This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/2DgeL0YmrOu9jBlL_GSUZUo0_Xk.roa File: 2DgeL0YmrOu9jBlL_GSUZUo0_Xk.roa (raw, json) Hash identifier: 5v2bWeSNyUn4+oUjg0+VSbHVkaiGm0vFpqqmfJbIvXU= Subject key identifier: D8:38:1E:2F:46:26:AC:EB:BD:8C:19:4B:FC:64:94:65:4A:34:FD:79 Certificate issuer: /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13 Certificate serial: 019B7AC889215BA3E5C2AA89AF61B7D29A2B Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/2DgeL0YmrOu9jBlL_GSUZUo0_Xk.roa Signing time: Thu 01 Jan 2026 18:18:41 +0000 ROA not before: Thu 01 Jan 2026 18:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60674 IP address blocks: 91.216.40.0/24 maxlen: 24 2a11:e480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:89:21:5b:a3:e5:c2:aa:89:af:61:b7:d2:9a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13 Validity Not Before: Jan 1 18:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8381e2f4626acebbd8c194bfc6494654a34fd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:cd:af:e1:44:13:eb:4b:7f:f3:32:f0:22: 2b:86:37:aa:ba:53:79:93:84:d4:ee:d0:67:d0:14: 3a:60:cc:8b:27:01:94:4b:e0:da:d2:27:ca:f1:f4: bb:8e:74:00:09:13:5b:12:26:3c:f1:eb:32:71:f0: db:cd:c7:65:e8:f2:5a:9c:7a:2e:19:d5:b9:d2:f6: f9:25:3f:3d:48:1a:24:bd:8a:0e:87:6f:1d:c0:e3: b5:37:9b:76:3b:33:2c:a8:1e:e7:b3:f6:c1:e9:eb: 3e:b6:06:15:92:2c:55:ea:cf:8c:2a:18:5a:d3:45: 93:32:df:7e:c9:1a:84:7e:be:d1:18:b0:37:af:c5: 6c:a1:75:61:c2:dc:c5:e1:4d:ca:00:33:53:a8:28: e3:d8:b2:d1:c7:4b:1b:fc:fe:72:e5:a4:90:f4:0a: 93:4f:da:99:60:f0:8e:57:22:1a:62:74:4d:99:e1: 86:5d:9e:91:d4:68:1c:33:3f:d7:63:9e:53:20:77: ed:98:d4:03:d9:3b:eb:cb:c9:a4:b7:69:b7:96:b8: ea:d6:34:d1:69:21:91:ef:da:b4:28:73:2d:76:da: 70:4f:a9:f3:51:37:f5:68:95:a2:70:68:90:37:74: 7e:aa:c9:aa:fa:3f:22:0c:81:92:f7:31:29:fc:5b: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:38:1E:2F:46:26:AC:EB:BD:8C:19:4B:FC:64:94:65:4A:34:FD:79 X509v3 Authority Key Identifier: keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/2DgeL0YmrOu9jBlL_GSUZUo0_Xk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.40.0/24 IPv6: 2a11:e480::/32 Signature Algorithm: sha256WithRSAEncryption 6d:cf:8f:c8:94:83:1d:f9:9d:ea:c7:4c:14:41:7c:b8:0a:08: 90:f2:d7:4c:18:68:66:05:7f:6b:56:c6:d9:24:2d:d1:05:54: 18:a2:10:be:10:0f:1a:21:25:9e:70:5f:81:73:19:f9:b8:ca: c9:24:a8:44:90:5f:e5:70:5a:6c:08:b5:ea:bb:dc:0c:67:6b: ee:95:c4:1e:d3:83:95:7a:5d:17:b4:da:82:f6:ab:2d:e8:3f: 12:2b:42:3d:64:8b:40:f9:53:14:b2:68:58:b5:1d:7e:4e:61: 09:d5:d1:00:7f:03:55:ce:e4:56:00:cd:13:b9:17:4b:cc:62: d6:47:d9:6f:55:7e:87:ce:e9:24:25:5e:91:2e:ba:6b:b5:c9: bf:4d:a4:80:f3:3d:0d:eb:0c:a9:bb:8a:c2:e1:d0:81:c6:42: ae:46:35:ee:c6:cf:94:97:5f:02:a1:3e:6b:33:ed:c4:82:c0: c8:ae:9d:6f:6b:06:1c:b1:46:67:da:01:56:a1:a1:ec:d5:76: 39:f2:42:32:ad:30:56:89:6e:f2:93:0d:5e:c9:64:b1:78:46: 55:f5:e0:87:a5:2e:5e:e6:a7:51:39:4a:24:82:68:99:79:53: b0:39:e5:93:78:84:ee:8b:ee:0a:95:58:30:2a:4a:d8:0a:9d: 6d:a4:33:d6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yIkhW6PlwqqJr2G30porMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YWZjZDhmYjQwYWFlMWQyNDNjMmE4Y2UyNTQxYTY5OTg3 ZWVkMTMwHhcNMjYwMTAxMTgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODM4MWUyZjQ2MjZhY2ViYmQ4YzE5NGJmYzY0OTQ2NTRhMzRmZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNDNr+FEE+tLf/My8CIrhjequlN5 k4TU7tBn0BQ6YMyLJwGUS+Da0ifK8fS7jnQACRNbEiY88esycfDbzcdl6PJanHou GdW50vb5JT89SBokvYoOh28dwOO1N5t2OzMsqB7ns/bB6es+tgYVkixV6s+MKhha 00WTMt9+yRqEfr7RGLA3r8VsoXVhwtzF4U3KADNTqCjj2LLRx0sb/P5y5aSQ9AqT T9qZYPCOVyIaYnRNmeGGXZ6R1GgcMz/XY55TIHftmNQD2Tvry8mkt2m3lrjq1jTR aSGR79q0KHMtdtpwT6nzUTf1aJWicGiQN3R+qsmq+j8iDIGS9zEp/FuvpQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNg4Hi9GJqzrvYwZS/xklGVKNP15MB8GA1UdIwQY MBaAFFavzY+0Cq4dJDwqjOJUGmmYfu0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYt MjM3YmU3NzMwMDdhLzEvMkRnZUwwWW1yT3U5akJsTF9HU1VaVW8wX1hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYtMjM3YmU3NzMwMDdh LzEvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9goMA0E AgACMAcDBQAqEeSAMA0GCSqGSIb3DQEBCwUAA4IBAQBtz4/IlIMd+Z3qx0wUQXy4 CgiQ8tdMGGhmBX9rVsbZJC3RBVQYohC+EA8aISWecF+Bcxn5uMrJJKhEkF/lcFps CLXqu9wMZ2vulcQe04OVel0XtNqC9qst6D8SK0I9ZItA+VMUsmhYtR1+TmEJ1dEA fwNVzuRWAM0TuRdLzGLWR9lvVX6HzukkJV6RLrprtcm/TaSA8z0N6wypu4rC4dCB xkKuRjXuxs+Ul18CoT5rM+3EgsDIrp1vawYcsUZn2gFWoaHs1XY58kIyrTBWiW7y kw1eyWSxeEZV9eCHpS5e5qdROUokgmiZeVOwOeWTeITui+4KlVgwKkrYCp1tpDPW -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:01 2026 by rpki-client