This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/2q-y1nHjenu9twtcEVm8uPj-ddE.roa File: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (raw, json) Hash identifier: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg= Subject key identifier: DA:AF:B2:D6:71:E3:7A:7B:BD:B7:0B:5C:11:59:BC:B8:F8:FE:75:D1 Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019B7F836411A79B9F44FBAF6274EEF6ECD7 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/2q-y1nHjenu9twtcEVm8uPj-ddE.roa Signing time: Fri 02 Jan 2026 16:21:15 +0000 ROA not before: Fri 02 Jan 2026 16:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213274 IP address blocks: 89.252.142.0/24 maxlen: 24 89.252.157.0/24 maxlen: 24 94.102.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:64:11:a7:9b:9f:44:fb:af:62:74:ee:f6:ec:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jan 2 16:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daafb2d671e37a7bbdb70b5c1159bcb8f8fe75d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e2:64:4b:f0:6c:2b:c8:26:d1:47:6d:44:29: 96:f8:55:af:3b:39:31:14:84:5a:82:b3:d5:af:18: 09:5e:ea:c2:ef:29:a3:09:2c:4a:da:da:54:dc:e3: 66:9b:7a:d0:91:1a:62:13:2d:b0:11:2e:01:76:a8: 40:91:d1:2c:e7:60:7f:bc:82:3c:10:9c:33:df:c6: 94:56:16:14:b4:41:72:7f:0a:92:e4:50:74:73:8d: b0:2a:bb:cd:fb:ad:e2:ca:9b:86:b7:ab:79:4c:01: ce:a6:da:03:69:9d:ce:c3:73:a3:62:71:f3:2f:cf: 18:50:63:e5:d3:66:5e:3b:b5:4c:b4:c9:61:a9:02: 78:f6:cf:d7:c0:0b:cf:76:cf:4c:c7:30:0c:e3:45: 8c:52:51:2d:1f:e9:f5:43:39:b9:b7:15:82:75:c4: dc:c4:6c:10:a9:91:b2:18:1b:44:9a:a7:3a:51:4e: 2b:c9:fa:66:e7:3a:44:63:65:2d:39:f0:cf:b4:07: 7e:22:2c:c3:f3:95:96:04:e3:57:cd:43:a8:9e:8b: 8b:6b:e4:65:65:be:6b:f8:ba:cb:52:ec:ff:b4:a9: 6b:1f:fc:69:d0:b5:e5:55:45:a4:68:d9:7c:8a:cd: 93:77:a2:cf:77:2f:e0:89:e0:f3:5d:af:e4:11:88: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AF:B2:D6:71:E3:7A:7B:BD:B7:0B:5C:11:59:BC:B8:F8:FE:75:D1 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/2q-y1nHjenu9twtcEVm8uPj-ddE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.252.142.0/24 89.252.157.0/24 94.102.12.0/24 Signature Algorithm: sha256WithRSAEncryption ae:6e:31:c4:4b:86:03:77:dd:fd:1c:53:92:3d:bc:c9:b1:64: 5d:19:2e:82:e6:8d:b2:c1:5d:da:5e:a4:f5:39:e4:24:2f:ed: 0b:5f:f0:b1:91:c5:77:fd:5c:74:fa:62:8a:46:fd:9a:9a:4e: 88:5b:bc:f4:03:fc:db:f4:65:a9:07:0d:bd:9c:1a:46:f4:ca: ae:28:39:6b:b7:d0:cd:e5:26:82:9b:6c:94:76:cb:05:be:ee: c2:02:09:c3:8f:97:b4:44:d6:44:0f:cf:26:a6:54:b9:b3:92: 44:f1:8f:8a:a9:da:15:08:c5:90:d4:98:fa:ef:88:4e:0e:09: f9:6e:ce:ba:8c:2a:6c:c7:5e:70:a3:ba:6c:18:fe:d2:81:ca: a8:b0:dc:b0:ad:56:12:33:55:53:17:d1:fc:33:b4:7b:5f:f3: 4c:1e:55:5e:6a:80:f5:bf:c3:db:9c:4d:3a:e7:3b:e2:a7:a5: 2d:f0:0a:aa:2d:39:9f:45:5b:80:01:b8:f9:01:d8:46:53:d7: 14:c2:c9:c7:6d:90:b8:11:09:13:ab:fd:13:17:99:dd:a9:82: d0:64:45:95:1a:2b:c7:ac:24:4d:bd:42:eb:76:b0:70:35:b7: 1c:02:d1:11:2c:13:b0:93:36:09:ae:06:17:2b:24:4d:f3:d4: f4:f0:02:cb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/g2QRp5ufRPuvYnTu9uzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMTAyMTYyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWFmYjJkNjcxZTM3YTdiYmRiNzBiNWMxMTU5YmNiOGY4ZmU3NWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OJkS/BsK8gm0UdtRCmW+FWvOzkx FIRagrPVrxgJXurC7ymjCSxK2tpU3ONmm3rQkRpiEy2wES4BdqhAkdEs52B/vII8 EJwz38aUVhYUtEFyfwqS5FB0c42wKrvN+63iypuGt6t5TAHOptoDaZ3Ow3OjYnHz L88YUGPl02ZeO7VMtMlhqQJ49s/XwAvPds9MxzAM40WMUlEtH+n1Qzm5txWCdcTc xGwQqZGyGBtEmqc6UU4ryfpm5zpEY2UtOfDPtAd+IizD85WWBONXzUOonouLa+Rl Zb5r+LrLUuz/tKlrH/xp0LXlVUWkaNl8is2Td6LPdy/gieDzXa/kEYiyMQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNqvstZx43p7vbcLXBFZvLj4/nXRMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvMnEteTFuSGplbnU5dHd0Y0VWbTh1UGotZGRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWfyOAwQA WfydAwQAXmYMMA0GCSqGSIb3DQEBCwUAA4IBAQCubjHES4YDd939HFOSPbzJsWRd GS6C5o2ywV3aXqT1OeQkL+0LX/CxkcV3/Vx0+mKKRv2amk6IW7z0A/zb9GWpBw29 nBpG9MquKDlrt9DN5SaCm2yUdssFvu7CAgnDj5e0RNZED88mplS5s5JE8Y+KqdoV CMWQ1Jj674hODgn5bs66jCpsx15wo7psGP7SgcqosNywrVYSM1VTF9H8M7R7X/NM HlVeaoD1v8PbnE065zvip6Ut8AqqLTmfRVuAAbj5AdhGU9cUwsnHbZC4EQkTq/0T F5ndqYLQZEWVGivHrCRNvULrdrBwNbccAtERLBOwkzYJrgYXKyRN89T08ALL -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:35 2026 by rpki-client