This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/_2mYhyEmox4U7AkRFuLnV0YKs70.roa File: _2mYhyEmox4U7AkRFuLnV0YKs70.roa (raw, json) Hash identifier: ZWw2rwABCSgN0Y7jGr8liBETqrTgznEpSmvQbAW6bMI= Subject key identifier: FF:69:98:87:21:26:A3:1E:14:EC:09:11:16:E2:E7:57:46:0A:B3:BD Certificate issuer: /CN=57494670e956e3fb1511948c5956e2a426793388 Certificate serial: 019B7CEE5FC9A17883E6AEDD513A6253F1CF Authority key identifier: 57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/_2mYhyEmox4U7AkRFuLnV0YKs70.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209336 IP address blocks: 193.42.44.0/22 maxlen: 22 2a0d:de40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5f:c9:a1:78:83:e6:ae:dd:51:3a:62:53:f1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57494670e956e3fb1511948c5956e2a426793388 Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff6998872126a31e14ec091116e2e757460ab3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cb:0c:be:de:69:8d:0d:9d:03:10:9a:62:34: ac:81:03:92:2b:dc:19:56:cd:a9:a3:b0:11:b4:8b: f7:e1:cd:57:77:04:4e:7f:35:5e:56:ca:9f:01:03: a9:1a:c5:38:7c:7a:45:26:42:d1:80:84:3b:d4:11: 8c:1f:69:22:c4:0f:27:08:cc:9d:cb:76:ae:eb:96: b5:d6:b0:58:d4:92:36:a8:c3:90:5d:63:dc:dc:49: 4b:da:85:5a:7b:2e:39:ac:66:9c:45:b5:ce:02:e5: 7a:ef:39:f3:e2:89:b9:01:95:b8:10:22:7a:65:9d: d7:99:a3:0b:a6:6c:f3:ff:fe:72:74:98:fc:ef:85: e2:ca:82:11:88:a9:77:c0:9a:b6:64:e5:a9:e8:60: 61:55:9d:ec:05:f8:36:fd:30:5d:22:b4:a8:17:fb: 36:7e:94:53:33:f7:8b:c7:5c:41:d3:01:18:ce:01: 9d:3c:1a:0b:ea:fc:f3:74:90:f2:6c:96:4b:f4:2c: 20:90:aa:32:ed:fd:11:7d:98:83:b9:81:97:af:5b: 17:62:0e:a9:0c:33:48:c9:72:3a:f0:ab:94:0d:b9: 34:4a:97:49:c7:18:b1:25:81:a7:d8:2f:b5:1d:22: d2:66:14:81:51:f2:5c:9a:46:22:6f:08:6b:f9:13: 2a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:69:98:87:21:26:A3:1E:14:EC:09:11:16:E2:E7:57:46:0A:B3:BD X509v3 Authority Key Identifier: keyid:57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/_2mYhyEmox4U7AkRFuLnV0YKs70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.44.0/22 IPv6: 2a0d:de40:1::/48 Signature Algorithm: sha256WithRSAEncryption 4d:ee:43:da:00:98:04:ff:3f:df:c7:0c:a3:f2:df:34:60:89: ad:23:51:86:17:09:e8:69:16:01:68:78:83:05:f5:4b:7f:1e: a5:57:a5:f8:1c:3b:15:6c:0d:53:32:05:21:41:ba:54:3e:bc: 92:02:6d:a9:a5:c6:ac:37:d5:c0:fe:72:a5:12:bb:ac:9a:e1: 1f:e0:b5:f9:69:fd:93:81:33:2f:a0:e1:43:fa:d7:02:f0:e5: 3e:5a:8a:bf:a3:f3:f4:14:88:3f:d2:aa:48:c1:ea:d8:af:4a: 36:da:ab:0d:ac:64:d3:29:ea:d0:03:4a:1b:0f:2a:ab:e6:71: c4:d4:1b:c9:69:5b:1e:cb:4c:10:f9:6d:c4:74:b1:5d:a7:58: 6f:39:4c:ed:9f:b8:9b:17:57:a3:4e:b6:5a:fb:03:44:4c:51: ed:7e:fc:6e:7d:d3:cb:ca:2e:6d:53:26:40:0a:b3:30:36:70: 07:d2:cf:bc:9f:4d:9f:f9:da:d4:0f:96:39:42:d5:ae:02:6f: c6:27:d2:b7:32:02:a8:38:d6:bd:37:49:e0:9d:21:37:bd:d0: 8c:4b:5e:9a:6e:93:9e:e0:75:0a:67:34:2c:8c:8d:8f:53:5f: e8:2e:32:81:26:ea:43:41:05:88:b2:e0:54:b0:3a:d9:36:ae: dd:cf:6c:01 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87l/JoXiD5q7dUTpiU/HPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NDk0NjcwZTk1NmUzZmIxNTExOTQ4YzU5NTZlMmE0MjY3 OTMzODgwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjY5OTg4NzIxMjZhMzFlMTRlYzA5MTExNmUyZTc1NzQ2MGFiM2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MsMvt5pjQ2dAxCaYjSsgQOSK9wZ Vs2po7ARtIv34c1XdwROfzVeVsqfAQOpGsU4fHpFJkLRgIQ71BGMH2kixA8nCMyd y3au65a11rBY1JI2qMOQXWPc3ElL2oVaey45rGacRbXOAuV67znz4om5AZW4ECJ6 ZZ3XmaMLpmzz//5ydJj874XiyoIRiKl3wJq2ZOWp6GBhVZ3sBfg2/TBdIrSoF/s2 fpRTM/eLx1xB0wEYzgGdPBoL6vzzdJDybJZL9CwgkKoy7f0RfZiDuYGXr1sXYg6p DDNIyXI68KuUDbk0SpdJxxixJYGn2C+1HSLSZhSBUfJcmkYibwhr+RMqvwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFP9pmIchJqMeFOwJERbi51dGCrO9MB8GA1UdIwQY MBaAFFdJRnDpVuP7FRGUjFlW4qQmeTOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjBsR2NPbFc0X3NWRVpTTVdWYmlwQ1o1TTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80OTg4MWUtYjBhOS00ZDVmLWIwNzIt YTUzNzcyYjAxY2IyLzEvXzJtWWh5RW1veDRVN0FrUkZ1TG5WMFlLczcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80OTg4MWUtYjBhOS00ZDVmLWIwNzItYTUzNzcyYjAxY2Iy LzEvVjBsR2NPbFc0X3NWRVpTTVdWYmlwQ1o1TTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwSosMA8E AgACMAkDBwAqDd5AAAEwDQYJKoZIhvcNAQELBQADggEBAE3uQ9oAmAT/P9/HDKPy 3zRgia0jUYYXCehpFgFoeIMF9Ut/HqVXpfgcOxVsDVMyBSFBulQ+vJICbamlxqw3 1cD+cqUSu6ya4R/gtflp/ZOBMy+g4UP61wLw5T5air+j8/QUiD/SqkjB6tivSjba qw2sZNMp6tADShsPKqvmccTUG8lpWx7LTBD5bcR0sV2nWG85TO2fuJsXV6NOtlr7 A0RMUe1+/G5908vKLm1TJkAKszA2cAfSz7yfTZ/52tQPljlC1a4Cb8Yn0rcyAqg4 1r03SeCdITe90IxLXppuk57gdQpnNCyMjY9TX+guMoEm6kNBBYiy4FSwOtk2rt3P bAE= -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:40 2026 by rpki-client