This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/2k2efwLza4ZnO03YIidqVEqe8vI.roa File: 2k2efwLza4ZnO03YIidqVEqe8vI.roa (raw, json) Hash identifier: B5AmAsDvRZimr7FECRkl2IW5OMCrTl16t1iaHWJsJvk= Subject key identifier: DA:4D:9E:7F:02:F3:6B:86:67:3B:4D:D8:22:27:6A:54:4A:9E:F2:F2 Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17 Certificate serial: 019B7DC89EE3A9C6981578B05E85B9D248F3 Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/2k2efwLza4ZnO03YIidqVEqe8vI.roa Signing time: Fri 02 Jan 2026 08:17:38 +0000 ROA not before: Fri 02 Jan 2026 08:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 194.42.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:9e:e3:a9:c6:98:15:78:b0:5e:85:b9:d2:48:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17 Validity Not Before: Jan 2 08:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da4d9e7f02f36b86673b4dd822276a544a9ef2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:a8:65:0e:0a:1b:62:92:66:27:cb:fc:57: 17:76:8f:ee:28:7e:4c:5c:5b:5c:8f:dc:5a:30:fc: 7b:fb:6f:bc:8e:a8:52:b0:24:44:32:b5:f6:d5:40: 80:5c:fe:d6:6c:42:30:73:c7:15:e3:16:c5:17:e5: ba:fa:1e:e1:9e:49:2c:ce:fb:96:1a:80:f7:f5:1a: 0e:36:82:6b:e8:0d:1e:86:b6:3e:b0:2a:94:a8:fd: bc:f3:42:b4:d9:4c:3b:63:18:4a:b2:48:7a:83:86: c6:21:b9:d3:43:e2:0b:55:78:54:47:b6:9b:2c:64: 4c:65:64:41:8d:f2:a9:19:0e:d1:9e:f1:15:4c:73: f1:0d:db:32:bd:f6:e2:cc:72:09:16:f5:bc:b1:2b: ba:0b:37:72:6c:a3:73:62:57:0c:b6:9d:30:fd:7a: ef:69:70:f3:c7:3a:f7:ed:47:3a:9a:bb:03:c2:f4: 84:f2:6b:ad:de:28:47:a9:6a:12:74:f1:3a:12:69: d3:5e:31:5f:01:aa:1c:86:4e:f9:88:e2:c4:bd:8a: 5c:0b:e5:47:8b:dd:8f:f2:6a:74:1d:a3:77:65:dc: 9b:38:f2:b8:a5:96:d3:41:26:32:99:0e:fa:7f:f8: d3:05:2b:4d:77:b5:8e:97:ed:45:19:1a:a4:64:09: f0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4D:9E:7F:02:F3:6B:86:67:3B:4D:D8:22:27:6A:54:4A:9E:F2:F2 X509v3 Authority Key Identifier: keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/2k2efwLza4ZnO03YIidqVEqe8vI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.42.160.0/23 Signature Algorithm: sha256WithRSAEncryption 15:33:bd:9d:f3:5b:83:a0:8e:6a:dd:32:67:b7:b7:d3:9f:65: cd:46:20:f9:a8:d5:51:dd:02:cd:d5:f1:c2:34:df:6c:3a:98: 96:bd:ae:38:31:0c:c3:bf:20:c0:79:ce:9a:09:3f:73:39:4f: fd:19:e7:c5:c3:0e:e6:53:7d:4c:c5:f8:a4:13:bd:c8:b7:98: 32:6c:db:eb:2b:7c:9d:53:37:24:0d:48:0c:5f:7a:51:35:34: 4b:62:5c:11:cf:ac:92:aa:23:20:16:dc:b3:ce:e8:4f:8a:74: 54:3e:1d:86:7a:ff:37:78:f0:d7:5b:6e:1b:34:d4:cc:a2:b6: 36:58:a4:35:40:c0:a6:b3:24:e0:5b:9c:61:7a:f3:c1:97:1b: 2c:da:ff:db:90:2c:54:28:c0:14:5f:15:29:93:56:de:38:0e: 49:71:2b:72:3b:06:54:e5:04:1a:b1:9a:46:2b:16:5d:88:90: d8:e3:3f:21:94:00:ba:23:24:81:66:6c:a3:31:5b:77:1a:ed: aa:19:32:4d:fe:cc:c8:45:9f:3e:c0:48:38:bd:f7:d8:63:71: ce:f2:c9:eb:a8:a1:df:0a:fb:72:fd:6f:e0:72:b6:0a:26:3f: 5a:6b:8e:04:a6:ed:60:70:20:b3:36:10:3b:a3:ea:8f:93:05: 7e:7f:30:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yJ7jqcaYFXiwXoW50kjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyM2Y3ODM3M2NiOTY2NTRkMDMwNjA2NDY5MmVmYzRhZTc3 MTVmMTcwHhcNMjYwMTAyMDgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTRkOWU3ZjAyZjM2Yjg2NjczYjRkZDgyMjI3NmE1NDRhOWVmMmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux6oZQ4KG2KSZifL/FcXdo/uKH5M XFtcj9xaMPx7+2+8jqhSsCREMrX21UCAXP7WbEIwc8cV4xbFF+W6+h7hnkkszvuW GoD39RoONoJr6A0ehrY+sCqUqP2880K02Uw7YxhKskh6g4bGIbnTQ+ILVXhUR7ab LGRMZWRBjfKpGQ7RnvEVTHPxDdsyvfbizHIJFvW8sSu6CzdybKNzYlcMtp0w/Xrv aXDzxzr37Uc6mrsDwvSE8mut3ihHqWoSdPE6EmnTXjFfAaochk75iOLEvYpcC+VH i92P8mp0HaN3ZdybOPK4pZbTQSYymQ76f/jTBStNd7WOl+1FGRqkZAnwFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNpNnn8C82uGZztN2CInalRKnvLyMB8GA1UdIwQY MBaAFNI/eDc8uWZU0DBgZGku/ErncV8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGo5NE56eTVabFRRTUdCa2FTNzhTdWR4WHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZTFlNzgtZGYyNC00ZmM2LWIwNzct MzlmZTcyM2VmNzMwLzEvMmsyZWZ3THphNFpuTzAzWUlpZHFWRXFlOHZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85ZTFlNzgtZGYyNC00ZmM2LWIwNzctMzlmZTcyM2VmNzMw LzEvMGo5NE56eTVabFRRTUdCa2FTNzhTdWR4WHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwiqgMA0G CSqGSIb3DQEBCwUAA4IBAQAVM72d81uDoI5q3TJnt7fTn2XNRiD5qNVR3QLN1fHC NN9sOpiWva44MQzDvyDAec6aCT9zOU/9GefFww7mU31MxfikE73It5gybNvrK3yd UzckDUgMX3pRNTRLYlwRz6ySqiMgFtyzzuhPinRUPh2Gev83ePDXW24bNNTMorY2 WKQ1QMCmsyTgW5xhevPBlxss2v/bkCxUKMAUXxUpk1beOA5JcStyOwZU5QQasZpG KxZdiJDY4z8hlAC6IySBZmyjMVt3Gu2qGTJN/szIRZ8+wEg4vffYY3HO8snrqKHf Cvty/W/gcrYKJj9aa44Epu1gcCCzNhA7o+qPkwV+fzDG -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:41 2026 by rpki-client