This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/2MeX37cZHGHHuxJtj1E28ddzIsI.roa File: 2MeX37cZHGHHuxJtj1E28ddzIsI.roa (raw, json) Hash identifier: LZd2fssCxVZOERqVCoqkBsBn4xYtLG5cKZGv8FiTdNw= Subject key identifier: D8:C7:97:DF:B7:19:1C:61:C7:BB:12:6D:8F:51:36:F1:D7:73:22:C2 Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510 Certificate serial: 019B7F156FCA25EB9EE6C45B6A077D8C1516 Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/2MeX37cZHGHHuxJtj1E28ddzIsI.roa Signing time: Fri 02 Jan 2026 14:21:09 +0000 ROA not before: Fri 02 Jan 2026 14:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48347 IP address blocks: 195.47.196.0/24 maxlen: 24 195.85.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6f:ca:25:eb:9e:e6:c4:5b:6a:07:7d:8c:15:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510 Validity Not Before: Jan 2 14:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8c797dfb7191c61c7bb126d8f5136f1d77322c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:05:82:3c:42:71:d6:f1:bd:9e:6f:f3:c8: be:b6:fb:0a:d1:de:df:03:4c:38:b1:e4:33:e9:27: 64:98:e1:f4:3b:c7:c5:82:49:7b:15:b5:ac:c6:a7: dc:de:5d:4f:92:fe:db:8c:5e:91:c4:a8:d6:50:13: 10:47:ee:87:d7:a8:08:2b:52:16:d3:ac:2c:3b:d1: 19:dc:11:25:42:de:9d:48:98:1d:1b:c6:97:e3:a4: bd:01:e5:db:0c:60:72:c1:b7:3e:a1:e6:c3:de:aa: b3:64:14:e8:44:16:e3:e8:9b:67:72:fc:76:19:fe: ff:c0:89:6d:d9:44:a7:89:df:82:62:0f:0c:39:1a: 0a:c7:ba:91:bb:9d:70:27:f6:c1:25:c4:f9:9a:a6: c9:9b:59:d6:1b:be:ef:29:f8:0a:4f:7f:8a:0c:4d: 26:4d:7a:91:0d:5d:f8:9f:77:5f:8b:94:63:14:7c: 8f:be:d7:ac:68:c0:1a:1b:57:23:13:2e:c4:12:ad: 1a:63:9f:8d:d3:6c:a8:d7:2e:69:05:0d:2a:8f:aa: 8f:66:56:44:ea:27:43:07:d9:f8:1c:92:70:43:8e: 27:af:28:36:8a:c2:8e:f0:de:2a:2a:30:9c:a6:5d: 57:54:88:c8:49:ce:cf:a4:9d:c4:e0:4c:07:fc:85: 36:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C7:97:DF:B7:19:1C:61:C7:BB:12:6D:8F:51:36:F1:D7:73:22:C2 X509v3 Authority Key Identifier: keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/2MeX37cZHGHHuxJtj1E28ddzIsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.47.196.0/24 195.85.231.0/24 Signature Algorithm: sha256WithRSAEncryption c2:63:f1:ba:08:dc:27:f2:01:c5:1a:07:9f:d0:c1:49:17:4b: 4c:d4:ae:0a:07:a0:81:2b:6e:b6:51:b2:a4:84:29:c6:25:de: 2e:f3:f8:c1:7f:4e:43:9d:7f:31:ba:ce:f8:be:20:d1:2c:c0: 3d:ab:b2:87:ca:0f:7c:fc:8d:53:6a:43:9e:67:19:52:71:bc: 1b:6c:d6:5c:3b:4c:4d:f3:81:07:0a:64:d2:9d:66:e2:e8:c1: e6:13:09:fe:ac:8c:8b:9e:f3:6c:af:a2:af:7e:a7:69:f1:fb: 9e:4d:7c:69:e3:f1:66:bc:fd:6a:7c:a3:1d:df:7b:5e:ef:4a: f5:90:96:8f:46:85:b9:f6:a1:b9:17:09:31:3f:82:1e:71:04: 38:35:c8:90:ff:ec:5a:1b:21:7c:3a:0b:eb:05:d0:45:8e:7e: 85:9e:4b:ab:09:b0:e6:b0:31:de:af:67:07:6e:cf:c5:bd:d2: 75:e5:a5:04:41:6a:e8:87:ff:a0:c1:2d:c5:cd:85:14:ff:d3: ed:a2:f6:02:6a:94:d7:03:5c:19:1f:78:67:1c:9b:e4:5f:74: 88:df:cb:96:77:ec:51:89:19:ee:5d:95:b8:09:9f:45:9b:6b: cb:4c:ec:d6:bd:f8:8c:e4:a4:f2:d4:e3:60:b6:37:1c:e5:b0: 60:a0:e7:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FW/KJeue5sRbagd9jBUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2Q5N2YxNTA4ZTdhNDQ3ODk5ZjU5YTU1ZmI4YWE2MjQx ZWY1MTAwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGM3OTdkZmI3MTkxYzYxYzdiYjEyNmQ4ZjUxMzZmMWQ3NzMyMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPAFgjxCcdbxvZ5v88i+tvsK0d7f A0w4seQz6SdkmOH0O8fFgkl7FbWsxqfc3l1Pkv7bjF6RxKjWUBMQR+6H16gIK1IW 06wsO9EZ3BElQt6dSJgdG8aX46S9AeXbDGBywbc+oebD3qqzZBToRBbj6Jtncvx2 Gf7/wIlt2USnid+CYg8MORoKx7qRu51wJ/bBJcT5mqbJm1nWG77vKfgKT3+KDE0m TXqRDV34n3dfi5RjFHyPvtesaMAaG1cjEy7EEq0aY5+N02yo1y5pBQ0qj6qPZlZE 6idDB9n4HJJwQ44nryg2isKO8N4qKjCcpl1XVIjISc7PpJ3E4EwH/IU2qwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNjHl9+3GRxhx7sSbY9RNvHXcyLCMB8GA1UdIwQY MBaAFCN9l/FQjnpEeJn1mlX7iqYkHvUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mNTAzZDctMWZiNi00MzcwLWI0NGYt NDRhNDFhOTMxMTNlLzEvMk1lWDM3Y1pIR0hIdXhKdGoxRTI4ZGR6SXNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9mNTAzZDctMWZiNi00MzcwLWI0NGYtNDRhNDFhOTMxMTNl LzEvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwy/EAwQA w1XnMA0GCSqGSIb3DQEBCwUAA4IBAQDCY/G6CNwn8gHFGgef0MFJF0tM1K4KB6CB K262UbKkhCnGJd4u8/jBf05DnX8xus74viDRLMA9q7KHyg98/I1TakOeZxlScbwb bNZcO0xN84EHCmTSnWbi6MHmEwn+rIyLnvNsr6Kvfqdp8fueTXxp4/FmvP1qfKMd 33te70r1kJaPRoW59qG5FwkxP4IecQQ4NciQ/+xaGyF8OgvrBdBFjn6FnkurCbDm sDHer2cHbs/FvdJ15aUEQWroh/+gwS3FzYUU/9PtovYCapTXA1wZH3hnHJvkX3SI 38uWd+xRiRnuXZW4CZ9Fm2vLTOzWvfiM5KTy1ONgtjcc5bBgoOde -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:45 2026 by rpki-client