This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2jFbihwzNEBc2vuIyyy1BmcuXs8.roa File: 2jFbihwzNEBc2vuIyyy1BmcuXs8.roa (raw, json) Hash identifier: BkjDl2s6gdHIQagq+/jQKgjsoLeV1+VkZoUruma+kJo= Subject key identifier: DA:31:5B:8A:1C:33:34:40:5C:DA:FB:88:CB:2C:B5:06:67:2E:5E:CF Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAC9D40BB47235D6084EC0B665F723 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2jFbihwzNEBc2vuIyyy1BmcuXs8.roa Signing time: Thu 01 Jan 2026 00:17:37 +0000 ROA not before: Thu 01 Jan 2026 00:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153914 IP address blocks: 45.66.165.0/24 maxlen: 24 45.88.183.0/24 maxlen: 24 45.89.105.0/24 maxlen: 24 45.149.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c9:d4:0b:b4:72:35:d6:08:4e:c0:b6:65:f7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da315b8a1c3334405cdafb88cb2cb506672e5ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:58:56:05:14:92:18:33:b5:9e:50:25:2f: fc:57:6c:26:c4:9d:f9:0a:73:29:73:de:10:95:06: 1d:f1:26:19:50:2a:bf:b2:e9:d1:8b:10:a6:48:cb: 64:8e:5d:e0:89:dd:4f:f0:e7:ca:21:74:9e:74:2e: 55:e9:39:18:ff:be:30:8e:51:12:0f:b4:c1:fd:d4: 51:8c:cd:e8:5e:1b:6b:33:b1:1e:a3:32:d1:cc:0a: da:d2:54:3d:65:1a:74:a6:8d:ec:b3:60:35:66:68: 77:02:52:12:cb:78:76:e6:e8:a7:e4:63:44:7a:60: 66:62:42:6b:67:62:b0:9d:c6:3d:f8:f2:a1:73:37: a6:6a:78:5a:62:4d:45:e8:b2:fd:05:66:34:17:f3: e9:a9:27:2f:4e:fe:97:a8:aa:be:5c:e2:b5:ea:09: d3:62:f7:32:ae:ca:ee:b4:8b:1f:62:c7:0f:fb:73: 82:73:18:5f:d1:96:05:77:8d:90:22:03:97:cd:09: 10:28:90:53:cf:50:61:d5:f8:c2:3b:6f:1f:0a:e5: 26:4d:6b:08:f4:12:a6:83:cd:c3:bd:53:c4:58:d8: 63:4d:ae:46:b0:c1:bc:72:52:1c:9f:b0:bf:b7:13: da:1d:ea:74:3b:83:89:79:61:31:2f:5c:a4:e6:65: 79:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:31:5B:8A:1C:33:34:40:5C:DA:FB:88:CB:2C:B5:06:67:2E:5E:CF X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2jFbihwzNEBc2vuIyyy1BmcuXs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.165.0/24 45.88.183.0/24 45.89.105.0/24 45.149.114.0/24 Signature Algorithm: sha256WithRSAEncryption 88:f1:94:6a:e2:e5:c0:83:62:24:7a:4e:cc:0a:e9:43:23:f8: 1e:1c:50:3d:99:33:ae:9b:9e:8a:83:4e:3f:b2:df:e8:9a:c7: 71:fe:6a:8c:66:37:07:14:29:ba:4b:c2:7d:74:92:5c:5e:cc: 0c:3f:00:e9:84:45:05:90:10:03:93:62:07:49:25:5a:43:4c: 76:a4:64:36:21:3b:12:b1:73:2b:cb:18:de:e2:1b:f2:9a:2b: ac:bc:6e:79:2d:e2:19:1b:32:3e:78:14:a5:98:51:c2:45:c3: a9:c8:c9:7b:aa:70:80:6c:5a:55:26:41:b1:6f:68:fc:36:6f: 20:6e:b6:6a:a4:bd:b8:d2:9d:a7:1b:77:6f:76:cd:9c:24:78: 38:21:b7:22:d7:38:e3:f6:c8:c1:87:fa:61:71:e2:b7:bf:93: 5e:8a:7e:60:f6:76:8c:03:e6:05:02:07:89:14:8b:2c:36:e6: e2:cf:96:4f:c2:a1:e0:5c:f2:35:51:80:d4:a7:db:00:a5:f4: dd:dd:56:1a:87:73:d1:6d:e2:7b:c5:b4:ab:1f:12:2a:aa:1e: 38:df:a0:9a:0b:8a:9b:4c:4c:da:cc:dc:bf:53:fd:9a:59:c6: c1:6b:9f:32:72:96:ce:d7:d9:6f:87:83:78:fe:97:fc:31:6a: 41:b0:15:2d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt26snUC7RyNdYITsC2ZfcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTMxNWI4YTFjMzMzNDQwNWNkYWZiODhjYjJjYjUwNjY3MmU1ZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9NYVgUUkhgztZ5QJS/8V2wmxJ35 CnMpc94QlQYd8SYZUCq/sunRixCmSMtkjl3gid1P8OfKIXSedC5V6TkY/74wjlES D7TB/dRRjM3oXhtrM7EeozLRzAra0lQ9ZRp0po3ss2A1Zmh3AlISy3h25uin5GNE emBmYkJrZ2KwncY9+PKhczemanhaYk1F6LL9BWY0F/PpqScvTv6XqKq+XOK16gnT YvcyrsrutIsfYscP+3OCcxhf0ZYFd42QIgOXzQkQKJBTz1Bh1fjCO28fCuUmTWsI 9BKmg83DvVPEWNhjTa5GsMG8clIcn7C/txPaHep0O4OJeWExL1yk5mV5MQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNoxW4ocMzRAXNr7iMsstQZnLl7PMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvMmpGYmlod3pORUJjMnZ1SXl5eTFCbWN1WHM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALUKlAwQA LVi3AwQALVlpAwQALZVyMA0GCSqGSIb3DQEBCwUAA4IBAQCI8ZRq4uXAg2Ikek7M CulDI/geHFA9mTOum56Kg04/st/omsdx/mqMZjcHFCm6S8J9dJJcXswMPwDphEUF kBADk2IHSSVaQ0x2pGQ2ITsSsXMryxje4hvymiusvG55LeIZGzI+eBSlmFHCRcOp yMl7qnCAbFpVJkGxb2j8Nm8gbrZqpL240p2nG3dvds2cJHg4Ibci1zjj9sjBh/ph ceK3v5Nein5g9naMA+YFAgeJFIssNubiz5ZPwqHgXPI1UYDUp9sApfTd3VYah3PR beJ7xbSrHxIqqh4436CaC4qbTEzazNy/U/2aWcbBa58ycpbO19lvh4N4/pf8MWpB sBUt -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:27 2026 by rpki-client