This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa File: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (raw, json) Hash identifier: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI= Subject key identifier: D8:B4:15:11:78:54:5B:69:7A:1E:3E:99:9E:B7:02:03:C1:B5:FF:E0 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B7A5B0DA6B9F60BACDC5CD7470450EC67 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211092 IP address blocks: 37.157.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0d:a6:b9:f6:0b:ac:dc:5c:d7:47:04:50:ec:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8b4151178545b697a1e3e999eb70203c1b5ffe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:dd:c0:56:d1:7d:b9:5c:1f:7d:97:e7:15: 0e:b2:19:2a:17:ff:18:85:01:ac:c1:5f:39:44:90: 38:bf:c6:e8:cb:95:70:e6:53:80:6b:16:b0:e0:7f: 1a:f3:c5:39:e3:dc:a1:b5:2a:61:be:fb:bd:52:e7: b2:be:8b:dc:79:c2:9e:bf:01:f8:71:0a:c8:43:c7: 98:a2:15:09:da:2c:86:00:46:b9:b1:90:12:a7:a7: 80:9e:dd:09:97:53:2f:b8:d4:26:cf:1d:f3:ee:20: 0c:8e:3e:d4:f3:bf:a9:a7:5f:f6:b2:69:ff:58:b1: d8:77:9c:af:2f:e7:2b:53:a6:dd:29:30:f8:6c:06: 4c:c0:3c:03:2d:d3:dd:76:0e:c7:cf:c0:cb:14:df: 73:3e:17:f1:26:c6:a3:81:e2:96:3b:23:44:fe:45: 40:9c:94:59:e2:20:fe:a8:1f:e3:b0:d7:0e:55:8d: cf:97:a6:df:18:09:b6:92:f5:df:30:63:b3:2e:53: 08:42:c1:c6:a8:7a:6a:7e:84:d6:e5:47:f7:05:5f: f6:93:ef:ca:96:3b:23:82:8e:05:3d:23:b6:fc:21: 3a:7b:9e:ae:3f:07:a0:37:01:3c:e6:8f:e0:0e:da: 6b:e2:3e:65:2f:ec:e1:61:dd:e8:51:60:0e:0f:6a: 0a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B4:15:11:78:54:5B:69:7A:1E:3E:99:9E:B7:02:03:C1:B5:FF:E0 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.157.211.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:41:2c:5e:5b:16:06:a8:10:d0:b8:9d:26:0e:fd:72:dd:41: d9:57:a0:0c:69:18:aa:b6:db:a1:fc:04:03:f2:b6:1d:77:97: fc:cf:6e:fd:b3:11:16:3f:4b:e0:e5:b1:24:23:e4:86:fb:2c: 3d:e6:8d:79:00:3c:79:ab:9b:02:d8:40:d4:8b:fe:6d:87:24: 31:40:72:66:9b:22:f9:4d:c2:3a:09:22:99:5a:29:f7:f4:32: 1a:d3:e8:33:1b:34:98:3c:cd:6d:c3:42:c1:f4:29:58:34:69: 13:89:09:b3:18:5a:f3:f8:70:da:75:be:d4:2d:55:a4:19:5e: 41:78:c8:a7:d3:a9:ad:1f:02:1a:c0:0c:a8:60:d3:d7:db:3c: e9:cb:9e:e0:f0:65:6d:25:ef:1a:16:7f:ee:a8:c6:37:04:7f: c4:a6:f0:0c:8f:68:74:7f:9b:6f:49:09:a8:b8:e8:8a:73:fe: 89:b1:69:9b:db:d2:9b:7f:70:6d:f1:6c:37:af:b2:03:e2:58: 7f:52:f9:ab:20:70:e5:12:73:89:43:5d:cd:42:63:c7:14:a6: 07:c2:9a:d2:20:0e:55:03:d4:f0:54:8b:5e:10:21:71:5a:cc: bb:25:43:05:08:67:8e:fd:5a:e0:a3:10:12:b2:a1:97:dd:e6: 43:6d:9f:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ww2mufYLrNxc10cEUOxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGI0MTUxMTc4NTQ1YjY5N2ExZTNlOTk5ZWI3MDIwM2MxYjVmZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRfdwFbRfblcH32X5xUOshkqF/8Y hQGswV85RJA4v8boy5Vw5lOAaxaw4H8a88U549yhtSphvvu9UueyvovcecKevwH4 cQrIQ8eYohUJ2iyGAEa5sZASp6eAnt0Jl1MvuNQmzx3z7iAMjj7U87+pp1/2smn/ WLHYd5yvL+crU6bdKTD4bAZMwDwDLdPddg7Hz8DLFN9zPhfxJsajgeKWOyNE/kVA nJRZ4iD+qB/jsNcOVY3Pl6bfGAm2kvXfMGOzLlMIQsHGqHpqfoTW5Uf3BV/2k+/K ljsjgo4FPSO2/CE6e56uPwegNwE85o/gDtpr4j5lL+zhYd3oUWAOD2oKKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNi0FRF4VFtpeh4+mZ63AgPBtf/gMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvMkxRVkVYaFVXMmw2SGo2Wm5yY0NBOEcxXy1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZ3TMA0G CSqGSIb3DQEBCwUAA4IBAQBdQSxeWxYGqBDQuJ0mDv1y3UHZV6AMaRiqttuh/AQD 8rYdd5f8z279sxEWP0vg5bEkI+SG+yw95o15ADx5q5sC2EDUi/5thyQxQHJmmyL5 TcI6CSKZWin39DIa0+gzGzSYPM1tw0LB9ClYNGkTiQmzGFrz+HDadb7ULVWkGV5B eMin06mtHwIawAyoYNPX2zzpy57g8GVtJe8aFn/uqMY3BH/EpvAMj2h0f5tvSQmo uOiKc/6JsWmb29Kbf3Bt8Ww3r7ID4lh/UvmrIHDlEnOJQ13NQmPHFKYHwprSIA5V A9TwVIteECFxWsy7JUMFCGeO/VrgoxASsqGX3eZDbZ9J -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:44 2026 by rpki-client