This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/f2CUBwukbS4Jl9DUVNEKEFyrD0Q.roa File: f2CUBwukbS4Jl9DUVNEKEFyrD0Q.roa (raw, json) Hash identifier: L6OXByGU2WQtLD8gRQiiCN4AJSkVRktzmevEzCGDIRA= Subject key identifier: 7F:60:94:07:0B:A4:6D:2E:09:97:D0:D4:54:D1:0A:10:5C:AB:0F:44 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019B7C80D5B0500289C8113F9D892C6FFB8B Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/f2CUBwukbS4Jl9DUVNEKEFyrD0Q.roa Signing time: Fri 02 Jan 2026 02:19:36 +0000 ROA not before: Fri 02 Jan 2026 02:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197328 IP address blocks: 185.4.227.0/24 maxlen: 24 185.150.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d5:b0:50:02:89:c8:11:3f:9d:89:2c:6f:fb:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f6094070ba46d2e0997d0d454d10a105cab0f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3d:06:f7:cd:19:16:82:52:97:43:cf:9e:f0: 89:94:67:62:73:9e:76:8d:48:77:56:46:3a:05:f2: d1:ad:7e:7e:ff:28:38:79:51:86:7d:18:e7:da:69: 08:6b:5c:4e:2d:b9:8a:ab:d4:48:d9:84:84:56:d6: d2:cd:86:2a:14:64:90:96:1a:5c:4d:e9:ce:3e:e0: 79:2e:50:fc:3d:69:6d:24:0d:2a:d4:f5:57:34:a1: 1e:39:b7:e4:f2:fb:f2:29:e5:30:69:27:8a:1e:88: 5f:9e:cd:e9:a7:ec:c0:8d:45:53:91:37:7b:84:f4: f6:3e:0b:87:60:0b:d3:ec:27:bc:c1:d4:e1:27:6d: 72:61:b2:92:75:09:5e:f9:98:44:d3:00:a7:9d:93: 38:1b:17:99:14:67:9c:c7:9f:be:ce:37:10:46:57: d8:4e:b4:55:30:df:85:35:d8:0a:fc:bc:29:3b:8c: 03:5d:87:a4:ee:e4:6b:2e:cc:10:0e:b2:ab:ab:e2: b0:ee:e6:9b:67:5c:0e:1e:91:ee:87:fe:8e:19:d8: f6:71:fe:69:a7:a1:ae:89:a5:b7:90:29:b9:d9:1c: 87:57:3d:7a:06:22:2e:46:64:f5:45:61:9a:f0:64: 4f:d9:5d:8d:24:62:40:a1:75:b3:82:17:04:9a:38: a6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:60:94:07:0B:A4:6D:2E:09:97:D0:D4:54:D1:0A:10:5C:AB:0F:44 X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/f2CUBwukbS4Jl9DUVNEKEFyrD0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.227.0/24 185.150.2.0/24 Signature Algorithm: sha256WithRSAEncryption 40:9c:d9:9a:49:bd:65:4f:bb:1e:af:ce:44:e0:29:c2:e3:a4: 81:e3:78:98:c9:82:a3:47:0d:06:45:6c:89:4b:2b:09:be:c2: c3:00:62:1f:0d:19:c0:64:38:2c:f9:77:53:2a:a7:6f:d8:6a: 9f:5f:8c:99:1a:bf:99:28:cf:56:0b:1c:33:dd:b0:6a:5e:fc: 7f:0e:a8:10:3d:60:0a:3a:78:7b:d9:70:71:97:2c:89:78:3b: 10:b0:ea:fa:fb:8e:87:9e:7a:54:f8:91:f7:13:69:0d:6e:a4: ca:95:4e:11:57:1e:43:86:08:7f:dd:2c:e2:26:43:d9:df:0c: 6c:8c:81:39:4a:66:16:b4:f0:66:4a:8c:1f:17:38:be:1b:fd: 01:7e:7c:38:83:c3:1c:47:6c:59:0e:55:30:b1:b6:7c:08:d8: 8b:fa:bd:4e:98:a6:e5:f1:27:4b:cf:6f:04:9e:cd:19:e8:ad: e2:21:43:a8:d9:55:57:59:83:6a:4c:e4:c4:ab:34:4a:0f:75: 1d:ae:7f:bc:6b:76:bb:8f:84:b5:46:89:45:d9:84:62:3b:04: e9:fd:06:2d:69:fd:07:34:7a:62:c6:87:aa:b2:87:e4:e1:3f: bd:a5:1c:0a:3a:89:00:bf:0a:7f:c3:e3:70:40:f7:61:0d:03: db:1d:ca:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gNWwUAKJyBE/nYksb/uLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjYwOTQwNzBiYTQ2ZDJlMDk5N2QwZDQ1NGQxMGExMDVjYWIwZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz0G980ZFoJSl0PPnvCJlGdic552 jUh3VkY6BfLRrX5+/yg4eVGGfRjn2mkIa1xOLbmKq9RI2YSEVtbSzYYqFGSQlhpc TenOPuB5LlD8PWltJA0q1PVXNKEeObfk8vvyKeUwaSeKHohfns3pp+zAjUVTkTd7 hPT2PguHYAvT7Ce8wdThJ21yYbKSdQle+ZhE0wCnnZM4GxeZFGecx5++zjcQRlfY TrRVMN+FNdgK/LwpO4wDXYek7uRrLswQDrKrq+Kw7uabZ1wOHpHuh/6OGdj2cf5p p6GuiaW3kCm52RyHVz16BiIuRmT1RWGa8GRP2V2NJGJAoXWzghcEmjimgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH9glAcLpG0uCZfQ1FTRChBcqw9EMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvZjJDVUJ3dWtiUzRKbDlEVVZORUtFRnlyRDBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuQTjAwQA uZYCMA0GCSqGSIb3DQEBCwUAA4IBAQBAnNmaSb1lT7ser85E4CnC46SB43iYyYKj Rw0GRWyJSysJvsLDAGIfDRnAZDgs+XdTKqdv2GqfX4yZGr+ZKM9WCxwz3bBqXvx/ DqgQPWAKOnh72XBxlyyJeDsQsOr6+46HnnpU+JH3E2kNbqTKlU4RVx5Dhgh/3Szi JkPZ3wxsjIE5SmYWtPBmSowfFzi+G/0Bfnw4g8McR2xZDlUwsbZ8CNiL+r1OmKbl 8SdLz28Ens0Z6K3iIUOo2VVXWYNqTOTEqzRKD3Udrn+8a3a7j4S1RolF2YRiOwTp /QYtaf0HNHpixoeqsofk4T+9pRwKOokAvwp/w+NwQPdhDQPbHcpi -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:26 2026 by rpki-client