This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa File: 2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa (raw, json) Hash identifier: XdSVxHJfUXdEh13NSWMZmFTpZfOjmyPDnSsH+zDSqy0= Subject key identifier: D9:5F:8D:6B:3D:23:9F:07:FC:57:C7:48:81:88:71:17:FF:AB:2B:EA Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62 Certificate serial: 019B78A29B3669108D0E98D31E313DE42B05 Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa Signing time: Thu 01 Jan 2026 08:18:01 +0000 ROA not before: Thu 01 Jan 2026 08:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206123 IP address blocks: 45.131.168.0/22 maxlen: 24 93.115.211.0/24 maxlen: 24 93.115.253.0/24 maxlen: 24 109.106.16.0/23 maxlen: 24 109.106.18.0/23 maxlen: 24 109.237.72.0/22 maxlen: 24 171.22.12.0/22 maxlen: 24 185.123.128.0/22 maxlen: 24 185.195.196.0/22 maxlen: 24 185.211.92.0/22 maxlen: 24 185.254.118.0/23 maxlen: 24 2a0a:5ec0::/29 maxlen: 29 2a0d:c340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9b:36:69:10:8d:0e:98:d3:1e:31:3d:e4:2b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d95f8d6b3d239f07fc57c74881887117ffab2bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:77:ea:fb:c1:51:b9:11:44:65:55:e7:08: 03:34:81:d2:21:12:63:26:08:d5:6b:1e:ea:3d:da: ac:d9:c3:2b:97:d1:6f:33:af:ba:bd:9a:bf:6b:72: 8d:f8:ad:e8:fa:49:de:86:ac:fa:40:54:c0:dc:f4: 6c:b9:9c:d5:a6:5a:89:14:88:10:7f:b2:21:84:9b: 3f:22:be:d0:6e:65:3d:19:5f:49:5f:10:b8:80:5b: 7f:8c:7c:af:53:19:af:20:4b:72:49:cc:03:d0:1c: 59:32:f6:45:10:fb:dc:7d:22:8b:1e:8e:0f:c7:ea: a8:83:02:62:9a:6b:0c:3d:f4:c7:04:60:f9:65:0e: 1f:b2:98:2c:57:8b:fa:5c:58:43:76:43:c3:aa:c1: 2c:40:2f:ac:98:cb:8c:ce:52:89:86:28:e3:32:7d: 9b:32:67:66:54:ce:a8:91:5b:9f:67:ea:d7:60:0b: a7:02:dc:0b:bd:20:61:a1:18:15:5c:3b:9e:66:cf: d7:48:61:e4:7a:a3:ae:8d:97:71:37:d8:61:1b:83: 75:0f:fa:66:c5:30:4d:a3:c7:ba:00:74:d6:b0:4d: 1f:7f:97:7e:64:1a:d2:79:ac:15:1b:7d:0f:3d:55: 2c:36:bd:89:75:6d:b7:23:79:37:f5:66:b8:44:17: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5F:8D:6B:3D:23:9F:07:FC:57:C7:48:81:88:71:17:FF:AB:2B:EA X509v3 Authority Key Identifier: keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.168.0/22 93.115.211.0/24 93.115.253.0/24 109.106.16.0/22 109.237.72.0/22 171.22.12.0/22 185.123.128.0/22 185.195.196.0/22 185.211.92.0/22 185.254.118.0/23 IPv6: 2a0a:5ec0::/29 2a0d:c340::/29 Signature Algorithm: sha256WithRSAEncryption 