This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/2RBcAv-61wd9l9Gk1RdYAf-GDcg.roa File: 2RBcAv-61wd9l9Gk1RdYAf-GDcg.roa (raw, json) Hash identifier: v/FQb8+fdjNp2YLG10rdm8zUg/kfXJi2YvY3orkV3m0= Subject key identifier: D9:10:5C:02:FF:BA:D7:07:7D:97:D1:A4:D5:17:58:01:FF:86:0D:C8 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77596CCDA57A29EE15EC7A04C9B1B473 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/2RBcAv-61wd9l9Gk1RdYAf-GDcg.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205275 IP address blocks: 89.44.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6c:cd:a5:7a:29:ee:15:ec:7a:04:c9:b1:b4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9105c02ffbad7077d97d1a4d5175801ff860dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cf:00:eb:f6:13:73:db:3b:a5:c1:db:04:2f: b4:c8:62:78:64:f5:3c:12:7c:e8:f0:fd:28:86:2e: c6:5a:fa:47:51:fa:a2:6e:2f:fb:cc:39:f7:c1:9a: 65:61:14:3e:66:0d:85:0c:38:da:04:91:4d:3f:8a: 91:71:5d:9d:f3:ca:ff:09:49:58:e4:4f:3c:09:e5: 15:48:6a:d4:e2:ce:d3:75:59:42:0f:b2:ea:9a:dc: 1d:4c:ba:b5:65:05:fe:46:11:bd:af:bb:3e:16:12: ce:16:d7:c2:16:7c:52:b2:c1:2a:ee:61:00:4a:11: 09:83:0d:bd:7a:32:a9:45:dc:c8:46:2c:df:06:f0: 01:dc:f2:60:e2:b5:f4:04:50:c6:9e:58:e5:3d:10: 15:4d:33:5e:94:71:4a:52:bf:03:00:89:74:62:cb: 20:6e:23:db:8d:8f:1b:0e:e5:59:a7:26:36:bf:af: 83:19:73:14:d1:35:b9:83:5b:55:3a:fa:d5:66:b5: 14:a6:5e:7f:c3:e7:ba:92:23:83:60:48:b2:8b:0e: 97:48:eb:f1:ac:21:7b:69:e6:e4:1a:76:16:ea:9c: a1:8b:ef:82:a4:19:ca:c1:f6:ff:17:da:26:bb:6b: ad:37:ab:dd:a7:3f:89:ac:6d:1e:fe:07:57:fe:71: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:10:5C:02:FF:BA:D7:07:7D:97:D1:A4:D5:17:58:01:FF:86:0D:C8 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/2RBcAv-61wd9l9Gk1RdYAf-GDcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.124.0/24 Signature Algorithm: sha256WithRSAEncryption e8:3f:8d:ca:d9:73:17:ee:28:30:3f:21:f9:0b:44:cd:de:09: f5:63:e0:2e:60:a6:8e:53:d9:da:c0:cf:fb:ab:6d:9e:f6:07: 05:f8:c5:07:cb:7f:4f:41:dd:df:cc:41:d4:46:d2:b6:94:8c: f4:c6:bd:c4:cd:36:5e:9b:85:16:a3:85:30:ad:05:f8:c1:6b: 05:59:e1:89:84:4f:71:8c:f2:24:2d:63:50:f7:fb:d1:77:82: 33:6f:84:d5:f0:69:33:8a:e0:0b:b6:93:10:9c:10:b5:cf:cb: e5:22:5b:66:fa:9b:cf:6d:1f:ba:81:30:10:67:6a:c7:45:ba: 04:3a:26:5a:5b:3a:65:8e:cb:ff:0c:14:db:31:ef:03:bc:79: 58:12:c2:34:c2:3d:e1:60:3a:cb:ee:a3:ec:35:1a:82:40:52: 3d:c9:90:f6:b3:7a:7e:19:99:0b:50:5b:f0:ba:7a:d3:34:d6: 86:ab:31:20:fb:fb:9e:0a:d6:e2:6e:ed:3f:09:ae:38:ab:14: 6e:47:c0:98:96:fb:65:d1:f6:c1:78:fb:e7:27:d6:8e:cd:73: d2:c0:51:d0:1d:3c:ea:4a:8e:64:ca:86:50:90:46:67:5b:40: c4:9e:a3:4f:65:c2:e3:2f:e9:9a:8c:a3:0b:de:d6:d9:98:5c: a3:ae:68:f0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WWzNpXop7hXsegTJsbRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTEwNWMwMmZmYmFkNzA3N2Q5N2QxYTRkNTE3NTgwMWZmODYwZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c8A6/YTc9s7pcHbBC+0yGJ4ZPU8 Enzo8P0ohi7GWvpHUfqibi/7zDn3wZplYRQ+Zg2FDDjaBJFNP4qRcV2d88r/CUlY 5E88CeUVSGrU4s7TdVlCD7LqmtwdTLq1ZQX+RhG9r7s+FhLOFtfCFnxSssEq7mEA ShEJgw29ejKpRdzIRizfBvAB3PJg4rX0BFDGnljlPRAVTTNelHFKUr8DAIl0Yssg biPbjY8bDuVZpyY2v6+DGXMU0TW5g1tVOvrVZrUUpl5/w+e6kiODYEiyiw6XSOvx rCF7aebkGnYW6pyhi++CpBnKwfb/F9omu2utN6vdpz+JrG0e/gdX/nEvEwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNkQXAL/utcHfZfRpNUXWAH/hg3IMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xLzJSQmNBdi02MXdkOWw5R2sxUmRZQWYtR0RjZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZLHww DQYJKoZIhvcNAQELBQADggEBAOg/jcrZcxfuKDA/IfkLRM3eCfVj4C5gpo5T2drA z/urbZ72BwX4xQfLf09B3d/MQdRG0raUjPTGvcTNNl6bhRajhTCtBfjBawVZ4YmE T3GM8iQtY1D3+9F3gjNvhNXwaTOK4Au2kxCcELXPy+UiW2b6m89tH7qBMBBnasdF ugQ6JlpbOmWOy/8MFNsx7wO8eVgSwjTCPeFgOsvuo+w1GoJAUj3JkPazen4ZmQtQ W/C6etM01oarMSD7+54K1uJu7T8JrjirFG5HwJiW+2XR9sF4++cn1o7Nc9LAUdAd POpKjmTKhlCQRmdbQMSeo09lwuMv6ZqMowve1tmYXKOuaPA= -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:32 2026 by rpki-client