This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa File: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (raw, json) Hash identifier: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0= Subject key identifier: DA:9B:B5:BE:42:85:8E:76:B8:0E:6F:DC:C1:28:B9:47:81:44:DA:0E Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2 Certificate serial: 019B7E38FD4A68D2ADE14D3A03BB6F040894 Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa Signing time: Fri 02 Jan 2026 10:20:22 +0000 ROA not before: Fri 02 Jan 2026 10:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.206.124.0/24 maxlen: 24 185.206.126.0/24 maxlen: 24 185.206.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:fd:4a:68:d2:ad:e1:4d:3a:03:bb:6f:04:08:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2 Validity Not Before: Jan 2 10:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da9bb5be42858e76b80e6fdcc128b9478144da0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8d:51:e2:1d:2c:9f:95:60:14:30:ed:c0:69: 8e:cb:80:42:d5:61:0d:e5:f4:60:d2:2f:04:b0:41: 13:a5:37:e8:3b:81:4c:74:21:1d:8f:05:80:98:88: bb:3b:5b:82:25:d8:00:a5:dd:2d:01:34:b2:4b:60: d9:6a:d9:08:e6:9c:7e:13:a5:46:7f:a5:13:61:18: 8d:bd:2e:85:1b:b5:35:09:cb:f9:f7:dc:f5:a9:2b: 94:2d:2b:6a:20:2d:ed:3c:85:a2:e7:59:56:08:dd: fc:e7:e5:e4:6b:ab:c3:e4:5c:f2:c5:5a:40:62:73: ed:4a:d4:87:15:a7:1b:37:7b:f3:71:24:95:27:6c: 5f:38:97:1b:48:ee:f7:46:a1:1f:48:0f:86:c1:c6: c8:e8:61:e3:ed:28:4d:88:0e:5d:fc:61:6b:ce:20: 42:81:8a:b1:0c:53:08:25:8d:7a:da:b8:85:7f:54: 87:30:0d:7d:30:69:46:78:00:6d:e9:24:f8:8f:80: 79:fb:72:b2:c1:0e:ff:d0:f5:a4:4e:ca:be:69:fc: 0b:e2:25:99:55:74:b8:ab:8c:e6:b5:cc:5e:f7:30: 65:82:33:8c:cd:c6:de:98:a1:9d:4a:37:df:e4:64: e6:99:f8:46:80:b9:59:9d:2e:22:8c:95:ed:b2:5c: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9B:B5:BE:42:85:8E:76:B8:0E:6F:DC:C1:28:B9:47:81:44:DA:0E X509v3 Authority Key Identifier: keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.124.0/24 185.206.126.0/23 Signature Algorithm: sha256WithRSAEncryption 20:76:cc:8e:04:5d:dc:7d:94:40:09:63:da:ee:c0:fd:56:b3: 07:7c:7e:9d:15:cf:97:c0:c2:6d:8e:bc:cc:26:ae:1b:cf:1a: 66:27:7e:92:5f:87:e4:9e:e1:5f:dd:94:b8:18:50:c2:54:46: 8b:c3:a1:a0:19:08:31:e9:a4:af:6a:70:55:ea:b7:01:48:fd: cb:d2:2c:aa:21:38:9b:3b:08:dd:02:83:af:5f:bc:e1:6a:82: 04:e3:96:a7:43:78:3c:0c:e6:1f:25:04:15:62:03:58:21:fb: 2e:a4:a2:90:cc:e9:17:e8:3e:36:60:f3:74:c3:0f:d1:0c:02: 0f:8e:0f:4f:2a:25:62:bd:42:20:1e:d1:46:4e:bb:ea:f6:7d: 7c:a6:f2:90:86:3b:92:d7:39:d7:d2:11:bb:0b:c6:7e:55:54: be:49:ba:be:64:62:1d:33:97:30:8c:44:a6:6e:0e:ae:14:75: d0:c8:b7:27:69:cc:66:f8:cf:3e:f8:e0:b0:22:7d:30:d0:2d: 29:23:bc:f8:72:ac:29:17:e3:1d:d1:0e:d6:dc:98:12:bc:d8: 6e:ab:97:0f:06:55:50:61:aa:9a:94:06:b3:ea:aa:4a:a3:1c: e6:29:25:87:3c:eb:82:99:95:bf:95:df:6e:0f:ff:8a:e5:f2: 16:8f:e2:be -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OP1KaNKt4U06A7tvBAiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTA5MmJiYzJjYWNhZTI0Nzc3NGY2MmIwZmRiZGM0NGE5 NzRjZjIwHhcNMjYwMTAyMTAyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTliYjViZTQyODU4ZTc2YjgwZTZmZGNjMTI4Yjk0NzgxNDRkYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI1R4h0sn5VgFDDtwGmOy4BC1WEN 5fRg0i8EsEETpTfoO4FMdCEdjwWAmIi7O1uCJdgApd0tATSyS2DZatkI5px+E6VG f6UTYRiNvS6FG7U1Ccv599z1qSuULStqIC3tPIWi51lWCN385+Xka6vD5FzyxVpA YnPtStSHFacbN3vzcSSVJ2xfOJcbSO73RqEfSA+GwcbI6GHj7ShNiA5d/GFrziBC gYqxDFMIJY162riFf1SHMA19MGlGeABt6ST4j4B5+3KywQ7/0PWkTsq+afwL4iWZ VXS4q4zmtcxe9zBlgjOMzcbemKGdSjff5GTmmfhGgLlZnS4ijJXtslyGQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNqbtb5ChY52uA5v3MEouUeBRNoOMB8GA1UdIwQY MBaAFKyQkrvCysriR3dPYrD9vcRKl0zyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMt YTNmYzE5NmFhYmIzLzEvMnB1MXZrS0ZqbmE0RG1fY3dTaTVSNEZFMmc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMtYTNmYzE5NmFhYmIz LzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuc58AwQB uc5+MA0GCSqGSIb3DQEBCwUAA4IBAQAgdsyOBF3cfZRACWPa7sD9VrMHfH6dFc+X wMJtjrzMJq4bzxpmJ36SX4fknuFf3ZS4GFDCVEaLw6GgGQgx6aSvanBV6rcBSP3L 0iyqITibOwjdAoOvX7zhaoIE45anQ3g8DOYfJQQVYgNYIfsupKKQzOkX6D42YPN0 ww/RDAIPjg9PKiVivUIgHtFGTrvq9n18pvKQhjuS1znX0hG7C8Z+VVS+Sbq+ZGId M5cwjESmbg6uFHXQyLcnacxm+M8++OCwIn0w0C0pI7z4cqwpF+Md0Q7W3JgSvNhu q5cPBlVQYaqalAaz6qpKoxzmKSWHPOuCmZW/ld9uD/+K5fIWj+K+ -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:01 2026 by rpki-client