This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2ANX1LC07CSZkGvjuoxZH1EKRhU.roa File: 2ANX1LC07CSZkGvjuoxZH1EKRhU.roa (raw, json) Hash identifier: ove8itjw4M1VxUFGEWr043haauehDN4om65R9X2yMhY= Subject key identifier: D8:03:57:D4:B0:B4:EC:24:99:90:6B:E3:BA:8C:59:1F:51:0A:46:15 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EACE1E7EF735C76D064E9BC5239302 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2ANX1LC07CSZkGvjuoxZH1EKRhU.roa Signing time: Thu 01 Jan 2026 00:17:38 +0000 ROA not before: Thu 01 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205361 IP address blocks: 45.8.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ce:1e:7e:f7:35:c7:6d:06:4e:9b:c5:23:93:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d80357d4b0b4ec2499906be3ba8c591f510a4615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:34:40:69:08:5b:9b:f8:25:7f:3b:62:ab:5e: 4d:be:cc:92:5a:89:41:dc:16:9c:c6:9c:ff:da:58: 84:9c:94:26:5e:0b:64:d7:b8:bc:5e:d1:c9:1b:76: 8f:a6:a8:dd:3b:2a:1b:6e:dd:1e:16:d0:57:64:04: b4:b7:a0:3d:8a:d5:c1:79:45:27:af:41:88:55:22: e4:b8:6e:2d:04:59:40:b9:a1:33:75:15:9d:62:38: f2:13:24:32:d5:dc:b8:5d:a9:62:2f:6b:58:a9:e4: 4b:e8:ea:51:2e:00:53:00:f1:ea:45:60:5b:2f:53: 50:14:7d:81:88:02:0a:d9:46:54:ea:b5:e8:ca:ae: f9:86:a8:68:b3:69:ba:ac:3e:12:7a:22:7c:43:cd: f4:a6:2b:4d:53:a5:56:cd:8d:db:10:5f:ee:db:fe: 83:af:19:a2:36:44:30:5d:8f:c8:dd:cd:da:7c:d8: be:60:81:a9:c0:e1:51:be:fe:06:82:06:5f:b3:53: 6b:a8:b2:69:2a:60:f4:24:5b:af:23:ff:bb:94:f9: 3b:75:26:12:84:75:7a:21:c4:d5:ee:a1:00:e6:f2: 6d:84:60:b4:7f:65:cc:99:1a:ea:d6:64:27:94:93: 17:37:bd:ba:04:1c:06:01:3e:30:fc:43:9a:d2:1c: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:03:57:D4:B0:B4:EC:24:99:90:6B:E3:BA:8C:59:1F:51:0A:46:15 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2ANX1LC07CSZkGvjuoxZH1EKRhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.200.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:5b:7a:a4:c9:53:c1:af:dd:73:a2:dc:ac:d1:3b:0f:70:6a: d1:f6:86:9b:56:22:9c:a9:bf:a7:af:5c:9c:e4:2f:46:59:b3: c3:53:f4:e5:39:88:01:cc:a1:25:d0:b8:74:63:9c:93:e0:b8: 91:4e:93:a1:1f:72:65:c6:0b:98:60:6d:03:03:65:b0:03:d2: 43:bb:de:4a:61:ef:72:38:0b:ee:4b:c5:0a:ce:e0:86:1b:a4: 91:c2:39:4d:29:cc:88:af:c3:6b:c4:cf:11:06:a9:79:75:03: 53:50:c7:31:59:d5:c4:65:b5:18:4a:1f:b2:f2:a2:17:ed:90: ed:c2:ef:dc:90:54:d4:51:fd:a4:d8:8f:24:c6:02:b2:d1:c0: 23:fb:12:d0:50:9f:aa:6c:0a:2c:ea:f9:10:44:30:6c:cd:24: 49:18:4b:3c:4c:db:13:93:6c:da:7b:88:80:ad:36:54:2d:23: 45:ba:d5:18:56:ca:dc:f2:3b:cf:20:2d:35:83:ae:89:ee:d6: 11:b9:98:51:ed:cf:41:64:88:51:8a:fc:90:52:c8:f2:60:22: 2a:5d:4e:57:dd:fc:82:bf:0d:a7:38:18:b7:16:6a:63:90:a3: 11:69:1b:31:94:95:e8:3a:d1:c7:40:59:8b:95:77:1d:46:5f: 4e:25:a6:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26s4efvc1x20GTpvFI5MCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODAzNTdkNGIwYjRlYzI0OTk5MDZiZTNiYThjNTkxZjUxMGE0NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zRAaQhbm/glfztiq15NvsySWolB 3Bacxpz/2liEnJQmXgtk17i8XtHJG3aPpqjdOyobbt0eFtBXZAS0t6A9itXBeUUn r0GIVSLkuG4tBFlAuaEzdRWdYjjyEyQy1dy4XaliL2tYqeRL6OpRLgBTAPHqRWBb L1NQFH2BiAIK2UZU6rXoyq75hqhos2m6rD4SeiJ8Q830pitNU6VWzY3bEF/u2/6D rxmiNkQwXY/I3c3afNi+YIGpwOFRvv4GggZfs1NrqLJpKmD0JFuvI/+7lPk7dSYS hHV6IcTV7qEA5vJthGC0f2XMmRrq1mQnlJMXN726BBwGAT4w/EOa0hztFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNgDV9SwtOwkmZBr47qMWR9RCkYVMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvMkFOWDFMQzA3Q1Naa0d2anVveFpIMUVLUmhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjIMA0G CSqGSIb3DQEBCwUAA4IBAQAvW3qkyVPBr91zotys0TsPcGrR9oabViKcqb+nr1yc 5C9GWbPDU/TlOYgBzKEl0Lh0Y5yT4LiRTpOhH3JlxguYYG0DA2WwA9JDu95KYe9y OAvuS8UKzuCGG6SRwjlNKcyIr8NrxM8RBql5dQNTUMcxWdXEZbUYSh+y8qIX7ZDt wu/ckFTUUf2k2I8kxgKy0cAj+xLQUJ+qbAos6vkQRDBszSRJGEs8TNsTk2zae4iA rTZULSNFutUYVsrc8jvPIC01g66J7tYRuZhR7c9BZIhRivyQUsjyYCIqXU5X3fyC vw2nOBi3FmpjkKMRaRsxlJXoOtHHQFmLlXcdRl9OJabS -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:35 2026 by rpki-client