This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/2DMY4OZ-P0l7XFAVrcnoNtnZ_r8.roa File: 2DMY4OZ-P0l7XFAVrcnoNtnZ_r8.roa (raw, json) Hash identifier: 2FMBwvvINGY4tE8pGOzhgn9w8zBO7Q7KUVGJLpWK5M4= Subject key identifier: D8:33:18:E0:E6:7E:3F:49:7B:5C:50:15:AD:C9:E8:36:D9:D9:FE:BF Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a Certificate serial: 019B7C800776D4E4D26CF875F72FFF934755 Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/2DMY4OZ-P0l7XFAVrcnoNtnZ_r8.roa Signing time: Fri 02 Jan 2026 02:18:43 +0000 ROA not before: Fri 02 Jan 2026 02:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206031 IP address blocks: 89.207.120.0/24 maxlen: 24 89.207.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:07:76:d4:e4:d2:6c:f8:75:f7:2f:ff:93:47:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d83318e0e67e3f497b5c5015adc9e836d9d9febf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cf:7b:c8:6c:b4:70:23:95:ba:88:39:98:96: 93:dc:14:26:7c:2b:d1:6c:6a:00:14:95:de:25:ab: d8:ed:96:8e:26:82:0c:08:7c:b5:f3:49:04:8d:45: a1:94:d4:02:c9:34:00:b2:50:b9:61:08:28:eb:2a: 33:d1:92:84:ca:6b:7c:bc:73:b1:f6:68:06:09:79: c3:32:51:ff:1a:a4:75:7f:2a:15:b8:ac:e8:5f:85: 98:f8:25:d7:d5:e6:80:93:0f:8b:68:99:0f:9c:ce: 0d:2a:cc:06:83:33:3f:29:dd:e8:85:b5:1a:66:25: f9:c4:57:67:e3:70:5b:7f:50:bb:30:87:2c:33:46: 99:b8:aa:39:73:b2:3f:03:78:2a:45:48:fc:16:6d: 46:c8:ab:cc:bd:64:72:b1:71:42:48:4e:ce:3d:b1: 23:64:90:c3:79:cc:a7:f0:1f:14:42:77:81:a5:f9: be:97:e1:fa:e9:7b:b6:1e:82:9b:6b:7a:ed:87:a6: c9:9e:d1:91:c9:fc:ec:13:9b:e3:ff:ff:64:d3:cc: 43:a2:e9:c4:01:66:4c:59:cf:3f:b8:19:ac:07:aa: 15:7c:89:77:4c:06:6f:b6:17:8d:09:e3:7f:4a:1f: 55:65:8e:a4:04:46:7d:4f:07:a2:f6:36:07:99:3b: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:33:18:E0:E6:7E:3F:49:7B:5C:50:15:AD:C9:E8:36:D9:D9:FE:BF X509v3 Authority Key Identifier: keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/2DMY4OZ-P0l7XFAVrcnoNtnZ_r8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.120.0/24 89.207.124.0/24 Signature Algorithm: sha256WithRSAEncryption a4:c8:b5:ac:52:06:09:3d:24:f5:d5:7b:79:19:b8:c9:6f:83: 93:26:c8:db:59:70:67:47:38:74:46:a8:9e:f4:67:24:4d:5e: 5a:93:ad:98:13:7a:c1:b3:e4:fd:5a:eb:ac:af:7e:b7:97:25: b9:10:d7:4c:e0:af:68:be:65:d7:4a:6c:29:93:dc:92:61:80: 71:95:97:bb:32:2a:3c:46:8b:0b:6b:50:01:3a:09:58:d5:68: 0e:c8:aa:4a:a8:49:b5:ed:28:87:11:c0:09:53:42:67:7a:59: 1d:6d:63:dd:8c:72:69:6c:a8:71:dc:fc:de:5f:da:d3:bb:16: 3b:73:09:00:35:7b:1c:b8:9a:63:c0:cb:ca:b9:7d:c4:2c:ce: d4:ed:51:5d:0f:ad:08:f6:4b:69:cc:7c:b9:e4:98:80:3b:60: 35:f1:62:cc:ce:da:2a:20:08:74:fb:e2:8f:be:30:f9:15:d0: 1b:af:4a:14:e2:36:a2:a1:5b:45:08:e3:12:bd:09:45:67:82: 37:8f:48:44:97:ad:0d:cc:1d:23:ed:5f:47:e2:60:92:96:a8: 75:d2:d7:67:f8:f2:8c:8f:14:ce:31:87:6d:b5:2f:28:8a:b3: c6:ce:f8:af:6f:3a:2f:9e:0b:51:f1:06:fb:4f:58:80:2a:67: db:ee:35:ee -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gAd21OTSbPh19y//k0dVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOGMxODk3NjI0ZjU3YmUzNGUwZjc2MGI5N2YxMTBhZDVi NWRhM2EwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODMzMThlMGU2N2UzZjQ5N2I1YzUwMTVhZGM5ZTgzNmQ5ZDlmZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM97yGy0cCOVuog5mJaT3BQmfCvR bGoAFJXeJavY7ZaOJoIMCHy180kEjUWhlNQCyTQAslC5YQgo6yoz0ZKEymt8vHOx 9mgGCXnDMlH/GqR1fyoVuKzoX4WY+CXX1eaAkw+LaJkPnM4NKswGgzM/Kd3ohbUa ZiX5xFdn43Bbf1C7MIcsM0aZuKo5c7I/A3gqRUj8Fm1GyKvMvWRysXFCSE7OPbEj ZJDDecyn8B8UQneBpfm+l+H66Xu2HoKba3rth6bJntGRyfzsE5vj//9k08xDounE AWZMWc8/uBmsB6oVfIl3TAZvtheNCeN/Sh9VZY6kBEZ9Twei9jYHmTt6RwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNgzGODmfj9Je1xQFa3J6DbZ2f6/MB8GA1UdIwQY MBaAFD6MGJdiT1e+NOD3YLl/EQrVtdo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjkt ZjA3NmEwOGU2MDAzLzEvMkRNWTRPWi1QMGw3WEZBVnJjbm9OdG5aX3I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjktZjA3NmEwOGU2MDAz LzEvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWc94AwQA Wc98MA0GCSqGSIb3DQEBCwUAA4IBAQCkyLWsUgYJPST11Xt5GbjJb4OTJsjbWXBn Rzh0Rqie9GckTV5ak62YE3rBs+T9Wuusr363lyW5ENdM4K9ovmXXSmwpk9ySYYBx lZe7Mio8RosLa1ABOglY1WgOyKpKqEm17SiHEcAJU0JnelkdbWPdjHJpbKhx3Pze X9rTuxY7cwkANXscuJpjwMvKuX3ELM7U7VFdD60I9ktpzHy55JiAO2A18WLMztoq IAh0++KPvjD5FdAbr0oU4jaioVtFCOMSvQlFZ4I3j0hEl60NzB0j7V9H4mCSlqh1 0tdn+PKMjxTOMYdttS8oirPGzvivbzovngtR8Qb7T1iAKmfb7jXu -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:17 2026 by rpki-client