This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/2s2pJjqdkzauPvjGxaMbW0Hw9hk.roa File: 2s2pJjqdkzauPvjGxaMbW0Hw9hk.roa (raw, json) Hash identifier: 7aMGiTgjlrzXz2de/ea2lhlWsVMPaQsqwo7zUxrOM/E= Subject key identifier: DA:CD:A9:26:3A:9D:93:36:AE:3E:F8:C6:C5:A3:1B:5B:41:F0:F6:19 Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B7F14694FB9A19E506D44E1283D00860B Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/2s2pJjqdkzauPvjGxaMbW0Hw9hk.roa Signing time: Fri 02 Jan 2026 14:20:02 +0000 ROA not before: Fri 02 Jan 2026 14:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214798 IP address blocks: 109.120.158.0/24 maxlen: 24 176.98.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:69:4f:b9:a1:9e:50:6d:44:e1:28:3d:00:86:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Jan 2 14:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dacda9263a9d9336ae3ef8c6c5a31b5b41f0f619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:b4:d3:aa:a7:d3:11:b4:5f:70:76:2a:42: 87:d8:09:b9:00:f6:f6:2f:b0:ba:e6:d5:62:90:27: 67:65:dd:a5:6a:5d:3e:17:98:01:4c:36:e9:76:be: 0c:54:94:ac:93:98:e5:a2:6e:0c:f6:b3:d3:24:be: e3:ec:ec:d3:ad:33:06:2d:6e:c1:80:d5:b9:8a:1e: 01:39:b0:ef:72:69:0d:27:be:24:56:04:b3:a0:51: 40:e7:8e:6f:85:c4:1d:47:69:b7:e5:9b:4f:47:ee: 5c:84:32:1d:8b:59:2a:79:a7:e0:37:cf:42:30:22: 7a:48:16:3d:28:52:86:11:94:fd:ab:e0:50:7d:d4: 21:70:69:05:7e:66:99:06:91:69:f0:fa:82:80:c5: b8:92:a0:00:a2:d0:d3:8e:2f:e3:86:b3:da:0d:95: 91:77:f8:ed:0f:63:f4:e4:f9:4e:ed:9c:4a:b8:8e: db:10:2a:30:8d:12:b3:40:f2:1e:9e:77:12:e7:ed: b4:17:d2:b3:e9:d1:16:21:3b:c6:e9:47:53:61:9a: 9a:f0:05:9f:ac:e0:fe:82:7c:6b:09:d7:93:da:40: 76:85:a5:cd:c3:4a:29:69:0b:83:06:66:ab:7c:25: 22:a7:2a:e7:0a:1e:95:95:38:ba:19:fe:b3:fe:e6: 0f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CD:A9:26:3A:9D:93:36:AE:3E:F8:C6:C5:A3:1B:5B:41:F0:F6:19 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/2s2pJjqdkzauPvjGxaMbW0Hw9hk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.120.158.0/24 176.98.189.0/24 Signature Algorithm: sha256WithRSAEncryption 80:a7:95:28:4e:17:ca:33:38:95:a9:3b:81:ef:69:f9:ee:a4: b9:da:8f:b4:1f:ea:ff:31:a2:f4:f1:41:58:b4:6a:95:fa:a2: 96:c2:6e:72:fd:d9:dc:f3:82:db:cd:d0:25:8c:53:9c:f1:6a: ef:10:3b:c8:89:38:d7:57:48:f5:93:7b:b2:7c:ed:01:71:dc: 49:e7:42:da:ee:c6:5c:af:21:bc:9f:b7:2d:fb:0a:f4:6f:f6: ec:cc:7f:10:5a:8f:0d:44:ef:62:e7:9b:7d:83:bb:a5:b2:c7: cf:eb:80:16:57:74:4c:52:50:6b:52:5d:20:99:5b:e5:66:39: 50:ef:0d:d6:e6:72:e8:09:34:46:c3:eb:23:ad:33:35:3b:75: fe:db:7e:7a:2a:37:7a:fe:fd:7a:cc:2d:d0:61:fe:20:e1:7d: 13:a9:87:f9:5a:f9:6a:43:bb:db:1b:e4:2f:af:0d:76:01:51: d1:65:f6:95:e6:78:cb:92:0b:b7:90:af:fa:7f:9a:3c:ec:84: 36:32:2d:94:3b:d2:b9:2c:2d:2b:3e:14:4c:66:7c:61:d8:43: 94:f9:6e:7a:09:41:ad:e1:4f:b3:14:b5:7c:11:84:95:e5:a6: 31:7c:bc:65:78:51:52:3c:54:14:0a:e7:c1:81:52:3e:7c:78: e8:b8:bd:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FGlPuaGeUG1E4Sg9AIYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjYwMTAyMTQyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWNkYTkyNjNhOWQ5MzM2YWUzZWY4YzZjNWEzMWI1YjQxZjBmNjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7e006qn0xG0X3B2KkKH2Am5APb2 L7C65tVikCdnZd2lal0+F5gBTDbpdr4MVJSsk5jlom4M9rPTJL7j7OzTrTMGLW7B gNW5ih4BObDvcmkNJ74kVgSzoFFA545vhcQdR2m35ZtPR+5chDIdi1kqeafgN89C MCJ6SBY9KFKGEZT9q+BQfdQhcGkFfmaZBpFp8PqCgMW4kqAAotDTji/jhrPaDZWR d/jtD2P05PlO7ZxKuI7bECowjRKzQPIenncS5+20F9Kz6dEWITvG6UdTYZqa8AWf rOD+gnxrCdeT2kB2haXNw0opaQuDBmarfCUipyrnCh6VlTi6Gf6z/uYPcwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNrNqSY6nZM2rj74xsWjG1tB8PYZMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvMnMycEpqcWRremF1UHZqR3hhTWJXMEh3OWhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXieAwQA sGK9MA0GCSqGSIb3DQEBCwUAA4IBAQCAp5UoThfKMziVqTuB72n57qS52o+0H+r/ MaL08UFYtGqV+qKWwm5y/dnc84LbzdAljFOc8WrvEDvIiTjXV0j1k3uyfO0BcdxJ 50La7sZcryG8n7ct+wr0b/bszH8QWo8NRO9i55t9g7ulssfP64AWV3RMUlBrUl0g mVvlZjlQ7w3W5nLoCTRGw+sjrTM1O3X+2356Kjd6/v16zC3QYf4g4X0TqYf5Wvlq Q7vbG+Qvrw12AVHRZfaV5njLkgu3kK/6f5o87IQ2Mi2UO9K5LC0rPhRMZnxh2EOU +W56CUGt4U+zFLV8EYSV5aYxfLxleFFSPFQUCufBgVI+fHjouL0u -----END CERTIFICATE-----Generated at Sun Jan 25 10:19:59 2026 by rpki-client