This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/a2aTLssL5qA9WYwMt2iC0oh1USM.roa File: a2aTLssL5qA9WYwMt2iC0oh1USM.roa (raw, json) Hash identifier: uWZUHJBuw3O6jwt6r5Een1zDl218rmROk6eyZ4UCJ5I= Subject key identifier: 6B:66:93:2E:CB:0B:E6:A0:3D:59:8C:0C:B7:68:82:D2:88:75:51:23 Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9 Certificate serial: 019B7F848610AF501C707AE5325479F5FC35 Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/a2aTLssL5qA9WYwMt2iC0oh1USM.roa Signing time: Fri 02 Jan 2026 16:22:30 +0000 ROA not before: Fri 02 Jan 2026 16:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48918 IP address blocks: 80.66.96.0/20 maxlen: 20 80.66.96.0/23 maxlen: 23 80.66.98.0/24 maxlen: 24 80.66.101.0/24 maxlen: 24 80.66.102.0/24 maxlen: 24 80.66.104.0/23 maxlen: 23 80.66.107.0/24 maxlen: 24 80.66.110.0/24 maxlen: 24 185.198.200.0/22 maxlen: 24 195.20.20.0/22 maxlen: 24 2a0a:8ec0::/29 maxlen: 29 2a0a:8ec0:2001::/48 maxlen: 48 2a0a:8ec0:2002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:86:10:af:50:1c:70:7a:e5:32:54:79:f5:fc:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9 Validity Not Before: Jan 2 16:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b66932ecb0be6a03d598c0cb76882d288755123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:02:6c:44:bd:15:2d:9a:e3:22:bd:3e:2c: b0:a6:34:87:41:86:08:10:c7:22:40:31:37:02:45: 18:6d:12:51:64:3f:1c:37:09:52:03:4b:15:77:9d: 75:c2:1b:6e:e2:28:ec:2c:ea:24:df:16:a1:5a:ec: 90:7a:a8:8e:05:2b:33:f8:af:2a:7f:49:8c:e8:ab: 9f:0b:5a:1f:54:03:de:9d:ec:66:cd:30:87:94:76: 09:50:49:3c:bc:48:69:b8:35:50:ae:54:4c:9d:7a: 2f:38:4e:66:c4:2f:89:74:16:00:6d:d7:d9:a9:d0: 92:a1:2b:28:b6:52:ea:3f:5a:52:35:6b:2a:4e:6a: a0:b9:37:35:64:c9:b0:ef:4d:da:c4:b5:34:c1:ce: d5:61:d5:ae:f0:f7:ad:9c:d3:48:f2:6f:3f:83:59: c4:a2:5c:e7:27:2c:b8:49:85:de:80:bf:03:6e:8d: ad:7c:07:e7:aa:e8:57:f7:75:93:9c:f0:9e:dd:4b: 44:8d:61:89:3b:64:a8:32:9f:0d:5e:0e:c7:c7:9a: b6:18:45:64:54:b4:fd:ac:8e:8e:28:12:cc:14:5a: 0d:84:9c:f2:35:4a:3d:61:d9:27:04:c1:a9:34:c5: 19:01:9c:24:b5:b3:42:85:6d:12:69:5c:d9:c1:bb: 4e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:66:93:2E:CB:0B:E6:A0:3D:59:8C:0C:B7:68:82:D2:88:75:51:23 X509v3 Authority Key Identifier: keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/a2aTLssL5qA9WYwMt2iC0oh1USM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.96.0/20 185.198.200.0/22 195.20.20.0/22 IPv6: 