This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa File: 2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa (raw, json) Hash identifier: uGrmvXvC7gEnKXoQKKmv+XIHcuaY4v0wNeu6T5g4Gcs= Subject key identifier: D8:2E:E9:64:85:49:5E:06:96:32:8D:50:D9:08:1C:0F:E8:6E:79:E2 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019B7BA52128D1621D5DC28A28DDEB5676D6 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204055 IP address blocks: 212.18.251.0/24 maxlen: 24 2a04:2b00:14bb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:21:28:d1:62:1d:5d:c2:8a:28:dd:eb:56:76:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d82ee96485495e0696328d50d9081c0fe86e79e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:30:13:37:c4:68:42:2c:de:6d:8b:60:45: 0b:94:eb:38:7f:27:50:0b:26:5d:2f:b5:bb:05:9f: 21:ab:ef:f8:fb:b6:48:a7:b3:90:ab:5c:91:ab:0d: f8:ad:80:bf:39:bc:10:02:df:96:e3:ca:ab:45:fc: 7b:cc:3b:72:37:74:a6:e7:b4:cc:ac:45:fb:30:9a: 9a:84:ff:bb:52:a9:93:58:57:70:67:4d:c9:ed:d7: 25:fc:39:51:7e:1e:c9:63:66:bf:29:f6:88:d4:4f: 1a:82:61:ae:19:9f:56:74:ee:4d:3e:7f:e8:5e:1a: 74:a6:69:82:7a:96:da:f0:94:0c:ff:1a:a5:2a:00: 02:fd:0c:1e:de:bf:99:2a:8f:7f:29:52:fa:13:ef: 7d:d3:04:c9:c9:5c:56:69:ff:4d:82:18:44:03:a9: a2:df:b1:d6:ef:cf:b3:11:1b:f3:c7:3e:0f:2d:01: ce:ac:1a:aa:a7:11:32:aa:a7:22:00:b1:b0:9b:b8: 10:c8:73:d2:99:5f:2b:bc:71:98:ec:07:55:e5:c2: c6:12:e1:a2:ac:84:1d:b6:ca:81:ba:0c:0f:29:58: 7e:d5:90:c0:38:f0:57:95:72:9f:53:85:39:20:c3: 75:1c:83:7c:33:eb:65:7e:df:96:26:80:54:b1:2e: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2E:E9:64:85:49:5E:06:96:32:8D:50:D9:08:1C:0F:E8:6E:79:E2 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.18.251.0/24 IPv6: 2a04:2b00:14bb::/48 Signature Algorithm: sha256WithRSAEncryption 18:66:ba:0d:5f:fc:ad:0c:76:b2:92:84:6e:10:00:5f:ae:b4: eb:7e:5e:b9:64:3a:7d:67:83:30:0a:49:ab:f8:3d:85:b2:0b: 4b:4d:6e:38:83:2d:c9:0f:c3:77:1c:93:96:93:16:60:89:17: a7:f9:40:d4:4b:4e:14:23:d2:af:57:67:10:37:20:af:1e:f2: 7f:bc:71:fd:45:e3:80:d7:b0:5b:d6:bf:59:c3:3e:9b:c6:02: b6:61:93:e5:6c:4b:be:22:67:2d:a2:0b:5c:01:1d:16:91:0d: e0:6c:56:15:71:a4:b6:ed:25:22:0a:b8:98:2a:96:56:9c:e6: 44:e2:93:b8:98:9d:a8:b0:25:1c:5d:c0:83:ca:93:30:63:96: 37:d6:65:52:e2:eb:c2:aa:48:52:bb:53:89:e7:1a:10:25:12: eb:29:ec:18:b9:fd:09:c2:83:2b:be:68:52:57:d9:6e:e7:00: 66:9c:1d:9b:86:a3:96:14:e3:9a:46:7e:b8:8f:17:e3:d5:6b: 70:0c:be:35:a8:65:25:54:fd:29:8a:6b:a7:0e:32:ab:0d:03: b1:3c:2d:ef:57:cf:36:6b:49:8e:f9:30:28:ad:e4:f6:99:56: e3:0d:c4:25:05:6d:d8:eb:01:ef:a7:1c:22:a7:92:d5:39:19: e7:23:de:72 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pSEo0WIdXcKKKN3rVnbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODJlZTk2NDg1NDk1ZTA2OTYzMjhkNTBkOTA4MWMwZmU4NmU3OWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt94wEzfEaEIs3m2LYEULlOs4fydQ CyZdL7W7BZ8hq+/4+7ZIp7OQq1yRqw34rYC/ObwQAt+W48qrRfx7zDtyN3Sm57TM rEX7MJqahP+7UqmTWFdwZ03J7dcl/DlRfh7JY2a/KfaI1E8agmGuGZ9WdO5NPn/o Xhp0pmmCepba8JQM/xqlKgAC/Qwe3r+ZKo9/KVL6E+990wTJyVxWaf9NghhEA6mi 37HW78+zERvzxz4PLQHOrBqqpxEyqqciALGwm7gQyHPSmV8rvHGY7AdV5cLGEuGi rIQdtsqBugwPKVh+1ZDAOPBXlXKfU4U5IMN1HIN8M+tlft+WJoBUsS7QEwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNgu6WSFSV4GljKNUNkIHA/obnniMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvMkM3cFpJVkpYZ2FXTW8xUTJRZ2NELWh1ZWVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1BL7MA8E AgACMAkDBwAqBCsAFLswDQYJKoZIhvcNAQELBQADggEBABhmug1f/K0MdrKShG4Q AF+utOt+XrlkOn1ngzAKSav4PYWyC0tNbjiDLckPw3cck5aTFmCJF6f5QNRLThQj 0q9XZxA3IK8e8n+8cf1F44DXsFvWv1nDPpvGArZhk+VsS74iZy2iC1wBHRaRDeBs VhVxpLbtJSIKuJgqllac5kTik7iYnaiwJRxdwIPKkzBjljfWZVLi68KqSFK7U4nn GhAlEusp7Bi5/QnCgyu+aFJX2W7nAGacHZuGo5YU45pGfriPF+PVa3AMvjWoZSVU /SmKa6cOMqsNA7E8Le9XzzZrSY75MCit5PaZVuMNxCUFbdjrAe+nHCKnktU5Gecj 3nI= -----END CERTIFICATE-----Generated at Mon Jan 26 21:17:39 2026 by rpki-client