This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa File: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (raw, json) Hash identifier: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk= Subject key identifier: DA:F0:74:1F:6A:98:CB:3E:92:23:49:BD:FD:47:3A:BC:3F:5C:34:31 Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Certificate serial: 019B7F856843B5BD4DB241E31141EEC44ADC Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa Signing time: Fri 02 Jan 2026 16:23:27 +0000 ROA not before: Fri 02 Jan 2026 16:23:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51569 IP address blocks: 45.132.208.0/22 maxlen: 24 83.139.202.0/23 maxlen: 24 83.139.212.0/22 maxlen: 24 83.139.216.0/22 maxlen: 24 83.139.220.0/23 maxlen: 24 83.139.224.0/20 maxlen: 24 83.139.242.0/23 maxlen: 24 83.139.244.0/23 maxlen: 24 85.31.160.0/21 maxlen: 24 2a0c:48c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:68:43:b5:bd:4d:b2:41:e3:11:41:ee:c4:4a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Validity Not Before: Jan 2 16:23:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daf0741f6a98cb3e922349bdfd473abc3f5c3431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:77:be:16:d8:25:14:20:48:8c:9e:39:dd: a6:98:7a:4e:38:d0:f8:9a:c5:3b:96:61:8f:83:1a: b0:c9:18:a8:09:aa:fb:83:61:05:2f:d5:51:43:c7: 9d:ed:4f:5c:dd:3e:66:3d:63:61:35:10:64:b9:46: 36:0d:08:ca:19:f6:41:7f:2d:9e:1f:da:41:cc:22: c3:d8:f3:7c:9d:45:43:74:fd:fd:cd:6d:ff:ff:40: 55:ae:45:d9:51:bc:8c:12:b3:0f:b6:ec:76:16:bb: 20:53:ad:8b:39:95:32:f4:0b:c7:38:98:e7:88:c3: 3f:43:a4:28:52:f6:1d:69:10:20:41:b9:62:f5:c7: 5e:2a:09:de:2e:64:73:a8:7d:0d:11:d3:fd:4f:57: a0:80:67:2c:6f:cc:69:f6:05:b9:94:54:9c:2d:dc: c9:33:67:4a:f9:37:d7:b5:b7:de:d7:16:9d:c4:b9: 19:4e:b3:86:9c:3a:2a:9a:86:fb:af:76:c0:1d:6a: 96:22:1e:d2:3b:f1:44:5a:c0:50:36:8b:46:9e:ce: 52:47:d1:af:53:3a:cd:b9:98:c8:61:c5:5e:c4:0d: 0e:5f:85:2a:c7:1f:b2:26:08:01:79:31:35:b8:4d: b5:96:88:05:e1:65:1f:6d:ac:7e:3c:52:2f:65:08: 54:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F0:74:1F:6A:98:CB:3E:92:23:49:BD:FD:47:3A:BC:3F:5C:34:31 X509v3 Authority Key Identifier: keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.208.0/22 83.139.202.0/23 83.139.212.0-83.139.221.255 83.139.224.0/20 83.139.242.0-83.139.245.255 85.31.160.0/21 IPv6: 2a0c:48c0::/29 Signature Algorithm: sha256WithRSAEncryption 51:e8:75:20:b8:d0:23:f7:de:b0:4d:8f:c6:83:7a:9e:95:65: 56:37:2d:b4:8e:07:8c:95:ec:0a:1c:5d:a4:04:73:ce:c4:c9: 6b:9a:df:56:6c:2d:8c:27:f4:2a:06:06:e2:4a:29:6e:d2:96: ac:c5:47:fe:d2:bc:af:48:17:99:04:d3:35:04:82:dc:b5:ff: a1:4a:52:39:a5:65:58:3d:a2:d8:f2:d6:89:a9:e5:10:a6:f2: 7c:22:bc:3c:1e:be:2d:fd:25:31:db:45:9c:c0:67:51:12:5b: 40:de:9d:d5:8f:e5:c8:bf:70:77:69:d1:25:14:37:be:d5:10: 40:44:35:c5:a0:aa:26:e7:a7:d9:b4:2e:21:67:21:d5:55:f5: d7:44:e3:8e:63:65:6e:0c:27:f0:fd:f0:67:0e:03:94:10:4f: b4:f2:d6:29:42:d9:3c:d0:b7:64:8a:b4:41:04:d2:dd:34:b1: 99:f2:ce:38:53:22:be:d5:58:28:72:91:b4:cb:83:ef:74:d6: d7:5d:3c:88:7b:25:b0:e4:b2:75:bf:16:35:78:fb:4c:fb:28: d1:b0:30:6c:ec:06:fe:a5:c1:79:15:6c:d8:a8:69:36:5c:4d: 40:48:c7:34:5b:3a:09:85:70:b9:1d:c3:4a:37:71:da:4a:0f: 43:81:b7:0d -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgISAZt/hWhDtb1NskHjEUHuxErcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl YWNlYjQwHhcNMjYwMTAyMTYyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWYwNzQxZjZhOThjYjNlOTIyMzQ5YmRmZDQ3M2FiYzNmNWMzNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlR3vhbYJRQgSIyeOd2mmHpOOND4 msU7lmGPgxqwyRioCar7g2EFL9VRQ8ed7U9c3T5mPWNhNRBkuUY2DQjKGfZBfy2e H9pBzCLD2PN8nUVDdP39zW3//0BVrkXZUbyMErMPtux2FrsgU62LOZUy9AvHOJjn iMM/Q6QoUvYdaRAgQbli9cdeKgneLmRzqH0NEdP9T1eggGcsb8xp9gW5lFScLdzJ M2dK+TfXtbfe1xadxLkZTrOGnDoqmob7r3bAHWqWIh7SO/FEWsBQNotGns5SR9Gv UzrNuZjIYcVexA0OX4Uqxx+yJggBeTE1uE21logF4WUfbax+PFIvZQhU5wIDAQAB o4ICRjCCAkIwHQYDVR0OBBYEFNrwdB9qmMs+kiNJvf1HOrw/XDQxMB8GA1UdIwQY MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt MWU0MzZkY2I4NWM1LzEvMnZCMEgycVl5ejZTSTBtOV9VYzZ2RDljTkRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1 LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0AwQCLYTQAwQB U4vKMAwDBAJTi9QDBAFTi9wDBARTi+AwDAMEAVOL8gMEAVOL9AMEA1UfoDANBAIA AjAHAwUDKgxIwDANBgkqhkiG9w0BAQsFAAOCAQEAUeh1ILjQI/fesE2PxoN6npVl VjcttI4HjJXsChxdpARzzsTJa5rfVmwtjCf0KgYG4kopbtKWrMVH/tK8r0gXmQTT NQSC3LX/oUpSOaVlWD2i2PLWianlEKbyfCK8PB6+Lf0lMdtFnMBnURJbQN6d1Y/l yL9wd2nRJRQ3vtUQQEQ1xaCqJuen2bQuIWch1VX110TjjmNlbgwn8P3wZw4DlBBP tPLWKULZPNC3ZIq0QQTS3TSxmfLOOFMivtVYKHKRtMuD73TW1108iHslsOSydb8W NXj7TPso0bAwbOwG/qXBeRVs2KhpNlxNQEjHNFs6CYVwuR3DSjdx2koPQ4G3DQ== -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:16 2026 by rpki-client