This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa File: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (raw, json) Hash identifier: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0= Subject key identifier: 3F:66:87:C0:39:90:95:99:CE:09:1E:C0:64:94:68:86:32:5B:AD:0D Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECC264B8FA8B1637E002785E9C1D8F Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202563 IP address blocks: 94.240.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c2:64:b8:fa:8b:16:37:e0:02:78:5e:9c:1d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f6687c039909599ce091ec064946886325bad0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:9e:95:b8:9f:40:a6:42:09:c9:7e:76:17: cb:f8:4e:9c:6c:c6:fe:02:6b:51:69:8a:8f:5f:38: 46:8e:01:b7:53:cd:93:9c:ff:bd:38:26:cf:41:24: df:df:47:f1:62:e3:60:aa:8d:64:78:9b:e1:c8:46: fc:19:9b:8c:39:09:e7:5a:e6:5c:75:84:19:be:c8: e9:0a:1e:92:ba:59:67:d5:2b:d3:a0:b4:46:48:fa: 08:56:f3:56:cd:7c:42:4d:d6:51:6b:7f:85:fd:c7: 77:5b:e1:f2:a4:eb:eb:24:35:73:d0:85:99:05:6d: 9d:db:8f:e0:ed:28:85:21:a0:06:d4:b1:e7:c7:91: 6a:ec:bf:74:e7:8e:04:7e:56:b7:72:56:d7:40:df: d4:28:a1:22:c3:e4:28:ba:37:4d:28:e8:fe:8f:c7: ae:97:4f:09:ae:73:e4:ec:5b:f9:1b:b4:75:e6:6b: 64:93:ed:e4:a5:71:a0:61:a5:f4:2b:69:e0:44:e7: 07:b1:22:c8:d0:3c:91:1c:01:1d:c5:f2:f9:43:c2: 99:0b:55:5a:e9:fa:80:7e:1c:dd:eb:e7:3f:4f:d9: 8a:b2:a4:a9:e1:63:3f:91:cd:25:62:98:18:81:1e: 1a:46:d0:f0:f8:aa:19:8a:aa:78:a7:9c:76:3a:9f: b5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:66:87:C0:39:90:95:99:CE:09:1E:C0:64:94:68:86:32:5B:AD:0D X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.240.15.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:9c:f0:2c:21:dc:c6:57:98:ea:f0:e1:0f:f9:38:ae:93:ef: e7:1c:82:f8:4a:7b:f4:b2:46:12:bd:c8:27:a5:22:9d:e6:e4: bd:85:99:ab:1d:34:91:0b:ad:45:e3:f3:e2:35:9b:36:95:df: b2:21:fb:8d:e5:23:f4:dc:37:58:95:d9:15:aa:5b:49:3a:6b: e5:e6:6e:3b:54:31:99:15:04:ad:73:d2:81:e8:72:48:91:62: 91:91:8b:3a:a1:3f:72:9b:1a:52:15:bc:68:83:7a:b0:e2:61: 48:05:6b:6e:af:6d:04:0a:a3:82:62:1c:05:06:48:9c:6f:af: 8c:99:bb:fc:90:ce:46:c4:d3:56:d6:55:de:56:69:8f:27:97: d9:da:ea:01:6e:64:b4:19:74:ec:ae:59:61:bf:a3:2d:76:e2: ff:50:6a:76:e3:77:22:e1:36:d8:cd:de:10:f4:58:87:51:f9: e0:d4:0f:af:e1:54:22:fa:8e:d5:21:9c:21:1a:0f:05:f1:4d: b7:bd:95:06:c3:de:91:06:01:0a:c0:4c:92:71:a0:a3:2c:45: f3:53:d5:7e:21:2a:98:28:ff:17:08:c3:da:48:0f:2d:01:f5: 54:4e:28:98:05:c4:c8:d1:20:9d:1a:41:0a:36:a3:aa:4b:92: f5:53:bb:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57MJkuPqLFjfgAnhenB2PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjY2ODdjMDM5OTA5NTk5Y2UwOTFlYzA2NDk0Njg4NjMyNWJhZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVaelbifQKZCCcl+dhfL+E6cbMb+ AmtRaYqPXzhGjgG3U82TnP+9OCbPQSTf30fxYuNgqo1keJvhyEb8GZuMOQnnWuZc dYQZvsjpCh6Sulln1SvToLRGSPoIVvNWzXxCTdZRa3+F/cd3W+HypOvrJDVz0IWZ BW2d24/g7SiFIaAG1LHnx5Fq7L90544Efla3clbXQN/UKKEiw+QoujdNKOj+j8eu l08JrnPk7Fv5G7R15mtkk+3kpXGgYaX0K2ngROcHsSLI0DyRHAEdxfL5Q8KZC1Va 6fqAfhzd6+c/T9mKsqSp4WM/kc0lYpgYgR4aRtDw+KoZiqp4p5x2Op+1/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD9mh8A5kJWZzgkewGSUaIYyW60NMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvUDJhSHdEbVFsWm5PQ1I3QVpKUm9oakpiclEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvAPMA0G CSqGSIb3DQEBCwUAA4IBAQAPnPAsIdzGV5jq8OEP+Tiuk+/nHIL4Snv0skYSvcgn pSKd5uS9hZmrHTSRC61F4/PiNZs2ld+yIfuN5SP03DdYldkVqltJOmvl5m47VDGZ FQStc9KB6HJIkWKRkYs6oT9ymxpSFbxog3qw4mFIBWtur20ECqOCYhwFBkicb6+M mbv8kM5GxNNW1lXeVmmPJ5fZ2uoBbmS0GXTsrllhv6MtduL/UGp243ci4TbYzd4Q 9FiHUfng1A+v4VQi+o7VIZwhGg8F8U23vZUGw96RBgEKwEyScaCjLEXzU9V+ISqY KP8XCMPaSA8tAfVUTiiYBcTI0SCdGkEKNqOqS5L1U7sA -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:37 2026 by rpki-client