This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/2Uij-pxOnHVnKgbLzlaTvNJrBEg.roa File: 2Uij-pxOnHVnKgbLzlaTvNJrBEg.roa (raw, json) Hash identifier: QMyBOUs0JagxiFk9pymypWgFUOQWdS/GLJ95y8tQ9jY= Subject key identifier: D9:48:A3:FA:9C:4E:9C:75:67:2A:06:CB:CE:56:93:BC:D2:6B:04:48 Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4 Certificate serial: 019B7DCA74D265D40F13BDAD3DBA8A9CBDC2 Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/2Uij-pxOnHVnKgbLzlaTvNJrBEg.roa Signing time: Fri 02 Jan 2026 08:19:38 +0000 ROA not before: Fri 02 Jan 2026 08:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213047 IP address blocks: 91.234.236.0/24 maxlen: 24 185.103.118.0/24 maxlen: 24 2a14:b180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:74:d2:65:d4:0f:13:bd:ad:3d:ba:8a:9c:bd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4 Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d948a3fa9c4e9c75672a06cbce5693bcd26b0448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5f:8f:9b:8a:3f:ba:47:47:41:bc:10:f3:9c: 81:2c:c3:71:12:ea:31:c9:4c:fb:78:bc:ce:05:ac: 34:fc:0b:c5:a4:52:7b:e2:58:06:73:a4:31:ec:cd: cc:db:1c:42:87:6a:c2:35:21:a8:75:45:22:b5:58: 28:ed:8b:cd:48:b9:5a:dd:8f:6a:63:28:ea:6a:60: f4:dc:1f:96:e7:00:2e:69:d3:da:25:8b:36:c3:28: a9:5f:5f:52:97:ac:62:e3:71:6f:74:c5:45:25:c1: 93:6c:0e:fd:48:57:85:8c:e2:74:b2:27:e2:53:16: cd:43:66:46:38:67:b7:d9:52:f9:61:2e:49:8f:77: 44:3a:11:17:42:6d:4b:ba:72:ef:df:c5:39:e3:aa: 87:b2:77:85:62:74:7c:49:3f:e2:5b:4d:79:ce:27: a8:25:35:f0:96:23:c1:37:a1:cf:8d:1a:34:ef:06: be:12:3f:27:62:cf:96:0c:c7:b3:9d:21:62:2b:af: 81:24:6e:48:3e:68:51:bf:31:a2:92:e4:7c:1d:fe: 0c:10:4b:d0:a8:ac:93:29:85:6c:eb:45:03:09:58: 47:e7:62:cc:65:e4:15:7e:14:ef:b5:ed:84:fe:89: dc:32:f2:9d:24:b0:01:27:5c:d5:2e:1f:69:3c:75: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:48:A3:FA:9C:4E:9C:75:67:2A:06:CB:CE:56:93:BC:D2:6B:04:48 X509v3 Authority Key Identifier: keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/2Uij-pxOnHVnKgbLzlaTvNJrBEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.236.0/24 185.103.118.0/24 IPv6: 2a14:b180::/29 Signature Algorithm: sha256WithRSAEncryption 55:e7:13:b4:5f:82:f5:e5:54:ce:fa:23:0b:51:bd:cd:27:7a: 58:a6:b4:f0:d8:90:42:6f:80:31:3f:c4:8b:7e:f7:3b:47:b2: be:33:a3:d7:43:0e:1e:5e:7a:f9:82:fe:11:63:5c:ac:9e:07: 32:1d:d9:e8:7e:30:e5:ac:47:8e:4e:d4:20:98:f7:88:d5:23: b9:1b:57:ce:e7:ef:4e:aa:61:aa:18:19:91:d6:eb:1f:9c:4a: 40:43:c1:16:c7:47:1e:91:2e:54:75:7e:f4:df:bc:3c:53:15: d0:53:92:9f:dc:95:08:10:af:ab:a3:4c:9b:7d:86:6b:8c:b4: ec:60:3f:35:fe:87:23:c8:b6:04:70:4d:c1:c0:46:80:4f:e0: 27:ec:a0:e8:a2:9d:a6:19:55:3d:56:d0:cb:68:66:65:29:f9: e5:e0:96:69:81:85:22:aa:bb:77:7c:fc:f3:3f:50:a4:d8:25: d4:64:0d:be:0d:69:e3:d4:a1:8f:79:80:b2:0a:32:c8:a5:88: 32:4d:b9:bc:9a:ec:ff:7a:34:b6:9f:72:c9:a0:f0:17:e5:6f: 30:ec:a9:be:79:06:5d:55:e8:c0:1d:44:e4:99:2d:de:22:f8: e4:53:e2:21:4f:5a:10:24:10:f9:2e:24:24:8e:d0:bc:83:c0: 7f:06:5f:77 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ynTSZdQPE72tPbqKnL3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTI5NWM4MGI1NGMyZGJlNzdiYTQ3ZGU3ZGFlYzZiOTg2 MDIxYjQwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTQ4YTNmYTljNGU5Yzc1NjcyYTA2Y2JjZTU2OTNiY2QyNmIwNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV+Pm4o/ukdHQbwQ85yBLMNxEuox yUz7eLzOBaw0/AvFpFJ74lgGc6Qx7M3M2xxCh2rCNSGodUUitVgo7YvNSLla3Y9q YyjqamD03B+W5wAuadPaJYs2wyipX19Sl6xi43FvdMVFJcGTbA79SFeFjOJ0sifi UxbNQ2ZGOGe32VL5YS5Jj3dEOhEXQm1LunLv38U546qHsneFYnR8ST/iW015zieo JTXwliPBN6HPjRo07wa+Ej8nYs+WDMeznSFiK6+BJG5IPmhRvzGikuR8Hf4MEEvQ qKyTKYVs60UDCVhH52LMZeQVfhTvte2E/oncMvKdJLABJ1zVLh9pPHUKnQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNlIo/qcTpx1ZyoGy85Wk7zSawRIMB8GA1UdIwQY MBaAFHmilcgLVMLb53ukfefa7GuYYCG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFLVnlBdFV3dHZuZTZSOTU5cnNhNWhnSWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kMWRhNmEtNDkxOS00OTlhLTlhNDEt MmJiYjQ4ZWZiMGVkLzEvMlVpai1weE9uSFZuS2diTHpsYVR2TkpyQkVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kMWRhNmEtNDkxOS00OTlhLTlhNDEtMmJiYjQ4ZWZiMGVk LzEvZWFLVnlBdFV3dHZuZTZSOTU5cnNhNWhnSWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW+rsAwQA uWd2MA0EAgACMAcDBQMqFLGAMA0GCSqGSIb3DQEBCwUAA4IBAQBV5xO0X4L15VTO +iMLUb3NJ3pYprTw2JBCb4AxP8SLfvc7R7K+M6PXQw4eXnr5gv4RY1ysngcyHdno fjDlrEeOTtQgmPeI1SO5G1fO5+9OqmGqGBmR1usfnEpAQ8EWx0cekS5UdX7037w8 UxXQU5Kf3JUIEK+ro0ybfYZrjLTsYD81/ocjyLYEcE3BwEaAT+An7KDoop2mGVU9 VtDLaGZlKfnl4JZpgYUiqrt3fPzzP1Ck2CXUZA2+DWnj1KGPeYCyCjLIpYgyTbm8 muz/ejS2n3LJoPAX5W8w7Km+eQZdVejAHUTkmS3eIvjkU+IhT1oQJBD5LiQkjtC8 g8B/Bl93 -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:15 2026 by rpki-client