This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/2Z2Mezr_sYt_rFmNrbgtD7JcvRg.roa File: 2Z2Mezr_sYt_rFmNrbgtD7JcvRg.roa (raw, json) Hash identifier: uRg8q37DVfZI6yBc5sgrO+ko0WZotW48TPAF7XoPsVE= Subject key identifier: D9:9D:8C:7B:3A:FF:B1:8B:7F:AC:59:8D:AD:B8:2D:0F:B2:5C:BD:18 Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f Certificate serial: 019B77C66407EFDB6A99F0265ED8C43B30D6 Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/2Z2Mezr_sYt_rFmNrbgtD7JcvRg.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49036 IP address blocks: 81.94.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:64:07:ef:db:6a:99:f0:26:5e:d8:c4:3b:30:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d99d8c7b3affb18b7fac598dadb82d0fb25cbd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7c:4c:2e:28:92:02:51:c6:e7:da:be:25:1c: 39:89:e0:3d:3c:3a:b4:30:db:b3:7a:e6:fa:a3:f7: 97:d2:12:b3:e4:03:8d:ea:12:a3:6e:f9:e2:63:e6: 19:c6:30:55:b0:b5:23:20:53:e6:6a:b9:fc:44:f3: 19:31:79:b8:ca:02:91:fa:e4:95:89:89:31:ff:25: 7c:be:3b:a3:c0:cf:95:bb:90:66:05:e8:38:a3:3a: 77:1e:7d:96:ee:7e:fa:eb:f5:88:d0:21:79:af:73: 76:82:c4:33:ba:24:a4:a8:06:ec:ce:40:9f:ce:b2: 6b:5c:ab:83:76:11:ee:41:61:5b:b7:13:08:af:12: 40:59:b2:dc:04:3e:24:f8:96:6b:a4:fb:3b:27:c2: 8e:45:6c:f6:02:93:f8:83:11:68:68:7d:17:ca:0e: c9:c1:4d:c4:cd:a7:aa:c1:9d:90:2b:0f:54:1e:ed: be:28:5d:b1:1d:27:ac:06:42:0f:d7:c7:59:14:36: e8:8d:f3:fe:9f:74:e2:be:49:ec:07:7e:81:ff:e3: 6d:53:97:db:b1:9a:bb:4a:bc:7a:fe:25:ec:30:c2: ab:9f:ec:ed:57:86:a8:c9:af:f6:6b:65:cd:41:1c: 00:b1:03:b2:0c:c1:40:42:99:93:0b:c2:6a:d4:c8: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9D:8C:7B:3A:FF:B1:8B:7F:AC:59:8D:AD:B8:2D:0F:B2:5C:BD:18 X509v3 Authority Key Identifier: keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/2Z2Mezr_sYt_rFmNrbgtD7JcvRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.94.238.0/24 Signature Algorithm: sha256WithRSAEncryption 73:f6:e8:5f:f0:61:91:a5:80:90:a0:63:af:e7:91:70:2e:fa: 5b:a8:0f:76:1b:5c:26:4e:42:b8:6e:fc:6f:73:0a:46:cf:5b: 3c:b3:b9:37:84:6c:f7:7f:17:10:39:7a:9d:08:ff:0e:64:86: a5:f0:21:05:6e:cf:98:69:f3:ac:3b:1e:69:93:c2:ab:15:da: 1d:31:7c:0e:19:cc:18:13:76:9e:37:bd:4e:8a:3e:da:af:98: 17:aa:cb:a0:ef:6c:59:43:f4:4b:51:05:cf:e5:00:c5:72:d4: 6b:65:9b:8e:1f:85:51:14:3b:30:c4:6f:31:91:03:a5:db:9f: c5:c6:b8:15:f1:1c:12:83:ed:4e:95:31:a7:6a:12:83:67:34: 33:3e:d0:c7:15:84:37:da:a6:82:ae:dc:ec:57:b7:9f:64:36: a2:c9:68:e0:d3:1c:91:1b:9d:31:d7:46:1d:b6:22:48:37:84: aa:e5:4d:0c:bd:e1:b4:af:3e:8d:f0:15:1e:60:66:74:8b:91: a0:cf:1d:17:6f:1f:e4:55:63:ce:c8:5d:1c:5f:2b:bd:d7:e6: 5e:c5:12:e1:09:70:a4:64:c7:c2:26:5b:67:d5:a4:eb:80:77: 44:78:b9:94:a6:ad:f4:d1:76:e9:a6:86:25:27:df:37:2e:8f: 2c:2d:94:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmQH79tqmfAmXtjEOzDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YzIwM2UzZjM2NTkyM2E4NDNkMzIyMDMxN2ExYzY4Y2Y3 NGRlMGYwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTlkOGM3YjNhZmZiMThiN2ZhYzU5OGRhZGI4MmQwZmIyNWNiZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nxMLiiSAlHG59q+JRw5ieA9PDq0 MNuzeub6o/eX0hKz5AON6hKjbvniY+YZxjBVsLUjIFPmarn8RPMZMXm4ygKR+uSV iYkx/yV8vjujwM+Vu5BmBeg4ozp3Hn2W7n766/WI0CF5r3N2gsQzuiSkqAbszkCf zrJrXKuDdhHuQWFbtxMIrxJAWbLcBD4k+JZrpPs7J8KORWz2ApP4gxFoaH0Xyg7J wU3EzaeqwZ2QKw9UHu2+KF2xHSesBkIP18dZFDbojfP+n3TivknsB36B/+NtU5fb sZq7Srx6/iXsMMKrn+ztV4aoya/2a2XNQRwAsQOyDMFAQpmTC8Jq1MhL6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNmdjHs6/7GLf6xZja24LQ+yXL0YMB8GA1UdIwQY MBaAFBfCA+PzZZI6hD0yIDF6HGjPdN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMt YWM2N2EzNmU0YWFiLzEvMloyTWV6cl9zWXRfckZtTnJiZ3REN0pjdlJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMtYWM2N2EzNmU0YWFi LzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUV7uMA0G CSqGSIb3DQEBCwUAA4IBAQBz9uhf8GGRpYCQoGOv55FwLvpbqA92G1wmTkK4bvxv cwpGz1s8s7k3hGz3fxcQOXqdCP8OZIal8CEFbs+YafOsOx5pk8KrFdodMXwOGcwY E3aeN71Oij7ar5gXqsug72xZQ/RLUQXP5QDFctRrZZuOH4VRFDswxG8xkQOl25/F xrgV8RwSg+1OlTGnahKDZzQzPtDHFYQ32qaCrtzsV7efZDaiyWjg0xyRG50x10Yd tiJIN4Sq5U0MveG0rz6N8BUeYGZ0i5Ggzx0Xbx/kVWPOyF0cXyu91+ZexRLhCXCk ZMfCJltn1aTrgHdEeLmUpq300XbppoYlJ983Lo8sLZQz -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:35 2026 by rpki-client