This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/2MB2DBQgCl0dVRene8aIhBUlqJk.roa File: 2MB2DBQgCl0dVRene8aIhBUlqJk.roa (raw, json) Hash identifier: uJS/vs+LK5JPprKv3DwByglLof269DznZ/k0mU6r7CI= Subject key identifier: D8:C0:76:0C:14:20:0A:5D:1D:55:17:A7:7B:C6:88:84:15:25:A8:99 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775964417CAD1C0797D3AF47801879B0 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/2MB2DBQgCl0dVRene8aIhBUlqJk.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61050 IP address blocks: 89.44.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:64:41:7c:ad:1c:07:97:d3:af:47:80:18:79:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8c0760c14200a5d1d5517a77bc688841525a899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:a4:43:40:a6:54:84:a0:41:aa:ae:27:d0: 00:57:f6:c4:85:3c:59:d3:c6:f0:46:d8:2c:a7:4c: 1f:f7:d3:74:92:67:0e:75:e6:10:fb:0c:a2:f4:99: 7c:83:14:87:bd:55:d4:02:0b:f7:d3:5a:a9:25:b5: 48:78:d7:6b:68:93:7b:0d:a0:5f:3f:35:7c:5e:9c: 03:68:00:03:92:d9:64:9d:d1:1d:06:61:69:9f:37: 23:82:dc:c2:a3:ab:09:96:82:5c:52:3a:01:79:d0: be:5d:8f:04:03:60:2f:90:1c:c4:32:6b:17:fa:3b: 32:d1:51:48:27:74:5c:08:2b:f4:27:f5:75:3d:29: 78:fc:50:3a:d3:82:cf:76:58:89:3f:62:f1:ad:a1: 00:0d:70:9e:fb:84:92:92:dc:09:8b:6c:60:57:e6: 17:70:98:57:ae:44:e7:e3:37:f3:9c:b4:11:87:76: b6:d0:db:74:ef:8e:e2:5a:fa:3c:97:41:c1:11:df: cc:a4:cc:bb:0c:8c:72:4c:69:cb:b8:6d:72:a1:df: 84:82:48:c2:2a:ea:1b:7d:25:d4:a0:65:e9:b5:83: f7:f1:9c:b7:70:3a:18:25:3e:37:86:9b:54:02:80: bb:4d:05:2a:b3:d2:78:cc:db:b2:1f:51:bb:78:73: ad:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C0:76:0C:14:20:0A:5D:1D:55:17:A7:7B:C6:88:84:15:25:A8:99 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/2MB2DBQgCl0dVRene8aIhBUlqJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.122.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:c3:97:5d:e3:82:11:f3:49:e4:4b:0e:fa:ef:e7:2a:b1:94: e6:f3:81:07:92:8b:45:b0:86:61:0c:51:61:19:40:53:be:74: 6e:d4:d5:28:ea:db:3f:1f:ae:6d:74:63:17:c9:16:15:38:4c: 8b:ae:c4:19:4d:e0:72:0d:6a:ac:2d:d2:66:d4:7c:5c:a4:6c: ce:15:3c:0b:13:0e:ee:fa:f2:e9:1f:1f:08:a7:9e:e9:ba:2a: 87:12:26:3a:a1:ba:65:77:73:cd:12:81:5d:9e:85:16:17:56: ae:fb:e9:90:de:87:bb:bb:96:ae:b7:87:b3:93:4f:ca:16:94: b6:7c:82:dc:07:5a:73:b2:57:8f:9b:26:d5:d2:7e:b1:49:1e: be:ad:50:e4:0b:17:e6:36:39:71:82:ab:9b:5f:7f:91:a3:9d: 33:d0:0f:e3:08:ce:a8:36:53:a0:46:53:fb:34:bb:28:8d:0b: 71:bc:05:57:3f:76:3f:f1:6c:be:9e:92:f9:15:0f:ad:7b:94: bf:a7:9f:82:da:bc:80:e5:31:f2:07:a4:c4:4d:f3:fd:d8:0f: 8a:c8:80:62:6a:1a:ed:b6:49:2c:46:11:7e:f3:cc:d0:60:42: f6:7b:16:a3:90:2b:5a:8a:66:13:3a:7d:19:1d:2b:52:55:db: 31:57:51:66 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WWRBfK0cB5fTr0eAGHmwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGMwNzYwYzE0MjAwYTVkMWQ1NTE3YTc3YmM2ODg4NDE1MjVhODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj2kQ0CmVISgQaquJ9AAV/bEhTxZ 08bwRtgsp0wf99N0kmcOdeYQ+wyi9Jl8gxSHvVXUAgv301qpJbVIeNdraJN7DaBf PzV8XpwDaAADktlkndEdBmFpnzcjgtzCo6sJloJcUjoBedC+XY8EA2AvkBzEMmsX +jsy0VFIJ3RcCCv0J/V1PSl4/FA604LPdliJP2LxraEADXCe+4SSktwJi2xgV+YX cJhXrkTn4zfznLQRh3a20Nt0747iWvo8l0HBEd/MpMy7DIxyTGnLuG1yod+EgkjC KuobfSXUoGXptYP38Zy3cDoYJT43hptUAoC7TQUqs9J4zNuyH1G7eHOtbwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNjAdgwUIApdHVUXp3vGiIQVJaiZMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xLzJNQjJEQlFnQ2wwZFZSZW5lOGFJaEJVbHFKay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZLHow DQYJKoZIhvcNAQELBQADggEBAEzDl13jghHzSeRLDvrv5yqxlObzgQeSi0WwhmEM UWEZQFO+dG7U1Sjq2z8frm10YxfJFhU4TIuuxBlN4HINaqwt0mbUfFykbM4VPAsT Du768ukfHwinnum6KocSJjqhumV3c80SgV2ehRYXVq776ZDeh7u7lq63h7OTT8oW lLZ8gtwHWnOyV4+bJtXSfrFJHr6tUOQLF+Y2OXGCq5tff5GjnTPQD+MIzqg2U6BG U/s0uyiNC3G8BVc/dj/xbL6ekvkVD617lL+nn4LavIDlMfIHpMRN8/3YD4rIgGJq Gu22SSxGEX7zzNBgQvZ7FqOQK1qKZhM6fRkdK1JV2zFXUWY= -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:53 2026 by rpki-client