This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/2W2MCcTiOGzKibb9IktRwoV7t7w.roa File: 2W2MCcTiOGzKibb9IktRwoV7t7w.roa (raw, json) Hash identifier: 9hzbcjFutrF6fmKr1I+WiZpYh5ANj2nzThUtT9+uWLQ= Subject key identifier: D9:6D:8C:09:C4:E2:38:6C:CA:89:B6:FD:22:4B:51:C2:85:7B:B7:BC Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA808C5683C84FC38DDB458FE81F8F Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/2W2MCcTiOGzKibb9IktRwoV7t7w.roa Signing time: Fri 02 Jan 2026 08:19:41 +0000 ROA not before: Fri 02 Jan 2026 08:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.217.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:80:8c:56:83:c8:4f:c3:8d:db:45:8f:e8:1f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d96d8c09c4e2386cca89b6fd224b51c2857bb7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bd:ce:91:ae:29:91:7a:e2:91:68:4c:df:64: 93:a8:db:e2:11:27:e0:b8:8a:fa:e6:bc:db:3d:67: e6:28:2f:ac:3f:84:e8:eb:6a:53:98:91:27:cf:3b: f7:6a:13:07:c9:b1:a5:9a:82:28:ae:94:a2:09:f2: 82:55:99:02:04:bf:78:5f:8d:0e:94:54:0a:01:aa: f9:15:bb:d7:fa:ed:0d:d4:8a:38:80:44:5f:68:9f: 46:8a:ae:2d:bc:47:39:67:03:97:0c:6b:88:01:1f: a7:18:61:47:50:c4:fa:6f:3b:a8:d2:44:ff:13:46: 22:12:28:91:32:26:8b:cd:71:62:c8:02:18:13:98: 35:2b:d8:97:cc:de:45:a0:f6:c0:01:cc:3c:98:9e: 66:af:0b:e3:b8:18:62:68:2d:72:1e:97:b4:9c:0d: cf:47:20:df:1b:98:b6:c2:d8:b3:66:45:f4:f8:14: e7:56:3c:58:5c:61:da:9c:30:fd:32:72:84:b9:89: 19:95:26:b4:a1:01:75:60:49:4c:16:cf:df:56:d0: 0e:b4:bb:18:4d:83:13:cc:ef:d3:22:70:01:0d:42: 14:0b:4c:e9:7b:76:e4:ed:c4:e4:55:d6:e1:d7:61: 0e:94:eb:fc:cf:24:ef:d2:5d:61:ca:4b:91:48:bc: 8f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6D:8C:09:C4:E2:38:6C:CA:89:B6:FD:22:4B:51:C2:85:7B:B7:BC X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/2W2MCcTiOGzKibb9IktRwoV7t7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.192.0/23 Signature Algorithm: sha256WithRSAEncryption 01:eb:70:6b:aa:c8:34:a4:1f:b2:1b:d6:47:1a:49:81:95:70: bf:f6:4a:fe:b4:24:dc:04:69:ea:3f:fb:3b:7c:0b:24:6b:60: 57:fa:55:b3:05:e6:6f:06:9c:5b:36:b2:0e:c4:ac:6d:ac:00: 94:8b:9f:5c:95:97:b1:58:8e:9f:59:57:37:ba:7e:1b:2e:f1: 7c:98:f8:b2:50:a0:7a:dc:b6:4e:c3:bb:2d:71:20:1e:ba:2e: d9:ca:d0:dd:6a:7c:a0:01:93:5e:c4:d0:73:20:13:72:f9:78: a6:08:60:ad:c6:c6:b2:97:10:9f:26:56:6c:b1:5a:83:f1:b6: 59:e9:bd:29:f1:45:4d:9e:38:0f:90:45:12:85:e6:e2:c4:55: c5:fb:eb:ed:78:a8:05:4c:27:7b:13:f7:0b:fd:d5:04:38:37: b7:f2:bd:2e:9b:9f:45:2d:de:bd:c1:7c:40:63:8a:3a:65:75: b0:74:12:24:95:6b:50:cc:0c:42:53:37:cc:93:b8:8f:34:03: 82:4e:3d:fe:8d:69:f4:ae:96:d1:40:1e:27:fa:62:dd:54:51: 12:84:5a:54:a1:77:73:0f:30:9a:4e:83:b0:f3:1f:00:e1:5e: c9:ff:a0:e4:f1:9e:df:57:cd:56:25:15:9f:79:55:9a:4e:d2: 6e:11:68:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yoCMVoPIT8ON20WP6B+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTZkOGMwOWM0ZTIzODZjY2E4OWI2ZmQyMjRiNTFjMjg1N2JiN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr3Oka4pkXrikWhM32STqNviESfg uIr65rzbPWfmKC+sP4To62pTmJEnzzv3ahMHybGlmoIorpSiCfKCVZkCBL94X40O lFQKAar5FbvX+u0N1Io4gERfaJ9Giq4tvEc5ZwOXDGuIAR+nGGFHUMT6bzuo0kT/ E0YiEiiRMiaLzXFiyAIYE5g1K9iXzN5FoPbAAcw8mJ5mrwvjuBhiaC1yHpe0nA3P RyDfG5i2wtizZkX0+BTnVjxYXGHanDD9MnKEuYkZlSa0oQF1YElMFs/fVtAOtLsY TYMTzO/TInABDUIUC0zpe3bk7cTkVdbh12EOlOv8zyTv0l1hykuRSLyPsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNltjAnE4jhsyom2/SJLUcKFe7e8MB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvMlcyTUNjVGlPR3pLaWJiOUlrdFJ3b1Y3dDd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudnAMA0G CSqGSIb3DQEBCwUAA4IBAQAB63Brqsg0pB+yG9ZHGkmBlXC/9kr+tCTcBGnqP/s7 fAska2BX+lWzBeZvBpxbNrIOxKxtrACUi59clZexWI6fWVc3un4bLvF8mPiyUKB6 3LZOw7stcSAeui7ZytDdanygAZNexNBzIBNy+XimCGCtxsaylxCfJlZssVqD8bZZ 6b0p8UVNnjgPkEUShebixFXF++vteKgFTCd7E/cL/dUEODe38r0um59FLd69wXxA Y4o6ZXWwdBIklWtQzAxCUzfMk7iPNAOCTj3+jWn0rpbRQB4n+mLdVFEShFpUoXdz DzCaToOw8x8A4V7J/6Dk8Z7fV81WJRWfeVWaTtJuEWgH -----END CERTIFICATE-----Generated at Sat Jan 17 08:23:53 2026 by rpki-client