This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2Qjk0zz9lvYIbn3pbRtRcwnVeoQ.roa File: 2Qjk0zz9lvYIbn3pbRtRcwnVeoQ.roa (raw, json) Hash identifier: v+ei4cRfDRQMXpXMwUnDG/8vdCRLLbzaUSMMXh5+GwA= Subject key identifier: D9:08:E4:D3:3C:FD:96:F6:08:6E:7D:E9:6D:1B:51:73:09:D5:7A:84 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14464493089466262777F8A8660015 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2Qjk0zz9lvYIbn3pbRtRcwnVeoQ.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39238 IP address blocks: 147.45.52.0/22 maxlen: 22 147.45.56.0/22 maxlen: 22 147.45.80.0/22 maxlen: 22 193.233.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:46:44:93:08:94:66:26:27:77:f8:a8:66:00:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d908e4d33cfd96f6086e7de96d1b517309d57a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cb:cb:d6:1b:49:bb:ef:9c:45:3a:db:ce:23: 5e:39:1c:37:87:89:cf:97:52:ec:77:33:ba:70:04: 5c:5e:f4:0c:ff:2e:82:1c:6a:88:6d:20:d1:66:f2: fd:98:c4:17:00:55:57:4a:78:dd:a2:83:84:7f:b5: 0e:cd:f9:70:03:70:23:35:c5:9a:8a:11:c1:c2:49: ea:63:dc:61:ca:d3:42:78:89:e9:fe:91:59:20:db: c4:4f:23:a4:8c:a5:7a:9f:89:19:e7:59:bb:41:c4: ea:b6:ee:22:a3:fb:98:1c:11:86:4d:6e:81:37:0f: 71:52:7c:f0:ff:8e:c2:c4:26:86:dd:78:af:97:30: d2:43:b3:a8:82:88:9c:d0:72:ba:60:d5:45:5e:16: ee:fe:e5:15:16:15:2b:9a:7b:64:73:53:ae:9d:c2: ca:b6:10:50:51:e9:e6:c9:b4:41:c2:f4:55:76:d7: 96:39:c7:08:00:69:ff:6c:8d:cb:a2:46:7d:7f:22: 8e:67:fa:13:49:75:e3:c5:73:f2:f6:e6:3e:e9:d8: 31:63:90:5e:62:cc:36:27:d4:d3:08:ac:b2:84:d0: c9:d8:81:79:9a:d8:17:0b:36:3f:77:5c:9d:24:85: 38:fa:38:e8:ff:76:62:79:08:e8:d3:eb:f3:e5:f5: 5b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:08:E4:D3:3C:FD:96:F6:08:6E:7D:E9:6D:1B:51:73:09:D5:7A:84 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2Qjk0zz9lvYIbn3pbRtRcwnVeoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.52.0-147.45.59.255 147.45.80.0/22 193.233.238.0/24 Signature Algorithm: sha256WithRSAEncryption 05:fb:3f:9a:da:1b:83:c6:cc:cf:c3:c6:3d:2c:86:88:7d:4b: b4:39:70:47:a4:73:75:72:5b:f1:82:5a:14:cf:ac:6f:9a:5e: b2:9d:06:3c:c0:4e:3e:be:14:b6:db:94:a9:fa:c8:14:2a:51: b3:ea:11:aa:24:46:c7:1b:ee:8d:84:62:fd:5c:2e:83:9b:2d: 4d:8a:de:17:9b:b3:c3:fc:f1:53:d5:7d:9d:8b:1f:9b:b8:f1: 5c:38:cf:71:fd:73:eb:41:51:fe:1b:f5:11:bb:bb:78:4d:82: f4:10:3e:c9:a3:96:c3:14:2b:0d:44:ad:31:61:2c:97:d5:b7: ba:4f:21:75:9f:16:01:05:83:a8:31:4f:7d:9a:55:40:d1:17: 0a:8f:86:a0:3a:5f:df:a4:13:f8:9a:d4:00:9e:62:c3:e0:5b: c5:24:e3:56:df:b8:de:4b:d1:c6:30:f4:0c:1d:c0:a2:8d:49: 93:de:94:dc:1f:ea:a1:85:14:14:80:8d:a1:be:8f:71:84:4b: e0:ff:6e:86:b2:cf:be:d9:a1:4c:0d:8c:25:04:07:81:9b:9d: c9:e3:6e:d7:64:48:6e:73:6b:8c:bc:51:e0:47:ec:07:6a:e0: 6f:23:dc:97:02:96:96:50:f5:e4:7b:5c:1c:02:13:43:bf:fb: 76:17:45:5d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/FEZEkwiUZiYnd/ioZgAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTA4ZTRkMzNjZmQ5NmY2MDg2ZTdkZTk2ZDFiNTE3MzA5ZDU3YTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MvL1htJu++cRTrbziNeORw3h4nP l1LsdzO6cARcXvQM/y6CHGqIbSDRZvL9mMQXAFVXSnjdooOEf7UOzflwA3AjNcWa ihHBwknqY9xhytNCeInp/pFZINvETyOkjKV6n4kZ51m7QcTqtu4io/uYHBGGTW6B Nw9xUnzw/47CxCaG3XivlzDSQ7Oogoic0HK6YNVFXhbu/uUVFhUrmntkc1OuncLK thBQUenmybRBwvRVdteWOccIAGn/bI3LokZ9fyKOZ/oTSXXjxXPy9uY+6dgxY5Be Ysw2J9TTCKyyhNDJ2IF5mtgXCzY/d1ydJIU4+jjo/3ZieQjo0+vz5fVbSQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNkI5NM8/Zb2CG596W0bUXMJ1XqEMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvMlFqazB6ejlsdllJYm4zcGJSdFJjd25WZW9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAKTLTQD BAKTLTgDBAKTLVADBADB6e4wDQYJKoZIhvcNAQELBQADggEBAAX7P5raG4PGzM/D xj0shoh9S7Q5cEekc3VyW/GCWhTPrG+aXrKdBjzATj6+FLbblKn6yBQqUbPqEaok Rscb7o2EYv1cLoObLU2K3hebs8P88VPVfZ2LH5u48Vw4z3H9c+tBUf4b9RG7u3hN gvQQPsmjlsMUKw1ErTFhLJfVt7pPIXWfFgEFg6gxT32aVUDRFwqPhqA6X9+kE/ia 1ACeYsPgW8Uk41bfuN5L0cYw9AwdwKKNSZPelNwf6qGFFBSAjaG+j3GES+D/boay z77ZoUwNjCUEB4GbncnjbtdkSG5za4y8UeBH7Adq4G8j3JcClpZQ9eR7XBwCE0O/ +3YXRV0= -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:45 2026 by rpki-client