This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/2BAj2yNVBB9Ev29x0JnI5pjY0DY.roa File: 2BAj2yNVBB9Ev29x0JnI5pjY0DY.roa (raw, json) Hash identifier: C7WqvAG4TV6woujjMJ/K/2cinKEEkZ4WkuUPwQJzEyE= Subject key identifier: D8:10:23:DB:23:55:04:1F:44:BF:6F:71:D0:99:C8:E6:98:D8:D0:36 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B3608E91B9626F94EE982F29B3B472E Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/2BAj2yNVBB9Ev29x0JnI5pjY0DY.roa Signing time: Thu 01 Jan 2026 20:18:17 +0000 ROA not before: Thu 01 Jan 2026 20:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41635 IP address blocks: 89.38.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:08:e9:1b:96:26:f9:4e:e9:82:f2:9b:3b:47:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d81023db2355041f44bf6f71d099c8e698d8d036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:35:98:a5:e1:0d:41:52:72:c4:c7:37:8c: 64:1f:ed:50:d7:09:7a:24:15:ba:2d:b7:b3:e8:f8: e2:f4:a9:b9:17:27:21:87:43:50:0b:82:03:88:83: da:49:df:60:08:31:8d:0d:d1:de:09:5d:5d:07:21: 9e:d7:bd:08:25:3d:e3:7d:3a:a7:22:ce:d7:cf:d0: 5f:38:3c:7a:01:f3:10:b5:aa:e4:6e:b7:42:ac:54: 1a:36:68:e5:41:ac:7d:a3:76:4b:f7:f5:c8:a4:fc: 83:f1:85:fd:ec:38:8b:d4:ba:60:84:2f:cf:7f:c2: f8:54:87:bc:ab:aa:1b:ee:2f:6a:bb:10:2b:c1:e8: d7:a3:2f:24:99:2a:3e:33:38:6f:7c:ed:ef:4e:d9: 49:6b:78:9c:c6:58:51:13:aa:c8:6c:f8:d2:6e:ca: a8:15:9e:0a:72:09:2c:49:67:27:6e:a3:6f:f9:f2: e6:9a:30:3d:8f:1d:b6:c5:5d:2f:64:b0:cb:b1:24: 61:3e:24:b3:ea:78:e2:05:25:7d:38:9c:ea:0b:81: 3f:51:79:41:4a:04:e3:d8:62:5a:39:18:78:1b:f4: 55:6c:34:ff:e2:72:d1:5d:d6:59:07:2e:49:70:df: 4e:8c:39:28:a4:99:1a:3a:c4:85:48:4a:b5:40:da: b2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:10:23:DB:23:55:04:1F:44:BF:6F:71:D0:99:C8:E6:98:D8:D0:36 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/2BAj2yNVBB9Ev29x0JnI5pjY0DY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.38.208.0/22 Signature Algorithm: sha256WithRSAEncryption 69:2a:3f:c4:f5:e3:63:53:ef:82:02:8a:9e:5d:b7:2f:32:e1: 55:fa:c0:de:57:54:ca:a3:50:02:5e:4c:bf:47:f9:31:2c:a3: 43:e9:49:81:82:1e:83:9c:9c:46:68:77:ad:8e:24:7f:80:74: 2d:f5:4f:4b:1b:97:b6:ff:e9:f4:df:c4:96:0e:16:56:6f:57: d8:a1:c9:65:b4:08:d2:4e:33:08:85:49:8f:dd:d7:b3:1b:8d: 27:e2:5a:ac:8f:e1:76:40:69:06:71:a4:10:f1:22:05:de:c3: 6c:22:7f:bd:e1:49:b5:a4:27:91:be:9b:bf:89:5c:20:86:0d: 8b:26:6e:78:7d:ae:8c:29:b6:7f:00:c8:70:16:fd:b2:2f:51: 8e:0b:bc:39:c3:7e:08:40:21:d3:38:3b:3d:e2:b6:9c:d0:c1: 00:b8:78:ba:86:50:21:8e:df:16:3a:4f:89:37:f8:ad:f3:fe: 14:91:d4:65:a9:36:76:d8:20:e9:c5:cc:b7:03:39:93:68:fa: cb:4c:83:74:3a:28:56:be:8c:de:e0:48:2c:9b:7b:c8:b1:0f: 4b:b1:91:4c:96:18:e0:66:8a:f9:22:32:00:31:5b:4a:3f:79: 4e:1c:b6:b7:08:0e:7b:90:69:21:31:94:07:37:f0:9f:8e:2c: 50:04:22:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgjpG5Ym+U7pgvKbO0cuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODEwMjNkYjIzNTUwNDFmNDRiZjZmNzFkMDk5YzhlNjk4ZDhkMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniw1mKXhDUFScsTHN4xkH+1Q1wl6 JBW6Lbez6Pji9Km5Fychh0NQC4IDiIPaSd9gCDGNDdHeCV1dByGe170IJT3jfTqn Is7Xz9BfODx6AfMQtarkbrdCrFQaNmjlQax9o3ZL9/XIpPyD8YX97DiL1LpghC/P f8L4VIe8q6ob7i9quxArwejXoy8kmSo+MzhvfO3vTtlJa3icxlhRE6rIbPjSbsqo FZ4KcgksSWcnbqNv+fLmmjA9jx22xV0vZLDLsSRhPiSz6njiBSV9OJzqC4E/UXlB SgTj2GJaORh4G/RVbDT/4nLRXdZZBy5JcN9OjDkopJkaOsSFSEq1QNqyXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNgQI9sjVQQfRL9vcdCZyOaY2NA2MB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvMkJBajJ5TlZCQjlFdjI5eDBKbkk1cGpZMERZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWSbQMA0G CSqGSIb3DQEBCwUAA4IBAQBpKj/E9eNjU++CAoqeXbcvMuFV+sDeV1TKo1ACXky/ R/kxLKND6UmBgh6DnJxGaHetjiR/gHQt9U9LG5e2/+n038SWDhZWb1fYoclltAjS TjMIhUmP3dezG40n4lqsj+F2QGkGcaQQ8SIF3sNsIn+94Um1pCeRvpu/iVwghg2L Jm54fa6MKbZ/AMhwFv2yL1GOC7w5w34IQCHTODs94rac0MEAuHi6hlAhjt8WOk+J N/it8/4UkdRlqTZ22CDpxcy3AzmTaPrLTIN0OihWvoze4Egsm3vIsQ9LsZFMlhjg Zor5IjIAMVtKP3lOHLa3CA57kGkhMZQHN/CfjixQBCIG -----END CERTIFICATE-----Generated at Sun Jan 25 21:20:52 2026 by rpki-client