This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/2_rmRx0h4Ldgjna3JZ3fPaV_8K4.roa File: 2_rmRx0h4Ldgjna3JZ3fPaV_8K4.roa (raw, json) Hash identifier: Db9G7H48+/jdUTzq6s6B93b4lpE5OnZQxkmWnM9jPYM= Subject key identifier: DB:FA:E6:47:1D:21:E0:B7:60:8E:76:B7:25:9D:DF:3D:A5:7F:F0:AE Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3 Certificate serial: 019B7F158F24AA72C263D7E2769D99D699BF Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/2_rmRx0h4Ldgjna3JZ3fPaV_8K4.roa Signing time: Fri 02 Jan 2026 14:21:17 +0000 ROA not before: Fri 02 Jan 2026 14:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13896 IP address blocks: 185.155.144.0/23 maxlen: 23 185.155.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8f:24:aa:72:c2:63:d7:e2:76:9d:99:d6:99:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3 Validity Not Before: Jan 2 14:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbfae6471d21e0b7608e76b7259ddf3da57ff0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:ae:da:de:d1:81:bb:b4:ce:74:b1:e7:c7: 85:c3:89:87:fd:27:fa:79:03:d4:99:f0:f5:06:4c: 0d:c7:9b:5c:7c:82:8d:b1:97:7f:f5:5f:02:10:ab: d8:7f:9d:9b:bb:4c:7d:b4:fd:d4:bb:8d:c2:73:9f: 5d:92:cd:b5:22:f4:24:73:98:26:a7:5a:19:3a:60: c5:ff:53:f0:2a:a5:7c:a6:29:12:5b:8e:65:28:bc: ba:1a:f4:16:65:6e:34:43:1c:8a:df:83:b6:47:a3: a8:5e:80:5c:ff:48:ec:e6:c5:30:51:15:ff:cd:0a: b8:8d:7c:d4:81:a7:f2:93:82:4f:83:8e:e5:59:40: 01:06:b5:ef:74:af:c4:e7:1e:96:9d:aa:27:c6:6b: e3:a1:3d:bf:6d:2c:1c:56:32:a1:a2:82:f6:2f:ec: ba:95:bc:f7:7a:b1:de:1e:8c:38:93:4b:9f:7b:39: cb:cc:18:21:a7:56:b2:63:5d:88:bf:4b:09:dd:aa: 11:07:92:3a:98:e6:73:9b:7f:5f:0e:d4:73:3f:1c: 8f:a8:e6:15:ba:56:db:96:1c:80:31:a5:1f:b5:a5: 8d:b3:90:fc:4f:ba:e7:06:dd:c3:1b:70:bc:4e:ed: 76:6b:e9:69:b0:24:4b:ef:bc:40:5d:77:72:15:0b: 82:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FA:E6:47:1D:21:E0:B7:60:8E:76:B7:25:9D:DF:3D:A5:7F:F0:AE X509v3 Authority Key Identifier: keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/2_rmRx0h4Ldgjna3JZ3fPaV_8K4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.144.0/22 Signature Algorithm: sha256WithRSAEncryption 92:99:67:1a:35:3d:00:1f:7c:39:96:02:5d:68:11:7d:55:08: d7:30:ef:03:16:21:95:10:a1:6b:24:5a:06:62:b4:2a:8a:ab: 81:34:42:ce:15:d0:38:c5:c1:a1:d1:eb:98:fa:94:e9:95:15: c8:94:cd:c2:4d:92:ab:3e:83:86:a2:cb:03:32:6e:f5:e8:51: 3a:b3:15:84:e7:05:c1:71:2a:32:6b:6f:3f:6a:ba:ee:86:62: d2:44:6c:4b:15:64:7e:ce:7f:a7:59:3c:8c:a6:2d:80:69:88: 10:fa:d3:8f:c5:f7:08:32:42:df:66:7f:e6:de:a0:27:1b:d0: f8:d5:1d:86:2a:fc:b2:76:52:f8:e0:6a:c0:91:f8:b8:63:82: fe:f2:78:8c:99:6b:ee:e8:d8:56:16:79:da:54:7f:45:9d:4a: 12:42:d5:4a:1f:75:33:76:f9:b9:ed:12:ca:c6:41:a0:55:3f: 52:26:e8:d2:62:66:8d:02:e5:36:a4:47:97:99:fd:20:29:af: 5d:ad:6b:0e:b2:e7:28:70:c0:c4:a1:4d:e9:8b:3d:e0:32:1f: 7e:e8:dc:d7:cd:13:72:8a:a1:af:00:9f:2b:90:a7:2d:d6:f2: 7b:72:a9:d0:39:a3:d1:35:d5:d2:7a:18:97:b4:4c:41:65:2f: e0:ac:82:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FY8kqnLCY9fidp2Z1pm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNGNmOWY2ZDAzNGY0Njc2MGY0ZjU5YjE3MzlkZTEyN2I4 YWRmZjMwHhcNMjYwMTAyMTQyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmZhZTY0NzFkMjFlMGI3NjA4ZTc2YjcyNTlkZGYzZGE1N2ZmMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojWu2t7Rgbu0znSx58eFw4mH/Sf6 eQPUmfD1BkwNx5tcfIKNsZd/9V8CEKvYf52bu0x9tP3Uu43Cc59dks21IvQkc5gm p1oZOmDF/1PwKqV8pikSW45lKLy6GvQWZW40QxyK34O2R6OoXoBc/0js5sUwURX/ zQq4jXzUgafyk4JPg47lWUABBrXvdK/E5x6WnaonxmvjoT2/bSwcVjKhooL2L+y6 lbz3erHeHow4k0ufeznLzBghp1ayY12Iv0sJ3aoRB5I6mOZzm39fDtRzPxyPqOYV ulbblhyAMaUftaWNs5D8T7rnBt3DG3C8Tu12a+lpsCRL77xAXXdyFQuCaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNv65kcdIeC3YI52tyWd3z2lf/CuMB8GA1UdIwQY MBaAFLJM+fbQNPRnYPT1mxc53hJ7it/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMt OTk1YzM2OWRhNjcyLzEvMl9ybVJ4MGg0TGRnam5hM0paM2ZQYVZfOEs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMtOTk1YzM2OWRhNjcy LzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZuQMA0G CSqGSIb3DQEBCwUAA4IBAQCSmWcaNT0AH3w5lgJdaBF9VQjXMO8DFiGVEKFrJFoG YrQqiquBNELOFdA4xcGh0euY+pTplRXIlM3CTZKrPoOGossDMm716FE6sxWE5wXB cSoya28/arruhmLSRGxLFWR+zn+nWTyMpi2AaYgQ+tOPxfcIMkLfZn/m3qAnG9D4 1R2GKvyydlL44GrAkfi4Y4L+8niMmWvu6NhWFnnaVH9FnUoSQtVKH3Uzdvm57RLK xkGgVT9SJujSYmaNAuU2pEeXmf0gKa9drWsOsucocMDEoU3piz3gMh9+6NzXzRNy iqGvAJ8rkKct1vJ7cqnQOaPRNdXSehiXtExBZS/grIKb -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:16 2026 by rpki-client