This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/2MD_KyAGwM0B4tFDnhU1NUrqcu4.roa File: 2MD_KyAGwM0B4tFDnhU1NUrqcu4.roa (raw, json) Hash identifier: seq6ss1CAZJYUnqQkemiPQ7Nm+x8SeBsqwNulkyaTRU= Subject key identifier: D8:C0:FF:2B:20:06:C0:CD:01:E2:D1:43:9E:15:35:35:4A:EA:72:EE Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c Certificate serial: 019A9C530545E958717F58C2E502CB04FD6E Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/2MD_KyAGwM0B4tFDnhU1NUrqcu4.roa Signing time: Wed 19 Nov 2025 13:34:37 +0000 ROA not before: Wed 19 Nov 2025 13:34:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15557 IP address blocks: 185.197.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:53:05:45:e9:58:71:7f:58:c2:e5:02:cb:04:fd:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c Validity Not Before: Nov 19 13:34:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d8c0ff2b2006c0cd01e2d1439e1535354aea72ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a3:6d:8e:c4:a8:fb:11:56:9c:e9:57:fb:f2: e4:cf:d6:aa:ee:c6:9e:2d:0b:3d:d2:b7:62:2f:86: 56:7a:c2:4b:63:e7:8f:d1:55:09:a5:a0:26:63:47: 54:1d:dc:f9:a8:3c:82:13:54:62:9e:cd:72:6b:52: d1:c8:e2:70:e2:46:ef:10:32:53:72:cb:a5:b5:98: 78:11:77:a7:ec:62:4d:c4:36:8b:27:0d:21:ed:a5: c0:95:18:03:59:5d:04:7a:49:db:88:b2:86:b8:df: 07:a6:4d:00:44:c6:2a:32:c2:f7:6f:ee:80:e6:40: 36:18:44:13:33:cb:62:ea:4e:0b:10:bb:9a:23:e1: ad:ef:2b:ef:21:c5:27:c3:a7:dc:3b:6b:9d:45:0c: e2:9b:c7:b0:15:8c:46:5a:9b:92:99:ca:7e:a9:a5: c2:b2:e3:ab:42:48:eb:9b:49:34:12:3b:2a:19:6a: fb:44:c0:13:27:a6:a3:1f:ec:e7:6d:9e:1e:d7:96: 0c:51:e4:82:8a:d8:15:b3:e2:fd:f6:de:26:22:0c: 26:e6:1b:b7:33:9d:7b:aa:6a:b8:00:4f:57:ab:f0: c4:0c:ba:01:bd:ed:34:72:68:e2:9e:82:24:b4:bf: bf:62:b2:79:4b:1a:fa:05:2e:b6:9a:a2:cb:f3:8a: de:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C0:FF:2B:20:06:C0:CD:01:E2:D1:43:9E:15:35:35:4A:EA:72:EE X509v3 Authority Key Identifier: keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/2MD_KyAGwM0B4tFDnhU1NUrqcu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.101.0/24 Signature Algorithm: sha256WithRSAEncryption af:ef:0b:24:ca:90:80:58:4a:3f:47:4e:a1:5a:2f:b5:88:c8: 71:7b:a4:a6:43:78:ef:5d:b8:de:3a:8f:a2:55:99:3b:5f:7b: cf:d2:f1:d9:ab:0f:bc:da:40:9d:dc:7b:a3:fb:d7:b6:20:84: e0:76:cf:45:7f:84:8c:76:26:67:e1:7f:44:21:ec:e7:b2:ae: e0:a5:01:f1:10:8b:fa:4f:fe:a3:2b:11:30:14:e2:3a:05:b3: 41:48:8a:62:bc:95:02:49:9a:e4:97:60:79:82:37:32:9e:fa: f3:03:dd:7c:08:c2:e5:b3:10:ef:d9:ce:13:76:f8:ae:cf:8d: 73:b5:98:0d:ca:7a:61:2a:5c:71:e2:94:4c:f2:70:92:2b:18: 75:4c:fd:7c:38:4f:be:a1:95:65:77:8e:6a:9a:f0:2c:b8:f2: cf:45:b0:1c:a0:7a:4b:26:7d:4f:7e:ec:1b:c0:d8:12:f8:de: 72:80:fb:ae:84:a9:12:9a:0a:ec:f4:02:13:a2:e4:7e:da:28: 71:87:ad:f1:86:c2:06:9b:c4:84:e3:38:b8:87:b9:72:e6:70: e2:59:22:f6:67:ae:d4:df:3c:de:f4:7a:16:d9:cd:57:2f:d9: b8:28:fb:ae:50:34:ba:ff:48:ac:df:66:cf:5a:c8:81:f2:81: 57:2c:4b:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqcUwVF6Vhxf1jC5QLLBP1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTU1Y2E0NTg0NjhjNTc3NmI4ZDk5MzZkZmU5YjBiMjY2 ODczMWMwHhcNMjUxMTE5MTMzNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGMwZmYyYjIwMDZjMGNkMDFlMmQxNDM5ZTE1MzUzNTRhZWE3MmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aNtjsSo+xFWnOlX+/Lkz9aq7sae LQs90rdiL4ZWesJLY+eP0VUJpaAmY0dUHdz5qDyCE1Rins1ya1LRyOJw4kbvEDJT csultZh4EXen7GJNxDaLJw0h7aXAlRgDWV0EeknbiLKGuN8Hpk0ARMYqMsL3b+6A 5kA2GEQTM8ti6k4LELuaI+Gt7yvvIcUnw6fcO2udRQzim8ewFYxGWpuSmcp+qaXC suOrQkjrm0k0EjsqGWr7RMATJ6ajH+znbZ4e15YMUeSCitgVs+L99t4mIgwm5hu3 M517qmq4AE9Xq/DEDLoBve00cmjinoIktL+/YrJ5Sxr6BS62mqLL84reuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNjA/ysgBsDNAeLRQ54VNTVK6nLuMB8GA1UdIwQY MBaAFFqVXKRYRoxXdrjZk23+mwsmaHMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYt MTM4NThkYTg1ZjUzLzEvMk1EX0t5QUd3TTBCNHRGRG5oVTFOVXJxY3U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYtMTM4NThkYTg1ZjUz LzEvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucVlMA0G CSqGSIb3DQEBCwUAA4IBAQCv7wskypCAWEo/R06hWi+1iMhxe6SmQ3jvXbjeOo+i VZk7X3vP0vHZqw+82kCd3Huj+9e2IITgds9Ff4SMdiZn4X9EIeznsq7gpQHxEIv6 T/6jKxEwFOI6BbNBSIpivJUCSZrkl2B5gjcynvrzA918CMLlsxDv2c4Tdviuz41z tZgNynphKlxx4pRM8nCSKxh1TP18OE++oZVld45qmvAsuPLPRbAcoHpLJn1Pfuwb wNgS+N5ygPuuhKkSmgrs9AITouR+2ihxh63xhsIGm8SE4zi4h7ly5nDiWSL2Z67U 3zze9HoW2c1XL9m4KPuuUDS6/0is32bPWsiB8oFXLEu/ -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:10 2025 by rpki-client