This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/2pkPSs8gVn643UGplZoHfvgJ4jU.roa File: 2pkPSs8gVn643UGplZoHfvgJ4jU.roa (raw, json) Hash identifier: X1hpztinQvCh1GRCCDgW40Mdj2XAHD7UuWOgieEm9aw= Subject key identifier: DA:99:0F:4A:CF:20:56:7E:B8:DD:41:A9:95:9A:07:7E:F8:09:E2:35 Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72 Certificate serial: 019B79EC9B2A25C53AFA03B46151B6CF20B0 Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/2pkPSs8gVn643UGplZoHfvgJ4jU.roa Signing time: Thu 01 Jan 2026 14:18:27 +0000 ROA not before: Thu 01 Jan 2026 14:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26506 IP address blocks: 207.229.122.0/24 maxlen: 24 209.16.176.0/24 maxlen: 24 209.16.178.0/24 maxlen: 24 209.162.155.0/24 maxlen: 24 209.162.157.0/24 maxlen: 24 2a02:3d0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9b:2a:25:c5:3a:fa:03:b4:61:51:b6:cf:20:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72 Validity Not Before: Jan 1 14:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da990f4acf20567eb8dd41a9959a077ef809e235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:9d:35:4e:a2:86:48:42:2b:36:46:2f:4f: d7:01:2c:7d:3e:3b:28:32:fa:6e:56:7b:78:2c:03: e4:a4:a5:29:d0:5d:83:16:42:ac:ff:3a:df:30:28: f9:0d:4f:2f:c5:08:f1:81:ad:a9:1d:4a:32:cf:5d: eb:f5:fa:c0:3b:ed:66:21:01:2f:b4:c8:85:c5:b8: 59:76:99:ae:2c:19:d9:74:d8:08:1b:66:03:e9:01: a4:a2:53:8e:95:a3:dd:12:e9:c0:28:a7:c7:9f:c6: b9:ae:f1:ad:50:f1:86:a8:b7:b9:63:06:9f:db:e1: eb:dd:fc:34:44:8d:1d:db:cc:c3:6e:69:1f:2e:35: 30:98:9f:20:07:aa:83:f7:b1:0f:62:79:9a:e5:45: e8:16:3a:61:33:3a:d2:b8:c5:ab:8c:ae:01:0a:e8: 75:d5:75:00:77:2c:e8:0f:2a:70:fe:ae:03:ea:b3: 40:5c:51:8a:54:cb:55:14:6b:12:ff:36:44:7b:14: 94:73:ff:7a:81:b4:b0:ca:1b:c2:5a:05:69:24:08: bd:fb:a0:72:f2:76:bd:23:ae:5f:d2:d9:e9:db:87: f7:28:1d:00:f5:ce:5b:64:6b:00:b2:d0:d5:8c:65: 12:68:09:c1:e3:cd:8c:2c:53:df:78:a6:0b:2d:c5: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:99:0F:4A:CF:20:56:7E:B8:DD:41:A9:95:9A:07:7E:F8:09:E2:35 X509v3 Authority Key Identifier: keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/2pkPSs8gVn643UGplZoHfvgJ4jU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.229.122.0/24 209.16.176.0/24 209.16.178.0/24 209.162.155.0/24 209.162.157.0/24 IPv6: 2a02:3d0:7::/48 Signature Algorithm: sha256WithRSAEncryption 91:7e:af:7e:a5:17:28:b4:2a:3e:51:38:40:17:f9:3d:eb:3e: 