This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa File: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (raw, json) Hash identifier: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU= Subject key identifier: D9:D2:C9:18:DB:72:AC:94:23:14:8D:80:85:2E:F0:8F:62:E1:2A:B7 Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058 Certificate serial: 019B7A5A8EC7D95A9845BFEB6D3B2548BC32 Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa Signing time: Thu 01 Jan 2026 16:18:33 +0000 ROA not before: Thu 01 Jan 2026 16:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197177 IP address blocks: 81.161.100.0/24 maxlen: 24 91.223.52.0/24 maxlen: 24 109.106.4.0/22 maxlen: 23 185.174.12.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8e:c7:d9:5a:98:45:bf:eb:6d:3b:25:48:bc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9d2c918db72ac9423148d80852ef08f62e12ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:85:19:e9:8b:ce:d1:cc:6b:f2:1a:90:7e:dd: 8e:7f:60:08:a8:02:9a:72:b7:d5:95:d7:54:a2:52: 00:1c:43:e3:de:df:bf:c9:e3:54:9c:44:6b:9f:ef: 54:ca:a5:84:51:b1:c4:d1:e9:3a:0a:2e:64:86:3f: 78:82:b3:fd:22:ba:d7:9b:b9:b4:6b:6f:0c:ef:b8: 72:ef:07:be:84:28:92:e4:3e:b9:f8:58:ba:91:de: f3:e1:35:cd:93:5b:d7:3c:2e:68:a7:40:e1:15:c4: b8:3d:51:ac:d4:23:6b:72:04:9b:7d:33:25:2f:0e: 88:70:9f:66:84:48:4f:ef:8a:8c:f8:b9:39:7d:71: 5c:2b:1c:93:40:e2:f7:32:21:3b:af:bd:e0:04:2e: 2e:2e:38:c1:1c:d8:77:33:e5:95:49:c7:10:5e:8b: 1f:43:02:44:74:36:8b:99:c1:5f:52:51:e2:82:1f: 61:0c:60:2d:94:44:47:a8:b4:9a:df:27:70:f7:ab: bd:49:17:a5:c3:5d:de:37:e7:19:77:e4:f7:18:a1: 41:b4:69:f6:3a:60:74:1b:7e:a2:31:91:e2:d3:b0: cd:eb:13:6f:26:b7:e5:82:b8:b5:03:87:90:e9:50: f2:68:32:59:b4:99:35:34:83:7e:d9:c0:6a:b6:20: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D2:C9:18:DB:72:AC:94:23:14:8D:80:85:2E:F0:8F:62:E1:2A:B7 X509v3 Authority Key Identifier: keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.100.0/24 91.223.52.0/24 109.106.4.0/22 185.174.12.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:cf:10:3c:34:f0:9b:6b:ff:8b:d8:0d:8a:ec:21:a2:cc:67: 0b:1f:7a:72:4d:bb:0f:5b:d1:d1:94:6c:56:ee:e4:51:8b:d9: 04:a0:84:3d:72:82:0a:c2:df:c8:49:97:5d:ba:9c:74:49:2f: fb:f7:96:e7:66:0d:9c:26:d6:8a:ef:dd:6e:70:e7:d5:a2:a5: 92:17:04:e1:a2:22:9a:31:f0:a6:ba:a7:67:b0:2f:bc:2a:89: 95:6b:84:ba:82:82:d2:50:7f:ce:30:6d:9d:e1:70:04:d8:83: 75:ae:ed:1d:41:08:81:ae:89:82:e3:e8:b8:a7:3f:e0:f0:d7: c2:29:05:c5:46:aa:8a:43:16:6d:94:07:58:9d:f3:62:3d:f3: f6:96:05:60:89:78:72:e6:32:03:f6:b9:db:78:07:8f:5e:d2: e0:59:4f:5c:de:c6:02:fe:b5:67:67:a9:50:e9:88:32:ed:8c: 22:11:c7:fd:66:a8:89:fc:60:ff:e9:53:34:f8:ce:1e:96:c1: eb:e5:07:90:a9:d3:79:bc:ec:3d:8a:53:62:e3:69:e0:2d:69: 72:13:13:82:78:ea:98:5c:4a:4f:55:7a:9a:c7:64:f1:9a:ed: 83:0c:76:9e:5b:52:d9:54:86:cf:dd:54:f8:a5:ee:f6:db:8f: d3:e4:dd:96 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6Wo7H2VqYRb/rbTslSLwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNDY3MGMyYTZmZDcyMjMzMjdmNjhiYWRiZTZkMDgzMjJi NzgwNTgwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWQyYzkxOGRiNzJhYzk0MjMxNDhkODA4NTJlZjA4ZjYyZTEyYWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YUZ6YvO0cxr8hqQft2Of2AIqAKa crfVlddUolIAHEPj3t+/yeNUnERrn+9UyqWEUbHE0ek6Ci5khj94grP9IrrXm7m0 a28M77hy7we+hCiS5D65+Fi6kd7z4TXNk1vXPC5op0DhFcS4PVGs1CNrcgSbfTMl Lw6IcJ9mhEhP74qM+Lk5fXFcKxyTQOL3MiE7r73gBC4uLjjBHNh3M+WVSccQXosf QwJEdDaLmcFfUlHigh9hDGAtlERHqLSa3ydw96u9SRelw13eN+cZd+T3GKFBtGn2 OmB0G36iMZHi07DN6xNvJrflgri1A4eQ6VDyaDJZtJk1NIN+2cBqtiCU3QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNnSyRjbcqyUIxSNgIUu8I9i4Sq3MB8GA1UdIwQY MBaAFN1GcMKm/XIjMn9outvm0IMit4BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUt OWNkM2M2YTE4ODY2LzEvMmRMSkdOdHlySlFqRkkyQWhTN3dqMkxoS3JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUtOWNkM2M2YTE4ODY2 LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUaFkAwQA W980AwQCbWoEAwQCua4MMA0GCSqGSIb3DQEBCwUAA4IBAQBczxA8NPCba/+L2A2K 7CGizGcLH3pyTbsPW9HRlGxW7uRRi9kEoIQ9coIKwt/ISZddupx0SS/795bnZg2c JtaK791ucOfVoqWSFwThoiKaMfCmuqdnsC+8KomVa4S6goLSUH/OMG2d4XAE2IN1 ru0dQQiBromC4+i4pz/g8NfCKQXFRqqKQxZtlAdYnfNiPfP2lgVgiXhy5jID9rnb eAePXtLgWU9c3sYC/rVnZ6lQ6Ygy7YwiEcf9ZqiJ/GD/6VM0+M4elsHr5QeQqdN5 vOw9ilNi42ngLWlyExOCeOqYXEpPVXqax2Txmu2DDHaeW1LZVIbP3VT4pe7224/T 5N2W -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:30 2026 by rpki-client