This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/2CZKBFEsZCe6lSafiYydtgtq4EY.roa File: 2CZKBFEsZCe6lSafiYydtgtq4EY.roa (raw, json) Hash identifier: oypEzykd6+OgmxX4a99oGmsyNnqfPV2lT0fMBwXCOM4= Subject key identifier: D8:26:4A:04:51:2C:64:27:BA:95:26:9F:89:8C:9D:B6:0B:6A:E0:46 Certificate issuer: /CN=e70557b324959217d9259becd1a0549b6ffa9f65 Certificate serial: 019B7E38547828ECCEAD8F4D6ED9807528F6 Authority key identifier: E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/2CZKBFEsZCe6lSafiYydtgtq4EY.roa Signing time: Fri 02 Jan 2026 10:19:39 +0000 ROA not before: Fri 02 Jan 2026 10:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39277 IP address blocks: 194.117.230.0/23 maxlen: 23 195.2.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:54:78:28:ec:ce:ad:8f:4d:6e:d9:80:75:28:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e70557b324959217d9259becd1a0549b6ffa9f65 Validity Not Before: Jan 2 10:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8264a04512c6427ba95269f898c9db60b6ae046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a6:42:1d:e1:1c:e5:97:e9:c8:2b:f4:31:48: b4:98:69:e5:07:01:b4:8a:a0:8b:98:a3:cb:17:e3: 8d:ae:1d:7f:df:06:87:54:d2:d9:df:e7:fb:84:7f: d1:d4:33:eb:42:f8:11:08:cb:38:9c:7a:ed:e8:90: 42:90:9f:79:df:67:8d:1a:07:d6:28:8b:e4:9d:43: 4b:df:06:42:48:78:69:1b:53:f8:0a:36:70:aa:b5: 85:a6:9e:9c:30:c5:f1:d0:27:4b:6e:e0:a1:9b:47: 42:2a:99:a0:05:9f:85:61:f1:ac:0c:cb:df:06:7d: f6:f8:37:4f:6c:e7:89:a9:ce:b1:5b:35:05:31:71: fd:e4:b7:9c:aa:12:ff:9e:27:14:a4:8c:8d:b5:52: 2f:29:92:7e:85:ec:0d:43:93:76:51:1e:ec:e7:26: 20:5b:45:7c:2c:c2:6f:71:ef:87:01:46:7c:84:a8: ea:bb:be:70:91:d9:2f:03:85:cf:c8:2e:5f:fd:b6: 60:6a:ae:9c:9a:78:c9:2a:89:f4:07:26:38:c8:e1: 02:3a:11:2e:f9:d6:be:35:1d:d5:55:d7:9d:68:a8: da:8a:88:89:9b:07:95:a7:67:9d:6d:5b:40:84:18: 8e:6d:f7:64:6f:5a:60:31:ba:a8:f1:41:bd:d8:06: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:26:4A:04:51:2C:64:27:BA:95:26:9F:89:8C:9D:B6:0B:6A:E0:46 X509v3 Authority Key Identifier: keyid:E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/2CZKBFEsZCe6lSafiYydtgtq4EY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.230.0/23 195.2.246.0/23 Signature Algorithm: sha256WithRSAEncryption a5:5f:10:18:07:8a:1c:ed:c2:c0:1c:47:fe:30:fd:b1:10:83: 2e:ac:72:9a:bc:45:b1:81:02:ad:b3:70:54:ff:5d:ac:42:55: fe:f8:7b:1b:58:2a:a0:a7:92:d7:87:cc:58:d5:8d:2d:cb:28: d4:95:3c:f7:a9:b9:71:8d:4b:8f:74:0e:81:13:46:71:99:61: 94:97:39:a2:63:20:07:2c:36:d5:6b:d4:a6:bd:2b:c8:56:d9: 3a:da:06:2a:49:b8:1c:83:12:1e:15:54:4b:fa:65:42:95:33: 71:7a:9d:7f:05:7e:89:c4:f0:f5:3a:97:d7:fa:b9:19:1a:14: fd:29:8a:fe:ee:6a:3f:80:39:27:f0:7c:4d:06:12:63:51:79: 35:71:0f:ff:10:01:99:12:ff:97:76:ea:62:87:32:7c:62:70: ab:aa:d8:19:87:b1:d3:c3:8c:7a:6a:01:5b:3a:6a:f4:14:26: 82:63:10:62:da:4e:5f:10:a6:64:fd:73:11:93:d9:9c:e5:ee: a8:52:7c:ca:a2:f7:7c:d7:af:b6:4c:b0:f7:49:7e:d3:9d:2a: c9:a0:77:20:a3:e7:ae:10:54:b6:3f:a7:63:63:23:66:a6:a0: c5:57:1c:8c:1b:7a:f4:99:29:31:e0:cd:c8:cb:cd:22:52:e9: a3:49:6f:94 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OFR4KOzOrY9NbtmAdSj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDU1N2IzMjQ5NTkyMTdkOTI1OWJlY2QxYTA1NDliNmZm YTlmNjUwHhcNMjYwMTAyMTAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODI2NGEwNDUxMmM2NDI3YmE5NTI2OWY4OThjOWRiNjBiNmFlMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqZCHeEc5ZfpyCv0MUi0mGnlBwG0 iqCLmKPLF+ONrh1/3waHVNLZ3+f7hH/R1DPrQvgRCMs4nHrt6JBCkJ9532eNGgfW KIvknUNL3wZCSHhpG1P4CjZwqrWFpp6cMMXx0CdLbuChm0dCKpmgBZ+FYfGsDMvf Bn32+DdPbOeJqc6xWzUFMXH95LecqhL/nicUpIyNtVIvKZJ+hewNQ5N2UR7s5yYg W0V8LMJvce+HAUZ8hKjqu75wkdkvA4XPyC5f/bZgaq6cmnjJKon0ByY4yOECOhEu +da+NR3VVdedaKjaioiJmweVp2edbVtAhBiObfdkb1pgMbqo8UG92AYrAwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNgmSgRRLGQnupUmn4mMnbYLauBGMB8GA1UdIwQY MBaAFOcFV7MklZIX2SWb7NGgVJtv+p9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXdWWHN5U1ZraGZaSlp2czBhQlVtMl82bjJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2QxNGItZDJhOS00MGY5LWI2MzEt ZDVjMjA4ZWE3ZTdlLzEvMkNaS0JGRXNaQ2U2bFNhZmlZeWR0Z3RxNEVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lY2QxNGItZDJhOS00MGY5LWI2MzEtZDVjMjA4ZWE3ZTdl LzEvNXdWWHN5U1ZraGZaSlp2czBhQlVtMl82bjJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwnXmAwQB wwL2MA0GCSqGSIb3DQEBCwUAA4IBAQClXxAYB4oc7cLAHEf+MP2xEIMurHKavEWx gQKts3BU/12sQlX++HsbWCqgp5LXh8xY1Y0tyyjUlTz3qblxjUuPdA6BE0ZxmWGU lzmiYyAHLDbVa9SmvSvIVtk62gYqSbgcgxIeFVRL+mVClTNxep1/BX6JxPD1OpfX +rkZGhT9KYr+7mo/gDkn8HxNBhJjUXk1cQ//EAGZEv+XdupihzJ8YnCrqtgZh7HT w4x6agFbOmr0FCaCYxBi2k5fEKZk/XMRk9mc5e6oUnzKovd816+2TLD3SX7TnSrJ oHcgo+euEFS2P6djYyNmpqDFVxyMG3r0mSkx4M3Iy80iUumjSW+U -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:21 2026 by rpki-client