90:a6:aa:1c:b5:aa:40:c6:cd:8b:f4:40:91:28:f4:41:36:25: 1b:29:58:d7:3d:29:ba:44:9c:66:71:5c:7d:37:7b:29:a7:37: 4b:2e:57:c9:b7:ef:39:cb:c1:87:5a:12:92:77:5d:fc:4b:2e: bf:6a:da:74:3b:0b:aa:cb:ee:79:a9:e9:63:37:f5:2b:58:7b: 66:59:35:d5:ae:72:fc:df:aa:85:cf:c3:23:6c:a2:91:1a:08: 24:00:f5:bf:80:b2:23:57:89:4c:be:2a:da:dd:53:16:82:fb: a4:68:49:db:d6:ab:4f:9f:5e:b6:72:b7:9b:9a:94:57:f0:5a: 0c:ad:9f:25:ea:a5:f1:19:5a:a4:a6:b1:c4:af:b4:81:fe:d8: ca:b8:61:b7:fe:20:f1:45:a2:bf:19:34:e5:2b:1f:c7:91:c5: 50:df:4a:e2:00:c3:fd:1e:a3:bc:18:59:05:f7:55:89:f4:4f: 03:32:da:d1:fe:e4:b5:34:5c:b4:56:93:b5:db:eb:43:c8:f6: a3:84:15:a5:57:10:cc:8d:15:c1:05:24:49:3d:0c:b7:14:55: df:1e:ff:26:94:b2:8b:7c:a3:2b:f5:b5:c8:19:fd:55:59:76: 3d:5b:c2:b9:bd:ad:a4:ae:03:d7:7f:e0:ba:c9:68:c5:68:7b: c0:d1:b0:9d -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt4ops2aRCNDpjTHjE95CsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzAyOTRiN2U0NjQ1YWFlZGI1NDY3MmQ0ODA2NWIxYjFj ZWJjNjIwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTVmOGQ2YjNkMjM5ZjA3ZmM1N2M3NDg4MTg4NzExN2ZmYWIyYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3R36vvBUbkRRGVV5wgDNIHSIRJj JgjVax7qPdqs2cMrl9FvM6+6vZq/a3KN+K3o+knehqz6QFTA3PRsuZzVplqJFIgQ f7IhhJs/Ir7QbmU9GV9JXxC4gFt/jHyvUxmvIEtyScwD0BxZMvZFEPvcfSKLHo4P x+qogwJimmsMPfTHBGD5ZQ4fspgsV4v6XFhDdkPDqsEsQC+smMuMzlKJhijjMn2b MmdmVM6okVufZ+rXYAunAtwLvSBhoRgVXDueZs/XSGHkeqOujZdxN9hhG4N1D/pm xTBNo8e6AHTWsE0ff5d+ZBrSeawVG30PPVUsNr2JdW23I3k39Wa4RBfY4QIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFNlfjWs9I58H/FfHSIGIcRf/qyvqMB8GA1UdIwQY MBaAFJ4wKUt+RkWq7bVGctSAZbGxzrxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjct NjkxMzM4N2I4MDgzLzEvMlYtTmF6MGpud2Y4VjhkSWdZaHhGXy1ySy1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjctNjkxMzM4N2I4MDgz LzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQCLYOoAwQA XXPTAwQAXXP9AwQCbWoQAwQCbe1IAwQCqxYMAwQCuXuAAwQCucPEAwQCudNcAwQB uf52MBQEAgACMA4DBQMqCl7AAwUDKg3DQDANBgkqhkiG9w0BAQsFAAOCAQEAkKaq HLWqQMbNi/RAkSj0QTYlGylY1z0pukScZnFcfTd7Kac3Sy5XybfvOcvBh1oSkndd /Esuv2radDsLqsvueanpYzf1K1h7Zlk11a5y/N+qhc/DI2yikRoIJAD1v4CyI1eJ TL4q2t1TFoL7pGhJ29arT59etnK3m5qUV/BaDK2fJeql8RlapKaxxK+0gf7Yyrhh t/4g8UWivxk05Ssfx5HFUN9K4gDD/R6jvBhZBfdVifRPAzLa0f7ktTRctFaTtdvr Q8j2o4QVpVcQzI0VwQUkST0MtxRV3x7/JpSyi3yjK/W1yBn9VVl2PVvCub2tpK4D 13/gusloxWh7wNGwnQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:41 2026 by rpki-client