This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/bZ2MoSlfcA_Bg7BrRKE2leLFknc.roa File: bZ2MoSlfcA_Bg7BrRKE2leLFknc.roa (raw, json) Hash identifier: mlGeYAkzIiaMQu2uNg0bx5zSdfDctbxIGGNO6WnD0zI= Subject key identifier: 6D:9D:8C:A1:29:5F:70:0F:C1:83:B0:6B:44:A1:36:95:E2:C5:92:77 Certificate issuer: /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8 Certificate serial: 019B7FF28B2EBD290FBD53D4165DD8F93DB4 Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/bZ2MoSlfcA_Bg7BrRKE2leLFknc.roa Signing time: Fri 02 Jan 2026 18:22:40 +0000 ROA not before: Fri 02 Jan 2026 18:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25094 IP address blocks: 148.110.0.0/16 maxlen: 16 185.106.24.0/22 maxlen: 24 2a00:18e8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:8b:2e:bd:29:0f:bd:53:d4:16:5d:d8:f9:3d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8 Validity Not Before: Jan 2 18:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d9d8ca1295f700fc183b06b44a13695e2c59277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:64:14:87:dd:e1:08:b8:97:1f:51:47:77: 8a:03:a2:cd:5e:7a:1f:95:7f:f3:81:f8:c3:ec:7b: c2:33:9e:6f:51:4a:f5:eb:d3:f0:6c:38:48:40:2f: 0a:2a:dc:8f:35:34:55:5c:5e:8f:f6:5e:cd:a3:86: fa:a0:38:5d:5b:7a:59:b9:df:86:15:f8:a7:75:82: 90:04:c1:aa:65:02:96:69:21:d3:72:7c:ea:a7:54: 33:a3:f0:c5:41:1a:b1:97:f8:43:79:da:fe:e0:a6: a6:47:a2:de:84:a4:89:c1:92:9c:8a:ff:1f:13:f8: 54:78:c0:df:30:32:ef:76:cc:d8:3f:a4:7f:ee:83: db:34:ff:30:c0:6e:d7:74:29:d7:48:fb:60:a7:5d: 30:5b:85:34:d5:6d:b1:44:3d:78:79:15:89:3f:36: 0d:4e:58:7b:ea:3d:a4:8f:8f:3c:e6:42:41:b1:15: 42:0d:4f:78:83:82:4d:2b:21:9b:d6:2b:7f:0f:98: dd:63:5d:ea:0f:7a:a4:ad:b3:13:03:ce:e3:55:b7: 6d:35:33:4a:7a:75:f3:d8:0c:4a:20:17:e5:8b:04: f3:40:52:42:c3:cd:8b:76:d7:19:ab:0a:4d:cd:c2: 60:a1:e5:ca:fc:25:d3:57:f4:89:77:55:c9:ce:3f: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9D:8C:A1:29:5F:70:0F:C1:83:B0:6B:44:A1:36:95:E2:C5:92:77 X509v3 Authority Key Identifier: keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/bZ2MoSlfcA_Bg7BrRKE2leLFknc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.110.0.0/16 185.106.24.0/22 IPv6: 2a00:18e8::/29 Signature Algorithm: sha256WithRSAEncryption 4a:4d:a7:57:b1:04:cb:3a:57:b6:90:05:2e:a6:fe:a0:18:09: 4b:37:ff:38:1b:25:01:f3:b9:b2:ec:08:49:74:31:82:f8:f2: 1e:90:08:8e:53:b9:92:c9:dd:e3:f5:ce:a8:da:33:29:88:be: 63:f8:1d:ef:a9:35:33:ec:d4:0f:76:08:7e:b7:52:0f:c5:9b: 96:27:b3:c4:89:da:12:ab:5c:d7:3d:0e:24:2a:b2:01:5c:19: bb:0a:05:a6:e5:14:3a:14:ae:3a:a4:55:33:74:51:69:41:f6: 48:c5:1a:4e:29:85:bc:a2:3a:39:fb:fa:18:75:cf:2b:e5:3d: 09:2d:b1:81:a4:b8:ed:31:61:14:4f:20:f1:93:2b:04:c3:21: 96:c1:5f:f3:ed:70:a7:ba:9c:d1:cb:b5:ce:60:1c:8b:54:e0: a7:a6:dc:89:7e:05:93:34:7b:ff:ff:51:e1:14:c2:5a:d9:8f: 23:bd:59:7b:64:2e:82:03:6e:52:1e:5e:8e:96:e4:18:e8:96: cd:d8:89:42:45:56:f3:73:f4:16:e9:3f:22:19:01:35:7f:d8: 18:ab:46:2f:a8:d0:f1:d0:9b:99:9f:1a:0e:d4:ab:50:12:83: 1d:3f:9f:60:95:f0:e0:74:ce:00:df:30:2d:3b:b0:78:e4:f4: f3:49:14:f1 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/8osuvSkPvVPUFl3Y+T20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NmYzMWFkMTcwMWRmY2EyMWJiZjRhNjVlMDdmMjVjMWNm MmIyYzgwHhcNMjYwMTAyMTgyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDlkOGNhMTI5NWY3MDBmYzE4M2IwNmI0NGExMzY5NWUyYzU5Mjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJBkFIfd4Qi4lx9RR3eKA6LNXnof lX/zgfjD7HvCM55vUUr169PwbDhIQC8KKtyPNTRVXF6P9l7No4b6oDhdW3pZud+G FfindYKQBMGqZQKWaSHTcnzqp1Qzo/DFQRqxl/hDedr+4KamR6LehKSJwZKciv8f E/hUeMDfMDLvdszYP6R/7oPbNP8wwG7XdCnXSPtgp10wW4U01W2xRD14eRWJPzYN Tlh76j2kj4885kJBsRVCDU94g4JNKyGb1it/D5jdY13qD3qkrbMTA87jVbdtNTNK enXz2AxKIBfliwTzQFJCw82LdtcZqwpNzcJgoeXK/CXTV/SJd1XJzj814wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFG2djKEpX3APwYOwa0ShNpXixZJ3MB8GA1UdIwQY MBaAFCZvMa0XAd/KIbv0pl4H8lwc8rLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80NDM3ZDYtMjJkOC00MDFiLTgxMzct MTBiZjc3YjIwZGFjLzEvYloyTW9TbGZjQV9CZzdCclJLRTJsZUxGa25jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi80NDM3ZDYtMjJkOC00MDFiLTgxMzctMTBiZjc3YjIwZGFj LzEvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAlG4DBAK5 ahgwDQQCAAIwBwMFAyoAGOgwDQYJKoZIhvcNAQELBQADggEBAEpNp1exBMs6V7aQ BS6m/qAYCUs3/zgbJQHzubLsCEl0MYL48h6QCI5TuZLJ3eP1zqjaMymIvmP4He+p NTPs1A92CH63Ug/Fm5Yns8SJ2hKrXNc9DiQqsgFcGbsKBablFDoUrjqkVTN0UWlB 9kjFGk4phbyiOjn7+hh1zyvlPQktsYGkuO0xYRRPIPGTKwTDIZbBX/PtcKe6nNHL tc5gHItU4Kem3Il+BZM0e///UeEUwlrZjyO9WXtkLoIDblIeXo6W5Bjols3YiUJF VvNz9BbpPyIZATV/2BirRi+o0PHQm5mfGg7Uq1ASgx0/n2CV8OB0zgDfMC07sHjk 9PNJFPE= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:26 2026 by rpki-client