This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/2HO1B3cqChy0lUy13_3eiaaOjKM.roa File: 2HO1B3cqChy0lUy13_3eiaaOjKM.roa (raw, json) Hash identifier: sT83X6MdLHSVmAwErarq+oTjKlq0n9DkDOqaOUwsh6E= Subject key identifier: D8:73:B5:07:77:2A:0A:1C:B4:95:4C:B5:DF:FD:DE:89:A6:8E:8C:A3 Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414 Certificate serial: 019B7BA517FD88047A89B87A9286C7A84B34 Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/2HO1B3cqChy0lUy13_3eiaaOjKM.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205226 IP address blocks: 185.108.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:17:fd:88:04:7a:89:b8:7a:92:86:c7:a8:4b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414 Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d873b507772a0a1cb4954cb5dffdde89a68e8ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:74:5f:a8:bb:b9:0c:ea:26:b0:99:4e:11: a9:e3:1c:78:9b:dd:ad:31:3d:4a:d8:ed:e8:fc:06: 5c:2d:30:3a:c9:ef:08:4e:03:9b:77:f4:1f:ba:a5: 71:17:67:8c:4c:25:65:b0:07:ad:69:8b:7c:e5:29: 18:1d:6e:46:18:ba:9b:46:e2:1c:6f:98:1f:bc:c2: 3c:ec:42:90:29:f5:17:a5:08:74:f4:8c:53:03:e9: 48:04:17:2d:25:9a:54:86:83:02:42:be:c2:44:59: 5a:ab:0c:bd:4c:1c:bf:de:e3:65:87:18:7a:07:0b: 59:b3:47:b7:8d:e7:f1:f1:6e:68:f3:92:2b:6e:f5: ba:81:e3:40:d7:08:d4:87:71:71:64:d0:0c:4c:d5: 6e:e5:cb:9b:73:12:38:99:87:a4:a6:75:da:d6:ee: 5a:15:8a:8c:35:0d:5f:64:02:40:a7:b3:31:a8:40: 1e:a7:10:3b:8d:ef:ba:39:d8:f8:d1:30:a2:04:7b: 3d:2b:cf:7e:01:d1:e2:ff:d2:f5:cb:9d:c6:05:2c: 6d:d0:26:11:0d:28:99:43:eb:5b:b1:33:98:7f:ef: ab:cf:92:17:d2:f5:17:5f:47:a7:7b:5a:42:8e:3d: f7:9c:7f:e5:9d:df:0f:c1:8e:60:0f:24:83:00:9d: 48:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:73:B5:07:77:2A:0A:1C:B4:95:4C:B5:DF:FD:DE:89:A6:8E:8C:A3 X509v3 Authority Key Identifier: keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/2HO1B3cqChy0lUy13_3eiaaOjKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.19.0/24 Signature Algorithm: sha256WithRSAEncryption 43:f5:f7:9d:0a:a9:c6:83:a9:0d:5b:08:99:35:93:e7:da:5a: f2:48:03:ae:ea:ee:b9:0c:0b:81:ac:fe:04:bb:60:5c:ba:b9: 0b:e7:8b:57:3e:72:86:fe:36:43:56:ed:a0:98:6e:56:6d:93: 5c:68:a4:84:78:0e:e6:fb:b0:06:f1:30:eb:8c:af:49:2b:46: 35:ab:f7:97:05:81:23:a2:b0:d9:4a:ed:c2:79:f6:6b:0b:1c: 42:7c:56:66:4d:9b:fe:e0:01:12:11:05:70:d7:57:3a:71:00: a6:f7:87:c2:c3:cd:35:c7:84:21:20:60:64:e6:b6:ce:67:48: 3c:67:de:4f:1e:ed:eb:15:85:fc:68:3e:55:34:aa:fb:c5:c5: 37:0e:b0:b7:d8:31:88:34:b6:1f:88:ae:c3:e2:69:e1:2d:0e: 44:fa:3a:d3:ce:e1:7e:78:fa:13:44:23:7e:b6:b2:a3:4c:fc: 73:f6:b3:f8:6f:12:d4:d2:d7:ca:5e:6a:58:4f:75:28:5b:32: 82:5c:e0:07:9a:a0:e5:36:da:0c:b8:09:ca:93:b7:15:5d:d0: 27:45:21:d7:10:43:d5:7d:9e:57:20:51:7e:9a:53:9a:fd:c3: f5:3e:21:9d:9d:23:e3:d0:77:1d:4f:27:b7:b1:8c:71:bb:dc: ab:aa:2f:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRf9iAR6ibh6kobHqEs0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MTBhYTg5MjM5MjQyZGFjYzlkMDNlM2FmMjJkNGU4N2E3 ODM0MTQwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODczYjUwNzc3MmEwYTFjYjQ5NTRjYjVkZmZkZGU4OWE2OGU4Y2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOZ0X6i7uQzqJrCZThGp4xx4m92t MT1K2O3o/AZcLTA6ye8ITgObd/QfuqVxF2eMTCVlsAetaYt85SkYHW5GGLqbRuIc b5gfvMI87EKQKfUXpQh09IxTA+lIBBctJZpUhoMCQr7CRFlaqwy9TBy/3uNlhxh6 BwtZs0e3jefx8W5o85IrbvW6geNA1wjUh3FxZNAMTNVu5cubcxI4mYekpnXa1u5a FYqMNQ1fZAJAp7MxqEAepxA7je+6Odj40TCiBHs9K89+AdHi/9L1y53GBSxt0CYR DSiZQ+tbsTOYf++rz5IX0vUXX0ene1pCjj33nH/lnd8PwY5gDySDAJ1IiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNhztQd3KgoctJVMtd/93ommjoyjMB8GA1UdIwQY MBaAFGgQqokjkkLazJ0D468i1Oh6eDQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEt MWY2ODk5MzViOTBmLzEvMkhPMUIzY3FDaHkwbFV5MTNfM2VpYWFPaktNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEtMWY2ODk5MzViOTBm LzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWwTMA0G CSqGSIb3DQEBCwUAA4IBAQBD9fedCqnGg6kNWwiZNZPn2lrySAOu6u65DAuBrP4E u2BcurkL54tXPnKG/jZDVu2gmG5WbZNcaKSEeA7m+7AG8TDrjK9JK0Y1q/eXBYEj orDZSu3CefZrCxxCfFZmTZv+4AESEQVw11c6cQCm94fCw801x4QhIGBk5rbOZ0g8 Z95PHu3rFYX8aD5VNKr7xcU3DrC32DGINLYfiK7D4mnhLQ5E+jrTzuF+ePoTRCN+ trKjTPxz9rP4bxLU0tfKXmpYT3UoWzKCXOAHmqDlNtoMuAnKk7cVXdAnRSHXEEPV fZ5XIFF+mlOa/cP1PiGdnSPj0HcdTye3sYxxu9yrqi/k -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:13 2026 by rpki-client