This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/2nWQF39Iwb18W2QaNPcJ8wLWKO4.roa File: 2nWQF39Iwb18W2QaNPcJ8wLWKO4.roa (raw, json) Hash identifier: Y42qQxUJOveLJJBE2Ti4Rz4U/hBNZ5LB97/p6A86eqc= Subject key identifier: DA:75:90:17:7F:48:C1:BD:7C:5B:64:1A:34:F7:09:F3:02:D6:28:EE Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe Certificate serial: 019B7D5AE5BF3650ABD2885D0C55B91E4F3B Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/2nWQF39Iwb18W2QaNPcJ8wLWKO4.roa Signing time: Fri 02 Jan 2026 06:17:47 +0000 ROA not before: Fri 02 Jan 2026 06:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212077 IP address blocks: 185.187.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e5:bf:36:50:ab:d2:88:5d:0c:55:b9:1e:4f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe Validity Not Before: Jan 2 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da7590177f48c1bd7c5b641a34f709f302d628ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bd:1c:15:9e:87:3f:cd:e2:a7:9d:18:2f:85: 89:8b:c6:81:8b:2c:b7:93:b0:8a:b5:3f:b5:8e:e1: 15:70:ec:7f:93:3a:e5:95:32:ea:03:f8:01:8f:a0: f5:d7:f4:aa:36:11:09:cc:29:28:c0:db:34:a9:6d: e2:78:53:12:27:57:6b:78:fb:8e:f3:a7:c1:bc:eb: fd:48:66:c8:21:84:04:fb:74:57:90:1d:0d:e4:24: 96:d1:f8:5f:c7:0a:13:f5:1f:94:c4:99:b7:bf:cc: 2e:71:d3:e4:cb:4b:27:02:dd:34:ae:a3:44:dc:ea: a8:f5:1a:de:70:3e:91:92:ff:e7:75:e0:f1:2d:08: c3:69:f9:e0:4c:a5:0a:9a:77:d4:c8:fd:f3:e8:da: ac:ae:65:ac:4f:7f:d4:bc:6f:a9:f6:69:f5:b4:1f: 60:a2:56:0d:3e:2d:35:f3:23:28:ab:9b:f8:99:48: 6f:d4:3a:b6:6b:0b:ac:b2:bb:74:e5:0c:c0:63:73: 83:ae:5b:31:d9:d6:e4:f5:36:9d:31:b9:1a:70:dc: 85:9c:11:e2:4b:44:a4:97:f5:34:59:82:56:84:d2: ca:48:22:bc:b0:25:d0:79:6a:73:59:4a:c7:18:cb: df:48:f5:89:03:ef:9f:a9:51:bb:33:d3:c8:d0:8e: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:75:90:17:7F:48:C1:BD:7C:5B:64:1A:34:F7:09:F3:02:D6:28:EE X509v3 Authority Key Identifier: keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/2nWQF39Iwb18W2QaNPcJ8wLWKO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.51.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:03:fa:c1:3c:a2:fa:65:33:14:17:5d:74:4e:c6:1a:36:e6: 5d:6c:2c:2b:d0:2d:19:64:80:ed:61:df:40:fa:c7:b0:12:da: 74:d7:50:c0:d2:07:4a:b0:f6:55:a1:f9:71:31:86:73:e2:06: 1c:34:fb:07:c1:fa:5a:69:e6:08:a5:6c:34:64:49:56:60:09: 82:84:58:40:92:1f:83:49:e2:ee:51:f6:5c:2f:a6:2e:bb:4d: 57:3e:f9:1d:fc:06:ff:b0:48:5e:d9:6a:90:22:fe:5a:20:52: 1c:41:bd:10:6e:b6:dd:15:ec:59:c1:69:dd:53:9e:94:54:64: 1d:2c:cb:c9:dc:5b:91:db:00:37:5f:63:b0:47:d8:42:0e:7e: ec:e8:fb:d8:af:26:76:5b:47:be:f4:df:42:44:b8:ed:0c:49: 35:31:58:1e:ef:d8:7d:8d:35:03:37:c0:91:4d:68:91:ea:0b: 6d:5d:2f:87:ca:37:c6:70:65:df:82:65:64:9e:e9:b2:f4:bc: 14:d8:6f:1b:07:80:d7:a3:26:ad:03:a5:76:fb:d7:da:e2:a7: 46:50:80:f2:ed:6f:f7:2d:6c:0a:a3:02:9a:d5:88:32:90:0e: 2f:b8:24:18:32:fb:af:bb:b8:32:5a:c2:ea:b6:19:b1:03:62: cc:eb:80:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WuW/NlCr0ohdDFW5Hk87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ODhkOGI0YzdhYTQ1YTliMmNkNzM3YzYxNDg3MWViNzE4 MWJhYmUwHhcNMjYwMTAyMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTc1OTAxNzdmNDhjMWJkN2M1YjY0MWEzNGY3MDlmMzAyZDYyOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor0cFZ6HP83ip50YL4WJi8aBiyy3 k7CKtT+1juEVcOx/kzrllTLqA/gBj6D11/SqNhEJzCkowNs0qW3ieFMSJ1drePuO 86fBvOv9SGbIIYQE+3RXkB0N5CSW0fhfxwoT9R+UxJm3v8wucdPky0snAt00rqNE 3Oqo9RrecD6Rkv/ndeDxLQjDafngTKUKmnfUyP3z6NqsrmWsT3/UvG+p9mn1tB9g olYNPi018yMoq5v4mUhv1Dq2awussrt05QzAY3ODrlsx2dbk9TadMbkacNyFnBHi S0Skl/U0WYJWhNLKSCK8sCXQeWpzWUrHGMvfSPWJA++fqVG7M9PI0I7ITwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNp1kBd/SMG9fFtkGjT3CfMC1ijuMB8GA1UdIwQY MBaAFJWI2LTHqkWpss1zfGFIcetxgbq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYt YTQ4OGJkNDIwMjRmLzEvMm5XUUYzOUl3YjE4VzJRYU5QY0o4d0xXS080LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYtYTQ4OGJkNDIwMjRm LzEvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubszMA0G CSqGSIb3DQEBCwUAA4IBAQBqA/rBPKL6ZTMUF110TsYaNuZdbCwr0C0ZZIDtYd9A +sewEtp011DA0gdKsPZVoflxMYZz4gYcNPsHwfpaaeYIpWw0ZElWYAmChFhAkh+D SeLuUfZcL6Yuu01XPvkd/Ab/sEhe2WqQIv5aIFIcQb0QbrbdFexZwWndU56UVGQd LMvJ3FuR2wA3X2OwR9hCDn7s6PvYryZ2W0e+9N9CRLjtDEk1MVge79h9jTUDN8CR TWiR6gttXS+HyjfGcGXfgmVknumy9LwU2G8bB4DXoyatA6V2+9fa4qdGUIDy7W/3 LWwKowKa1YgykA4vuCQYMvuvu7gyWsLqthmxA2LM64AW -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:18 2026 by rpki-client