This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/A2vx8dPvi8lw7Dkyn8bqOj231XY.roa File: A2vx8dPvi8lw7Dkyn8bqOj231XY.roa (raw, json) Hash identifier: ACo6De/Y+zVUWTtOyoT+9Z3vawirXsPXVlOQSlPRQPU= Subject key identifier: 03:6B:F1:F1:D3:EF:8B:C9:70:EC:39:32:9F:C6:EA:3A:3D:B7:D5:76 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC82C9F175AE4378920327585A0D8DB Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/A2vx8dPvi8lw7Dkyn8bqOj231XY.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 2.58.124.0/24 maxlen: 24 2.58.125.0/24 maxlen: 24 2.58.126.0/24 maxlen: 24 2.58.127.0/24 maxlen: 24 45.83.182.0/24 maxlen: 24 45.83.183.0/24 maxlen: 24 45.150.110.0/24 maxlen: 24 92.118.125.0/24 maxlen: 24 92.118.126.0/24 maxlen: 24 92.118.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2c:9f:17:5a:e4:37:89:20:32:75:85:a0:d8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=036bf1f1d3ef8bc970ec39329fc6ea3a3db7d576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:a8:8a:2c:63:e2:3b:df:50:13:66:13:12: 58:5c:19:2c:77:8f:00:51:8a:ab:bd:4e:8a:80:b9: b4:20:fc:28:84:39:dd:80:d5:f2:cc:51:db:59:a3: bf:ec:25:34:1b:e3:40:00:cc:8d:01:18:18:29:50: ca:ad:95:7c:b3:78:b0:d6:0e:8e:f0:2e:7a:bd:07: 7c:17:cc:a9:ab:3b:52:b6:21:98:21:ce:a0:fe:e3: e6:be:7d:91:d5:60:23:c5:71:61:bc:7c:0d:a1:0b: c5:12:2f:c5:2e:e6:5b:98:89:6b:73:79:2f:67:85: 25:a6:bb:36:1d:09:e5:b9:b5:e7:ca:cb:aa:2f:d6: 33:8a:9a:d3:78:98:c2:e9:c8:91:f9:5a:f0:1b:d4: 78:76:0b:25:dd:b6:32:ec:5f:f9:84:a3:55:10:c0: e3:f9:d8:5d:ff:3e:a7:98:6f:c1:57:74:a8:53:ff: c6:de:80:35:85:4d:5f:cf:29:08:96:1a:61:eb:a5: 30:78:aa:32:47:1d:8f:d8:30:ab:01:53:1d:9f:35: b8:fb:8e:2c:c0:a4:d2:d1:fe:a8:54:d8:2e:f2:f0: a0:3a:93:0c:7f:d3:fd:e5:32:ed:24:c2:23:e4:0d: 17:a2:31:42:70:65:d2:e9:d9:d1:d3:2a:88:0b:31: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6B:F1:F1:D3:EF:8B:C9:70:EC:39:32:9F:C6:EA:3A:3D:B7:D5:76 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/A2vx8dPvi8lw7Dkyn8bqOj231XY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.124.0/22 45.83.182.0/23 45.150.110.0/24 92.118.125.0-92.118.127.255 Signature Algorithm: sha256WithRSAEncryption 7a:bc:38:fc:50:d9:fb:8f:9d:36:a4:89:f9:86:8e:34:9c:31: 4a:79:f0:ed:2d:90:25:a2:aa:fc:03:21:6d:f5:16:0d:ad:1a: 5a:33:b0:d2:07:54:e0:e6:90:ae:c8:08:38:6b:e9:7a:f6:83: c2:b7:24:3d:eb:b3:89:eb:c7:45:9b:ec:a2:52:80:c8:a6:38: b0:6c:36:b1:5d:8f:c6:7a:d6:1b:c1:91:1a:ee:33:cc:74:15: 58:bc:9e:2f:f8:5d:80:7f:34:9c:65:e4:47:4e:b5:29:e3:bb: 67:83:ba:7f:b8:84:44:5a:d1:97:94:7d:ee:a7:28:8e:f4:cb: d5:26:3f:dd:9c:a9:db:17:c8:58:b7:79:8e:ef:79:22:20:c1: bd:be:21:eb:c7:24:85:ce:ed:47:92:96:b4:13:b3:2d:2f:03: 9f:5b:3f:3b:24:15:1b:30:f6:98:a0:83:6d:5d:3b:4e:b2:fd: 6e:55:cf:a3:4e:7f:52:86:c9:f7:98:66:3a:1d:42:1a:5a:47: f8:c2:c4:57:6f:27:ec:38:9f:32:72:7a:91:79:44:8e:88:5c: 57:ca:b2:23:95:ac:74:4b:d9:c9:ff:58:2a:4d:e0:0f:1e:d4: c9:cf:3a:19:4e:b5:37:0b:f4:f9:70:72:d7:ef:49:cc:ef:e2: ee:a0:6d:35 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6yCyfF1rkN4kgMnWFoNjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzZiZjFmMWQzZWY4YmM5NzBlYzM5MzI5ZmM2ZWEzYTNkYjdkNTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQmoiixj4jvfUBNmExJYXBksd48A UYqrvU6KgLm0IPwohDndgNXyzFHbWaO/7CU0G+NAAMyNARgYKVDKrZV8s3iw1g6O 8C56vQd8F8ypqztStiGYIc6g/uPmvn2R1WAjxXFhvHwNoQvFEi/FLuZbmIlrc3kv Z4Ulprs2HQnlubXnysuqL9YziprTeJjC6ciR+VrwG9R4dgsl3bYy7F/5hKNVEMDj +dhd/z6nmG/BV3SoU//G3oA1hU1fzykIlhph66UweKoyRx2P2DCrAVMdnzW4+44s wKTS0f6oVNgu8vCgOpMMf9P95TLtJMIj5A0XojFCcGXS6dnR0yqICzHK5QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFANr8fHT74vJcOw5Mp/G6jo9t9V2MB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvQTJ2eDhkUHZpOGx3N0RreW44YnFPajIzMVhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCAjp8AwQB LVO2AwQALZZuMAwDBABcdn0DBAdcdgAwDQYJKoZIhvcNAQELBQADggEBAHq8OPxQ 2fuPnTakifmGjjScMUp58O0tkCWiqvwDIW31Fg2tGlozsNIHVODmkK7ICDhr6Xr2 g8K3JD3rs4nrx0Wb7KJSgMimOLBsNrFdj8Z61hvBkRruM8x0FVi8ni/4XYB/NJxl 5EdOtSnju2eDun+4hERa0ZeUfe6nKI70y9UmP92cqdsXyFi3eY7veSIgwb2+IevH JIXO7UeSlrQTsy0vA59bPzskFRsw9pigg21dO06y/W5Vz6NOf1KGyfeYZjodQhpa R/jCxFdvJ+w4nzJyepF5RI6IXFfKsiOVrHRL2cn/WCpN4A8e1MnPOhlOtTcL9Plw ctfvSczv4u6gbTU= -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:50 2026 by rpki-client