This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/2e9LSNAqhLRT7BWU4DhRYt_D284.roa File: 2e9LSNAqhLRT7BWU4DhRYt_D284.roa (raw, json) Hash identifier: LhrPgLlELaQl4rIr+j03mkYm6Ou6QZ4My1odiBtlrTs= Subject key identifier: D9:EF:4B:48:D0:2A:84:B4:53:EC:15:94:E0:38:51:62:DF:C3:DB:CE Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5 Certificate serial: 019B7A59B84269FD8E8F1E2356C300D24F0A Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/2e9LSNAqhLRT7BWU4DhRYt_D284.roa Signing time: Thu 01 Jan 2026 16:17:38 +0000 ROA not before: Thu 01 Jan 2026 16:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41281 IP address blocks: 45.154.252.0/24 maxlen: 24 45.154.254.0/24 maxlen: 24 45.154.255.0/24 maxlen: 24 193.189.100.0/24 maxlen: 24 193.189.101.0/24 maxlen: 24 2001:67c:130c::/48 maxlen: 48 2a0f:df00::/48 maxlen: 48 2a0f:df00:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:b8:42:69:fd:8e:8f:1e:23:56:c3:00:d2:4f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5 Validity Not Before: Jan 1 16:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9ef4b48d02a84b453ec1594e0385162dfc3dbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:c0:1d:21:dd:f8:67:52:d2:75:67:64:d3: 19:f8:16:11:f6:74:95:79:1f:ac:d5:ee:a3:cc:5e: 93:fa:d2:07:58:ba:e5:fa:96:b4:9b:6e:56:e7:e8: 4c:70:38:bb:f0:e0:47:32:d1:51:07:e5:bc:5a:ac: 1f:16:20:af:a5:7b:10:28:7b:c2:93:c2:e9:fb:da: c2:00:02:f2:10:e3:40:4e:c3:74:c1:1c:9c:b3:30: 1c:29:8e:d9:84:45:5e:eb:09:6c:33:17:eb:c2:07: c1:6d:6a:ac:a8:6c:ec:b3:9f:5a:dc:41:65:47:7a: 42:c1:a5:e1:c6:73:49:84:86:d6:14:a8:f6:d5:48: 6e:40:60:23:d3:4d:c7:c7:b1:4e:47:aa:49:5f:77: c0:1b:f5:d7:50:94:e6:83:a2:cf:cc:d4:19:57:29: d3:3d:c0:e3:79:4f:11:e5:e2:2e:be:55:9f:46:2e: fe:a1:d9:ba:67:cf:08:f8:2a:0b:05:04:e2:b4:85: 7d:e0:2d:53:5f:d3:ec:34:ea:19:95:43:dc:45:e8: fd:32:63:2f:81:b5:bd:80:53:9e:74:ee:64:5f:cb: 32:24:02:d9:9d:3d:d3:64:02:e8:d8:3c:a0:46:b8: b9:b6:2b:5b:81:6b:75:f4:b9:c0:b6:8a:49:7b:9c: ee:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EF:4B:48:D0:2A:84:B4:53:EC:15:94:E0:38:51:62:DF:C3:DB:CE X509v3 Authority Key Identifier: keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/2e9LSNAqhLRT7BWU4DhRYt_D284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.252.0/24 45.154.254.0/23 193.189.100.0/23 IPv6: 2001:67c:130c::/48 2a0f:df00::/48 2a0f:df00:dead::/48 Signature Algorithm: sha256WithRSAEncryption 