This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/r2Y6Npuwz2fSFJGlB1IqT0Y2GL8.roa File: r2Y6Npuwz2fSFJGlB1IqT0Y2GL8.roa (raw, json) Hash identifier: lnldbd2L1Ux8PYgmjwCpHbxAbqqtYXmXImm+n59vkVY= Subject key identifier: AF:66:3A:36:9B:B0:CF:67:D2:14:91:A5:07:52:2A:4F:46:36:18:BF Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a Certificate serial: 019B7834B3B85D437A5399B78962B9341406 Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/r2Y6Npuwz2fSFJGlB1IqT0Y2GL8.roa Signing time: Thu 01 Jan 2026 06:17:58 +0000 ROA not before: Thu 01 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6805 IP address blocks: 89.32.182.0/24 maxlen: 24 2001:1498:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b3:b8:5d:43:7a:53:99:b7:89:62:b9:34:14:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af663a369bb0cf67d21491a507522a4f463618bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:dc:76:e4:40:f0:15:7c:ee:08:de:41:d5:1f: c1:ca:f8:2c:70:0a:87:ee:de:ad:4b:d6:a8:4f:9a: 31:1a:92:6b:7e:0d:5b:a9:1f:a9:07:b3:25:af:34: 5b:4b:e4:68:97:a6:5f:d8:8c:d5:1d:0b:ff:9e:99: 71:98:ba:29:f8:ab:5f:65:c0:63:a0:c4:9b:fa:da: c5:3a:d3:73:6c:3c:97:e1:5c:e2:1f:f2:2b:94:dc: a9:e0:58:c3:0f:04:85:7b:a0:f8:16:7b:c8:97:9e: 5a:b2:b2:72:43:e8:c7:35:80:bd:f2:23:9c:f1:65: 18:d7:03:43:e5:8c:0f:19:95:40:22:42:bc:48:ef: fa:77:4a:0a:e1:aa:cf:37:8c:17:ef:7a:1a:24:d7: 80:32:a8:e7:4e:16:fd:bd:81:97:9f:e5:c3:ac:e6: 32:b9:c0:c0:75:f3:8f:c7:bc:75:c9:93:e4:db:71: 3d:f7:5f:13:f1:de:6b:78:64:c8:0b:5e:6c:15:6c: 85:02:14:4c:87:e0:86:43:40:58:25:3f:af:63:58: 34:79:76:a4:cc:21:2c:41:45:ae:52:f9:4d:d5:25: 9a:d2:80:cf:60:92:ee:09:14:37:a6:96:ad:7a:9b: 9f:2d:78:f2:91:d5:61:fe:88:50:34:8d:89:ce:7b: e2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:66:3A:36:9B:B0:CF:67:D2:14:91:A5:07:52:2A:4F:46:36:18:BF X509v3 Authority Key Identifier: keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/r2Y6Npuwz2fSFJGlB1IqT0Y2GL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.32.182.0/24 IPv6: 2001:1498:c::/48 Signature Algorithm: sha256WithRSAEncryption ab:2f:f2:ac:6f:67:8c:be:66:c0:cc:3b:8d:32:9b:40:07:9c: e0:14:a0:3a:cc:8b:6c:9b:cf:bb:e0:a2:ce:4a:39:4d:ef:9f: 58:49:4c:55:9d:eb:08:3d:7f:e2:19:d8:f7:9b:cf:aa:4a:e0: 3b:9d:2f:fe:65:29:18:4f:20:bd:5a:49:4a:16:e0:f4:22:a4: cf:90:06:c0:08:f7:12:1b:62:a3:0a:83:c3:ae:b0:00:02:fa: 72:0b:f2:e0:b9:7f:94:d6:e4:fd:8c:23:6c:2f:11:92:fd:ec: 36:e1:ab:b3:f3:dc:a9:16:26:c8:70:d6:5e:65:c8:65:ac:1a: f1:c2:bb:7c:d1:3f:e9:fe:ed:b2:69:48:87:d9:3d:0f:d4:2a: 6a:78:e2:dc:f1:9a:b0:7e:e6:a1:00:75:c5:87:93:12:c0:da: d8:18:da:72:64:d3:2c:fb:01:a8:31:d9:c2:85:31:50:70:46: 7b:6c:3f:e3:17:0b:34:b3:07:37:b9:7e:7d:c8:ca:6f:02:26: 29:60:50:f0:b4:60:86:0e:e1:e8:27:fe:88:11:03:05:5d:65: 43:c0:80:e6:d0:09:7e:51:a4:55:4e:0a:a8:02:3a:63:a2:16: 24:cd:53:ab:f2:5f:95:d3:5a:21:b7:f8:cc:c1:a2:ea:f8:31: 1d:e9:e8:b7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NLO4XUN6U5m3iWK5NBQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj ZTVhNGEwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjY2M2EzNjliYjBjZjY3ZDIxNDkxYTUwNzUyMmE0ZjQ2MzYxOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dx25EDwFXzuCN5B1R/ByvgscAqH 7t6tS9aoT5oxGpJrfg1bqR+pB7MlrzRbS+Rol6Zf2IzVHQv/nplxmLop+KtfZcBj oMSb+trFOtNzbDyX4VziH/IrlNyp4FjDDwSFe6D4FnvIl55asrJyQ+jHNYC98iOc 8WUY1wND5YwPGZVAIkK8SO/6d0oK4arPN4wX73oaJNeAMqjnThb9vYGXn+XDrOYy ucDAdfOPx7x1yZPk23E9918T8d5reGTIC15sFWyFAhRMh+CGQ0BYJT+vY1g0eXak zCEsQUWuUvlN1SWa0oDPYJLuCRQ3ppatepufLXjykdVh/ohQNI2JznviGQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFK9mOjabsM9n0hSRpQdSKk9GNhi/MB8GA1UdIwQY MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct ZDQ1YWI3ZGYyZGUxLzEvcjJZNk5wdXd6MmZTRkpHbEIxSXFUMFkyR0w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWSC2MA8E AgACMAkDBwAgARSYAAwwDQYJKoZIhvcNAQELBQADggEBAKsv8qxvZ4y+ZsDMO40y m0AHnOAUoDrMi2ybz7vgos5KOU3vn1hJTFWd6wg9f+IZ2Pebz6pK4DudL/5lKRhP IL1aSUoW4PQipM+QBsAI9xIbYqMKg8OusAAC+nIL8uC5f5TW5P2MI2wvEZL97Dbh q7Pz3KkWJshw1l5lyGWsGvHCu3zRP+n+7bJpSIfZPQ/UKmp44tzxmrB+5qEAdcWH kxLA2tgY2nJk0yz7Aagx2cKFMVBwRntsP+MXCzSzBze5fn3Iym8CJilgUPC0YIYO 4egn/ogRAwVdZUPAgObQCX5RpFVOCqgCOmOiFiTNU6vyX5XTWiG3+MzBour4MR3p 6Lc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:11 2026 by rpki-client