This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/K2TwYBRgnBctdKuDbIfCz7Wzozo.roa File: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (raw, json) Hash identifier: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg= Subject key identifier: 2B:64:F0:60:14:60:9C:17:2D:74:AB:83:6C:87:C2:CF:B5:B3:A3:3A Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9 Certificate serial: 019B797E51DD79BC2C13AFFC26505DBC07FA Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/K2TwYBRgnBctdKuDbIfCz7Wzozo.roa Signing time: Thu 01 Jan 2026 12:18:00 +0000 ROA not before: Thu 01 Jan 2026 12:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205202 IP address blocks: 185.225.97.0/24 maxlen: 24 185.225.98.0/24 maxlen: 24 185.225.99.0/24 maxlen: 24 2a0d:ac00::/48 maxlen: 48 2a0d:ac00:2::/48 maxlen: 48 2a0d:ac00:6::/48 maxlen: 48 2a0d:ac00:7::/48 maxlen: 48 2a0d:ac00:1000::/48 maxlen: 48 2a0d:ac00:1002::/48 maxlen: 48 2a0d:ac00:1006::/48 maxlen: 48 2a0d:ac00:1007::/48 maxlen: 48 2a0d:ac00:dc01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:51:dd:79:bc:2c:13:af:fc:26:50:5d:bc:07:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9 Validity Not Before: Jan 1 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b64f06014609c172d74ab836c87c2cfb5b3a33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:3e:7f:86:36:6d:84:24:dd:e9:df:47:bd: 5b:e0:b2:49:1e:e6:92:ca:3a:3d:0a:72:cf:1e:3f: a9:97:25:62:25:7e:92:70:30:d5:b9:12:f3:37:ff: c4:83:2a:23:de:6d:f1:41:64:1e:45:28:fe:20:a4: f6:7c:b0:b2:84:95:ac:73:cb:88:50:f0:5c:40:59: 28:06:ce:fe:04:2d:9d:59:13:b8:e1:91:f6:d1:1e: 77:54:3f:48:59:dd:9f:55:ba:9e:0d:30:3b:f6:ab: 3d:59:b7:cb:ff:be:e9:ee:22:23:42:27:22:17:f4: 75:4e:48:2e:52:c3:d2:44:63:2a:bc:f4:31:de:f9: fc:34:65:84:88:94:04:78:d2:79:91:88:fd:d7:9d: f8:4e:47:76:76:65:5b:37:ee:60:8f:24:0e:88:4e: 74:ec:02:fd:47:94:60:df:04:56:aa:50:3a:62:9a: 51:6f:9b:11:1c:b6:cc:18:3e:ed:34:80:40:9e:6e: da:86:3f:cc:6f:de:67:ff:27:89:a7:62:17:20:25: 22:23:7c:3f:80:82:a9:04:5a:f8:0f:94:94:f6:1d: d2:36:e9:3a:b2:78:4b:4e:bf:3b:df:12:88:b1:1a: 50:29:72:93:09:86:b3:da:46:61:af:f1:69:bd:53: 26:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:64:F0:60:14:60:9C:17:2D:74:AB:83:6C:87:C2:CF:B5:B3:A3:3A X509v3 Authority Key Identifier: keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/K2TwYBRgnBctdKuDbIfCz7Wzozo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.97.0-185.225.99.255 IPv6: 2a0d:ac00::/48 2a0d:ac00:2::/48 2a0d:ac00:6::/47 2a0d:ac00:1000::/48 2a0d:ac00:1002::/48 2a0d:ac00:1006::/47 