This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/q2w1vTonQdHooI1nec7LSR2OC8s.roa File: q2w1vTonQdHooI1nec7LSR2OC8s.roa (raw, json) Hash identifier: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs= Subject key identifier: AB:6C:35:BD:3A:27:41:D1:E8:A0:8D:67:79:CE:CB:49:1D:8E:0B:CB Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019B7C127D9A35B379D98DBB0E7B69E0E590 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/q2w1vTonQdHooI1nec7LSR2OC8s.roa Signing time: Fri 02 Jan 2026 00:19:05 +0000 ROA not before: Fri 02 Jan 2026 00:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48090 IP address blocks: 2.57.122.0/24 maxlen: 24 80.94.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7d:9a:35:b3:79:d9:8d:bb:0e:7b:69:e0:e5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jan 2 00:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab6c35bd3a2741d1e8a08d6779cecb491d8e0bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:96:14:14:08:f5:92:fd:4d:21:32:88:d1:3c: 85:aa:25:00:a8:2b:4f:00:db:29:4d:36:d5:d5:5a: bd:e3:6f:af:5d:3f:e8:5e:dc:61:f2:b2:d2:d1:26: 72:a3:ad:02:90:0a:94:da:ee:3d:f9:5d:ba:7a:43: c4:3d:02:9a:87:2f:1a:61:2a:7b:be:44:61:45:7c: 7e:73:69:5f:ae:3b:0c:1f:75:fe:6d:85:f4:f1:22: 51:ea:26:66:a9:50:df:79:99:69:a6:01:5d:0b:65: c1:df:7d:8b:63:33:00:fd:87:ca:a1:e0:03:40:71: 3e:e4:74:92:7d:0e:32:52:0a:ca:6a:f7:95:af:d3: 76:13:71:ea:7d:06:25:2c:7a:47:a8:aa:72:5b:c7: 5c:b1:4a:e4:0a:83:20:66:7b:9b:12:e8:c0:54:ca: 1c:45:ce:62:00:d3:cb:26:35:80:4e:e2:08:31:aa: 80:7c:a3:cf:f5:d1:44:f6:07:ec:54:95:cd:6a:24: d8:cb:b1:10:69:52:39:05:a4:d4:c4:7b:74:d6:ae: 6a:cf:45:07:c1:1f:bb:ed:e3:22:02:dc:3e:44:5d: 71:7f:b7:a4:82:a3:80:04:fd:e3:e2:34:c9:65:d7: 1a:d3:95:be:00:12:9f:04:8b:77:77:f6:84:ea:47: 91:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:35:BD:3A:27:41:D1:E8:A0:8D:67:79:CE:CB:49:1D:8E:0B:CB X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/q2w1vTonQdHooI1nec7LSR2OC8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.122.0/24 80.94.92.0/24 Signature Algorithm: sha256WithRSAEncryption 82:47:da:4c:96:8f:91:fc:be:78:c1:62:8b:a2:e5:8c:41:5c: 02:72:70:80:06:db:60:2b:ad:06:db:36:82:14:af:10:ef:d0: 0e:45:e3:df:3d:6d:7c:76:e5:20:a0:36:bb:15:f0:f7:b7:72: 8d:5e:2d:f1:63:2a:0e:de:fc:60:31:c9:47:ea:5d:09:ca:7b: 40:86:da:70:28:b0:cc:96:3e:45:0d:a3:f8:a5:3d:5e:25:8b: f7:95:d3:04:07:b7:b5:cd:3a:4b:8d:23:4e:93:a0:bd:f9:55: 8b:30:b7:cc:6e:f8:82:98:b3:72:53:33:a3:1f:d6:2a:67:79: e3:24:54:5f:e0:61:76:45:e7:4f:ee:73:d9:ae:79:12:85:5c: 11:9e:a1:db:63:0a:2a:f2:b3:08:d8:d3:2e:bf:2e:5b:0a:fd: 07:4a:63:23:3f:d3:49:6f:71:1a:db:de:f7:ee:50:ff:07:77: 57:2a:94:ec:17:be:2b:c5:cb:59:e3:9d:c8:55:00:27:17:74: b9:2d:24:e1:82:5b:25:1a:42:63:e0:6d:8a:60:df:63:4a:9c: 63:d6:42:fb:aa:9e:ed:c4:6e:19:3b:b0:18:a5:e0:b3:ea:2d: be:a9:cd:b5:4a:c6:9f:16:1b:38:a0:b5:d0:b8:88:fe:08:a4: fb:5a:86:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8En2aNbN52Y27Dntp4OWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwMTAyMDAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjZjMzViZDNhMjc0MWQxZThhMDhkNjc3OWNlY2I0OTFkOGUwYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpYUFAj1kv1NITKI0TyFqiUAqCtP ANspTTbV1Vq942+vXT/oXtxh8rLS0SZyo60CkAqU2u49+V26ekPEPQKahy8aYSp7 vkRhRXx+c2lfrjsMH3X+bYX08SJR6iZmqVDfeZlppgFdC2XB332LYzMA/YfKoeAD QHE+5HSSfQ4yUgrKaveVr9N2E3HqfQYlLHpHqKpyW8dcsUrkCoMgZnubEujAVMoc Rc5iANPLJjWATuIIMaqAfKPP9dFE9gfsVJXNaiTYy7EQaVI5BaTUxHt01q5qz0UH wR+77eMiAtw+RF1xf7ekgqOABP3j4jTJZdca05W+ABKfBIt3d/aE6keR2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKtsNb06J0HR6KCNZ3nOy0kdjgvLMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvcTJ3MXZUb25RZEhvb0kxbmVjN0xTUjJPQzhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjl6AwQA UF5cMA0GCSqGSIb3DQEBCwUAA4IBAQCCR9pMlo+R/L54wWKLouWMQVwCcnCABttg K60G2zaCFK8Q79AORePfPW18duUgoDa7FfD3t3KNXi3xYyoO3vxgMclH6l0JyntA htpwKLDMlj5FDaP4pT1eJYv3ldMEB7e1zTpLjSNOk6C9+VWLMLfMbviCmLNyUzOj H9YqZ3njJFRf4GF2RedP7nPZrnkShVwRnqHbYwoq8rMI2NMuvy5bCv0HSmMjP9NJ b3Ea29737lD/B3dXKpTsF74rxctZ453IVQAnF3S5LSThglslGkJj4G2KYN9jSpxj 1kL7qp7txG4ZO7AYpeCz6i2+qc21SsafFhs4oLXQuIj+CKT7Woa2 -----END CERTIFICATE-----Generated at Wed Jan 21 16:11:15 2026 by rpki-client