This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/2GdVWpyHcUZuha5almj4Sspe2bE.roa File: 2GdVWpyHcUZuha5almj4Sspe2bE.roa (raw, json) Hash identifier: VRGJz/bJneNeY1Kgq/MA7FsnEvzZjU8NRF6ZfAOUyew= Subject key identifier: D8:67:55:5A:9C:87:71:46:6E:85:AE:5A:96:68:F8:4A:CA:5E:D9:B1 Certificate issuer: /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5 Certificate serial: 019B7E37614773E037DAB6A2C343D7EDA3AC Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/2GdVWpyHcUZuha5almj4Sspe2bE.roa Signing time: Fri 02 Jan 2026 10:18:37 +0000 ROA not before: Fri 02 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12335 IP address blocks: 212.53.32.0/19 maxlen: 20 2a02:2f8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:61:47:73:e0:37:da:b6:a2:c3:43:d7:ed:a3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5 Validity Not Before: Jan 2 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d867555a9c8771466e85ae5a9668f84aca5ed9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b2:72:ae:b7:d2:76:13:c7:7f:41:34:74:ca: 05:a6:8c:e2:a0:f5:91:5b:6b:ea:d6:19:62:6c:91: ae:5f:f1:8f:e5:e9:16:26:72:45:26:d1:56:9e:c8: 5e:84:e2:e9:56:a5:16:1d:71:bf:56:b0:a0:62:ca: f3:25:91:10:43:9d:f5:5b:ee:fb:34:0a:5b:f8:c6: 62:a4:c6:dd:42:84:66:44:33:2a:09:28:de:07:d6: 7c:2a:8c:67:31:14:1c:2d:cf:d8:00:5c:e7:69:ba: c2:d9:b2:aa:26:19:95:f7:02:28:b3:62:cd:a2:e6: 63:8d:47:05:4f:3d:ba:f6:5f:b1:e1:35:57:24:6a: 3e:64:f3:ad:6a:ee:c7:ff:a2:0e:26:f1:35:2c:32: 3d:ad:fe:4e:ec:3b:4d:5c:77:28:4c:63:2c:b5:fb: 76:11:4e:8f:e6:42:b1:d9:ed:ec:59:12:d5:b0:f8: 51:0b:8c:de:8f:1b:ff:67:e4:c2:b1:df:4b:8a:22: a0:df:21:a4:64:d5:b4:d6:7a:3b:9c:1a:7a:c9:a6: 35:e3:90:65:87:35:e9:29:b7:24:46:a5:6b:b8:5a: cf:e2:32:ee:5e:0c:21:97:4d:ef:6d:c7:d8:8d:9f: 38:79:3c:d9:b9:55:ca:ce:86:5a:ef:9f:81:74:28: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:67:55:5A:9C:87:71:46:6E:85:AE:5A:96:68:F8:4A:CA:5E:D9:B1 X509v3 Authority Key Identifier: keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/2GdVWpyHcUZuha5almj4Sspe2bE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.53.32.0/19 IPv6: 2a02:2f8::/32 Signature Algorithm: sha256WithRSAEncryption 4e:7c:d5:94:5c:ff:88:a9:49:ab:6a:90:43:ba:14:dc:dc:a8: ab:85:d8:f8:f2:99:f2:47:dc:0a:a7:74:f8:45:12:3f:e4:4f: a8:f4:c4:8f:97:cb:0e:73:5c:a8:3c:57:fd:2d:ab:71:10:7a: d2:6a:aa:9d:78:32:7a:21:fb:20:67:63:bd:2c:9a:4d:73:e3: 50:ff:13:d5:1b:1e:53:ae:a9:cb:6d:e9:c9:56:71:80:ce:05: 8c:4c:fe:f0:51:d3:6f:dd:7a:64:69:51:b0:d8:d6:4c:3f:17: 36:7b:ba:45:84:d2:a6:82:ba:0e:4f:05:ec:a7:df:6c:c8:63: dd:3a:50:69:15:31:fc:35:02:56:7a:49:55:3b:bc:aa:8c:23: a5:c3:32:c1:49:5f:cc:15:1e:ad:96:31:00:59:67:ff:f8:22: 4e:d6:fc:f1:7d:e5:2b:56:7e:48:8e:5d:3c:02:7a:fc:ec:b3: 74:cd:36:49:a1:55:7d:c8:31:fe:b5:f7:8a:7e:a8:1a:16:5b: e6:a6:20:16:50:7c:8b:56:b8:47:08:41:11:af:72:b0:10:27: 87:aa:19:b3:05:4e:08:97:b3:c4:ef:6a:b3:97:32:d2:b9:e5: 8f:2d:8f:3d:c4:8a:6a:b8:65:8b:07:ab:b9:4f:b2:8e:a0:58: 18:fe:0c:07 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N2FHc+A32raiw0PX7aOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNjU2Y2I0Nzc3ZDE0YjVlYjI2NGM2YjAzMmM4YmEzNzU2 ZjJhZTUwHhcNMjYwMTAyMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODY3NTU1YTljODc3MTQ2NmU4NWFlNWE5NjY4Zjg0YWNhNWVkOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LJyrrfSdhPHf0E0dMoFpozioPWR W2vq1hlibJGuX/GP5ekWJnJFJtFWnshehOLpVqUWHXG/VrCgYsrzJZEQQ531W+77 NApb+MZipMbdQoRmRDMqCSjeB9Z8KoxnMRQcLc/YAFznabrC2bKqJhmV9wIos2LN ouZjjUcFTz269l+x4TVXJGo+ZPOtau7H/6IOJvE1LDI9rf5O7DtNXHcoTGMstft2 EU6P5kKx2e3sWRLVsPhRC4zejxv/Z+TCsd9LiiKg3yGkZNW01no7nBp6yaY145Bl hzXpKbckRqVruFrP4jLuXgwhl03vbcfYjZ84eTzZuVXKzoZa75+BdCgcgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNhnVVqch3FGboWuWpZo+ErKXtmxMB8GA1UdIwQY MBaAFFBlbLR3fRS16yZMawMsi6N1byrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUdWc3RIZDlGTFhySmt4ckF5eUxvM1Z2S3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iMGNkMmUtNDg2NC00YTM0LTgyYTUt ZTdjNDQ0MzQ2NzYwLzEvMkdkVldweUhjVVp1aGE1YWxtajRTc3BlMmJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9iMGNkMmUtNDg2NC00YTM0LTgyYTUtZTdjNDQ0MzQ2NzYw LzEvVUdWc3RIZDlGTFhySmt4ckF5eUxvM1Z2S3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1DUgMA0E AgACMAcDBQAqAgL4MA0GCSqGSIb3DQEBCwUAA4IBAQBOfNWUXP+IqUmrapBDuhTc 3Kirhdj48pnyR9wKp3T4RRI/5E+o9MSPl8sOc1yoPFf9LatxEHrSaqqdeDJ6Ifsg Z2O9LJpNc+NQ/xPVGx5TrqnLbenJVnGAzgWMTP7wUdNv3XpkaVGw2NZMPxc2e7pF hNKmgroOTwXsp99syGPdOlBpFTH8NQJWeklVO7yqjCOlwzLBSV/MFR6tljEAWWf/ +CJO1vzxfeUrVn5Ijl08Anr87LN0zTZJoVV9yDH+tfeKfqgaFlvmpiAWUHyLVrhH CEERr3KwECeHqhmzBU4Il7PE72qzlzLSueWPLY89xIpquGWLB6u5T7KOoFgY/gwH -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:40 2026 by rpki-client