This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/2CXydi7pS_cJcMpLbvELMfs4pr4.roa File: 2CXydi7pS_cJcMpLbvELMfs4pr4.roa (raw, json) Hash identifier: 4VhEMr7PE71mfWduL3bPnzBAu34zlbw2TZ44djrJbfs= Subject key identifier: D8:25:F2:76:2E:E9:4B:F7:09:70:CA:4B:6E:F1:0B:31:FB:38:A6:BE Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019B76EAF84772A8ACF6B20785D9A1BE63C6 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/2CXydi7pS_cJcMpLbvELMfs4pr4.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13000 IP address blocks: 62.182.224.0/21 maxlen: 21 87.101.64.0/20 maxlen: 24 87.239.192.0/21 maxlen: 21 89.200.224.0/21 maxlen: 24 91.195.134.0/23 maxlen: 23 91.195.158.0/23 maxlen: 23 91.195.190.0/23 maxlen: 23 91.200.24.0/22 maxlen: 22 91.214.24.0/22 maxlen: 22 95.131.32.0/21 maxlen: 24 188.137.0.0/17 maxlen: 24 193.34.112.0/22 maxlen: 22 193.93.92.0/22 maxlen: 24 193.150.36.0/23 maxlen: 23 195.3.200.0/22 maxlen: 22 195.3.203.0/24 maxlen: 24 195.66.73.0/24 maxlen: 24 2a02:c40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f8:47:72:a8:ac:f6:b2:07:85:d9:a1:be:63:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d825f2762ee94bf70970ca4b6ef10b31fb38a6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7a:cb:b9:3c:e0:8a:5f:d7:29:5d:99:11:ce: 89:da:12:ff:08:eb:47:1a:e8:58:03:c7:de:20:20: ce:0d:ec:c3:5d:17:78:55:dd:2d:d3:30:f1:b3:85: e6:2b:ad:03:3b:f2:11:4e:30:e3:11:77:b9:f2:c4: 27:3e:4e:e9:d7:80:6d:b2:74:28:e3:74:1f:11:57: a8:78:be:70:e1:f0:d3:9c:0d:93:ea:f2:98:51:74: 9a:ea:cd:9c:ee:e4:29:6c:dd:f8:f1:7d:89:07:aa: b2:29:68:a7:5d:46:c1:36:c3:82:35:0b:29:cc:39: ea:ac:6f:3e:55:43:e1:c2:a4:b3:4a:b8:ac:63:2f: 76:f0:2a:5e:81:db:c5:de:02:5f:d8:b4:70:de:22: e0:37:94:df:ca:31:b1:f9:01:25:00:24:a5:1f:66: a7:fe:90:1a:44:e5:f9:a4:cd:bb:66:cf:82:be:6d: 13:b1:de:b4:a0:41:66:02:63:2b:7f:be:08:cb:0d: 13:30:61:ee:4d:5a:49:09:47:7c:98:38:89:b1:48: 63:cf:e7:07:e4:e9:12:00:61:5e:3e:8d:40:89:8b: 9e:3d:08:6d:9e:43:2e:c5:cc:00:14:8f:f3:29:50: 9f:74:7c:e6:77:c8:26:af:42:f9:12:8f:ea:aa:09: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:25:F2:76:2E:E9:4B:F7:09:70:CA:4B:6E:F1:0B:31:FB:38:A6:BE X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/2CXydi7pS_cJcMpLbvELMfs4pr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.182.224.0/21 87.101.64.0/20 87.239.192.0/21 89.200.224.0/21 91.195.134.0/23 91.195.158.0/23 91.195.190.0/23 91.200.24.0/22 