This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/2XedQ5Z42dY_hRwTsKx81Lezyfc.roa File: 2XedQ5Z42dY_hRwTsKx81Lezyfc.roa (raw, json) Hash identifier: X9ztJb3Rfx+FojOZ+RViUwDKlFgWmcbx151sFFMV0Eg= Subject key identifier: D9:77:9D:43:96:78:D9:D6:3F:85:1C:13:B0:AC:7C:D4:B7:B3:C9:F7 Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Certificate serial: 019B7BA4FCABCD0165951903498919A4C9A9 Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/2XedQ5Z42dY_hRwTsKx81Lezyfc.roa Signing time: Thu 01 Jan 2026 22:19:28 +0000 ROA not before: Thu 01 Jan 2026 22:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34427 IP address blocks: 77.87.160.0/21 maxlen: 24 185.38.232.0/22 maxlen: 24 193.84.9.0/24 maxlen: 24 195.80.226.0/24 maxlen: 24 2a02:720::/32 maxlen: 32 2a02:720:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:fc:ab:cd:01:65:95:19:03:49:89:19:a4:c9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Validity Not Before: Jan 1 22:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9779d439678d9d63f851c13b0ac7cd4b7b3c9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:49:30:bf:ee:67:f1:40:75:eb:b5:66:39: d2:4f:40:49:77:61:dc:e5:0f:f4:ee:3f:8b:ad:1a: 7e:75:d8:02:b7:da:fa:c5:f8:06:e7:65:69:2d:6c: 4c:84:4a:5c:c5:c8:25:af:20:ca:e3:38:ac:ca:51: 5d:64:bc:a7:e4:00:68:c7:aa:1c:c5:17:bd:86:52: 54:b6:6a:15:d8:15:8a:57:a5:1f:e5:2f:b5:c4:f0: 0d:d3:d4:48:27:36:a1:8a:d1:0c:57:84:b3:88:08: 06:d3:7e:e8:de:e5:2d:f6:e2:1b:05:4c:39:cd:6b: 98:ff:2b:a8:bb:8e:23:1a:62:0e:95:e6:a6:0e:ec: 4a:a0:34:96:eb:af:11:b7:3a:18:ec:79:69:e8:74: 66:08:f5:e0:b1:44:73:69:71:37:7a:69:03:c5:a8: 68:e4:f6:ea:ca:76:49:ba:db:bc:a9:18:03:3f:51: 50:8f:3a:2d:a5:d1:a4:db:4d:21:c1:83:41:72:05: fb:b6:88:a0:c9:a5:80:b4:27:00:b0:2f:f8:0c:b2: cf:30:a1:d9:9b:7b:bf:21:fc:d9:d8:62:76:91:aa: e3:15:93:5d:74:19:10:1c:e0:17:89:9d:f4:0c:de: 28:d9:b6:7a:f1:16:f0:c8:55:bb:c5:74:d5:21:e6: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:77:9D:43:96:78:D9:D6:3F:85:1C:13:B0:AC:7C:D4:B7:B3:C9:F7 X509v3 Authority Key Identifier: keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/2XedQ5Z42dY_hRwTsKx81Lezyfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.160.0/21 185.38.232.0/22 193.84.9.0/24 195.80.226.0/24 IPv6: 2a02:720::/32 Signature Algorithm: sha256WithRSAEncryption 1d:79:b8:92:01:c1:88:08:e0:01:6e:d6:e7:7b:a3:da:60:8a: 4a:f8:bf:6c:60:56:04:38:67:df:3c:2b:87:99:c7:d5:ec:22: 92:bc:aa:82:17:7c:f2:63:01:d2:dd:a5:43:0f:5d:3f:c1:b7: 06:84:07:08:ab:c6:40:29:cf:09:a2:69:fa:0c:a3:6d:c8:a2: c0:f8:ba:e4:d0:55:28:d9:78:40:03:f6:47:0c:c7:71:d9:b9: da:69:3f:eb:92:2c:85:13:84:95:09:ae:7b:bc:db:55:ae:94: 31:15:75:44:b2:26:22:e3:62:7a:38:93:6d:32:96:37:be:3a: fe:71:f3:cf:2c:32:5a:31:b9:47:75:67:98:83:1c:6d:dd:fb: af:2e:8b:9e:c4:b0:75:fb:39:b8:49:ae:6f:a3:47:b9:4b:8a: 70:dd:49:2a:bc:d5:5b:60:29:ad:c9:84:ed:33:a0:bb:2c:e3: fc:3c:21:54:80:e8:e8:38:35:c2:45:3b:4c:76:0d:f6:25:a2: c8:33:03:c0:53:7d:48:09:2d:7a:f8:ec:42:e6:a2:69:73:96: 88:98:f3:37:6f:a1:14:91:e3:0f:3f:5f:13:c4:67:61:3d:14: 19:f7:cc:44:49:55:fe:68:4a:f5:91:80:97:b2:81:b1:30:b7: e1:ba:3d:f2 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7pPyrzQFllRkDSYkZpMmpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MGJlMTg2NWY1MDc5ZTI0YjFhN2FkZmRjYTI3ZWUyZmU1 ZDFmODkwHhcNMjYwMTAxMjIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTc3OWQ0Mzk2NzhkOWQ2M2Y4NTFjMTNiMGFjN2NkNGI3YjNjOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZRJML/uZ/FAdeu1ZjnST0BJd2Hc 5Q/07j+LrRp+ddgCt9r6xfgG52VpLWxMhEpcxcglryDK4zisylFdZLyn5ABox6oc xRe9hlJUtmoV2BWKV6Uf5S+1xPAN09RIJzahitEMV4SziAgG037o3uUt9uIbBUw5 zWuY/yuou44jGmIOleamDuxKoDSW668RtzoY7Hlp6HRmCPXgsURzaXE3emkDxaho 5PbqynZJutu8qRgDP1FQjzotpdGk200hwYNBcgX7toigyaWAtCcAsC/4DLLPMKHZ m3u/IfzZ2GJ2karjFZNddBkQHOAXiZ30DN4o2bZ68RbwyFW7xXTVIeaK0wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNl3nUOWeNnWP4UcE7CsfNS3s8n3MB8GA1UdIwQY MBaAFEcL4YZfUHniSxp639yifuL+XR+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAt MWU2OTVlZjQ5YzEwLzEvMlhlZFE1WjQyZFlfaFJ3VHNLeDgxTGV6eWZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAtMWU2OTVlZjQ5YzEw LzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDTVegAwQC uSboAwQAwVQJAwQAw1DiMA0EAgACMAcDBQAqAgcgMA0GCSqGSIb3DQEBCwUAA4IB AQAdebiSAcGICOABbtbne6PaYIpK+L9sYFYEOGffPCuHmcfV7CKSvKqCF3zyYwHS 3aVDD10/wbcGhAcIq8ZAKc8Jomn6DKNtyKLA+Lrk0FUo2XhAA/ZHDMdx2bnaaT/r kiyFE4SVCa57vNtVrpQxFXVEsiYi42J6OJNtMpY3vjr+cfPPLDJaMblHdWeYgxxt 3fuvLouexLB1+zm4Sa5vo0e5S4pw3UkqvNVbYCmtyYTtM6C7LOP8PCFUgOjoODXC RTtMdg32JaLIMwPAU31ICS16+OxC5qJpc5aImPM3b6EUkeMPP18TxGdhPRQZ98xE SVX+aEr1kYCXsoGxMLfhuj3y -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:54 2026 by rpki-client