This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa File: 2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa (raw, json) Hash identifier: NV7KOQeRFSKnPsVfH3yXaw+5FrZAKvvgJHtK0M65oGw= Subject key identifier: DA:CF:01:C1:67:CC:B1:CD:43:77:2C:56:2F:14:A7:14:96:DE:D8:63 Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef Certificate serial: 019B7A5AD3131EB3DBA4F54B7F85554FC39E Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa Signing time: Thu 01 Jan 2026 16:18:51 +0000 ROA not before: Thu 01 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 185.95.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d3:13:1e:b3:db:a4:f5:4b:7f:85:55:4f:c3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6954e90899ff25644520724cde8c211613600bef Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dacf01c167ccb1cd43772c562f14a71496ded863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:96:06:c9:eb:94:39:a3:33:ee:18:c2:b4: 35:e8:a0:e8:1e:39:67:3c:ec:a5:b0:41:2f:95:81: cf:4f:4d:20:ce:97:2a:ea:cd:32:fa:be:1d:b9:f0: 36:07:5d:e8:d7:65:57:43:5a:31:f6:26:61:79:80: 03:34:51:86:cf:1f:61:94:bf:3a:f8:14:f1:ee:44: af:57:07:14:0f:6a:37:2d:53:24:68:59:fa:a6:af: 20:93:4a:e3:1a:16:8c:78:73:b2:70:f1:29:d0:59: 4f:c6:03:11:57:75:60:40:e8:61:43:0b:d6:4d:8d: d7:cf:8f:6b:f3:3d:db:f3:34:6e:3d:39:15:d3:23: 4f:c9:4e:c6:54:1c:a9:71:fb:4b:e9:1b:37:9f:77: b0:9c:3e:26:b2:89:ec:d7:d3:44:f6:45:0a:dd:ae: da:3b:5d:13:0c:be:9d:77:01:c8:a1:30:3a:e2:ce: 97:7f:51:14:c0:97:f4:38:14:e0:c9:59:60:70:bf: 46:f4:b4:10:e7:ef:4e:f7:87:9b:be:33:31:df:ac: 56:ec:61:c4:18:5c:09:40:3f:74:ae:37:f7:12:3f: 9f:7c:26:16:39:84:4e:e2:b0:ce:4d:29:9b:02:92: ea:ac:e3:40:e0:d5:82:ee:a9:61:c1:b6:75:e4:71: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CF:01:C1:67:CC:B1:CD:43:77:2C:56:2F:14:A7:14:96:DE:D8:63 X509v3 Authority Key Identifier: keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.136.0/22 Signature Algorithm: sha256WithRSAEncryption 97:f2:f0:c1:71:b3:09:21:47:e9:49:a9:0c:81:bc:58:13:21: f2:1c:f1:b3:63:1d:51:b5:26:03:42:cc:74:2c:fb:61:e6:89: ad:35:9b:55:f3:2d:5a:31:4c:a6:b8:8b:20:ea:35:82:59:5e: 76:fe:1d:fb:e1:f1:9b:91:77:09:16:59:bf:1f:79:cd:0e:55: 17:79:67:dd:2b:a4:e8:bd:41:45:8a:73:3d:57:c8:fc:38:bc: 3d:77:2e:18:e4:dc:5f:ea:da:3b:06:21:b3:88:a6:62:80:38: fd:bf:2f:aa:b4:53:8f:f6:79:bf:d9:d2:1d:bb:d0:59:6e:6b: e9:b7:b6:32:c2:41:4a:72:0d:9a:1e:20:1d:81:af:91:00:fd: b3:41:98:6c:ef:bd:a6:1a:d1:6e:60:63:cb:f3:e3:9c:76:15: c5:f9:59:cb:05:5f:f4:8d:e8:a1:fd:e1:d2:15:a6:50:a1:09: 15:dd:d7:52:ad:f0:4b:84:60:6f:1b:cf:17:b7:e3:8f:8c:8e: 15:39:31:87:a4:ad:a4:34:61:3d:b4:00:40:7c:7d:06:98:83: 34:91:8c:7e:ec:27:75:ff:f0:37:16:09:da:73:2c:83:56:c5: 3a:75:c6:8c:7a:2a:3a:65:32:73:69:2a:57:05:50:b0:5b:2c: 2d:24:8c:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtMTHrPbpPVLf4VVT8OeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTRlOTA4OTlmZjI1NjQ0NTIwNzI0Y2RlOGMyMTE2MTM2 MDBiZWYwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWNmMDFjMTY3Y2NiMWNkNDM3NzJjNTYyZjE0YTcxNDk2ZGVkODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1uWBsnrlDmjM+4YwrQ16KDoHjln POylsEEvlYHPT00gzpcq6s0y+r4dufA2B13o12VXQ1ox9iZheYADNFGGzx9hlL86 +BTx7kSvVwcUD2o3LVMkaFn6pq8gk0rjGhaMeHOycPEp0FlPxgMRV3VgQOhhQwvW TY3Xz49r8z3b8zRuPTkV0yNPyU7GVBypcftL6Rs3n3ewnD4msons19NE9kUK3a7a O10TDL6ddwHIoTA64s6Xf1EUwJf0OBTgyVlgcL9G9LQQ5+9O94ebvjMx36xW7GHE GFwJQD90rjf3Ej+ffCYWOYRO4rDOTSmbApLqrONA4NWC7qlhwbZ15HFm5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNrPAcFnzLHNQ3csVi8UpxSW3thjMB8GA1UdIwQY MBaAFGlU6QiZ/yVkRSByTN6MIRYTYAvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAt M2Y2ZWU3MDU5MTViLzEvMnM4QndXZk1zYzFEZHl4V0x4U25GSmJlMkdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAtM2Y2ZWU3MDU5MTVi LzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV+IMA0G CSqGSIb3DQEBCwUAA4IBAQCX8vDBcbMJIUfpSakMgbxYEyHyHPGzYx1RtSYDQsx0 LPth5omtNZtV8y1aMUymuIsg6jWCWV52/h374fGbkXcJFlm/H3nNDlUXeWfdK6To vUFFinM9V8j8OLw9dy4Y5Nxf6to7BiGziKZigDj9vy+qtFOP9nm/2dIdu9BZbmvp t7YywkFKcg2aHiAdga+RAP2zQZhs772mGtFuYGPL8+OcdhXF+VnLBV/0jeih/eHS FaZQoQkV3ddSrfBLhGBvG88Xt+OPjI4VOTGHpK2kNGE9tABAfH0GmIM0kYx+7Cd1 //A3FgnacyyDVsU6dcaMeio6ZTJzaSpXBVCwWywtJIzN -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:14 2026 by rpki-client