This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/2owrDtSSdVfxvYXAxMiLovDSXEU.roa File: 2owrDtSSdVfxvYXAxMiLovDSXEU.roa (raw, json) Hash identifier: 9L5ssgJ0+ShYxgpGMGCzPMDxEovXXE+mzE0m/NaKh/k= Subject key identifier: DA:8C:2B:0E:D4:92:75:57:F1:BD:85:C0:C4:C8:8B:A2:F0:D2:5C:45 Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Certificate serial: 019B7834B46FFEE9AC3545C40D327FFD4652 Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/2owrDtSSdVfxvYXAxMiLovDSXEU.roa Signing time: Thu 01 Jan 2026 06:17:58 +0000 ROA not before: Thu 01 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31117 IP address blocks: 87.244.192.0/18 maxlen: 18 185.171.140.0/22 maxlen: 22 212.37.64.0/19 maxlen: 19 217.119.112.0/20 maxlen: 20 2a01:328::/29 maxlen: 29 2a01:328::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b4:6f:fe:e9:ac:35:45:c4:0d:32:7f:fd:46:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da8c2b0ed4927557f1bd85c0c4c88ba2f0d25c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:12:88:27:d7:56:08:b3:ab:7c:6d:db:37: fd:31:b1:4c:e6:37:13:32:90:fa:cd:9e:da:8b:ab: ac:b7:1a:14:75:52:e7:5c:5f:4b:18:4f:75:a6:2d: 44:22:d7:86:fe:81:ad:38:d2:39:8b:34:61:7f:08: 10:ae:a6:bc:15:16:01:40:98:cd:07:6e:45:b8:51: 1f:c3:42:99:35:67:57:be:b1:6f:15:ec:38:38:3f: 0d:73:b2:32:9f:1d:17:31:33:5b:14:ef:c5:a1:a8: 57:04:10:e6:ed:d5:1c:70:db:40:a6:a0:cd:2c:2f: 26:29:1c:a0:a5:b0:97:ac:00:16:b9:9e:e3:26:e8: 3c:d2:33:c4:61:03:38:98:93:8a:12:a3:79:37:6c: 57:c8:c9:4b:4d:f1:ec:2d:1e:91:14:89:44:91:db: c7:4f:f9:d4:9d:92:53:08:6e:d7:2d:40:7b:57:4d: 1b:9e:c1:73:aa:fd:d8:a6:ef:c2:94:1e:81:f2:9d: 53:8d:e8:0b:f6:b7:b7:74:90:af:57:b7:d5:b4:f8: ea:a8:34:2e:e3:ad:27:68:5c:0e:1d:d2:2c:bd:8c: f9:0e:2a:c2:9a:99:84:c2:ff:89:df:44:69:d6:26: 97:db:2c:d6:88:26:8a:58:b6:aa:d7:f9:a2:57:1e: 45:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8C:2B:0E:D4:92:75:57:F1:BD:85:C0:C4:C8:8B:A2:F0:D2:5C:45 X509v3 Authority Key Identifier: keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/2owrDtSSdVfxvYXAxMiLovDSXEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.244.192.0/18 185.171.140.0/22 212.37.64.0/19 217.119.112.0/20 IPv6: 2a01:328::/29 Signature Algorithm: sha256WithRSAEncryption 25:6e:88:e5:4a:d9:d1:67:f4:28:8b:d1:fe:5e:ae:32:fc:68: 5d:7c:78:0c:92:33:c2:bc:c7:aa:92:f4:7c:84:c2:70:4a:af: 31:41:1e:e2:a6:9b:51:43:34:25:50:a1:11:86:2f:41:3f:b4: c0:4d:9c:c0:a5:6b:11:6b:02:ba:29:ed:4c:8f:38:cf:1a:0c: b1:ce:37:6c:10:37:ad:a7:71:e8:6f:00:df:73:00:d6:1f:28: 91:56:05:b2:10:50:42:06:04:40:30:55:59:34:a7:88:aa:fe: 99:6d:93:80:75:97:b8:0c:65:34:52:38:21:fb:f0:a6:c9:a1: 90:6e:0f:a3:0e:74:5b:61:79:ca:fc:84:e9:59:78:12:67:ec: 58:09:a4:e0:1d:f8:4e:26:bd:35:ed:b5:79:7a:d3:ac:e2:b0: 5f:61:13:6e:ee:23:f4:1a:7b:06:03:8d:68:6d:d5:ff:76:ff: e2:47:14:b6:3f:ab:31:c9:ba:f6:bb:1e:6a:ad:64:31:e3:b9: fc:b2:bb:d9:b0:4b:47:50:52:be:11:df:67:84:e7:4b:99:6b: a1:54:02:7c:96:60:be:1d:7e:00:9e:20:ee:c6:45:fc:1c:3d: f7:ba:cf:5d:91:77:8b:81:9f:e5:1a:23:78:d0:fa:ac:e1:98: 22:6a:8a:89 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4NLRv/umsNUXEDTJ//UZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MGUzYjdkZmJkNTk5MTBmZTUyN2NjN2UyOWFmNjRkNTM4 MDZjOTEwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYThjMmIwZWQ0OTI3NTU3ZjFiZDg1YzBjNGM4OGJhMmYwZDI1YzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEQSiCfXVgizq3xt2zf9MbFM5jcT MpD6zZ7ai6ustxoUdVLnXF9LGE91pi1EIteG/oGtONI5izRhfwgQrqa8FRYBQJjN B25FuFEfw0KZNWdXvrFvFew4OD8Nc7Iynx0XMTNbFO/FoahXBBDm7dUccNtApqDN LC8mKRygpbCXrAAWuZ7jJug80jPEYQM4mJOKEqN5N2xXyMlLTfHsLR6RFIlEkdvH T/nUnZJTCG7XLUB7V00bnsFzqv3Ypu/ClB6B8p1TjegL9re3dJCvV7fVtPjqqDQu 460naFwOHdIsvYz5DirCmpmEwv+J30Rp1iaX2yzWiCaKWLaq1/miVx5F6QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNqMKw7UknVX8b2FwMTIi6Lw0lxFMB8GA1UdIwQY MBaAFAUOO3371ZkQ/lJ8x+Ka9k1TgGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTIt NGE4Nzc5ZTQ3OGM2LzEvMm93ckR0U1NkVmZ4dllYQXhNaUxvdkRTWEVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTItNGE4Nzc5ZTQ3OGM2 LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGV/TAAwQC uauMAwQF1CVAAwQE2XdwMA0EAgACMAcDBQMqAQMoMA0GCSqGSIb3DQEBCwUAA4IB AQAlbojlStnRZ/Qoi9H+Xq4y/GhdfHgMkjPCvMeqkvR8hMJwSq8xQR7ipptRQzQl UKERhi9BP7TATZzApWsRawK6Ke1MjzjPGgyxzjdsEDetp3HobwDfcwDWHyiRVgWy EFBCBgRAMFVZNKeIqv6ZbZOAdZe4DGU0Ujgh+/CmyaGQbg+jDnRbYXnK/ITpWXgS Z+xYCaTgHfhOJr017bV5etOs4rBfYRNu7iP0GnsGA41obdX/dv/iRxS2P6sxybr2 ux5qrWQx47n8srvZsEtHUFK+Ed9nhOdLmWuhVAJ8lmC+HX4AniDuxkX8HD33us9d kXeLgZ/lGiN40Pqs4ZgiaoqJ -----END CERTIFICATE-----Generated at Mon Jan 26 14:43:23 2026 by rpki-client