This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/2tG2bb97iid_YxaFyUUJNE76nKE.roa File: 2tG2bb97iid_YxaFyUUJNE76nKE.roa (raw, json) Hash identifier: FarzBNBH/MO3GmyWPNi8eE6vF3Q0nfDTY3YytDgS1V0= Subject key identifier: DA:D1:B6:6D:BF:7B:8A:27:7F:63:16:85:C9:45:09:34:4E:FA:9C:A1 Certificate issuer: /CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3 Certificate serial: 019B78A319AF1C46405BB7F5A4C22759E8A6 Authority key identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/2tG2bb97iid_YxaFyUUJNE76nKE.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8434 IP address blocks: 193.241.241.0/24 maxlen: 24 193.241.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.mft rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:19:af:1c:46:40:5b:b7:f5:a4:c2:27:59:e8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dad1b66dbf7b8a277f631685c94509344efa9ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:8b:bc:0f:5a:f2:1c:9d:38:1b:ce:7f:dd: 68:59:4d:a3:5a:dd:3c:05:1a:d4:09:17:22:b0:70: cb:41:62:6e:73:15:f2:a5:dc:57:2a:c8:8d:eb:51: ae:1d:6a:e5:0a:a4:a3:16:56:14:40:85:b8:a7:b3: ae:3f:22:e9:79:2d:47:7a:b0:50:0f:4d:40:8e:0a: 14:03:a1:ea:df:49:27:55:ff:08:d7:5d:14:f3:ca: 0e:5d:a9:0d:aa:9a:fc:7d:30:25:fd:af:99:b5:86: 4c:7b:a9:e2:a7:cb:c2:ab:49:bd:91:f7:5d:0c:7a: 3c:b2:43:46:c5:65:47:ee:5b:67:1d:a9:6f:84:09: 7d:ea:f7:b1:32:1f:75:d7:84:1a:4e:73:05:54:3b: f0:14:be:cb:32:79:b0:61:6c:3e:45:44:43:1b:0c: e9:2b:89:18:78:d1:fe:11:94:cf:d8:8e:a3:8b:9b: b6:d9:7c:23:35:d4:70:48:58:7f:1e:3a:a1:b2:8b: b0:c5:73:b0:a0:bb:48:ed:2f:f6:d8:ac:53:23:23: e2:b6:59:2c:0c:ee:5f:cb:6c:5c:5c:da:ad:41:be: 70:c6:d3:57:5d:a5:d7:2b:4f:e3:3c:a9:65:27:15: f5:b9:fe:0a:9f:cc:fe:0a:3f:81:63:40:f1:47:e0: 64:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D1:B6:6D:BF:7B:8A:27:7F:63:16:85:C9:45:09:34:4E:FA:9C:A1 X509v3 Authority Key Identifier: keyid:05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/2tG2bb97iid_YxaFyUUJNE76nKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.241.241.0/24 193.241.249.0/24 Signature Algorithm: sha256WithRSAEncryption a6:64:a5:be:3d:f8:95:0a:e3:61:6f:0e:eb:05:13:b6:70:65: 7b:ac:2b:05:27:29:16:c2:b7:d7:18:da:77:08:9a:02:ef:7f: 46:17:ee:0f:c3:ea:3c:3e:c3:d0:6d:a6:fa:80:24:d4:a1:84: 87:3d:c4:5f:07:4f:02:c9:c8:55:d1:ad:ea:e3:aa:47:cd:79: 71:dc:2f:d3:33:bd:a4:3b:89:bf:f4:b3:b2:78:51:c2:62:cf: e6:11:83:29:e3:bc:81:58:4f:ea:a0:64:23:ba:2f:6b:51:b5: 67:da:5a:d1:62:e4:49:24:cd:97:5e:9a:2b:cf:c8:d5:fa:05: 1b:2a:21:df:28:77:9f:eb:7f:9f:fc:a7:1c:7e:85:f2:2f:56: 48:26:bf:70:6d:84:d6:6b:35:d0:04:30:72:0a:a7:10:86:e5: a9:ab:a3:5d:97:f9:a1:fe:cf:6d:84:08:b4:3f:28:27:d6:45: 8b:47:c3:3c:e3:be:31:00:23:30:67:78:b9:e4:ce:4a:d1:30: 30:71:6a:fd:bb:8d:b7:9a:c9:7f:9a:13:1c:14:4b:33:b1:f3: 8d:12:c2:c4:48:b7:71:84:f1:70:ba:09:a4:57:bb:5c:a6:ed: c5:26:c3:92:f6:72:13:54:94:3c:62:9f:ec:4d:64:a0:94:51: fb:91:dd:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxmvHEZAW7f1pMInWeimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZWI4Y2JiYWFmMjVhNzFiZjJmY2FiNmUxMTA1N2ViZjkx ZjAxZTMwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWQxYjY2ZGJmN2I4YTI3N2Y2MzE2ODVjOTQ1MDkzNDRlZmE5Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2KLvA9a8hydOBvOf91oWU2jWt08 BRrUCRcisHDLQWJucxXypdxXKsiN61GuHWrlCqSjFlYUQIW4p7OuPyLpeS1HerBQ D01AjgoUA6Hq30knVf8I110U88oOXakNqpr8fTAl/a+ZtYZMe6nip8vCq0m9kfdd DHo8skNGxWVH7ltnHalvhAl96vexMh9114QaTnMFVDvwFL7LMnmwYWw+RURDGwzp K4kYeNH+EZTP2I6ji5u22XwjNdRwSFh/HjqhsouwxXOwoLtI7S/22KxTIyPitlks DO5fy2xcXNqtQb5wxtNXXaXXK0/jPKllJxX1uf4Kn8z+Cj+BY0DxR+BkpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNrRtm2/e4onf2MWhclFCTRO+pyhMB8GA1UdIwQY MBaAFAXrjLuq8lpxvy/KtuEQV+v5HwHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmV1TXU2cnlXbkdfTDhxMjRSQlg2X2tmQWVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kY2M4NmEtNWY1MS00ZDEyLTk2M2Qt ZjI3YzYyOGI4MzUzLzEvMnRHMmJiOTdpaWRfWXhhRnlVVUpORTc2bktFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9kY2M4NmEtNWY1MS00ZDEyLTk2M2QtZjI3YzYyOGI4MzUz LzEvQmV1TXU2cnlXbkdfTDhxMjRSQlg2X2tmQWVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwfHxAwQA wfH5MA0GCSqGSIb3DQEBCwUAA4IBAQCmZKW+PfiVCuNhbw7rBRO2cGV7rCsFJykW wrfXGNp3CJoC739GF+4Pw+o8PsPQbab6gCTUoYSHPcRfB08CychV0a3q46pHzXlx 3C/TM72kO4m/9LOyeFHCYs/mEYMp47yBWE/qoGQjui9rUbVn2lrRYuRJJM2XXpor z8jV+gUbKiHfKHef63+f/KccfoXyL1ZIJr9wbYTWazXQBDByCqcQhuWpq6Ndl/mh /s9thAi0Pygn1kWLR8M8474xACMwZ3i55M5K0TAwcWr9u423msl/mhMcFEszsfON EsLESLdxhPFwugmkV7tcpu3FJsOS9nITVJQ8Yp/sTWSglFH7kd1Y -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:11 2026 by rpki-client