This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/2gMkKbJA554Yq2voG-iU3zjpglc.roa File: 2gMkKbJA554Yq2voG-iU3zjpglc.roa (raw, json) Hash identifier: wMFCnORiTnuilB2AGLAPYKYN/hd+vlQrA8D8lSugV4Y= Subject key identifier: DA:03:24:29:B2:40:E7:9E:18:AB:6B:E8:1B:E8:94:DF:38:E9:82:57 Certificate issuer: /CN=1a228183490ac6b2523dbfcc087c13816f9c2612 Certificate serial: 019B7C7FB2DAE3BBB647824B11DCA3074954 Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/2gMkKbJA554Yq2voG-iU3zjpglc.roa Signing time: Fri 02 Jan 2026 02:18:22 +0000 ROA not before: Fri 02 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48594 IP address blocks: 94.124.80.0/24 maxlen: 24 94.124.81.0/24 maxlen: 24 94.124.82.0/24 maxlen: 24 94.124.83.0/24 maxlen: 24 94.124.84.0/24 maxlen: 24 94.124.85.0/24 maxlen: 24 94.124.86.0/24 maxlen: 24 94.124.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b2:da:e3:bb:b6:47:82:4b:11:dc:a3:07:49:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612 Validity Not Before: Jan 2 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da032429b240e79e18ab6be81be894df38e98257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:d9:2a:7b:a3:0d:8a:1a:25:2b:66:c4:4f: 56:40:c8:c8:d6:74:7c:df:61:03:7f:8a:76:21:63: aa:45:4a:18:cf:02:29:2b:d0:43:24:4f:2b:f5:f8: f9:26:48:1a:d0:da:d2:d1:5c:83:3b:48:39:15:40: b8:01:06:de:6b:9d:39:5b:72:95:81:ff:55:65:39: 21:85:0d:a7:c4:78:d7:74:54:6c:d2:23:cf:e3:2a: 93:a4:c6:3d:4a:f9:29:e2:1e:33:c8:98:a9:22:8f: 26:8a:35:8b:99:96:74:5b:34:24:e6:c6:bf:13:27: e9:73:cc:f5:99:3a:a1:31:3c:f8:97:56:bd:1a:64: 6e:8a:84:2f:2d:b4:94:ad:4c:18:fc:76:58:2d:e6: 91:bd:ad:aa:4f:70:e6:5d:71:18:7b:62:fe:22:5d: 30:22:ab:51:0e:f3:aa:49:d9:ae:b4:33:dd:3c:b9: ac:b8:14:c4:70:5a:fc:6b:6d:93:e5:02:40:a0:87: cc:49:08:b2:ac:e5:6b:ae:e1:92:d0:7a:3d:7f:04: 8c:96:c3:5a:bb:b3:41:56:ac:0c:d9:cc:de:71:ea: a0:e1:ad:15:ff:ee:e1:bc:48:a4:3b:c0:f9:94:f7: d8:e7:97:7c:25:26:78:fb:ba:67:7a:c1:f6:ed:a8: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:03:24:29:B2:40:E7:9E:18:AB:6B:E8:1B:E8:94:DF:38:E9:82:57 X509v3 Authority Key Identifier: keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/2gMkKbJA554Yq2voG-iU3zjpglc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.124.80.0/21 Signature Algorithm: sha256WithRSAEncryption 16:69:30:53:44:78:cd:ef:7b:a6:91:36:fe:d6:f0:13:82:df: d3:f9:9c:dd:f6:32:4d:0c:41:6d:71:a7:6e:12:e4:a4:f3:74: 00:a1:12:96:58:2b:a6:ba:eb:62:68:b7:69:5a:8e:d3:75:6b: d6:58:31:57:5a:ba:85:c1:d2:a2:9e:f1:a3:5e:07:ac:19:1a: b0:5b:78:d9:3c:47:90:29:0b:42:e7:a7:34:0f:dd:bc:08:c8: 3b:03:14:03:1b:9c:7c:93:b4:b4:06:f9:ea:27:63:5f:5b:7b: 0f:b3:b5:89:4c:66:84:4b:11:11:41:77:72:24:57:14:3b:a8: 5c:bb:30:fa:3f:a0:33:66:52:79:6b:0a:70:e5:d2:08:57:f5: 10:f9:36:4b:6a:1e:15:ca:b8:0a:fc:ea:a0:1e:b7:fc:af:ab: 61:b5:01:b2:0a:b4:be:b3:41:49:c9:c0:51:6e:0b:e3:70:d0: c3:81:2c:ee:a5:f2:20:35:14:a6:b7:a1:3a:21:95:0e:ec:61: 1d:0c:88:48:8c:05:d6:d1:2b:43:47:f4:16:6a:c1:f0:80:f1: f8:2f:fb:71:b3:8a:7d:27:d1:a5:22:2e:76:1f:07:2a:90:bc: 22:b7:d8:bb:58:dd:dc:bc:d4:66:80:94:04:a1:73:bc:df:70: 37:fb:06:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7La47u2R4JLEdyjB0lUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMjI4MTgzNDkwYWM2YjI1MjNkYmZjYzA4N2MxMzgxNmY5 YzI2MTIwHhcNMjYwMTAyMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTAzMjQyOWIyNDBlNzllMThhYjZiZTgxYmU4OTRkZjM4ZTk4MjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun3ZKnujDYoaJStmxE9WQMjI1nR8 32EDf4p2IWOqRUoYzwIpK9BDJE8r9fj5Jkga0NrS0VyDO0g5FUC4AQbea505W3KV gf9VZTkhhQ2nxHjXdFRs0iPP4yqTpMY9Svkp4h4zyJipIo8mijWLmZZ0WzQk5sa/ Eyfpc8z1mTqhMTz4l1a9GmRuioQvLbSUrUwY/HZYLeaRva2qT3DmXXEYe2L+Il0w IqtRDvOqSdmutDPdPLmsuBTEcFr8a22T5QJAoIfMSQiyrOVrruGS0Ho9fwSMlsNa u7NBVqwM2czeceqg4a0V/+7hvEikO8D5lPfY55d8JSZ4+7pnesH27agSIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNoDJCmyQOeeGKtr6BvolN846YJXMB8GA1UdIwQY MBaAFBoigYNJCsayUj2/zAh8E4FvnCYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2Mt NjljNGU4NTMzNTIxLzEvMmdNa0tiSkE1NTRZcTJ2b0ctaVUzempwZ2xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2MtNjljNGU4NTMzNTIx LzEvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXnxQMA0G CSqGSIb3DQEBCwUAA4IBAQAWaTBTRHjN73umkTb+1vATgt/T+Zzd9jJNDEFtcadu EuSk83QAoRKWWCumuutiaLdpWo7TdWvWWDFXWrqFwdKinvGjXgesGRqwW3jZPEeQ KQtC56c0D928CMg7AxQDG5x8k7S0BvnqJ2NfW3sPs7WJTGaESxERQXdyJFcUO6hc uzD6P6AzZlJ5awpw5dIIV/UQ+TZLah4VyrgK/OqgHrf8r6thtQGyCrS+s0FJycBR bgvjcNDDgSzupfIgNRSmt6E6IZUO7GEdDIhIjAXW0StDR/QWasHwgPH4L/txs4p9 J9GlIi52HwcqkLwit9i7WN3cvNRmgJQEoXO833A3+wYX -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:40 2026 by rpki-client