This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/2C6Ya6h31uul1QKjxJOYJtW0-Js.roa File: 2C6Ya6h31uul1QKjxJOYJtW0-Js.roa (raw, json) Hash identifier: GfQhpseBFat/Xeckvhncromu6LqqPVkLS18vLbabiRM= Subject key identifier: D8:2E:98:6B:A8:77:D6:EB:A5:D5:02:A3:C4:93:98:26:D5:B4:F8:9B Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d Certificate serial: 019B7AC78790BB2F7931BD52D48EFC4F01CB Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/2C6Ya6h31uul1QKjxJOYJtW0-Js.roa Signing time: Thu 01 Jan 2026 18:17:35 +0000 ROA not before: Thu 01 Jan 2026 18:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28953 IP address blocks: 195.39.236.0/24 maxlen: 24 195.39.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:87:90:bb:2f:79:31:bd:52:d4:8e:fc:4f:01:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d Validity Not Before: Jan 1 18:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d82e986ba877d6eba5d502a3c4939826d5b4f89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:10:75:c6:e1:45:4a:2e:5a:e4:04:57:ca: f6:9c:5b:6f:af:dc:83:a5:29:96:ad:51:5e:af:be: 60:e0:e8:9b:17:57:e2:49:a0:4c:cb:fc:e3:21:13: 3a:43:64:5d:43:45:85:fa:35:e1:ee:f6:c6:5c:68: 3f:74:3b:71:2e:b4:aa:e5:79:0f:07:95:17:26:c8: 6b:47:34:98:7c:df:84:16:9a:8a:e7:2a:9d:0b:33: d1:0f:e3:8f:4c:10:4c:e7:32:11:e7:25:a0:cc:54: bd:60:ed:e2:90:e6:9e:3c:8d:91:e3:10:ce:d7:25: 85:86:27:a6:13:3d:fe:e6:50:18:ad:7f:cd:1c:f1: 09:1b:44:f9:84:0b:8e:86:8f:24:76:44:5a:1d:0d: af:88:10:3f:b3:99:b8:21:4f:88:98:e1:12:00:d1: ec:f1:21:61:86:01:ad:bc:46:d3:e3:cd:8c:62:28: 9a:a0:19:c2:7e:40:ef:b6:e8:5a:3f:8b:3d:df:11: cd:0f:5f:b0:24:fc:42:75:32:a5:79:df:b8:2b:82: 80:8a:08:36:8b:96:12:02:fe:1c:15:02:c5:fb:ae: 5a:ce:ef:cb:8b:bb:69:d0:02:e8:6a:51:43:6f:b0: 13:fa:ea:b3:60:b5:91:a4:72:c9:5e:99:e0:db:17: 2a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2E:98:6B:A8:77:D6:EB:A5:D5:02:A3:C4:93:98:26:D5:B4:F8:9B X509v3 Authority Key Identifier: keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/2C6Ya6h31uul1QKjxJOYJtW0-Js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.39.236.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:3d:d0:47:81:d5:f9:4d:59:5d:a7:df:bd:ae:a6:94:20:90: 69:fc:94:c5:c9:3b:f1:6b:bf:50:65:f0:21:09:6a:f7:bf:ca: 0e:7e:65:d1:55:7e:3e:a3:52:db:17:eb:13:5e:98:57:98:72: 65:2c:93:f0:d3:73:86:e7:c4:46:84:d3:01:fc:38:f1:db:05: 71:bb:66:b8:98:9c:cd:26:04:23:19:25:ca:fc:c2:df:e7:6e: 89:db:0a:10:0f:c1:3c:3b:5f:50:73:ad:26:61:cc:e9:3d:b4: 6b:8f:ee:cf:d6:d0:39:c9:6f:95:96:90:bd:56:44:4b:bb:20: 05:35:ae:1a:9e:7d:38:3f:d0:59:cd:c0:cd:59:9c:cc:68:b8: 78:4a:83:61:1f:70:00:1a:a0:64:2b:5b:7e:f7:8a:af:dc:59: 89:28:af:59:88:97:9b:5c:a4:bc:15:1b:3f:86:58:2e:1e:b4: c3:13:8b:0f:37:d2:74:f5:b5:83:36:04:18:bb:1e:c0:a9:f6: 44:7e:ce:a7:44:08:fc:49:14:bc:f9:9d:ec:20:cc:a0:74:3d: 4e:62:2b:ce:b4:6c:77:1c:f2:a6:84:43:5e:46:1b:02:d5:51: cd:77:21:b4:f6:87:2f:02:28:9e:18:6f:2c:bd:6d:d1:3a:4f: 0d:b2:32:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4eQuy95Mb1S1I78TwHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NWIzMzZjM2U0ODk3YTUyYjM5YzNhZGFhZWNjZWM2YmY3 MGNlN2QwHhcNMjYwMTAxMTgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODJlOTg2YmE4NzdkNmViYTVkNTAyYTNjNDkzOTgyNmQ1YjRmODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBkQdcbhRUouWuQEV8r2nFtvr9yD pSmWrVFer75g4OibF1fiSaBMy/zjIRM6Q2RdQ0WF+jXh7vbGXGg/dDtxLrSq5XkP B5UXJshrRzSYfN+EFpqK5yqdCzPRD+OPTBBM5zIR5yWgzFS9YO3ikOaePI2R4xDO 1yWFhiemEz3+5lAYrX/NHPEJG0T5hAuOho8kdkRaHQ2viBA/s5m4IU+ImOESANHs 8SFhhgGtvEbT482MYiiaoBnCfkDvtuhaP4s93xHND1+wJPxCdTKled+4K4KAigg2 i5YSAv4cFQLF+65azu/Li7tp0ALoalFDb7AT+uqzYLWRpHLJXpng2xcqxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNgumGuod9brpdUCo8STmCbVtPibMB8GA1UdIwQY MBaAFHdbM2w+SJelKznDrarszsa/cM59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2Qt M2RjMTQxNzBkNjJhLzEvMkM2WWE2aDMxdXVsMVFLanhKT1lKdFcwLUpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2QtM2RjMTQxNzBkNjJh LzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwyfsMA0G CSqGSIb3DQEBCwUAA4IBAQB6PdBHgdX5TVldp9+9rqaUIJBp/JTFyTvxa79QZfAh CWr3v8oOfmXRVX4+o1LbF+sTXphXmHJlLJPw03OG58RGhNMB/Djx2wVxu2a4mJzN JgQjGSXK/MLf526J2woQD8E8O19Qc60mYczpPbRrj+7P1tA5yW+VlpC9VkRLuyAF Na4ann04P9BZzcDNWZzMaLh4SoNhH3AAGqBkK1t+94qv3FmJKK9ZiJebXKS8FRs/ hlguHrTDE4sPN9J09bWDNgQYux7AqfZEfs6nRAj8SRS8+Z3sIMygdD1OYivOtGx3 HPKmhENeRhsC1VHNdyG09ocvAiieGG8svW3ROk8NsjJi -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:16 2026 by rpki-client