This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/2Y22JjtWrl0_nviPCh47UcoiEMc.roa File: 2Y22JjtWrl0_nviPCh47UcoiEMc.roa (raw, json) Hash identifier: MjixCwl1roku3r8M7cAmmfjxaUIrhcvJpiUdNlV6IQQ= Subject key identifier: D9:8D:B6:26:3B:56:AE:5D:3F:9E:F8:8F:0A:1E:3B:51:CA:22:10:C7 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019B791133238B8C64FCEDAFEA51D7E4AB80 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/2Y22JjtWrl0_nviPCh47UcoiEMc.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51238 IP address blocks: 109.236.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:33:23:8b:8c:64:fc:ed:af:ea:51:d7:e4:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d98db6263b56ae5d3f9ef88f0a1e3b51ca2210c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5e:43:05:df:ca:de:1e:f5:94:e6:2f:8b:54: 01:18:c6:f0:d2:cd:f7:d3:b1:e9:d8:98:22:9d:a1: 79:a2:7b:eb:fa:c1:f0:da:08:74:7c:fe:5b:e2:7c: dc:d2:65:8c:f3:20:d3:f5:a9:c9:2a:4e:cb:ef:89: 64:3f:69:97:04:bc:4d:58:2f:17:a6:42:57:5f:b5: 61:e9:25:b7:9f:45:cf:d5:b0:55:bc:62:12:7f:77: b5:de:7a:84:22:e6:36:73:fc:d1:db:20:d2:51:82: 1c:f2:ae:93:31:79:31:39:54:3d:a0:da:6a:8d:39: 4a:cb:fc:1e:b6:9d:a3:af:92:01:31:a9:6b:89:5e: bf:11:d2:de:e0:89:bc:f5:5d:c5:f0:b4:34:7e:cc: 15:eb:9c:5c:06:f8:c3:c6:4e:13:9b:fa:8d:45:79: 01:52:8c:f1:4a:1e:06:34:06:86:fa:c8:2b:e5:e5: 11:d6:3c:df:b5:a3:27:da:d8:12:78:88:0a:bc:c7: d3:cb:c7:79:d8:6a:34:ff:72:0e:a0:95:b7:0f:31: 27:9f:bd:2a:e4:64:72:f9:8b:85:7e:f1:27:6b:b0: 83:e1:46:a2:b9:ef:f0:42:b7:2a:d7:0a:12:58:92: 70:1e:a3:1a:b9:2d:72:47:66:6c:87:32:45:d6:08: b3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8D:B6:26:3B:56:AE:5D:3F:9E:F8:8F:0A:1E:3B:51:CA:22:10:C7 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/2Y22JjtWrl0_nviPCh47UcoiEMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.250.0/24 Signature Algorithm: sha256WithRSAEncryption 51:3c:42:24:ce:af:3c:a0:86:b0:64:9e:79:81:26:4a:ae:08: 1c:c9:e5:14:37:6d:75:e0:1b:bc:8d:32:66:3f:0d:61:7a:9c: 72:f7:51:6a:46:d6:c6:be:8f:9c:43:be:44:55:12:09:7b:35: 6a:7a:c2:69:7c:90:01:99:5f:37:10:88:bb:df:5a:70:0a:4b: 13:c1:3a:80:76:8a:51:96:d2:27:30:2e:a2:ff:92:33:ec:38: 6f:39:73:d0:fa:0e:8e:7c:f5:bc:5a:60:91:85:54:7a:52:df: c8:f7:d3:35:43:42:9d:e0:4e:05:72:dc:7a:73:3b:3f:e6:e6: 90:9b:3b:00:aa:27:2e:f6:87:0b:d3:55:aa:04:e6:d1:bc:09: 14:97:1c:46:da:61:8a:ca:bf:57:3c:87:ee:92:82:34:39:0b: f6:25:8b:df:47:ef:a6:2f:ce:c3:6f:64:cd:37:2a:d5:6b:c2: 99:34:65:45:2f:b2:fa:0b:f9:7e:64:66:d2:92:db:e6:f5:9b: 31:e0:18:0e:3f:08:ff:a5:ce:b1:49:89:91:d3:86:8e:a0:63: 4a:97:fd:e4:dc:2d:88:f4:3c:6a:bb:2c:fb:2f:00:ab:1a:b6: 58:5c:3c:c0:77:9c:f5:1b:8d:d8:05:5f:e2:0c:bd:a1:d5:c8: ad:34:37:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETMji4xk/O2v6lHX5KuAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOThkYjYyNjNiNTZhZTVkM2Y5ZWY4OGYwYTFlM2I1MWNhMjIxMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA415DBd/K3h71lOYvi1QBGMbw0s33 07Hp2JginaF5onvr+sHw2gh0fP5b4nzc0mWM8yDT9anJKk7L74lkP2mXBLxNWC8X pkJXX7Vh6SW3n0XP1bBVvGISf3e13nqEIuY2c/zR2yDSUYIc8q6TMXkxOVQ9oNpq jTlKy/wetp2jr5IBMalriV6/EdLe4Im89V3F8LQ0fswV65xcBvjDxk4Tm/qNRXkB UozxSh4GNAaG+sgr5eUR1jzftaMn2tgSeIgKvMfTy8d52Go0/3IOoJW3DzEnn70q 5GRy+YuFfvEna7CD4Uaiue/wQrcq1woSWJJwHqMauS1yR2ZshzJF1gizFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNmNtiY7Vq5dP574jwoeO1HKIhDHMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvMlkyMkpqdFdybDBfbnZpUENoNDdVY29pRU1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbez6MA0G CSqGSIb3DQEBCwUAA4IBAQBRPEIkzq88oIawZJ55gSZKrggcyeUUN2114Bu8jTJm Pw1hepxy91FqRtbGvo+cQ75EVRIJezVqesJpfJABmV83EIi731pwCksTwTqAdopR ltInMC6i/5Iz7DhvOXPQ+g6OfPW8WmCRhVR6Ut/I99M1Q0Kd4E4Fctx6czs/5uaQ mzsAqicu9ocL01WqBObRvAkUlxxG2mGKyr9XPIfukoI0OQv2JYvfR++mL87Db2TN NyrVa8KZNGVFL7L6C/l+ZGbSktvm9Zsx4BgOPwj/pc6xSYmR04aOoGNKl/3k3C2I 9Dxquyz7LwCrGrZYXDzAd5z1G43YBV/iDL2h1citNDcs -----END CERTIFICATE-----Generated at Mon Jan 26 07:42:50 2026 by rpki-client