6a:3c:15:14:87:35:e6:e8:2b:b9:b2:c9:3f:ec:7a:c5:ea:15: 0b:2b:7d:51:8f:8d:49:06:63:47:02:26:1f:22:65:df:76:52: 46:d5:e7:d3:4b:09:44:72:6f:e6:0b:c7:ea:2c:b3:15:3b:6b: e0:77:e1:b8:8a:36:7a:f9:16:c8:e1:da:8f:54:67:86:70:e0: 6f:1d:6a:68:3c:35:ce:a8:cd:e9:83:10:52:71:31:6d:bf:de: 7b:a8:9b:42:0e:45:9f:8c:b7:85:f1:94:da:3f:5a:00:cd:ff: da:88:8b:04:bb:8b:77:b1:db:92:b3:c3:a3:06:ec:c3:4b:3f: c8:7b:83:76:9f:e0:a5:14:19:ee:e1:98:4b:3e:98:9b:0d:e9: 14:25:4c:3d:10:a6:7c:69:9c:fc:0e:e8:4f:ed:b6:5e:26:28: fc:ca:6e:b7:83:04:4a:09:bc:d2:83:96:b3:9a:0b:60:00:2c: 72:08:40:ce:23:b1:56:62:10:81:11:c7:33:4a:e5:08:6b:c3: 87:28:74:e0:6f:03:cf:d7:76:30:1c:7b:d6:01:d4:41:b5:a6: f2:08:d0:42:d2:e0:2e:f3:43:5e:ec:28:f2:fc:6b:d4:3d:91: 95:ae:c9:7a:18:23:28:50:1e:f4:74:ac:53:f9:b1:2e:d0:64: d8:b2:36:df -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt6WbhCaf2Ojx4jVsMA0k8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4N2UzMWNlNWQ1MDFkMWE5NGFmZGFiYmQ0ZTAyNGNjMmE3 ODhlZjUwHhcNMjYwMTAxMTYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWVmNGI0OGQwMmE4NGI0NTNlYzE1OTRlMDM4NTE2MmRmYzNkYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9XAHSHd+GdS0nVnZNMZ+BYR9nSV eR+s1e6jzF6T+tIHWLrl+pa0m25W5+hMcDi78OBHMtFRB+W8WqwfFiCvpXsQKHvC k8Lp+9rCAALyEONATsN0wRycszAcKY7ZhEVe6wlsMxfrwgfBbWqsqGzss59a3EFl R3pCwaXhxnNJhIbWFKj21UhuQGAj003Hx7FOR6pJX3fAG/XXUJTmg6LPzNQZVynT PcDjeU8R5eIuvlWfRi7+odm6Z88I+CoLBQTitIV94C1TX9PsNOoZlUPcRej9MmMv gbW9gFOedO5kX8syJALZnT3TZALo2DygRri5titbgWt19LnAtopJe5zu/wIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFNnvS0jQKoS0U+wVlOA4UWLfw9vOMB8GA1UdIwQY MBaAFHh+Mc5dUB0alK/au9TgJMwqeI71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUt MjMwN2JiNTkyMjVmLzEvMmU5TFNOQXFoTFJUN0JXVTREaFJZdF9EMjg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUtMjMwN2JiNTkyMjVm LzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAYBAIAATASAwQALZr8AwQB LZr+AwQBwb1kMCEEAgACMBsDBwAgAQZ8EwwDBwAqD98AAAADBwAqD98A3q0wDQYJ KoZIhvcNAQELBQADggEBAGo8FRSHNeboK7myyT/sesXqFQsrfVGPjUkGY0cCJh8i Zd92UkbV59NLCURyb+YLx+ossxU7a+B34biKNnr5Fsjh2o9UZ4Zw4G8damg8Nc6o zemDEFJxMW2/3nuom0IORZ+Mt4XxlNo/WgDN/9qIiwS7i3ex25Kzw6MG7MNLP8h7 g3af4KUUGe7hmEs+mJsN6RQlTD0QpnxpnPwO6E/ttl4mKPzKbreDBEoJvNKDlrOa C2AALHIIQM4jsVZiEIERxzNK5Qhrw4codOBvA8/XdjAce9YB1EG1pvII0ELS4C7z Q17sKPL8a9Q9kZWuyXoYIyhQHvR0rFP5sS7QZNiyNt8= -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:44 2026 by rpki-client