2a0a:8ec0::/29 Signature Algorithm: sha256WithRSAEncryption b9:75:10:8a:8f:23:30:0f:e9:2b:66:19:4e:50:e6:7e:91:03: ef:b8:3e:9b:61:6e:cd:28:97:63:b6:38:5a:82:df:09:37:86: 8c:63:75:c2:ce:a7:b7:0d:a4:11:e9:02:3e:cf:f3:a7:88:69: 23:1c:fb:8d:e3:01:d7:04:98:19:56:b6:b1:0a:9c:83:6d:87: 4e:43:f2:55:d9:4b:5d:3e:1c:c7:15:44:8d:bf:cd:3d:25:6f: ef:34:69:79:e5:a4:21:13:4a:fd:71:01:6c:71:06:dd:86:c7: 73:47:5b:a1:19:1e:b6:1b:90:75:17:64:de:70:b0:22:40:9e: 0c:09:c3:ba:2f:a0:3c:6a:64:63:c5:10:3e:4d:c7:2a:4c:90: b8:52:10:06:8a:63:d2:c8:5c:bd:84:3c:b7:b7:36:6e:b7:97: 75:d4:ae:48:7d:df:5b:55:5a:5c:05:ca:b1:d3:20:84:ca:7e: cd:49:16:b1:e3:21:1e:40:f1:b2:3b:4e:1f:5d:e5:f7:28:51: 2a:a6:61:d0:b8:b4:fb:dd:f4:2d:71:a2:77:91:e1:d8:fc:93: 22:ed:8a:bc:9b:b7:2a:2c:45:5a:3e:e5:8b:ab:48:58:6a:fe: d8:dc:66:96:00:e7:33:b4:96:a6:66:ea:98:86:dc:0c:1c:3b: 92:69:6d:f4 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/hIYQr1AccHrlMlR59fw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YzNiMTJjOGQ2MzUxOTBlYzkyODQzN2JiZDZjYjBlOGMz OGY5YTkwHhcNMjYwMTAyMTYyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjY2OTMyZWNiMGJlNmEwM2Q1OThjMGNiNzY4ODJkMjg4NzU1MTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iUCbES9FS2a4yK9PiywpjSHQYYI EMciQDE3AkUYbRJRZD8cNwlSA0sVd511whtu4ijsLOok3xahWuyQeqiOBSsz+K8q f0mM6KufC1ofVAPenexmzTCHlHYJUEk8vEhpuDVQrlRMnXovOE5mxC+JdBYAbdfZ qdCSoSsotlLqP1pSNWsqTmqguTc1ZMmw703axLU0wc7VYdWu8PetnNNI8m8/g1nE olznJyy4SYXegL8Dbo2tfAfnquhX93WTnPCe3UtEjWGJO2SoMp8NXg7Hx5q2GEVk VLT9rI6OKBLMFFoNhJzyNUo9YdknBMGpNMUZAZwktbNChW0SaVzZwbtOOQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGtmky7LC+agPVmMDLdogtKIdVEjMB8GA1UdIwQY MBaAFNTDsSyNY1GQ7JKEN7vWyw6MOPmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTkt MGY5ZDU3YTVkNGZhLzEvYTJhVExzc0w1cUE5V1l3TXQyaUMwb2gxVVNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTktMGY5ZDU3YTVkNGZh LzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUEJgAwQC ucbIAwQCwxQUMA0EAgACMAcDBQMqCo7AMA0GCSqGSIb3DQEBCwUAA4IBAQC5dRCK jyMwD+krZhlOUOZ+kQPvuD6bYW7NKJdjtjhagt8JN4aMY3XCzqe3DaQR6QI+z/On iGkjHPuN4wHXBJgZVraxCpyDbYdOQ/JV2UtdPhzHFUSNv809JW/vNGl55aQhE0r9 cQFscQbdhsdzR1uhGR62G5B1F2TecLAiQJ4MCcO6L6A8amRjxRA+TccqTJC4UhAG imPSyFy9hDy3tzZut5d11K5Ifd9bVVpcBcqx0yCEyn7NSRax4yEeQPGyO04fXeX3 KFEqpmHQuLT73fQtcaJ3keHY/JMi7Yq8m7cqLEVaPuWLq0hYav7Y3GaWAOcztJam ZuqYhtwMHDuSaW30 -----END CERTIFICATE-----Generated at Tue Feb 3 00:08:03 2026 by rpki-client