This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/2uJAkewiUJwsbNaj2yvunQboIco.roa File: 2uJAkewiUJwsbNaj2yvunQboIco.roa (raw, json) Hash identifier: FFjpTcabKOY4bvHAqUpVIWDG0dv6yHtpa4jSe9dcbIQ= Subject key identifier: DA:E2:40:91:EC:22:50:9C:2C:6C:D6:A3:DB:2B:EE:9D:06:E8:21:CA Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d Certificate serial: 019B77588FEC2B519A0CB69E0494310FB037 Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/2uJAkewiUJwsbNaj2yvunQboIco.roa Signing time: Thu 01 Jan 2026 02:17:31 +0000 ROA not before: Thu 01 Jan 2026 02:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32613 IP address blocks: 185.248.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8f:ec:2b:51:9a:0c:b6:9e:04:94:31:0f:b0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d Validity Not Before: Jan 1 02:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dae24091ec22509c2c6cd6a3db2bee9d06e821ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a8:90:c3:7d:c7:41:e5:9d:0e:53:fe:33:f5: b4:8c:26:76:b9:85:60:c3:3a:fb:c0:fb:10:90:71: 4d:28:5f:4f:ad:ed:e9:f3:9c:03:4e:d7:4a:39:47: c5:08:91:f3:10:ef:98:26:e7:7b:05:4a:66:c3:b6: 5e:b7:f2:db:d8:07:b9:71:35:16:db:12:0f:66:a8: 26:7f:95:84:85:5f:71:25:83:e8:00:68:d9:b5:b5: 23:17:d0:54:1b:7c:be:d3:e5:d9:a8:79:90:48:eb: 54:13:06:79:00:fd:e2:c0:14:fb:66:78:bf:ff:1f: 4e:84:2d:c2:aa:88:96:36:ca:53:bb:bc:c6:a0:87: fc:d3:88:a7:8b:4d:fc:c3:a4:27:b8:c6:4e:b1:3a: 28:2e:a9:b0:7f:af:a5:3b:30:ea:ba:8a:ee:27:b7: 33:40:6c:f7:78:d8:f5:e5:f8:5a:e4:e6:c1:72:22: 7a:93:7f:56:5b:01:a5:17:ef:68:3e:8b:8b:2a:ff: c7:2d:fd:ef:e1:ef:79:04:67:67:8a:3c:26:4d:3b: 1c:72:75:6b:b7:f7:bb:86:63:c6:92:0e:8c:5c:a6: f4:49:42:c5:e0:f7:ab:fe:b6:af:7f:c9:48:13:25: 29:93:aa:e3:db:d6:d5:12:6e:d2:e0:78:ac:43:8b: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E2:40:91:EC:22:50:9C:2C:6C:D6:A3:DB:2B:EE:9D:06:E8:21:CA X509v3 Authority Key Identifier: keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/2uJAkewiUJwsbNaj2yvunQboIco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.51.0/24 Signature Algorithm: sha256WithRSAEncryption ae:34:2e:45:94:e5:99:01:0a:c9:0a:7c:e7:ef:4a:5b:67:18: ef:e0:78:5e:2b:2d:4f:38:d7:eb:db:34:79:8d:56:43:83:a5: b5:66:2d:7e:86:62:2c:ee:68:9f:8f:53:95:ff:b9:d0:ca:98: 7a:7d:5b:83:b5:c5:ae:6c:61:c0:86:d2:95:c0:c0:33:a2:2c: aa:fb:96:bb:3f:87:98:23:72:99:bf:0f:1b:ff:d8:66:33:3b: cc:bd:ad:99:34:1f:84:53:56:fe:3b:38:be:5c:1d:4d:17:d0: 1d:2e:08:70:d5:45:5d:43:bc:d5:6a:71:38:3e:66:c2:8c:66: b3:4a:6b:d8:fa:87:3e:ef:cd:56:1b:f9:47:fc:22:17:7a:67: 92:7f:1a:ad:b9:f6:50:85:ff:db:89:81:3c:19:92:3c:48:cc: 92:88:7a:87:c4:ab:23:9c:01:8b:ac:8d:da:76:19:9d:10:db: 38:46:fe:04:d2:9b:85:a0:f9:4f:20:7f:8e:55:70:42:43:a4: 6c:c0:03:a5:47:a8:ca:d9:8c:3f:ca:0d:d9:51:91:cc:1f:fc: 77:5b:9a:5c:72:dc:3f:81:ac:31:3f:3f:ae:53:68:9f:44:79: fc:8b:73:47:fa:b3:74:4f:c6:1f:cc:ff:8c:40:17:c3:7f:e5: c4:58:6b:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WI/sK1GaDLaeBJQxD7A3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj MWFlM2QwHhcNMjYwMTAxMDIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWUyNDA5MWVjMjI1MDljMmM2Y2Q2YTNkYjJiZWU5ZDA2ZTgyMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aiQw33HQeWdDlP+M/W0jCZ2uYVg wzr7wPsQkHFNKF9Pre3p85wDTtdKOUfFCJHzEO+YJud7BUpmw7Zet/Lb2Ae5cTUW 2xIPZqgmf5WEhV9xJYPoAGjZtbUjF9BUG3y+0+XZqHmQSOtUEwZ5AP3iwBT7Zni/ /x9OhC3CqoiWNspTu7zGoIf804ini038w6QnuMZOsTooLqmwf6+lOzDquoruJ7cz QGz3eNj15fha5ObBciJ6k39WWwGlF+9oPouLKv/HLf3v4e95BGdnijwmTTsccnVr t/e7hmPGkg6MXKb0SULF4Per/ravf8lIEyUpk6rj29bVEm7S4HisQ4vclQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNriQJHsIlCcLGzWo9sr7p0G6CHKMB8GA1UdIwQY MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt NTEzODdkMTYwYmE5LzEvMnVKQWtld2lVSndzYk5hajJ5dnVuUWJvSWNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5 LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufgzMA0G CSqGSIb3DQEBCwUAA4IBAQCuNC5FlOWZAQrJCnzn70pbZxjv4HheKy1PONfr2zR5 jVZDg6W1Zi1+hmIs7mifj1OV/7nQyph6fVuDtcWubGHAhtKVwMAzoiyq+5a7P4eY I3KZvw8b/9hmMzvMva2ZNB+EU1b+Ozi+XB1NF9AdLghw1UVdQ7zVanE4PmbCjGaz SmvY+oc+781WG/lH/CIXemeSfxqtufZQhf/biYE8GZI8SMySiHqHxKsjnAGLrI3a dhmdENs4Rv4E0puFoPlPIH+OVXBCQ6RswAOlR6jK2Yw/yg3ZUZHMH/x3W5pcctw/ gawxPz+uU2ifRHn8i3NH+rN0T8YfzP+MQBfDf+XEWGtx -----END CERTIFICATE-----Generated at Sun Jan 25 16:15:34 2026 by rpki-client