This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/2PSXYK7RiGtCGo6lHFrZ4YsqmDU.roa File: 2PSXYK7RiGtCGo6lHFrZ4YsqmDU.roa (raw, json) Hash identifier: 4TWFFeF3Hdb5/B2o51pGRlZHpk3qG7DjIDAPvFIJfGQ= Subject key identifier: D8:F4:97:60:AE:D1:88:6B:42:1A:8E:A5:1C:5A:D9:E1:8B:2A:98:35 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B783455DE75965B714630A51495F0F4A1 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/2PSXYK7RiGtCGo6lHFrZ4YsqmDU.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197730 IP address blocks: 45.130.180.0/24 maxlen: 24 45.130.181.0/24 maxlen: 24 45.130.182.0/24 maxlen: 24 45.130.183.0/24 maxlen: 24 45.136.184.0/22 maxlen: 24 45.136.185.0/24 maxlen: 24 45.136.186.0/24 maxlen: 24 45.136.187.0/24 maxlen: 24 62.106.75.0/24 maxlen: 24 185.222.43.0/24 maxlen: 24 185.241.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:55:de:75:96:5b:71:46:30:a5:14:95:f0:f4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8f49760aed1886b421a8ea51c5ad9e18b2a9835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:20:d5:6c:c2:30:68:91:61:29:6a:9e:ac: ac:8c:8a:33:7e:a2:14:fa:be:c5:61:b8:85:df:ef: f6:48:42:93:a8:5c:c0:e0:da:1d:91:b7:73:d2:19: 1c:21:8c:50:f5:ff:11:7f:ca:22:f9:bf:97:17:96: f7:34:27:8c:a1:f6:2a:5b:fa:d4:64:fc:11:fd:b1: 0a:1b:64:b1:9f:b2:9b:44:60:98:e8:2f:cf:b3:cc: 82:f9:07:57:87:93:5d:be:37:af:30:5f:ca:99:92: 6e:c0:1e:cd:ec:b5:0c:ff:01:07:09:50:3c:44:e2: 36:d5:84:21:6d:08:d9:be:89:d3:1f:fb:ec:e7:61: 72:7c:be:90:91:2a:7e:74:f4:a7:6e:74:60:0e:f1: b8:32:89:57:bf:c6:19:f3:1a:ba:f7:8f:cc:c0:08: 8c:0b:bc:7d:9d:c2:8e:c0:8b:65:cd:6e:d1:c9:32: 3b:80:0c:d4:a2:e4:e5:1c:22:ad:37:e4:55:e9:3a: 40:ac:85:50:e7:cd:ad:d6:9f:fe:78:2d:20:9f:5a: 19:b8:ef:9e:f7:ca:8b:3b:2c:76:91:3b:4e:9b:50: 16:bb:8e:29:a4:e1:f7:bd:3c:e4:20:b1:fc:b7:c3: 52:e3:b5:f0:78:4f:78:15:be:a5:54:e2:74:7c:b2: fe:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F4:97:60:AE:D1:88:6B:42:1A:8E:A5:1C:5A:D9:E1:8B:2A:98:35 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/2PSXYK7RiGtCGo6lHFrZ4YsqmDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.180.0/22 45.136.184.0/22 62.106.75.0/24 185.222.43.0/24 185.241.58.0/24 Signature Algorithm: sha256WithRSAEncryption 04:69:d7:c5:40:1e:7e:e7:ec:e5:0c:0c:a5:e8:de:6f:4b:f3: 89:a9:dd:50:75:00:f9:e7:a7:ff:84:ea:da:2e:bc:33:b0:d9: 34:79:45:d1:c1:a9:3e:35:10:ee:45:bd:b2:4c:43:b6:c7:de: aa:13:e6:f5:50:c8:b5:4b:c3:7d:b6:a5:3b:0f:6e:c7:ff:2d: 1c:7e:b9:e9:46:4c:0b:f6:cb:83:d4:94:f6:b6:5c:85:15:24: 67:04:13:ea:b2:47:a7:c1:67:43:8b:9f:2e:df:8c:7b:6d:a2: 4f:ff:ee:b5:41:7f:2d:e3:98:c3:c8:97:86:9c:61:2e:58:ad: 81:3a:74:2f:87:87:73:b2:e5:c0:5e:ee:a1:c9:92:ff:7b:63: 2d:99:7b:41:4a:5e:62:f0:2b:3f:fa:8d:ec:e3:c0:34:82:1d: c8:24:d7:ea:c5:69:d3:2a:81:94:33:34:b9:94:12:a9:33:64: 11:69:00:30:be:e8:14:a8:ac:42:43:1b:75:9a:5d:b2:68:df: 64:95:2a:d0:a6:1d:8d:2f:de:a8:dd:c8:3f:76:18:ea:2e:9c: 89:a4:b5:3a:f7:b9:c2:4b:e9:b2:38:39:f4:22:87:c7:cb:94: 35:78:33:ab:d7:29:57:2a:3f:55:f7:44:4c:7a:26:b4:ce:d6: ad:b4:93:4f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4NFXedZZbcUYwpRSV8PShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGY0OTc2MGFlZDE4ODZiNDIxYThlYTUxYzVhZDllMThiMmE5ODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucog1WzCMGiRYSlqnqysjIozfqIU +r7FYbiF3+/2SEKTqFzA4Nodkbdz0hkcIYxQ9f8Rf8oi+b+XF5b3NCeMofYqW/rU ZPwR/bEKG2Sxn7KbRGCY6C/Ps8yC+QdXh5NdvjevMF/KmZJuwB7N7LUM/wEHCVA8 ROI21YQhbQjZvonTH/vs52FyfL6QkSp+dPSnbnRgDvG4MolXv8YZ8xq694/MwAiM C7x9ncKOwItlzW7RyTI7gAzUouTlHCKtN+RV6TpArIVQ582t1p/+eC0gn1oZuO+e 98qLOyx2kTtOm1AWu44ppOH3vTzkILH8t8NS47XweE94Fb6lVOJ0fLL+JwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNj0l2Cu0YhrQhqOpRxa2eGLKpg1MB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvMlBTWFlLN1JpR3RDR282bEhGclo0WXNxbURVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLYK0AwQC LYi4AwQAPmpLAwQAud4rAwQAufE6MA0GCSqGSIb3DQEBCwUAA4IBAQAEadfFQB5+ 5+zlDAyl6N5vS/OJqd1QdQD556f/hOraLrwzsNk0eUXRwak+NRDuRb2yTEO2x96q E+b1UMi1S8N9tqU7D27H/y0cfrnpRkwL9suD1JT2tlyFFSRnBBPqskenwWdDi58u 34x7baJP/+61QX8t45jDyJeGnGEuWK2BOnQvh4dzsuXAXu6hyZL/e2MtmXtBSl5i 8Cs/+o3s48A0gh3IJNfqxWnTKoGUMzS5lBKpM2QRaQAwvugUqKxCQxt1ml2yaN9k lSrQph2NL96o3cg/dhjqLpyJpLU697nCS+myODn0IofHy5Q1eDOr1ylXKj9V90RM eia0ztattJNP -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:41 2026 by rpki-client