This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/2c0jqBuEH1mHawmDju5SJrb9XO4.roa File: 2c0jqBuEH1mHawmDju5SJrb9XO4.roa (raw, json) Hash identifier: 4iGaC+nsr7eIRDAsx1YlRBvu72t0bZzh6T9oxMZT12o= Subject key identifier: D9:CD:23:A8:1B:84:1F:59:87:6B:09:83:8E:EE:52:26:B6:FD:5C:EE Certificate issuer: /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3 Certificate serial: 019B7DCB26A5567FFE009AFD1E47D9CB96E9 Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/2c0jqBuEH1mHawmDju5SJrb9XO4.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 45.152.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 08:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:26:a5:56:7f:fe:00:9a:fd:1e:47:d9:cb:96:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3 Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9cd23a81b841f59876b09838eee5226b6fd5cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:ad:d2:d1:6c:9a:30:31:70:d2:4b:02:79: de:7e:c8:1f:57:25:1d:9f:d5:06:b6:49:8a:bf:fc: 81:aa:5f:68:06:76:f2:01:45:e2:f5:f5:86:89:71: 5f:67:77:9b:59:2e:14:ce:ab:e7:85:68:b7:95:6c: 1c:4e:0a:00:66:45:93:69:92:a5:65:73:cb:66:55: b5:30:fd:36:7b:ee:0d:1d:9e:3a:26:ce:5b:cc:72: 6f:46:3c:ed:a8:b8:cb:99:80:e6:49:b2:e1:c7:3c: 70:06:7d:a8:73:e1:90:a7:d8:88:7c:d5:58:7a:35: fc:7e:e5:6b:90:85:22:8c:e7:15:fd:3e:5f:22:c2: 37:30:c6:14:9a:58:7c:b8:30:c3:d3:c7:15:17:02: 44:8f:97:b9:2d:15:0a:27:25:a7:5d:34:c0:f1:76: 02:e5:bc:ec:87:7d:b9:c3:7b:f3:8e:ab:6a:f3:ba: cb:eb:f8:72:e9:df:de:e9:53:26:0d:18:85:4b:c2: 79:fd:76:bb:b3:10:5d:0c:8d:a3:b0:c6:29:b9:f4: bf:e8:a2:ac:70:f1:e9:69:a2:68:4d:c7:7c:53:58: 32:6e:15:19:49:86:33:68:15:cb:8b:37:0b:76:09: c1:7a:33:d6:ee:27:35:99:31:f3:c3:cf:0d:b0:b8: 9b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CD:23:A8:1B:84:1F:59:87:6B:09:83:8E:EE:52:26:B6:FD:5C:EE X509v3 Authority Key Identifier: keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/2c0jqBuEH1mHawmDju5SJrb9XO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.20.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:9c:7b:2d:44:04:0b:55:93:65:3f:99:25:bd:75:04:95:c8: 52:c7:6e:66:56:2a:a3:1f:c8:00:b7:ab:ad:80:81:9b:49:1a: 81:61:f0:08:6a:ba:f3:93:fc:96:1c:58:a4:63:a0:31:13:f8: 40:94:a3:e6:77:e9:bb:9a:89:68:ff:b1:69:13:c9:1b:99:80: 83:2a:84:89:da:38:cf:bd:be:44:e6:55:9a:86:82:58:fc:a9: 12:b5:01:75:8a:bd:1b:78:9b:2d:9a:07:bf:cf:81:e5:0c:1f: eb:19:c9:b0:6d:7e:36:d6:20:09:b8:a1:fe:db:66:37:1b:61: c9:c5:e3:4e:db:a0:93:7b:6b:e7:c0:51:8d:4c:c7:6f:02:c4: 73:b3:1e:6a:1c:39:39:7d:a8:50:8f:88:22:8f:e0:41:ad:9c: 91:eb:e6:bc:42:42:36:ec:71:5e:cc:7c:ce:9b:4d:15:3f:4e: 4f:bf:58:af:a6:50:8d:d7:16:d4:01:90:28:a7:0a:4c:99:23: 22:17:0c:84:27:ee:ee:ef:25:13:c8:50:e6:d7:6d:bc:ff:20: dd:30:91:94:a3:2a:9f:ef:dc:a5:b2:a8:d1:db:8e:8a:60:f3: 00:90:fa:0e:27:9e:9b:67:c1:df:0f:50:59:78:a6:96:b4:1e: 31:c9:4d:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yyalVn/+AJr9HkfZy5bpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwM2IyYzM4NzEwNjkwMDJhZDBiMmY0MmIwY2JmNWU5MmUz YmU0YjMwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWNkMjNhODFiODQxZjU5ODc2YjA5ODM4ZWVlNTIyNmI2ZmQ1Y2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs2t0tFsmjAxcNJLAnnefsgfVyUd n9UGtkmKv/yBql9oBnbyAUXi9fWGiXFfZ3ebWS4UzqvnhWi3lWwcTgoAZkWTaZKl ZXPLZlW1MP02e+4NHZ46Js5bzHJvRjztqLjLmYDmSbLhxzxwBn2oc+GQp9iIfNVY ejX8fuVrkIUijOcV/T5fIsI3MMYUmlh8uDDD08cVFwJEj5e5LRUKJyWnXTTA8XYC 5bzsh325w3vzjqtq87rL6/hy6d/e6VMmDRiFS8J5/Xa7sxBdDI2jsMYpufS/6KKs cPHpaaJoTcd8U1gybhUZSYYzaBXLizcLdgnBejPW7ic1mTHzw88NsLibCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNnNI6gbhB9Zh2sJg47uUia2/VzuMB8GA1UdIwQY MBaAFAA7LDhxBpACrQsvQrDL9ekuO+SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGIt YjM1YTBhMTQ1M2ZiLzEvMmMwanFCdUVIMW1IYXdtRGp1NVNKcmI5WE80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGItYjM1YTBhMTQ1M2Zi LzEvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZgUMA0G CSqGSIb3DQEBCwUAA4IBAQA8nHstRAQLVZNlP5klvXUElchSx25mViqjH8gAt6ut gIGbSRqBYfAIarrzk/yWHFikY6AxE/hAlKPmd+m7molo/7FpE8kbmYCDKoSJ2jjP vb5E5lWahoJY/KkStQF1ir0beJstmge/z4HlDB/rGcmwbX421iAJuKH+22Y3G2HJ xeNO26CTe2vnwFGNTMdvAsRzsx5qHDk5fahQj4gij+BBrZyR6+a8QkI27HFezHzO m00VP05Pv1ivplCN1xbUAZAopwpMmSMiFwyEJ+7u7yUTyFDm1228/yDdMJGUoyqf 79ylsqjR246KYPMAkPoOJ56bZ8HfD1BZeKaWtB4xyU0n -----END CERTIFICATE-----Generated at Fri Jan 2 16:27:40 2026 by rpki-client