This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/2Nc5AsSnBWzCuxjbHnI5SDdmCKE.roa File: 2Nc5AsSnBWzCuxjbHnI5SDdmCKE.roa (raw, json) Hash identifier: IY9E1+Z/A+D4/xzAfwUZ6RBDyrzbb4T4cIqPhChpPt8= Subject key identifier: D8:D7:39:02:C4:A7:05:6C:C2:BB:18:DB:1E:72:39:48:37:66:08:A1 Certificate issuer: /CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9 Certificate serial: 019B7BA324DED58F3E617CE4B13832FA6F9E Authority key identifier: 5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/2Nc5AsSnBWzCuxjbHnI5SDdmCKE.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 194.127.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:24:de:d5:8f:3e:61:7c:e4:b1:38:32:fa:6f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9 Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8d73902c4a7056cc2bb18db1e723948376608a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:a6:82:0f:93:43:82:6c:50:2b:b7:d4:58: ef:6c:77:5e:06:55:49:34:ea:82:e3:f7:e4:a2:55: de:2c:b8:83:f0:35:57:47:9c:cf:ba:15:2d:2b:df: d9:d1:51:80:46:9f:db:a3:a4:cb:7e:29:9f:2d:a4: 6c:97:55:7b:2b:5e:4c:e4:d3:5d:db:89:73:05:2e: 3c:fa:a8:2b:99:ad:fd:78:cb:77:ee:59:b7:96:34: 4b:ee:76:12:36:ab:f4:8f:74:6c:79:ea:4b:26:8d: 5d:08:bf:67:03:80:52:00:3e:2a:85:4d:36:1f:70: 00:6f:79:47:83:30:75:de:bd:db:00:3f:0b:c9:23: f3:b3:9b:60:83:79:10:b4:01:06:ba:9d:dc:ae:af: 35:61:7e:bb:33:14:2e:a4:84:05:e2:57:b0:5d:2a: 6d:b2:a3:87:1e:c3:35:7d:3e:0a:8a:b6:f6:8e:59: a4:9f:b4:f7:cb:22:14:6d:9b:c5:63:89:c1:9b:76: db:6a:54:4d:fb:c8:e3:b6:c0:eb:93:0e:b8:4e:c7: 59:b6:db:86:9b:fb:8b:c9:68:ab:ec:e8:c6:3c:56: 45:46:73:e2:09:68:e2:8e:32:c2:0d:91:71:64:24: af:8f:05:9e:25:bb:8d:f9:e0:a7:c4:31:62:f4:bb: 8e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:39:02:C4:A7:05:6C:C2:BB:18:DB:1E:72:39:48:37:66:08:A1 X509v3 Authority Key Identifier: keyid:5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/2Nc5AsSnBWzCuxjbHnI5SDdmCKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.172.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:fe:f4:52:e4:29:8d:5b:ca:2b:b7:d4:38:6b:8a:8a:6f:47: 19:a0:57:65:6c:6f:a1:5b:73:b2:27:3e:4e:b7:4a:44:04:a3: 04:67:1d:2b:92:57:82:7b:c3:9e:7a:ad:9e:ce:4b:18:00:f0: 4a:3a:5d:a9:7d:e9:1c:b6:f4:e6:cd:c9:6d:a6:13:dd:88:aa: 16:69:29:aa:a4:7b:f8:e2:28:fa:b4:0a:97:1b:84:df:c0:77: 5e:4f:33:1c:19:58:51:22:1a:a5:88:21:78:3d:16:80:45:35: 48:c3:8a:df:70:d8:81:7d:8d:60:c6:1e:ea:12:f9:49:46:c1: bf:ef:5e:a9:8e:1a:3e:6f:97:0e:3b:70:49:36:6e:83:6d:4c: 56:9a:d9:68:84:21:44:01:8e:8d:61:cf:06:70:56:64:37:90: 1f:7f:27:6d:73:fd:88:21:55:42:0a:99:59:52:86:ac:a9:1f: b7:e7:38:3b:46:a2:9c:bb:51:5c:30:dc:dc:e3:15:1c:6f:96: aa:d0:cc:cb:91:07:17:2d:3b:4c:c0:5e:3a:9c:9f:5c:43:08: 89:e9:82:95:0a:cc:03:4b:60:50:74:d4:01:a4:a8:d3:f1:2a: cd:8c:a4:14:44:be:0e:9b:fb:87:54:df:8f:d9:a2:7f:fe:80: 5a:80:6e:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyTe1Y8+YXzksTgy+m+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYjNhMjE0NWY5YjRkNDY2MDU4MmFkYzZiNzM1NDk2OWUw ODljYTkwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGQ3MzkwMmM0YTcwNTZjYzJiYjE4ZGIxZTcyMzk0ODM3NjYwOGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql2mgg+TQ4JsUCu31FjvbHdeBlVJ NOqC4/fkolXeLLiD8DVXR5zPuhUtK9/Z0VGARp/bo6TLfimfLaRsl1V7K15M5NNd 24lzBS48+qgrma39eMt37lm3ljRL7nYSNqv0j3RseepLJo1dCL9nA4BSAD4qhU02 H3AAb3lHgzB13r3bAD8LySPzs5tgg3kQtAEGup3crq81YX67MxQupIQF4lewXSpt sqOHHsM1fT4Kirb2jlmkn7T3yyIUbZvFY4nBm3bbalRN+8jjtsDrkw64TsdZttuG m/uLyWir7OjGPFZFRnPiCWjijjLCDZFxZCSvjwWeJbuN+eCnxDFi9LuO8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNjXOQLEpwVswrsY2x5yOUg3ZgihMB8GA1UdIwQY MBaAFFyzohRfm01GYFgq3GtzVJaeCJypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWExPaUZGLWJUVVpnV0NyY2EzTlVscDRJbktrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kMDY2MWMtY2ViYi00ZTIyLWIxOTct MTM5ODAwYThjNzVmLzEvMk5jNUFzU25CV3pDdXhqYkhuSTVTRGRtQ0tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9kMDY2MWMtY2ViYi00ZTIyLWIxOTctMTM5ODAwYThjNzVm LzEvWExPaUZGLWJUVVpnV0NyY2EzTlVscDRJbktrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwn+sMA0G CSqGSIb3DQEBCwUAA4IBAQAq/vRS5CmNW8ort9Q4a4qKb0cZoFdlbG+hW3OyJz5O t0pEBKMEZx0rkleCe8Oeeq2ezksYAPBKOl2pfekctvTmzcltphPdiKoWaSmqpHv4 4ij6tAqXG4TfwHdeTzMcGVhRIhqliCF4PRaARTVIw4rfcNiBfY1gxh7qEvlJRsG/ 716pjho+b5cOO3BJNm6DbUxWmtlohCFEAY6NYc8GcFZkN5Affydtc/2IIVVCCplZ UoasqR+35zg7RqKcu1FcMNzc4xUcb5aq0MzLkQcXLTtMwF46nJ9cQwiJ6YKVCswD S2BQdNQBpKjT8SrNjKQURL4Om/uHVN+P2aJ//oBagG5J -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:57 2026 by rpki-client