This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/2yFMgBOfZpDZVC6FILUFMdR8res.roa File: 2yFMgBOfZpDZVC6FILUFMdR8res.roa (raw, json) Hash identifier: /DvRvFCfIi36iN6wmsv6HqY8eennfeDEvir0D1XDDco= Subject key identifier: DB:21:4C:80:13:9F:66:90:D9:54:2E:85:20:B5:05:31:D4:7C:AD:EB Certificate issuer: /CN=bf817dc8552df3610ffc45441b3f81464e489dc8 Certificate serial: 019B7E37B43D1ACA51A7FD2C70B4D908A3F5 Authority key identifier: BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/2yFMgBOfZpDZVC6FILUFMdR8res.roa Signing time: Fri 02 Jan 2026 10:18:58 +0000 ROA not before: Fri 02 Jan 2026 10:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 195.88.54.0/23 maxlen: 23 2001:67c:21e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b4:3d:1a:ca:51:a7:fd:2c:70:b4:d9:08:a3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf817dc8552df3610ffc45441b3f81464e489dc8 Validity Not Before: Jan 2 10:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db214c80139f6690d9542e8520b50531d47cadeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:11:c2:83:78:89:1f:7a:52:6c:7d:6c:ce:8f: 9b:a5:e4:6a:6e:e9:73:c8:49:7d:93:48:61:d2:42: 17:29:05:59:90:9c:b8:63:3d:5b:59:eb:a8:48:c7: 25:a9:65:14:82:8e:94:d7:09:fb:58:db:82:6f:77: a1:70:d8:14:b4:47:73:be:29:31:a3:c8:4d:f6:d6: 1e:95:68:1f:1a:4d:74:8e:97:16:b3:73:d2:2a:76: dc:4e:8d:44:54:f5:a9:71:27:40:86:6a:2c:ca:f9: b5:58:e5:ac:47:dd:21:ba:c1:98:5f:0a:9c:d0:d1: a6:3a:8f:22:5a:fb:a0:27:19:95:94:e8:8a:4c:9a: f2:36:e1:df:46:75:46:5e:e7:39:e4:2f:10:d7:15: 45:b1:60:20:f1:1e:da:f4:23:79:f6:7a:5b:54:b4: 00:fa:10:e4:04:c6:76:0c:f5:20:5c:5e:1a:fd:97: 44:1b:f3:3c:29:6e:61:5c:eb:d5:53:ca:6e:9e:b4: 5f:58:c5:26:0a:21:18:89:7f:a1:f5:39:a0:0a:5e: d6:77:dc:26:b6:56:53:0a:25:e6:6b:e7:b8:66:59: 98:cb:c5:8d:2a:18:b0:d9:65:a8:44:45:a3:76:44: ec:0e:e3:2d:bb:6c:7f:bc:11:8b:fe:d7:8d:a3:44: e3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:21:4C:80:13:9F:66:90:D9:54:2E:85:20:B5:05:31:D4:7C:AD:EB X509v3 Authority Key Identifier: keyid:BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/2yFMgBOfZpDZVC6FILUFMdR8res.