This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/2gOMElZpuYjYWwfxZPDkr57xubA.roa File: 2gOMElZpuYjYWwfxZPDkr57xubA.roa (raw, json) Hash identifier: VyukPCJwz31E+u5Ce9cCzwq/Lsn1oqGSgyO+hsnU0ek= Subject key identifier: DA:03:8C:12:56:69:B9:88:D8:5B:07:F1:64:F0:E4:AF:9E:F1:B9:B0 Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f Certificate serial: 019B7C135324AAF1B83B2D14F478D1715AFC Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/2gOMElZpuYjYWwfxZPDkr57xubA.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35258 IP address blocks: 95.214.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:53:24:aa:f1:b8:3b:2d:14:f4:78:d1:71:5a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da038c125669b988d85b07f164f0e4af9ef1b9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:3f:df:a8:03:0e:48:16:1e:aa:1b:d6:25: 64:e6:33:62:85:b4:78:70:f7:e8:61:92:16:e3:20: 2f:e7:e3:dc:16:73:eb:67:cf:f0:d0:d2:f7:fc:78: 00:66:8e:d5:d6:71:c3:93:6b:d6:58:a9:bf:12:5f: 6e:7c:87:53:ee:57:b1:bb:c8:6d:b1:88:de:c0:ba: 63:20:94:1d:ba:a0:2f:0a:09:a5:d1:6f:56:b9:c7: b4:75:04:70:cd:69:ba:b8:05:a8:90:b9:8c:93:e0: ed:1c:bb:72:93:db:e5:9e:15:7d:06:95:32:44:f1: bc:1c:af:c9:09:5c:d2:9c:98:8d:3d:97:58:35:84: 5c:e3:85:75:00:ec:f9:20:4c:1a:cf:8d:72:81:98: a0:18:26:88:ac:08:22:74:4d:61:a1:69:d8:48:fa: c5:3a:d4:bf:33:80:25:66:5f:42:2c:13:4b:1e:f8: d0:e1:4a:6d:66:cd:0d:95:bb:49:bf:e0:ed:12:cf: 0c:24:ea:1a:2f:b6:98:14:0c:c2:13:05:04:f4:4a: 7c:bf:43:bf:3d:49:d4:8e:d7:06:83:7a:4d:f6:39: 9a:7e:93:4a:8d:38:14:6d:08:cd:9e:7a:73:d7:1b: d4:e7:4f:76:51:97:34:9d:34:ec:5d:2a:3d:84:3d: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:03:8C:12:56:69:B9:88:D8:5B:07:F1:64:F0:E4:AF:9E:F1:B9:B0 X509v3 Authority Key Identifier: keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/2gOMElZpuYjYWwfxZPDkr57xubA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.220.0/22 Signature Algorithm: sha256WithRSAEncryption a5:84:ae:8f:32:a7:fc:73:66:b9:35:3f:89:28:44:b5:b6:7c: 14:66:76:67:98:aa:dc:cd:9f:68:7b:b0:9a:be:10:62:f6:14: fc:61:de:e9:8c:e5:05:8b:54:5b:ba:d6:e9:62:54:ad:42:ef: 2d:24:d3:d8:f7:47:33:09:68:4d:0e:4e:a3:fb:9d:25:c0:e9: a0:70:2e:a4:a1:38:0b:d8:02:8a:a7:c7:e0:6d:f9:ac:74:9b: 70:67:f2:72:ed:c1:aa:2d:3e:69:da:c3:e7:4e:5b:0d:f2:ca: 8f:96:d1:d2:63:54:79:75:3c:17:51:b0:2b:96:be:ec:5f:01: 21:9f:8a:77:42:4a:ca:a0:aa:6b:37:c0:8d:8b:dd:26:62:37: ae:03:9c:45:70:67:87:9a:7f:25:e8:cd:a8:e5:e1:78:ab:b9: 6c:01:71:e0:03:cd:47:bd:07:85:7c:66:a1:be:bb:e9:79:b6: 9c:b5:72:f4:dc:24:f8:46:58:aa:be:f9:a5:73:3a:0b:e4:31: e3:e1:ea:82:f6:c6:44:08:de:e0:63:2d:cc:7a:69:ef:45:e2: fa:eb:c6:73:86:30:b4:d5:bb:fc:c5:f3:ce:f6:ca:35:cc:84: 3f:fe:aa:8c:f6:b0:20:ce:b7:4d:85:2b:0e:b7:dd:24:51:f0: 07:76:4c:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1MkqvG4Oy0U9HjRcVr8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZGI2YTRlZDM5M2Q4YTNiNzUwN2Y5NmEzOGJlZTBjNGM4 YjQ3N2YwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTAzOGMxMjU2NjliOTg4ZDg1YjA3ZjE2NGYwZTRhZjllZjFiOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSE/36gDDkgWHqob1iVk5jNihbR4 cPfoYZIW4yAv5+PcFnPrZ8/w0NL3/HgAZo7V1nHDk2vWWKm/El9ufIdT7lexu8ht sYjewLpjIJQduqAvCgml0W9Wuce0dQRwzWm6uAWokLmMk+DtHLtyk9vlnhV9BpUy RPG8HK/JCVzSnJiNPZdYNYRc44V1AOz5IEwaz41ygZigGCaIrAgidE1hoWnYSPrF OtS/M4AlZl9CLBNLHvjQ4UptZs0NlbtJv+DtEs8MJOoaL7aYFAzCEwUE9Ep8v0O/ PUnUjtcGg3pN9jmafpNKjTgUbQjNnnpz1xvU5092UZc0nTTsXSo9hD0u4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNoDjBJWabmI2FsH8WTw5K+e8bmwMB8GA1UdIwQY MBaAFL7bak7Tk9ijt1B/lqOL7gxMi0d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYt NDcwYTkzYjNkM2U3LzEvMmdPTUVsWnB1WWpZV3dmeFpQRGtyNTd4dWJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYtNDcwYTkzYjNkM2U3 LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX9bcMA0G CSqGSIb3DQEBCwUAA4IBAQClhK6PMqf8c2a5NT+JKES1tnwUZnZnmKrczZ9oe7Ca vhBi9hT8Yd7pjOUFi1RbutbpYlStQu8tJNPY90czCWhNDk6j+50lwOmgcC6koTgL 2AKKp8fgbfmsdJtwZ/Jy7cGqLT5p2sPnTlsN8sqPltHSY1R5dTwXUbArlr7sXwEh n4p3QkrKoKprN8CNi90mYjeuA5xFcGeHmn8l6M2o5eF4q7lsAXHgA81HvQeFfGah vrvpebactXL03CT4RliqvvmlczoL5DHj4eqC9sZECN7gYy3MemnvReL668ZzhjC0 1bv8xfPO9so1zIQ//qqM9rAgzrdNhSsOt90kUfAHdkzF -----END CERTIFICATE-----Generated at Sun Jan 25 21:25:59 2026 by rpki-client