This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2aUZkKObK-w7Ezbg8SbdTrxnHbc.roa File: 2aUZkKObK-w7Ezbg8SbdTrxnHbc.roa (raw, json) Hash identifier: qcIemitqEU2S4UyMSzW56fufjurxcAk4l1NUVEd+gvw= Subject key identifier: D9:A5:19:90:A3:9B:2B:EC:3B:13:36:E0:F1:26:DD:4E:BC:67:1D:B7 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA77932044FFAEA2C5977D972673605 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2aUZkKObK-w7Ezbg8SbdTrxnHbc.roa Signing time: Fri 02 Jan 2026 12:21:03 +0000 ROA not before: Fri 02 Jan 2026 12:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43574 IP address blocks: 78.156.224.0/19 maxlen: 19 109.172.56.0/24 maxlen: 24 109.172.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:79:32:04:4f:fa:ea:2c:59:77:d9:72:67:36:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9a51990a39b2bec3b1336e0f126dd4ebc671db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7f:54:77:2d:78:e0:4b:ab:8b:cc:d8:df:17: 06:4d:95:46:ad:1b:1b:e8:3d:51:48:f1:53:4a:7a: d7:c6:4d:48:a6:dc:71:52:9a:4a:f4:cd:94:1e:17: a0:2b:40:4a:d4:95:8b:a7:da:9e:68:77:01:ee:43: 6b:63:ed:29:20:66:58:f2:6c:e8:18:a7:3c:2a:ab: 29:32:16:1f:fc:fe:35:8e:6f:f1:18:ab:02:eb:30: 26:3e:73:be:ea:b3:da:f7:73:a0:89:e5:45:23:62: bf:a1:8a:38:6d:37:45:65:cc:17:4c:8d:31:5d:46: 4e:10:01:51:ef:2d:b3:8c:9f:3c:76:2d:28:8a:9b: 63:3a:75:bb:02:ad:78:11:25:aa:d3:8e:80:8a:f2: 8f:99:33:f2:90:28:3a:65:7f:5c:6b:ec:b3:fb:31: f4:94:f3:8e:1d:db:98:59:c5:ce:a4:ba:75:11:c2: 09:e3:5e:06:85:77:95:fc:dd:91:b1:f1:5b:26:1a: 8a:9d:9f:f3:0c:39:fc:d1:0b:d6:12:4a:72:4f:68: bb:2e:fc:a4:a9:b1:3e:6f:9b:5d:10:26:aa:88:48: 14:27:09:0a:c7:f3:1b:ed:f7:58:ff:d1:d2:c2:8f: 6e:54:80:57:21:8c:3f:ff:4b:da:4e:27:0e:97:32: e5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A5:19:90:A3:9B:2B:EC:3B:13:36:E0:F1:26:DD:4E:BC:67:1D:B7 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2aUZkKObK-w7Ezbg8SbdTrxnHbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.156.224.0/19 109.172.56.0/24 109.172.63.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:66:1f:0d:e4:7c:b7:ac:63:43:ac:4a:3b:79:a8:14:5f:75: 97:55:74:b0:fb:45:bb:14:d6:bc:8b:71:da:53:13:fd:a8:c7: 3d:e2:c7:e6:ea:31:d5:13:eb:95:8a:f0:54:08:ce:30:0b:b8: d5:7e:fb:6f:09:52:07:8e:dd:e1:d8:71:ff:cc:e7:b8:42:f0: e7:72:ce:f5:f2:06:9b:30:e2:d4:00:91:c7:a6:ec:2e:08:92: 11:75:2f:76:e3:3f:84:89:c5:35:86:a0:9e:5e:0b:08:36:25: 91:9c:40:73:c8:33:9c:b4:c4:af:df:77:48:1f:1c:67:61:8e: 83:fa:0c:d5:05:da:dc:d5:3d:dc:01:4f:23:13:41:db:a7:a1: 53:cd:36:7b:d7:dd:0d:6f:bf:1c:7e:95:79:fa:58:fb:a5:92: bb:d9:84:e1:7d:13:1a:07:ed:c3:e4:68:7b:39:3f:0d:2e:bb: d7:1f:65:36:a9:c1:23:7a:12:bf:bf:b4:dc:ab:6b:6e:ca:41: ae:1f:08:80:3e:e2:ad:52:16:49:be:6b:fb:34:4e:6d:11:46: 7f:26:d3:10:7f:4b:89:30:d1:90:59:66:a3:99:74:aa:ff:f6: 75:7c:94:03:d2:15:2c:e6:8e:b6:01:76:95:ed:f0:4b:76:13: 17:c0:89:d5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+p3kyBE/66ixZd9lyZzYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWE1MTk5MGEzOWIyYmVjM2IxMzM2ZTBmMTI2ZGQ0ZWJjNjcxZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H9Udy144Euri8zY3xcGTZVGrRsb 6D1RSPFTSnrXxk1IptxxUppK9M2UHhegK0BK1JWLp9qeaHcB7kNrY+0pIGZY8mzo GKc8KqspMhYf/P41jm/xGKsC6zAmPnO+6rPa93OgieVFI2K/oYo4bTdFZcwXTI0x XUZOEAFR7y2zjJ88di0oiptjOnW7Aq14ESWq046AivKPmTPykCg6ZX9ca+yz+zH0 lPOOHduYWcXOpLp1EcIJ414GhXeV/N2RsfFbJhqKnZ/zDDn80QvWEkpyT2i7Lvyk qbE+b5tdECaqiEgUJwkKx/Mb7fdY/9HSwo9uVIBXIYw//0vaTicOlzLllQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNmlGZCjmyvsOxM24PEm3U68Zx23MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvMmFVWmtLT2JLLXc3RXpiZzhTYmRUcnhuSGJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFTpzgAwQA baw4AwQAbaw/MA0GCSqGSIb3DQEBCwUAA4IBAQA+Zh8N5Hy3rGNDrEo7eagUX3WX VXSw+0W7FNa8i3HaUxP9qMc94sfm6jHVE+uVivBUCM4wC7jVfvtvCVIHjt3h2HH/ zOe4QvDncs718gabMOLUAJHHpuwuCJIRdS924z+EicU1hqCeXgsINiWRnEBzyDOc tMSv33dIHxxnYY6D+gzVBdrc1T3cAU8jE0Hbp6FTzTZ7190Nb78cfpV5+lj7pZK7 2YThfRMaB+3D5Gh7OT8NLrvXH2U2qcEjehK/v7Tcq2tuykGuHwiAPuKtUhZJvmv7 NE5tEUZ/JtMQf0uJMNGQWWajmXSq//Z1fJQD0hUs5o62AXaV7fBLdhMXwInV -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:57 2026 by rpki-client