18:96:01:00:ed:11:ac:fa:bb:28:a7:8a:f4:be:94:a0:d4:a9: 28:22:de:fb:4d:18:e3:15:15:98:77:ea:8f:31:ef:94:57:e7: ba:58:3c:44:90:78:94:ae:a0:31:30:b0:3b:39:fc:64:e0:58: ee:17:ce:1b:7d:75:df:20:36:a9:ef:4f:5f:79:e3:7c:e0:11: 71:5f:3f:e3:51:31:45:de:04:7c:47:5a:04:d9:2a:3f:1c:58: 0b:a3:ff:35:be:a8:6a:64:a5:9b:6e:0b:69:c2:d6:46:a2:36: 82:cc:37:65:0a:4c:19:6e:02:52:cc:94:d2:a3:10:69:95:1f: 60:12:a2:41:8b:c6:a7:15:c7:ce:d6:05:ea:cd:0b:2a:e9:c3: 57:7d:ca:59:15:a3:ad:09:81:5b:af:c2:31:ee:fc:95:cb:97: 2a:dd:24:d7:77:7d:41:f1:79:32:46:20:49:98:27:bf:3a:7b: dc:d5:85:93:32:4d:4c:4a:da:e7:0c:47:1d:89:8e:ca:ec:39: a5:02:3d:e7:47:b7:bc:a8:d9:c5:63:6e:22:bf:4c:b0:6e:23: 5b:1a:8b:61:18:8e:19:64:c8:08:65:4d:e5:99:32:cc:66:74: 45:7e:43:1d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt57JsqJcU6+gO0YVG2zyCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZTM5NTNjNWNiNDUyZjE1OWY4ZTE1MDVmYzcwMmU4ODM2 NTdlNzIwHhcNMjYwMTAxMTQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTk5MGY0YWNmMjA1NjdlYjhkZDQxYTk5NTlhMDc3ZWY4MDllMjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbadNU6ihkhCKzZGL0/XASx9Pjso MvpuVnt4LAPkpKUp0F2DFkKs/zrfMCj5DU8vxQjxga2pHUoyz13r9frAO+1mIQEv tMiFxbhZdpmuLBnZdNgIG2YD6QGkolOOlaPdEunAKKfHn8a5rvGtUPGGqLe5Ywaf 2+Hr3fw0RI0d28zDbmkfLjUwmJ8gB6qD97EPYnma5UXoFjphMzrSuMWrjK4BCuh1 1XUAdyzoDypw/q4D6rNAXFGKVMtVFGsS/zZEexSUc/96gbSwyhvCWgVpJAi9+6By 8na9I65f0tnp24f3KB0A9c5bZGsAstDVjGUSaAnB482MLFPfeKYLLcVqIwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFNqZD0rPIFZ+uN1BqZWaB374CeI1MB8GA1UdIwQY MBaAFEDjlTxctFLxWfjhUF/HAuiDZX5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZDg1MDUtMzg5OS00YTllLThjZjEt ZmE1YWYzOGRlYjVlLzEvMnBrUFNzOGdWbjY0M1VHcGxab0hmdmdKNGpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83ZDg1MDUtMzg5OS00YTllLThjZjEtZmE1YWYzOGRlYjVl LzEvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQAz+V6AwQA 0RCwAwQA0RCyAwQA0aKbAwQA0aKdMA8EAgACMAkDBwAqAgPQAAcwDQYJKoZIhvcN AQELBQADggEBAJF+r36lFyi0Kj5ROEAX+T3rPhiWAQDtEaz6uyinivS+lKDUqSgi 3vtNGOMVFZh36o8x75RX57pYPESQeJSuoDEwsDs5/GTgWO4Xzht9dd8gNqnvT195 43zgEXFfP+NRMUXeBHxHWgTZKj8cWAuj/zW+qGpkpZtuC2nC1kaiNoLMN2UKTBlu AlLMlNKjEGmVH2ASokGLxqcVx87WBerNCyrpw1d9ylkVo60JgVuvwjHu/JXLlyrd JNd3fUHxeTJGIEmYJ786e9zVhZMyTUxK2ucMRx2JjsrsOaUCPedHt7yo2cVjbiK/ TLBuI1sai2EYjhlkyAhlTeWZMsxmdEV+Qx0= -----END CERTIFICATE-----Generated at Wed Jan 21 14:40:53 2026 by rpki-client