This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/2Gr9nf875xWi7fctytC9cFGwMlw.roa File: 2Gr9nf875xWi7fctytC9cFGwMlw.roa (raw, json) Hash identifier: +86dA0zm6T8zPgqQDLCfGSSKKmAaxpAHQ1PUmhacNes= Subject key identifier: D8:6A:FD:9D:FF:3B:E7:15:A2:ED:F7:2D:CA:D0:BD:70:51:B0:32:5C Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D07B241A556014EE522678F72E861 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/2Gr9nf875xWi7fctytC9cFGwMlw.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201036 IP address blocks: 94.42.102.0/24 maxlen: 24 94.42.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:07:b2:41:a5:56:01:4e:e5:22:67:8f:72:e8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d86afd9dff3be715a2edf72dcad0bd7051b0325c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:93:41:16:04:59:5b:0f:4d:56:86:52:5d:7e: 99:70:33:f1:61:e8:0d:53:76:1b:3e:a3:ef:2f:78: ee:bd:57:ca:55:c1:2c:23:98:22:b8:c3:53:d1:52: c5:19:7d:0e:8b:d7:b9:72:01:79:76:21:40:c6:24: 32:26:f1:59:73:35:50:b2:0b:7e:30:bb:43:6e:51: 7c:e5:62:a0:c8:b0:3d:4c:27:4e:9b:3f:92:62:6c: 40:82:15:af:a8:28:1b:61:0c:f9:96:2d:0c:75:e2: 02:99:a3:40:09:96:2f:35:de:b4:41:08:37:1a:3f: 3a:52:e3:93:7f:50:bf:26:50:3f:a2:10:fa:39:99: 60:de:54:a1:7b:ac:c0:74:53:da:59:d1:3d:d1:f5: 3d:74:75:86:c5:1c:6e:19:69:16:0f:cd:7e:df:27: d4:38:d3:dc:c2:02:e5:1d:9f:a1:ac:91:30:97:28: d4:16:b5:14:15:a2:b5:a4:84:d8:4b:07:0f:78:39: 37:37:13:a2:b9:9d:50:3a:ea:23:0b:71:c7:1d:d9: ef:ae:0a:91:ed:b8:1c:a3:99:c7:12:72:ac:c2:f7: 32:23:f5:43:ee:00:87:1f:87:29:c3:3c:59:a1:84: 35:41:51:34:36:fb:e2:9a:cc:c7:54:d5:8c:b2:83: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6A:FD:9D:FF:3B:E7:15:A2:ED:F7:2D:CA:D0:BD:70:51:B0:32:5C X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/2Gr9nf875xWi7fctytC9cFGwMlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.42.102.0/24 94.42.176.0/22 Signature Algorithm: sha256WithRSAEncryption 16:08:81:55:ca:35:43:dc:33:e0:f8:7b:27:6c:c2:a0:78:0e: e9:21:79:9b:3e:1d:f6:7d:c0:85:f6:cc:77:7c:7a:4d:df:81: 0e:15:c8:70:49:eb:4e:a8:5b:35:03:9d:d1:e8:90:04:cb:f0: 5c:f9:42:de:96:e3:56:4b:63:b0:09:1a:a0:48:1f:cc:69:75: 1e:90:d7:db:f7:57:5d:a3:d3:1e:8c:95:a5:2b:66:72:70:30: 3b:9f:b0:64:99:c8:32:67:ee:37:a3:8b:7b:69:8f:03:e2:20: b3:bd:a2:f2:17:83:6f:8b:e9:0d:5f:37:06:07:89:1b:66:d5: f9:16:be:cb:b3:6f:08:c0:3b:be:03:52:1e:d6:7c:3d:14:4c: 7e:f9:4c:2b:97:49:af:d7:38:80:4f:dd:7c:cd:d2:16:14:f9: 0f:09:75:4b:50:65:1d:68:c9:6f:e2:e6:3a:5f:ed:75:52:6a: aa:8a:2a:e7:4a:7f:21:51:f2:6a:44:de:81:b9:fd:81:55:2f: ad:2c:29:14:8b:f4:03:35:67:4d:27:a8:92:15:ac:b0:9d:32: 19:55:bb:91:82:b6:5e:69:1d:cb:56:f8:bc:ec:79:d2:fb:c6: 1a:6f:24:0e:47:69:af:90:1a:f9:2f:3a:db:69:86:27:81:9b: 64:21:3b:86 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XQeyQaVWAU7lImePcuhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODZhZmQ5ZGZmM2JlNzE1YTJlZGY3MmRjYWQwYmQ3MDUxYjAzMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJNBFgRZWw9NVoZSXX6ZcDPxYegN U3YbPqPvL3juvVfKVcEsI5giuMNT0VLFGX0Oi9e5cgF5diFAxiQyJvFZczVQsgt+ MLtDblF85WKgyLA9TCdOmz+SYmxAghWvqCgbYQz5li0MdeICmaNACZYvNd60QQg3 Gj86UuOTf1C/JlA/ohD6OZlg3lShe6zAdFPaWdE90fU9dHWGxRxuGWkWD81+3yfU ONPcwgLlHZ+hrJEwlyjUFrUUFaK1pITYSwcPeDk3NxOiuZ1QOuojC3HHHdnvrgqR 7bgco5nHEnKswvcyI/VD7gCHH4cpwzxZoYQ1QVE0NvvimszHVNWMsoPS8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNhq/Z3/O+cVou33LcrQvXBRsDJcMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvMkdyOW5mODc1eFdpN2ZjdHl0QzljRkd3TWx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXipmAwQC XiqwMA0GCSqGSIb3DQEBCwUAA4IBAQAWCIFVyjVD3DPg+HsnbMKgeA7pIXmbPh32 fcCF9sx3fHpN34EOFchwSetOqFs1A53R6JAEy/Bc+ULeluNWS2OwCRqgSB/MaXUe kNfb91ddo9MejJWlK2ZycDA7n7BkmcgyZ+43o4t7aY8D4iCzvaLyF4Nvi+kNXzcG B4kbZtX5Fr7Ls28IwDu+A1Ie1nw9FEx++Uwrl0mv1ziAT918zdIWFPkPCXVLUGUd aMlv4uY6X+11UmqqiirnSn8hUfJqRN6Buf2BVS+tLCkUi/QDNWdNJ6iSFaywnTIZ VbuRgrZeaR3LVvi87HnS+8YabyQOR2mvkBr5LzrbaYYngZtkITuG -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:58 2026 by rpki-client