2a0d:ac00:dc01::/48 Signature Algorithm: sha256WithRSAEncryption 7e:a2:59:72:89:a4:7c:54:52:56:65:50:e6:92:a5:b2:1a:f0: b0:81:61:69:55:e9:b2:87:3e:ee:bb:e1:e7:4e:9b:14:cc:e5: 07:5b:14:68:05:a1:99:9e:1f:f4:94:b4:2d:71:3a:bf:9e:09: a9:68:c6:55:77:bb:b1:63:5b:82:17:d5:a5:a9:e6:43:aa:3b: 96:51:16:31:7c:23:de:1b:6f:a2:37:b8:78:42:1a:ec:df:81: 04:15:ad:7d:38:86:f1:2f:b5:ef:f9:cb:a8:a5:53:99:15:11: 7c:53:34:9a:3a:fc:46:04:4b:ab:f4:c6:02:80:6c:0e:8b:58: 7f:f5:1d:eb:f8:d1:cc:6e:76:69:fd:46:9a:a4:37:5d:3d:4f: fb:0f:43:6b:50:4a:70:4c:51:9a:12:4e:33:f6:22:12:70:2a: 8b:ab:1f:dd:35:b1:b4:46:a5:47:8b:69:f5:f1:07:da:6e:f6: f0:45:80:b5:1d:3b:fe:17:26:9b:03:bb:23:23:21:17:32:d8: a6:de:08:ac:9c:2e:77:de:3d:fa:80:85:9e:ad:e9:9e:a3:14: 3a:73:c3:57:2a:09:83:66:35:8e:18:78:e8:54:b6:38:f6:9b: 4d:7a:e0:d7:4b:76:8c:f7:43:a0:aa:92:da:2b:76:35:8c:05: ee:83:97:fe -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZt5flHdebwsE6/8JlBdvAf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZDlhMTZjMmZhN2Q0YzM3MGI1MzI1MjE0YmU0NDIwYjYx MWYxZjkwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjY0ZjA2MDE0NjA5YzE3MmQ3NGFiODM2Yzg3YzJjZmI1YjNhMzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNo+f4Y2bYQk3enfR71b4LJJHuaS yjo9CnLPHj+plyViJX6ScDDVuRLzN//Egyoj3m3xQWQeRSj+IKT2fLCyhJWsc8uI UPBcQFkoBs7+BC2dWRO44ZH20R53VD9IWd2fVbqeDTA79qs9WbfL/77p7iIjQici F/R1TkguUsPSRGMqvPQx3vn8NGWEiJQEeNJ5kYj91534Tkd2dmVbN+5gjyQOiE50 7AL9R5Rg3wRWqlA6YppRb5sRHLbMGD7tNIBAnm7ahj/Mb95n/yeJp2IXICUiI3w/ gIKpBFr4D5SU9h3SNuk6snhLTr873xKIsRpQKXKTCYaz2kZhr/FpvVMm0QIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFCtk8GAUYJwXLXSrg2yHws+1s6M6MB8GA1UdIwQY MBaAFCbZoWwvp9TDcLUyUhS+RCC2EfH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jNWZjNTQtNzRjMi00ZjNkLTk1YzEt NDQwMjNjM2I3ODRlLzEvSzJUd1lCUmduQmN0ZEt1RGJJZkN6N1d6b3pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9jNWZjNTQtNzRjMi00ZjNkLTk1YzEtNDQwMjNjM2I3ODRl LzEvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTAUBAIAATAOMAwDBAC54WED BAK54WAwRQQCAAIwPwMHACoNrAAAAAMHACoNrAAAAgMHASoNrAAABgMHACoNrAAQ AAMHACoNrAAQAgMHASoNrAAQBgMHACoNrADcATANBgkqhkiG9w0BAQsFAAOCAQEA fqJZcomkfFRSVmVQ5pKlshrwsIFhaVXpsoc+7rvh506bFMzlB1sUaAWhmZ4f9JS0 LXE6v54JqWjGVXe7sWNbghfVpanmQ6o7llEWMXwj3htvoje4eEIa7N+BBBWtfTiG 8S+17/nLqKVTmRURfFM0mjr8RgRLq/TGAoBsDotYf/Ud6/jRzG52af1GmqQ3XT1P +w9Da1BKcExRmhJOM/YiEnAqi6sf3TWxtEalR4tp9fEH2m728EWAtR07/hcmmwO7 IyMhFzLYpt4IrJwud949+oCFnq3pnqMUOnPDVyoJg2Y1jhh46FS2OPabTXrg10t2 jPdDoKqS2it2NYwF7oOX/g== -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:37 2026 by rpki-client