This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/2hPXOHV1ep_bItNryXyJ204trKY.roa File: 2hPXOHV1ep_bItNryXyJ204trKY.roa (raw, json) Hash identifier: InaQZQvl49hVhhc59GUlXsSa2F8CdPOC6OK58+ZvGxc= Subject key identifier: DA:13:D7:38:75:75:7A:9F:DB:22:D3:6B:C9:7C:89:DB:4E:2D:AC:A6 Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19 Certificate serial: 019B7C12B323821C099E7C3CFB9536B346C3 Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/2hPXOHV1ep_bItNryXyJ204trKY.roa Signing time: Fri 02 Jan 2026 00:19:18 +0000 ROA not before: Fri 02 Jan 2026 00:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57906 IP address blocks: 178.213.78.0/24 maxlen: 24 193.238.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b3:23:82:1c:09:9e:7c:3c:fb:95:36:b3:46:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19 Validity Not Before: Jan 2 00:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da13d73875757a9fdb22d36bc97c89db4e2daca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e5:04:fb:9b:7e:89:52:06:e9:58:c9:1e:21: eb:44:93:c4:d1:2f:79:b0:71:fe:8b:0d:21:b5:f9: a3:71:a7:52:af:5a:61:39:d0:fc:74:05:80:61:0c: 55:6c:eb:8f:91:a6:ea:a2:c2:38:5b:2f:fd:c1:3a: 2c:65:71:0e:4a:d8:ca:45:dd:dd:10:73:a7:a7:a4: 93:01:cb:5a:89:c8:4c:c7:72:d7:ae:dc:a3:58:03: 44:31:dd:16:87:77:a1:fd:cd:61:91:50:ba:dc:fa: 6c:81:4a:1b:1e:10:8b:49:a0:98:e2:de:1f:44:51: 57:4a:5d:dd:01:ca:ba:e9:6b:97:3e:5a:1e:da:6a: f1:a6:7b:f5:8a:80:e4:3a:37:61:ba:d9:36:27:7a: 34:ce:91:b7:08:b9:d0:9c:92:40:09:51:93:24:5b: f9:1c:5a:10:f5:0b:64:97:cd:00:25:3e:0e:ca:e2: 2d:15:db:be:4c:df:08:7d:67:53:17:4a:d2:e6:7f: a3:d9:24:37:ea:80:79:bd:dd:45:98:69:10:ee:ad: ae:ab:bf:16:ea:2a:7f:c3:62:3a:00:e5:47:8e:b4: 5f:d8:ef:59:d9:50:29:cc:da:73:0a:d9:ee:2f:7b: 1e:ad:92:ea:3d:e6:07:f1:a8:6e:16:a5:5a:7a:45: f1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:13:D7:38:75:75:7A:9F:DB:22:D3:6B:C9:7C:89:DB:4E:2D:AC:A6 X509v3 Authority Key Identifier: keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/2hPXOHV1ep_bItNryXyJ204trKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.78.0/24 193.238.119.0/24 Signature Algorithm: sha256WithRSAEncryption 70:e0:33:77:fb:ef:61:08:56:65:30:98:9c:d7:9c:63:e3:48: 0c:4c:16:d2:7f:03:63:b5:58:6b:41:a2:5e:ee:83:24:dd:ef: bb:9e:21:ec:26:e7:2e:a1:53:d9:d2:dd:11:39:e3:ff:07:9a: b8:77:84:79:03:bc:ff:3b:8e:09:ec:55:a9:91:74:8a:7b:53: 8f:ce:24:98:b2:6e:0c:5d:bb:9b:36:e1:de:94:77:4a:e9:7c: 74:b2:a6:3a:b2:1e:6b:61:42:b6:d5:65:eb:82:de:b7:04:d8: 37:ea:05:c5:68:33:11:df:4c:3f:da:cc:8b:46:67:33:34:4f: af:51:f4:40:f7:82:ea:fb:ef:2e:04:b3:dc:f3:c6:20:32:76: 58:ac:33:24:ed:3b:33:7c:74:da:ce:b3:7e:65:1c:ff:3f:e4: 45:7d:00:b9:b0:07:b7:5e:d2:e2:9b:58:d2:cc:7b:0b:16:1f: 4d:c0:63:7c:e2:86:15:06:71:00:44:58:2d:51:1e:65:42:03: 82:83:b9:db:3d:d8:52:0c:e4:49:06:02:12:ae:5b:1e:64:40: 0b:4b:e6:dd:a3:4b:bb:8b:54:bb:08:4f:0b:47:86:27:66:e2: 7d:a5:8b:5a:fe:0d:5a:35:f4:87:ba:d4:d7:d0:05:53:da:da: d0:48:e7:d2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8ErMjghwJnnw8+5U2s0bDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2VhYzRmYTMxM2EyZTc5MmU1NDI2M2NjNjA1ZmYzMTlm MzVjMTkwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTEzZDczODc1NzU3YTlmZGIyMmQzNmJjOTdjODlkYjRlMmRhY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOUE+5t+iVIG6VjJHiHrRJPE0S95 sHH+iw0htfmjcadSr1phOdD8dAWAYQxVbOuPkabqosI4Wy/9wTosZXEOStjKRd3d EHOnp6STActaichMx3LXrtyjWANEMd0Wh3eh/c1hkVC63PpsgUobHhCLSaCY4t4f RFFXSl3dAcq66WuXPloe2mrxpnv1ioDkOjdhutk2J3o0zpG3CLnQnJJACVGTJFv5 HFoQ9Qtkl80AJT4OyuItFdu+TN8IfWdTF0rS5n+j2SQ36oB5vd1FmGkQ7q2uq78W 6ip/w2I6AOVHjrRf2O9Z2VApzNpzCtnuL3serZLqPeYH8ahuFqVaekXxMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNoT1zh1dXqf2yLTa8l8idtOLaymMB8GA1UdIwQY MBaAFN9+rE+jE6LnkuVCY8xgX/MZ81wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYt MmMwY2YyM2I0MjNlLzEvMmhQWE9IVjFlcF9iSXROcnlYeUoyMDR0cktZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYtMmMwY2YyM2I0MjNl LzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstVOAwQA we53MA0GCSqGSIb3DQEBCwUAA4IBAQBw4DN3++9hCFZlMJic15xj40gMTBbSfwNj tVhrQaJe7oMk3e+7niHsJucuoVPZ0t0ROeP/B5q4d4R5A7z/O44J7FWpkXSKe1OP ziSYsm4MXbubNuHelHdK6Xx0sqY6sh5rYUK21WXrgt63BNg36gXFaDMR30w/2syL RmczNE+vUfRA94Lq++8uBLPc88YgMnZYrDMk7TszfHTazrN+ZRz/P+RFfQC5sAe3 XtLim1jSzHsLFh9NwGN84oYVBnEARFgtUR5lQgOCg7nbPdhSDORJBgISrlseZEAL S+bdo0u7i1S7CE8LR4YnZuJ9pYta/g1aNfSHutTX0AVT2trQSOfS -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:44 2026 by rpki-client