:e1:fd:a6: f0:a6:25:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xn0/FZJK8fPNycIOk/wOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MDZhZjgwNGVmNWE2MzZmNDY0ZTcxYThkNDFlOGQ0MDFh N2Y2OTcwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODc3NDFhNTY4N2VlNzRmZTBhMTZmMjFlYTQ4NTQ5ZTE3MzE0NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZmjS0Dget4QYk7nUd4u6D/LxHZ0 jhmDDR9OB6yTkDmMDbhvkV7nyCYlj0c1NexPxxKFzUONbu5p70+UIPzoYUicTy/X pymPrVqPSkbYU4LyLMG2/pYI8nA45qleCPI6AcKF7xSw3r/AgM0hUtA4QeHsKmGA zw2magWwoQwVEu0KZQ0Ura+Ulun0ZUyYiG2ci7TFycII/smZA2z+s/5ZCYdYUGdT fyHfjCNKs58oi3Qs0m1uK6Di3fyAa8nsmKQwDGCIOowWfY0ydrAYuruXZWw2CzMd jUTwCGSN1F0+Q1Oy71Grz7Ckq4r1YxCMXzVv7WH4a7FkycFFM2uhKYCmbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNh3QaVofudP4KFvIepIVJ4XMUSpMB8GA1UdIwQY MBaAFFQGr4BO9aY29GTnGo1B6NQBp/aXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNWNiNWMtOTNhNS00YmYxLWJhMWQt MWNhOWQyNTllMmFkLzEvMkhkQnBXaC01MF9nb1c4aDZraFVuaGN4UktrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zNWNiNWMtOTNhNS00YmYxLWJhMWQtMWNhOWQyNTllMmFk LzEvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjpoMA0G CSqGSIb3DQEBCwUAA4IBAQAc8180R1ICMNsmVJN08VyxfipANUQV2B6CpjyixXJE AgJZ0InLKe4Y7KYVKf1933OVsrGoHGanmNF3KSETNgqne8fXL/Gtw/puCvqOq29U kAcZElywnDP0WKhbu/jdo6kakT3kZxpJKvkJakziErlTygDHtbr1XVnI6nPJRqND 4rJSBLqtv6aLVB50m4pRj6PetW+3k5JxOc9rI9EfI1R4AodBoRERkTUgqcKmTIAF KMH+CkfVymPavQYiBvTea4ScJXVOYGexhMJp/9UMqkgn3aQjiMawfrOguywCRqbK 14e4TKmSXqtlPI1dDoPB58hyQGHYqggQb3Ph/abwpiU6 -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:10 2026 by rpki-client