This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/2HdAV3PGBEUlasUNtW_jCYoPD3Y.roa File: 2HdAV3PGBEUlasUNtW_jCYoPD3Y.roa (raw, json) Hash identifier: ync7Bqe2ZS8Us4KTHfLVYTl8WbPdgW2Owp+mtCPVyr4= Subject key identifier: D8:77:40:57:73:C6:04:45:25:6A:C5:0D:B5:6F:E3:09:8A:0F:0F:76 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F844AE567236D5BFD46B00E95952EEB Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/2HdAV3PGBEUlasUNtW_jCYoPD3Y.roa Signing time: Fri 02 Jan 2026 16:22:14 +0000 ROA not before: Fri 02 Jan 2026 16:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199959 IP address blocks: 45.128.156.0/24 maxlen: 24 45.141.60.0/24 maxlen: 24 185.227.83.0/24 maxlen: 24 195.88.191.0/24 maxlen: 24 2a0b:3c40:50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4a:e5:67:23:6d:5b:fd:46:b0:0e:95:95:2e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d877405773c60445256ac50db56fe3098a0f0f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:86:31:c6:87:5b:91:65:02:15:98:1f:79: 48:6d:26:a8:6f:83:92:01:f0:6e:89:c8:a4:43:8e: 65:36:9f:b9:8a:07:82:9f:29:55:a3:5e:2f:b3:d9: 31:79:ef:42:7b:30:fe:b1:b4:23:06:34:39:c0:ec: 4f:2e:cf:f6:8b:c1:ca:51:78:9c:11:40:57:96:64: a7:e8:8d:ca:f8:99:5a:c9:52:b4:0c:f2:86:9e:04: ca:2c:40:17:30:b2:fc:62:c3:6c:be:f3:87:ab:66: 35:ef:0b:37:75:ef:b3:8d:c6:07:33:50:2e:3f:25: 73:a3:40:e5:e0:32:48:7e:8e:1b:24:52:21:89:50: b3:f3:fa:10:33:c9:cc:54:fc:9c:6d:68:ba:af:20: 19:50:34:df:65:c1:ec:71:4c:b1:8c:44:f9:50:bc: f4:05:40:a4:f6:08:f2:20:47:b5:ec:b0:39:28:fb: 3c:34:08:c6:72:41:82:0a:3a:d9:0f:e4:85:0b:07: 82:7c:4f:e8:7e:b1:2c:98:cb:28:55:d1:dc:08:ea: 2f:17:3e:62:d4:53:e2:c2:9f:30:82:2e:0d:5c:00: cc:f0:d7:bf:cf:04:55:88:db:2f:c7:b9:26:05:77: 72:08:c1:54:5f:8f:c7:39:18:8f:26:56:26:2a:ff: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:77:40:57:73:C6:04:45:25:6A:C5:0D:B5:6F:E3:09:8A:0F:0F:76 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/2HdAV3PGBEUlasUNtW_jCYoPD3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.156.0/24 45.141.60.0/24 185.227.83.0/24 195.88.191.0/24 IPv6: 2a0b:3c40:50::/48 Signature Algorithm: sha256WithRSAEncryption 83:6b:e6:85:eb:66:f2:6f:45:a7:67:03:5b:89:69:82:13:40: ae:12:50:4e:56:e1:2f:4b:b9:2a:59:cd:80:84:2a:a3:58:b8: fc:8a:1a:0e:fe:40:2c:b1:15:03:2a:cb:af:a0:79:8f:ae:cb: 8b:3c:1d:29:18:33:c6:6c:e5:82:cd:23:90:0c:53:5d:a1:cf: 02:f8:4a:ad:5f:7a:a7:5f:f1:ed:d4:ee:a0:2f:30:52:c5:48: 2b:56:d2:91:e9:ef:5e:c6:27:aa:d7:e1:a2:1a:53:b0:19:cb: f8:82:c7:79:5a:6f:20:15:19:a0:3f:e4:ff:36:58:4f:56:33: a6:a0:c7:e5:1a:b2:f2:0d:49:33:9d:c6:91:19:52:a7:ed:3a: b8:73:61:60:9b:16:74:9f:d1:e9:30:41:96:b3:7e:33:88:55: 11:ef:23:5a:17:9f:60:20:31:f8:c6:58:90:5a:aa:fd:7d:40: 82:c8:71:d5:0e:a4:d4:f4:08:03:e6:9c:24:9f:9a:d1:8a:99: 11:37:b0:ad:21:44:14:cb:e1:1e:5d:70:d2:8c:06:b2:97:16: a8:ae:7c:4e:28:54:13:93:cf:d6:f8:6a:7e:24:d8:79:70:60: 44:ff:3a:65:3f:5d:ef:b7:a1:4a:c5:37:c0:3d:14:c0:07:fd: 0c:60:73:11 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt/hErlZyNtW/1GsA6VlS7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODc3NDA1NzczYzYwNDQ1MjU2YWM1MGRiNTZmZTMwOThhMGYwZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBeGMcaHW5FlAhWYH3lIbSaob4OS AfBuicikQ45lNp+5igeCnylVo14vs9kxee9CezD+sbQjBjQ5wOxPLs/2i8HKUXic EUBXlmSn6I3K+JlayVK0DPKGngTKLEAXMLL8YsNsvvOHq2Y17ws3de+zjcYHM1Au PyVzo0Dl4DJIfo4bJFIhiVCz8/oQM8nMVPycbWi6ryAZUDTfZcHscUyxjET5ULz0 BUCk9gjyIEe17LA5KPs8NAjGckGCCjrZD+SFCweCfE/ofrEsmMsoVdHcCOovFz5i 1FPiwp8wgi4NXADM8Ne/zwRViNsvx7kmBXdyCMFUX4/HORiPJlYmKv+u3QIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFNh3QFdzxgRFJWrFDbVv4wmKDw92MB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvMkhkQVYzUEdCRVVsYXNVTnRXX2pDWW9QRDNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALYCcAwQA LY08AwQAueNTAwQAw1i/MA8EAgACMAkDBwAqCzxAAFAwDQYJKoZIhvcNAQELBQAD ggEBAINr5oXrZvJvRadnA1uJaYITQK4SUE5W4S9LuSpZzYCEKqNYuPyKGg7+QCyx FQMqy6+geY+uy4s8HSkYM8Zs5YLNI5AMU12hzwL4Sq1feqdf8e3U7qAvMFLFSCtW 0pHp717GJ6rX4aIaU7AZy/iCx3labyAVGaA/5P82WE9WM6agx+UasvINSTOdxpEZ UqftOrhzYWCbFnSf0ekwQZazfjOIVRHvI1oXn2AgMfjGWJBaqv19QILIcdUOpNT0 CAPmnCSfmtGKmRE3sK0hRBTL4R5dcNKMBrKXFqiufE4oVBOTz9b4an4k2HlwYET/ OmU/Xe+3oUrFN8A9FMAH/QxgcxE= -----END CERTIFICATE-----Generated at Wed Jan 21 16:56:58 2026 by rpki-client