This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/2nuIt9bPWep-2UcGvqLkgY-wilc.roa File: 2nuIt9bPWep-2UcGvqLkgY-wilc.roa (raw, json) Hash identifier: Yp1t0MZeVuZGR3tdv1lGZRI1XtiJF6WvXUMNdE4/tt4= Subject key identifier: DA:7B:88:B7:D6:CF:59:EA:7E:D9:47:06:BE:A2:E4:81:8F:B0:8A:57 Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df Certificate serial: 019B76EB2E28E6D4B70DD41C57965BA5FB11 Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/2nuIt9bPWep-2UcGvqLkgY-wilc.roa Signing time: Thu 01 Jan 2026 00:18:02 +0000 ROA not before: Thu 01 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214360 IP address blocks: 185.220.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2e:28:e6:d4:b7:0d:d4:1c:57:96:5b:a5:fb:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da7b88b7d6cf59ea7ed94706bea2e4818fb08a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1f:e2:fe:bb:9e:5e:7b:54:6f:cc:eb:bb:2a: 99:e0:7c:ab:08:76:a3:b8:64:1f:24:07:f2:1b:a0: 9e:de:e7:dc:dc:1d:35:89:c4:eb:24:ad:5c:db:e5: 48:14:bf:53:33:e7:d1:a6:b7:8a:83:a1:e9:12:f7: 76:87:82:fb:36:99:9c:81:9f:3d:1c:6a:c6:3a:ed: 9b:b1:e3:cf:2d:63:d4:ac:bb:de:ea:39:64:d9:73: 39:47:a3:24:d7:3e:6d:8b:d7:db:ef:e3:00:86:34: c2:67:15:78:cb:9b:c6:ed:03:03:8c:6a:2f:c1:db: c6:44:ca:fd:e9:9b:81:18:35:69:0a:d0:2d:ee:53: b6:82:29:43:4b:d2:f9:c8:04:68:75:05:ea:c3:af: eb:12:51:fc:38:e7:fb:64:be:6f:32:1d:a1:cc:fa: d9:89:12:94:80:c4:28:8c:55:14:4d:8b:8d:0d:1e: 92:78:24:b3:5c:25:cf:c2:f5:40:84:57:36:65:0f: 81:b8:bd:1a:04:c6:70:12:5e:ba:a5:e2:ff:3b:92: 60:a3:29:48:7f:e4:8e:b2:9d:48:16:a2:9a:7c:7a: a2:87:15:db:f8:6b:d8:65:1d:f0:a6:8b:1b:17:a1: f2:5c:7f:94:72:45:a6:e7:57:ca:02:92:84:3f:94: f2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7B:88:B7:D6:CF:59:EA:7E:D9:47:06:BE:A2:E4:81:8F:B0:8A:57 X509v3 Authority Key Identifier: keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/2nuIt9bPWep-2UcGvqLkgY-wilc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.118.0/24 Signature Algorithm: sha256WithRSAEncryption 94:16:27:16:1d:96:6d:da:55:fc:a6:fa:00:df:7f:be:2e:79: eb:eb:54:92:ee:77:f0:86:c7:a4:86:09:57:2b:ca:74:7b:59: 7a:44:18:d8:d6:e4:af:57:6a:39:f3:76:d8:19:35:bf:61:d0: 24:df:67:14:55:44:38:df:01:e7:50:f3:3f:37:1f:e8:37:27: a2:8e:5a:26:6e:33:59:dd:01:d3:88:06:8e:c6:a3:23:e7:71: 65:5b:61:66:4f:61:b7:f3:4e:c4:03:78:44:55:d5:0a:c2:67: c7:a1:71:24:29:a9:5c:d1:5a:d3:ea:0a:e5:bd:43:2f:8a:90: 94:3b:c1:ba:7c:32:48:7a:87:aa:46:1d:f8:78:d6:e7:79:87: 78:e1:5f:ba:7e:e0:3f:a9:8c:9a:2f:35:42:73:46:c3:f5:a4: a0:83:f1:b3:23:c3:20:a2:42:3e:07:35:4d:51:fe:52:b0:0b: af:40:24:2a:94:ea:b5:04:1a:a7:35:18:fa:85:8f:88:f8:6f: e5:6d:1f:1d:22:ba:59:ed:62:b2:8a:15:99:13:35:12:30:03: 03:c3:f6:3a:52:2d:d6:46:7c:c0:a8:de:ca:db:26:37:5b:48: 39:74:56:6a:4e:b6:62:26:7c:d8:0f:c4:b1:25:0f:4c:fe:4a: 2c:16:43:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26y4o5tS3DdQcV5ZbpfsRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI3M2E2M2M1MWVhZjNmOWU1YWU3YjlmYWFmZGIyOTMx MzQwZGYwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTdiODhiN2Q2Y2Y1OWVhN2VkOTQ3MDZiZWEyZTQ4MThmYjA4YTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph/i/rueXntUb8zruyqZ4HyrCHaj uGQfJAfyG6Ce3ufc3B01icTrJK1c2+VIFL9TM+fRpreKg6HpEvd2h4L7NpmcgZ89 HGrGOu2bsePPLWPUrLve6jlk2XM5R6Mk1z5ti9fb7+MAhjTCZxV4y5vG7QMDjGov wdvGRMr96ZuBGDVpCtAt7lO2gilDS9L5yARodQXqw6/rElH8OOf7ZL5vMh2hzPrZ iRKUgMQojFUUTYuNDR6SeCSzXCXPwvVAhFc2ZQ+BuL0aBMZwEl66peL/O5JgoylI f+SOsp1IFqKafHqihxXb+GvYZR3wposbF6HyXH+UckWm51fKApKEP5TyowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNp7iLfWz1nqftlHBr6i5IGPsIpXMB8GA1UdIwQY MBaAFJDyc6Y8Uerz+eWue5+q/bKTE0DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2Yt NTA4MmMyOGI3MTVmLzEvMm51SXQ5YlBXZXAtMlVjR3ZxTGtnWS13aWxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2YtNTA4MmMyOGI3MTVm LzEva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudx2MA0G CSqGSIb3DQEBCwUAA4IBAQCUFicWHZZt2lX8pvoA33++Lnnr61SS7nfwhsekhglX K8p0e1l6RBjY1uSvV2o583bYGTW/YdAk32cUVUQ43wHnUPM/Nx/oNyeijlombjNZ 3QHTiAaOxqMj53FlW2FmT2G3807EA3hEVdUKwmfHoXEkKalc0VrT6grlvUMvipCU O8G6fDJIeoeqRh34eNbneYd44V+6fuA/qYyaLzVCc0bD9aSgg/GzI8MgokI+BzVN Uf5SsAuvQCQqlOq1BBqnNRj6hY+I+G/lbR8dIrpZ7WKyihWZEzUSMAMDw/Y6Ui3W RnzAqN7K2yY3W0g5dFZqTrZiJnzYD8SxJQ9M/kosFkOm -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:43 2026 by rpki-client