This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/2JMB4vX5_LWb8Di0KSFc_SxsfMQ.roa File: 2JMB4vX5_LWb8Di0KSFc_SxsfMQ.roa (raw, json) Hash identifier: dw7y8zA3sA5szHuqDv2uyqn6EpUQJ2K7C7ypgd+rvIE= Subject key identifier: D8:93:01:E2:F5:F9:FC:B5:9B:F0:38:B4:29:21:5C:FD:2C:6C:7C:C4 Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Certificate serial: 019B77C71D297663736974690C784BCC6E63 Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/2JMB4vX5_LWb8Di0KSFc_SxsfMQ.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61148 IP address blocks: 185.48.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1d:29:76:63:73:69:74:69:0c:78:4b:cc:6e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d89301e2f5f9fcb59bf038b429215cfd2c6c7cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:db:ff:78:cf:3a:8d:3a:be:d7:12:b0:8e:78: 80:fa:bf:92:12:e7:e6:b3:b2:45:d4:5a:d2:a8:1a: 7d:ca:04:f2:0a:76:bc:0a:04:eb:19:47:56:c4:c3: 68:a1:14:b7:f2:da:e7:aa:6f:2a:32:27:d5:9e:38: c6:82:7b:ab:22:59:0e:a9:d1:87:24:cf:a0:57:02: b2:83:3e:04:51:9a:8b:17:14:3d:aa:c3:4e:48:d4: 44:7d:cd:7f:91:5c:29:b9:5c:b8:e3:af:bd:89:20: bc:0a:fa:c5:47:4d:77:cd:9e:66:67:87:38:68:da: f9:d8:86:dc:25:9f:78:e5:65:42:9b:27:6d:0d:75: 54:14:6f:d4:c3:f6:0f:9c:94:76:40:93:99:eb:11: 3c:67:91:08:33:7e:87:d2:ca:df:87:49:d4:bd:38: a6:35:ee:26:39:0f:4a:a3:7b:23:a0:29:2f:75:42: b4:dc:37:e6:15:be:00:13:fb:76:cf:15:8a:77:a3: ef:40:7b:d4:e8:6d:2a:92:5b:c2:fd:5f:b3:3a:43: 91:23:e7:c1:1b:9b:fa:58:49:88:16:da:c2:2c:96: 45:6e:22:1c:bd:9d:17:3f:de:a5:5b:99:94:3b:5b: 44:b1:ae:e4:1d:d2:e1:0d:cf:d8:be:2c:d2:23:0b: 76:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:93:01:E2:F5:F9:FC:B5:9B:F0:38:B4:29:21:5C:FD:2C:6C:7C:C4 X509v3 Authority Key Identifier: keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/2JMB4vX5_LWb8Di0KSFc_SxsfMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.24.0/24 Signature Algorithm: sha256WithRSAEncryption 54:e7:21:0e:91:f8:ad:7c:8e:41:95:cb:78:e9:08:51:a6:5a: 89:4b:26:69:b2:aa:22:b6:f6:5b:2a:04:b6:b0:b0:3c:0b:a7: ea:3d:49:7c:59:bb:81:e4:bc:6e:bf:81:eb:7b:a6:42:ce:ba: a3:8a:7c:a7:83:ab:40:23:79:a2:e7:fa:d1:17:1a:04:cc:5d: c1:86:70:0b:82:b7:50:9c:12:2a:56:c7:69:58:ba:09:a2:df: ce:b8:3c:15:64:3e:29:9a:60:7a:e8:c7:7e:d4:cf:bc:b4:99: 22:b1:1a:75:71:f4:fb:81:c2:9e:35:eb:32:6d:61:cc:a8:5d: 09:64:a2:69:07:c0:c2:c4:7c:a4:9f:b4:b5:b7:9d:c9:ea:08: e2:f0:e7:87:cc:7b:ce:3c:cf:38:de:8e:b9:8a:a3:e9:69:08: da:ea:64:06:54:9d:e6:da:50:79:94:66:81:5d:51:ca:d6:12: b8:f9:9b:28:2f:33:cf:fd:f7:d5:a2:c0:0a:94:7f:8b:0f:e3: a3:58:83:47:1e:5e:87:66:6a:33:a9:07:86:c4:b2:2c:e0:61: 56:38:30:6a:ed:ba:97:96:d1:43:26:e8:12:e0:82:ef:b9:77: 89:79:8b:81:c8:e7:03:1a:b1:71:8b:84:28:7e:9f:bb:35:73: 75:c0:ab:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xx0pdmNzaXRpDHhLzG5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNmVkMDU3OWMzZmQyNTM1OTdlYzgyZjA5MzkxMTFiYTlk OGM4OGQwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODkzMDFlMmY1ZjlmY2I1OWJmMDM4YjQyOTIxNWNmZDJjNmM3Y2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9v/eM86jTq+1xKwjniA+r+SEufm s7JF1FrSqBp9ygTyCna8CgTrGUdWxMNooRS38trnqm8qMifVnjjGgnurIlkOqdGH JM+gVwKygz4EUZqLFxQ9qsNOSNREfc1/kVwpuVy446+9iSC8CvrFR013zZ5mZ4c4 aNr52IbcJZ945WVCmydtDXVUFG/Uw/YPnJR2QJOZ6xE8Z5EIM36H0srfh0nUvTim Ne4mOQ9Ko3sjoCkvdUK03DfmFb4AE/t2zxWKd6PvQHvU6G0qklvC/V+zOkORI+fB G5v6WEmIFtrCLJZFbiIcvZ0XP96lW5mUO1tEsa7kHdLhDc/YvizSIwt2qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNiTAeL1+fy1m/A4tCkhXP0sbHzEMB8GA1UdIwQY MBaAFN5u0FecP9JTWX7ILwk5ERup2MiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAt ODM4NmU3MGJkYzU4LzEvMkpNQjR2WDVfTFdiOERpMEtTRmNfU3hzZk1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAtODM4NmU3MGJkYzU4 LzEvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTAYMA0G CSqGSIb3DQEBCwUAA4IBAQBU5yEOkfitfI5Blct46QhRplqJSyZpsqoitvZbKgS2 sLA8C6fqPUl8WbuB5Lxuv4Hre6ZCzrqjinyng6tAI3mi5/rRFxoEzF3BhnALgrdQ nBIqVsdpWLoJot/OuDwVZD4pmmB66Md+1M+8tJkisRp1cfT7gcKeNesybWHMqF0J ZKJpB8DCxHykn7S1t53J6gji8OeHzHvOPM843o65iqPpaQja6mQGVJ3m2lB5lGaB XVHK1hK4+ZsoLzPP/ffVosAKlH+LD+OjWINHHl6HZmozqQeGxLIs4GFWODBq7bqX ltFDJugS4ILvuXeJeYuByOcDGrFxi4Qofp+7NXN1wKsa -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:55 2026 by rpki-client