This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/r2staIGPnAB2fC8C0axIG4AKOBk.roa File: r2staIGPnAB2fC8C0axIG4AKOBk.roa (raw, json) Hash identifier: uFZHYgrj8p1JmsefAGSYoXv3EhDU7aOqOew1OyVD1rc= Subject key identifier: AF:6B:2D:68:81:8F:9C:00:76:7C:2F:02:D1:AC:48:1B:80:0A:38:19 Certificate issuer: /CN=08a9217bd830627cb3e657c0b9063c82234ddbcb Certificate serial: 019B7AC7A937830AA11CCD0BC251407F2E86 Authority key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/r2staIGPnAB2fC8C0axIG4AKOBk.roa Signing time: Thu 01 Jan 2026 18:17:43 +0000 ROA not before: Thu 01 Jan 2026 18:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20811 IP address blocks: 77.74.112.0/21 maxlen: 24 109.69.248.0/21 maxlen: 24 185.111.144.0/22 maxlen: 24 2a02:54c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a9:37:83:0a:a1:1c:cd:0b:c2:51:40:7f:2e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb Validity Not Before: Jan 1 18:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af6b2d68818f9c00767c2f02d1ac481b800a3819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:73:f2:74:75:88:da:84:38:c6:e2:66:2a: 99:e4:c9:49:c4:fd:27:81:fe:f8:22:a7:dc:0b:1c: e6:d3:3d:f6:1e:1d:2f:51:8c:f8:04:63:da:2a:9e: 2b:1c:e6:60:f4:22:27:ce:5c:09:66:a7:9b:18:a9: c9:d9:28:5e:82:3c:3f:71:77:b1:c1:02:5f:ce:12: a4:25:08:cf:37:b5:cd:ad:52:6a:5f:40:b6:0f:7c: fc:c1:b0:4f:65:b3:9b:eb:50:1b:76:f7:af:aa:44: 84:87:b2:e8:cd:59:37:01:df:9f:f0:d4:49:ea:d9: 05:01:3e:b3:26:61:e4:ea:98:23:5c:f8:f8:20:a1: 43:ec:64:9b:d8:94:3e:0e:58:fe:90:19:d4:c4:b3: 9a:5b:4b:08:21:a6:be:a7:cd:7c:bb:c0:c2:cb:a5: 77:fa:7a:a7:d4:89:b8:5f:ad:bb:6a:ec:95:56:1a: 17:c6:ff:50:db:35:60:15:2e:e7:bb:87:31:fd:30: 65:11:f7:dd:6c:13:75:54:5c:5b:5d:7c:d9:50:08: 27:2b:5a:fc:63:7d:f5:b0:f2:6e:f5:7b:34:c8:26: b7:01:71:f4:58:31:6f:42:16:d3:3b:e5:56:9e:df: 9e:8e:28:85:2c:07:83:ac:ab:ff:1b:57:5e:ed:1b: df:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6B:2D:68:81:8F:9C:00:76:7C:2F:02:D1:AC:48:1B:80:0A:38:19 X509v3 Authority Key Identifier: keyid:08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/r2staIGPnAB2fC8C0axIG4AKOBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.74.112.0/21 109.69.248.0/21 185.111.144.0/22 IPv6: 2a02:54c0::/29 Signature Algorithm: sha256WithRSAEncryption 5b:b4:74:7e:fc:20:de:5b:ee:2e:c3:e0:41:3c:c6:c0:48:70: 24:07:9a:ff:0a:e1:51:de:f0:23:ad:b3:24:b5:60:36:09:26: f5:25:e3:c6:09:d3:6a:54:bb:d7:73:45:6e:df:a5:9d:ca:40: 90:df:47:07:b9:31:68:71:7f:48:20:ab:ee:63:b8:04:28:12: 6d:e6:6a:81:fb:89:1c:8f:a3:04:cd:1f:af:05:22:a6:23:1b: d8:cc:e8:21:ec:f0:5f:26:91:2f:a7:dc:2f:bb:21:d3:ff:52: 19:73:3e:0d:cf:31:05:66:2f:5e:4a:40:cb:e8:6a:38:a4:43: f8:67:8c:2d:f7:19:b1:40:16:df:95:ca:b6:44:69:7c:78:ab: ee:7a:73:9a:08:ac:f7:c0:f8:cd:72:5c:06:d9:fb:4e:dd:96: 64:28:80:ee:38:5a:e7:78:0c:7e:fe:6c:38:43:b0:85:88:4b: f7:92:80:05:81:7b:45:17:4a:c4:16:1f:dc:f0:52:e5:f0:2d: 85:38:03:7a:09:4d:0d:e8:62:b2:8d:99:7e:ea:68:68:69:35: c5:10:2e:7f:6e:71:82:09:7e:80:2f:8d:74:1f:e8:1f:ae:1f: f3:2e:20:91:c8:9d:c3:a6:11:b2:52:4a:b2:39:e1:03:fc:1b: 58:ef:2f:87 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6x6k3gwqhHM0LwlFAfy6GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YTkyMTdiZDgzMDYyN2NiM2U2NTdjMGI5MDYzYzgyMjM0 ZGRiY2IwHhcNMjYwMTAxMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjZiMmQ2ODgxOGY5YzAwNzY3YzJmMDJkMWFjNDgxYjgwMGEzODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+Nz8nR1iNqEOMbiZiqZ5MlJxP0n gf74IqfcCxzm0z32Hh0vUYz4BGPaKp4rHOZg9CInzlwJZqebGKnJ2Shegjw/cXex wQJfzhKkJQjPN7XNrVJqX0C2D3z8wbBPZbOb61AbdvevqkSEh7LozVk3Ad+f8NRJ 6tkFAT6zJmHk6pgjXPj4IKFD7GSb2JQ+Dlj+kBnUxLOaW0sIIaa+p818u8DCy6V3 +nqn1Im4X627auyVVhoXxv9Q2zVgFS7nu4cx/TBlEffdbBN1VFxbXXzZUAgnK1r8 Y331sPJu9Xs0yCa3AXH0WDFvQhbTO+VWnt+ejiiFLAeDrKv/G1de7RvfzQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFK9rLWiBj5wAdnwvAtGsSBuACjgZMB8GA1UdIwQY MBaAFAipIXvYMGJ8s+ZXwLkGPIIjTdvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0traGU5Z3dZbnl6NWxmQXVRWThnaU5OMjhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83ZGRlNDQtZDdiNS00OGRhLWJjNjgt MmM1YmFjMzVjMzQ0LzEvcjJzdGFJR1BuQUIyZkM4QzBheElHNEFLT0JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83ZGRlNDQtZDdiNS00OGRhLWJjNjgtMmM1YmFjMzVjMzQ0 LzEvQ0traGU5Z3dZbnl6NWxmQXVRWThnaU5OMjhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDTUpwAwQD bUX4AwQCuW+QMA0EAgACMAcDBQMqAlTAMA0GCSqGSIb3DQEBCwUAA4IBAQBbtHR+ /CDeW+4uw+BBPMbASHAkB5r/CuFR3vAjrbMktWA2CSb1JePGCdNqVLvXc0Vu36Wd ykCQ30cHuTFocX9IIKvuY7gEKBJt5mqB+4kcj6MEzR+vBSKmIxvYzOgh7PBfJpEv p9wvuyHT/1IZcz4NzzEFZi9eSkDL6Go4pEP4Z4wt9xmxQBbflcq2RGl8eKvuenOa CKz3wPjNclwG2ftO3ZZkKIDuOFrneAx+/mw4Q7CFiEv3koAFgXtFF0rEFh/c8FLl 8C2FOAN6CU0N6GKyjZl+6mhoaTXFEC5/bnGCCX6AL410H+gfrh/zLiCRyJ3DphGy UkqyOeED/BtY7y+H -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:09 2026 by rpki-client