This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/2_vE_2Yv66AoGDtat3Y89P5hOyI.roa File: 2_vE_2Yv66AoGDtat3Y89P5hOyI.roa (raw, json) Hash identifier: d3nG5S5TQuOOQymp5E7knbnTq0vEJnN1w6JhmrN4V90= Subject key identifier: DB:FB:C4:FF:66:2F:EB:A0:28:18:3B:5A:B7:76:3C:F4:FE:61:3B:22 Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6 Certificate serial: 019B79EC1C5F37762E71DEF841106FBC80B1 Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/2_vE_2Yv66AoGDtat3Y89P5hOyI.roa Signing time: Thu 01 Jan 2026 14:17:55 +0000 ROA not before: Thu 01 Jan 2026 14:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203201 IP address blocks: 45.144.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1c:5f:37:76:2e:71:de:f8:41:10:6f:bc:80:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6 Validity Not Before: Jan 1 14:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbfbc4ff662feba028183b5ab7763cf4fe613b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:af:74:45:f0:f0:77:c1:f0:29:73:9c:3b:1b: a5:37:0f:df:60:2a:0d:59:27:f4:93:39:48:65:d0: 4b:7f:94:7a:0d:f1:0f:e0:5c:1a:ac:56:6e:5a:09: 78:90:32:38:03:c8:aa:02:22:d4:5f:47:33:73:c2: 1f:e5:f3:61:a7:39:52:b1:7a:f0:98:07:dd:a1:da: a3:d5:02:06:c6:cb:0e:e5:61:9a:18:24:d0:5b:86: 9a:60:5e:c4:25:63:00:57:99:a5:42:f9:c8:72:f6: 0d:43:dd:cd:2c:5e:18:54:1c:bb:52:be:da:d0:6c: fe:b1:e7:39:99:6c:82:3c:a6:22:6b:4b:9a:2f:33: d8:eb:23:75:a0:f6:32:cd:7a:25:f7:51:79:a7:76: 12:a6:8d:67:bb:9b:2a:66:43:e7:44:e1:f6:be:69: 88:62:da:73:43:fa:c5:04:04:5c:c0:94:00:bb:9f: a9:81:e0:c6:65:03:fc:fd:f3:22:d0:c9:ad:a8:32: b6:4a:85:f1:5a:9e:af:a2:37:32:20:69:00:a9:0e: ac:c7:23:b0:4e:6a:c7:43:ec:4f:4a:68:1b:8f:4b: 43:a6:db:07:9a:c0:5c:03:3f:8d:4e:58:31:bc:6a: 69:51:41:a0:75:43:0b:18:cf:fc:71:f6:53:da:8d: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FB:C4:FF:66:2F:EB:A0:28:18:3B:5A:B7:76:3C:F4:FE:61:3B:22 X509v3 Authority Key Identifier: keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/2_vE_2Yv66AoGDtat3Y89P5hOyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.60.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:a3:2f:ea:04:c8:3a:a4:34:8d:ed:6b:f9:6b:4d:fe:06:3c: 4a:a6:0f:2d:e8:f7:0e:f1:18:d3:d9:1e:db:0c:28:25:97:7f: 02:eb:d6:68:17:0a:fd:7b:dd:f6:f5:29:70:38:b1:d8:68:f3: 8d:df:b7:42:81:b4:10:04:3d:b6:ed:f8:3f:c5:a0:d8:f8:8d: 2a:fb:7b:3b:41:15:14:48:fb:0c:8f:1d:10:bd:e9:f0:d6:2e: 02:a2:a2:c3:d0:69:b7:11:cd:65:ce:a2:6b:90:06:dd:24:5d: 1c:88:e7:5d:73:a1:41:80:d3:d5:44:71:30:9b:fe:0c:ed:39: b0:b0:29:70:c8:50:93:c0:02:fe:3b:ff:42:2a:6a:7d:04:82: 9a:a5:2f:13:7e:2b:4b:6c:5f:2b:6b:1c:f4:20:2d:76:37:17: e6:65:a5:87:36:eb:22:e0:06:49:10:39:a8:0f:45:d5:ef:df: 52:ac:bc:da:4b:63:aa:9a:ab:96:21:f0:30:78:41:b0:dc:41: 45:2a:4e:d4:92:89:34:4a:ed:0a:59:1b:1a:c1:8e:3c:d1:68: e0:ff:a6:1f:db:4a:8e:1c:86:db:55:a7:2a:26:6d:75:1a:9d: 51:a0:9a:7b:fa:14:fd:6d:36:98:e0:22:87:f7:4b:5a:c9:17: 3b:24:b9:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57BxfN3Yucd74QRBvvICxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OWQyOGI3ZDAyOGNhYmI5Njg0YTgwZTE0YmFhZjE1Y2E2 ZmQyZjYwHhcNMjYwMTAxMTQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmZiYzRmZjY2MmZlYmEwMjgxODNiNWFiNzc2M2NmNGZlNjEzYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K90RfDwd8HwKXOcOxulNw/fYCoN WSf0kzlIZdBLf5R6DfEP4FwarFZuWgl4kDI4A8iqAiLUX0czc8If5fNhpzlSsXrw mAfdodqj1QIGxssO5WGaGCTQW4aaYF7EJWMAV5mlQvnIcvYNQ93NLF4YVBy7Ur7a 0Gz+sec5mWyCPKYia0uaLzPY6yN1oPYyzXol91F5p3YSpo1nu5sqZkPnROH2vmmI YtpzQ/rFBARcwJQAu5+pgeDGZQP8/fMi0MmtqDK2SoXxWp6vojcyIGkAqQ6sxyOw TmrHQ+xPSmgbj0tDptsHmsBcAz+NTlgxvGppUUGgdUMLGM/8cfZT2o1PwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNv7xP9mL+ugKBg7Wrd2PPT+YTsiMB8GA1UdIwQY MBaAFLadKLfQKMq7loSoDhS6rxXKb9L2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iMjJjMWUtY2E0Yy00ODFlLTkxYTIt NWM5MzIzOWU1ZTJlLzEvMl92RV8yWXY2NkFvR0R0YXQzWTg5UDVoT3lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9iMjJjMWUtY2E0Yy00ODFlLTkxYTItNWM5MzIzOWU1ZTJl LzEvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZA8MA0G CSqGSIb3DQEBCwUAA4IBAQAfoy/qBMg6pDSN7Wv5a03+BjxKpg8t6PcO8RjT2R7b DCgll38C69ZoFwr9e9329SlwOLHYaPON37dCgbQQBD227fg/xaDY+I0q+3s7QRUU SPsMjx0Qvenw1i4CoqLD0Gm3Ec1lzqJrkAbdJF0ciOddc6FBgNPVRHEwm/4M7Tmw sClwyFCTwAL+O/9CKmp9BIKapS8TfitLbF8raxz0IC12NxfmZaWHNusi4AZJEDmo D0XV799SrLzaS2OqmquWIfAweEGw3EFFKk7Ukok0Su0KWRsawY480Wjg/6Yf20qO HIbbVacqJm11Gp1RoJp7+hT9bTaY4CKH90tayRc7JLm2 -----END CERTIFICATE-----Generated at Mon Jan 26 14:53:23 2026 by rpki-client