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.54.0/23 IPv6: 2001:67c:21e0::/48 Signature Algorithm: sha256WithRSAEncryption 6b:b8:5e:79:fb:f9:2d:4c:ea:8c:38:ae:83:2a:24:37:62:da: 85:10:dd:9b:81:f1:84:30:bb:07:aa:49:7b:9a:03:a9:e1:e0: df:c3:d8:84:82:52:e6:56:3c:f9:dc:b1:50:f7:09:2f:86:af: c6:dd:f2:c0:55:9e:09:55:c2:ac:8b:5b:49:64:dd:10:2a:d4: 78:21:b3:16:0f:7e:a7:6e:f2:08:69:2b:26:9b:5d:bb:74:26: 00:7a:d1:7c:12:d0:c6:c0:dd:a7:65:8b:28:15:a0:49:92:23: 27:d8:3b:60:83:77:c2:25:06:7b:bd:4d:7c:fa:ed:f3:56:e8: 10:23:ad:69:d6:2b:42:26:56:28:9c:ec:9f:03:f8:16:4c:dd: ad:55:c3:26:d7:ee:a3:89:0b:b7:e2:c6:a7:b8:6e:e3:66:47: 70:18:0c:1f:9f:f2:ff:03:81:c7:c8:52:68:30:ed:e4:fe:e1: 02:17:b0:68:ec:9b:20:87:93:18:74:59:06:c4:50:e6:1d:e7: 7d:9a:4c:75:58:6a:5a:6f:03:77:da:fb:4b:03:d1:64:a3:f3: 81:ed:86:59:19:5c:d8:65:5a:b6:9c:3d:8b:98:d9:bf:f0:29: b9:b8:a3:fd:06:e6:46:38:f5:d3:44:73:c1:0a:36:43:a0:0a: 63:fb:a7:74 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+N7Q9GspRp/0scLTZCKP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODE3ZGM4NTUyZGYzNjEwZmZjNDU0NDFiM2Y4MTQ2NGU0 ODlkYzgwHhcNMjYwMTAyMTAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjIxNGM4MDEzOWY2NjkwZDk1NDJlODUyMGI1MDUzMWQ0N2NhZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hHCg3iJH3pSbH1szo+bpeRqbulz yEl9k0hh0kIXKQVZkJy4Yz1bWeuoSMclqWUUgo6U1wn7WNuCb3ehcNgUtEdzvikx o8hN9tYelWgfGk10jpcWs3PSKnbcTo1EVPWpcSdAhmosyvm1WOWsR90husGYXwqc 0NGmOo8iWvugJxmVlOiKTJryNuHfRnVGXuc55C8Q1xVFsWAg8R7a9CN59npbVLQA +hDkBMZ2DPUgXF4a/ZdEG/M8KW5hXOvVU8punrRfWMUmCiEYiX+h9TmgCl7Wd9wm tlZTCiXma+e4ZlmYy8WNKhiw2WWoREWjdkTsDuMtu2x/vBGL/teNo0Tj8wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNshTIATn2aQ2VQuhSC1BTHUfK3rMB8GA1UdIwQY MBaAFL+BfchVLfNhD/xFRBs/gUZOSJ3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRGOXlGVXQ4MkVQX0VWRUd6LUJSazVJbmNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jNGU3ZTktZjZiZS00MWEzLWE0NTkt MTk1Mzg5MzMwZWRmLzEvMnlGTWdCT2ZacERaVkM2RklMVUZNZFI4cmVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jNGU3ZTktZjZiZS00MWEzLWE0NTktMTk1Mzg5MzMwZWRm LzEvdjRGOXlGVXQ4MkVQX0VWRUd6LUJSazVJbmNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw1g2MA8E AgACMAkDBwAgAQZ8IeAwDQYJKoZIhvcNAQELBQADggEBAGu4Xnn7+S1M6ow4roMq JDdi2oUQ3ZuB8YQwuweqSXuaA6nh4N/D2ISCUuZWPPncsVD3CS+Gr8bd8sBVnglV wqyLW0lk3RAq1HghsxYPfqdu8ghpKyabXbt0JgB60XwS0MbA3adliygVoEmSIyfY O2CDd8IlBnu9TXz67fNW6BAjrWnWK0ImViic7J8D+BZM3a1VwybX7qOJC7fixqe4 buNmR3AYDB+f8v8DgcfIUmgw7eT+4QIXsGjsmyCHkxh0WQbEUOYd532aTHVYalpv A3fa+0sD0WSj84HthlkZXNhlWracPYuY2b/wKbm4o/0G5kY49dNEc8EKNkOgCmP7 p3Q= -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:52 2026 by rpki-client