91.214.24.0/22 95.131.32.0/21 188.137.0.0/17 193.34.112.0/22 193.93.92.0/22 193.150.36.0/23 195.3.200.0/22 195.66.73.0/24 IPv6: 2a02:c40::/32 Signature Algorithm: sha256WithRSAEncryption 1d:08:ab:35:d2:f7:b6:00:69:ad:42:90:13:c9:ef:74:43:61: 7a:f3:ba:83:78:88:c4:94:c4:4c:bb:29:0a:d7:cb:00:4b:fc: ff:ba:70:31:0d:8c:d3:c0:ae:a2:ca:ef:ab:1a:89:b7:1d:ef: 7b:4b:f4:67:4b:00:44:16:54:b5:af:51:8c:cf:a4:3e:2f:80: c6:12:30:a0:fb:aa:eb:db:c7:bc:3b:bc:22:7b:68:12:d9:bf: b5:f7:fa:5d:ff:22:a6:46:95:06:4b:d8:46:90:a1:62:02:fe: e4:bd:d5:7e:9d:9d:98:b7:69:d3:cb:c2:af:ef:13:ac:b4:8c: 40:59:04:f7:f5:ab:87:17:d6:14:92:96:34:a8:9e:55:5a:0c: b0:bf:40:2f:f4:ff:b2:86:8f:4a:1d:a6:e2:92:25:60:89:96: ec:da:80:8f:bc:71:f4:13:dd:9c:33:40:15:95:1c:2f:7d:72: e7:4f:06:1d:79:d5:62:05:ce:fc:1f:aa:b9:3f:72:9f:e8:92: 20:47:d1:2f:25:61:56:fa:a5:0a:73:d7:eb:4c:e9:06:f1:b9: 07:cb:42:77:0d:9c:3e:92:cf:08:a8:2b:32:59:d9:ff:30:03: 41:fa:eb:bf:93:31:ce:fe:eb:9f:f1:f5:52:56:0c:03:3d:d8: d8:7b:9d:09 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISAZt26vhHcqis9rIHhdmhvmPGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODI1ZjI3NjJlZTk0YmY3MDk3MGNhNGI2ZWYxMGIzMWZiMzhhNmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nrLuTzgil/XKV2ZEc6J2hL/COtH GuhYA8feICDODezDXRd4Vd0t0zDxs4XmK60DO/IRTjDjEXe58sQnPk7p14BtsnQo 43QfEVeoeL5w4fDTnA2T6vKYUXSa6s2c7uQpbN348X2JB6qyKWinXUbBNsOCNQsp zDnqrG8+VUPhwqSzSrisYy928CpegdvF3gJf2LRw3iLgN5TfyjGx+QElACSlH2an /pAaROX5pM27Zs+Cvm0Tsd60oEFmAmMrf74Iyw0TMGHuTVpJCUd8mDiJsUhjz+cH 5OkSAGFePo1AiYuePQhtnkMuxcwAFI/zKVCfdHzmd8gmr0L5Eo/qqgk0OQIDAQAB o4ICczCCAm8wHQYDVR0OBBYEFNgl8nYu6Uv3CXDKS27xCzH7OKa+MB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvMkNYeWRpN3BTX2NKY01wTGJ2RUxNZnM0cHI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwZgQCAAEwYAMEAz624AME BFdlQAMEA1fvwAMEA1nI4AMEAVvDhgMEAVvDngMEAVvDvgMEAlvIGAMEAlvWGAME A1+DIAMEB7yJAAMEAsEicAMEAsFdXAMEAcGWJAMEAsMDyAMEAMNCSTANBAIAAjAH AwUAKgIMQDANBgkqhkiG9w0BAQsFAAOCAQEAHQirNdL3tgBprUKQE8nvdENhevO6 g3iIxJTETLspCtfLAEv8/7pwMQ2M08CuosrvqxqJtx3ve0v0Z0sARBZUta9RjM+k Pi+AxhIwoPuq69vHvDu8IntoEtm/tff6Xf8ipkaVBkvYRpChYgL+5L3Vfp2dmLdp 08vCr+8TrLSMQFkE9/WrhxfWFJKWNKieVVoMsL9AL/T/soaPSh2m4pIlYImW7NqA j7xx9BPdnDNAFZUcL31y508GHXnVYgXO/B+quT9yn+iSIEfRLyVhVvqlCnPX60zp BvG5B8tCdw2cPpLPCKgrMlnZ/zADQfrrv5Mxzv7rn/H1UlYMAz3Y2HudCQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:35 2026 by rpki-client