This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/2mdLM4QMSFolc5LIsVCE-5xpuxw.roa File: 2mdLM4QMSFolc5LIsVCE-5xpuxw.roa (raw, json) Hash identifier: Pb6j/jV8p9sMo1nrwtTOTYAV2/aTJmLOHn6ZswOsyqw= Subject key identifier: DA:67:4B:33:84:0C:48:5A:25:73:92:C8:B1:50:84:FB:9C:69:BB:1C Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a Certificate serial: 019B7AC7B63C175772383ABB03D822470F74 Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/2mdLM4QMSFolc5LIsVCE-5xpuxw.roa Signing time: Thu 01 Jan 2026 18:17:47 +0000 ROA not before: Thu 01 Jan 2026 18:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202837 IP address blocks: 45.92.12.0/24 maxlen: 24 45.92.13.0/24 maxlen: 24 45.92.14.0/24 maxlen: 24 45.92.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b6:3c:17:57:72:38:3a:bb:03:d8:22:47:0f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a Validity Not Before: Jan 1 18:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da674b33840c485a257392c8b15084fb9c69bb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b4:a8:c5:7b:58:a4:4a:f7:d2:29:d6:8e:88: 75:77:fa:c9:62:82:bc:b8:03:b0:d2:41:11:8b:58: ae:54:33:d5:0f:ed:dd:f7:6a:ad:80:b3:28:a8:54: 64:4b:ab:40:60:5c:3f:0d:f1:aa:76:a1:c6:9c:f4: 8c:87:c0:3a:20:1d:cd:e9:7c:e0:5d:10:eb:a6:fb: 04:d1:af:af:fe:42:66:f0:e2:45:fb:65:c0:f8:42: 75:13:49:66:18:52:c3:a9:4f:82:3d:d4:a8:51:d1: 07:3c:6f:23:ee:3e:6b:86:60:ed:1b:9e:5f:22:21: 73:73:aa:f8:ac:57:3d:e3:03:b6:40:50:cd:96:ac: 75:10:f6:4e:8d:a2:6c:fa:97:7c:cf:5a:b9:82:d2: a8:e3:05:95:9f:b0:4c:93:76:eb:1d:28:16:48:74: 0c:56:be:9e:58:60:58:b3:82:36:99:16:10:ce:c8: c3:70:f1:aa:e8:ef:39:71:af:0c:c1:7f:77:fd:61: cd:a0:e1:a9:fa:27:fa:78:3e:82:53:ec:93:6b:0e: 4b:dd:de:6e:88:c0:36:86:2b:6a:ec:2a:ae:20:bc: 96:ce:c1:39:43:0d:26:6e:f0:49:ce:63:5f:4f:b9: 69:27:45:00:f8:54:75:12:b6:67:be:6c:dd:13:05: 44:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:67:4B:33:84:0C:48:5A:25:73:92:C8:B1:50:84:FB:9C:69:BB:1C X509v3 Authority Key Identifier: keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/2mdLM4QMSFolc5LIsVCE-5xpuxw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.12.0/22 Signature Algorithm: sha256WithRSAEncryption b9:1e:c6:eb:2a:10:1b:c7:5f:f6:65:57:65:3f:a1:5a:20:cd: a0:5c:fe:84:31:c5:b1:8e:7f:56:eb:6d:6d:62:80:b3:d4:6b: 19:89:87:35:60:27:4d:22:f2:53:f9:f5:b8:52:29:70:25:62: 44:31:d5:c9:c8:ac:55:cc:dc:4f:a8:02:e2:36:bb:e4:fd:13: b7:6b:62:40:b2:f3:b7:6e:fb:83:8d:90:2e:ba:a8:83:18:37: a4:55:70:a3:ce:48:bf:41:90:4f:ea:6b:1d:d7:b4:01:e9:5b: cb:12:1c:21:19:b8:b2:08:f4:02:88:9f:4d:80:3e:4f:f9:02: 4a:03:11:61:83:e6:99:6e:55:1e:cb:79:6f:73:b7:6a:d2:84: 79:46:31:29:04:a5:bc:b3:f9:a2:32:fd:b0:1e:05:27:96:92: cd:8d:2e:1c:72:0b:31:e7:51:f3:6e:70:72:52:ba:68:94:6e: b5:f5:44:16:00:2a:d6:cc:0e:8c:ac:43:20:1f:6d:23:7c:e7: ac:36:85:f3:7c:6b:bb:69:94:03:a5:8d:57:08:38:9a:54:61: a5:7a:85:3a:4a:7d:10:d7:18:fd:6c:c4:d7:ac:c0:6d:8b:3d: 41:42:8e:c5:79:63:fc:68:78:d6:55:31:cb:29:2d:fa:a3:50: 42:d2:7a:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x7Y8F1dyODq7A9giRw90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNGVkYmQxOTYzNGNiYjkxYTBkMmRhZmQ3NTlkNGM5YTdl NzdiN2EwHhcNMjYwMTAxMTgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTY3NGIzMzg0MGM0ODVhMjU3MzkyYzhiMTUwODRmYjljNjliYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLSoxXtYpEr30inWjoh1d/rJYoK8 uAOw0kERi1iuVDPVD+3d92qtgLMoqFRkS6tAYFw/DfGqdqHGnPSMh8A6IB3N6Xzg XRDrpvsE0a+v/kJm8OJF+2XA+EJ1E0lmGFLDqU+CPdSoUdEHPG8j7j5rhmDtG55f IiFzc6r4rFc94wO2QFDNlqx1EPZOjaJs+pd8z1q5gtKo4wWVn7BMk3brHSgWSHQM Vr6eWGBYs4I2mRYQzsjDcPGq6O85ca8MwX93/WHNoOGp+if6eD6CU+yTaw5L3d5u iMA2hitq7CquILyWzsE5Qw0mbvBJzmNfT7lpJ0UA+FR1ErZnvmzdEwVEYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNpnSzOEDEhaJXOSyLFQhPucabscMB8GA1UdIwQY MBaAFIFO29GWNMu5Gg0tr9dZ1Mmn53t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMt YzA4OTk3YTdhMDhmLzEvMm1kTE00UU1TRm9sYzVMSXNWQ0UtNXhwdXh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMtYzA4OTk3YTdhMDhm LzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVwMMA0G CSqGSIb3DQEBCwUAA4IBAQC5HsbrKhAbx1/2ZVdlP6FaIM2gXP6EMcWxjn9W621t YoCz1GsZiYc1YCdNIvJT+fW4UilwJWJEMdXJyKxVzNxPqALiNrvk/RO3a2JAsvO3 bvuDjZAuuqiDGDekVXCjzki/QZBP6msd17QB6VvLEhwhGbiyCPQCiJ9NgD5P+QJK AxFhg+aZblUey3lvc7dq0oR5RjEpBKW8s/miMv2wHgUnlpLNjS4ccgsx51HzbnBy UrpolG619UQWACrWzA6MrEMgH20jfOesNoXzfGu7aZQDpY1XCDiaVGGleoU6Sn0Q 1xj9bMTXrMBtiz1BQo7FeWP8aHjWVTHLKS36o1BC0np8 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:13 2026 by rpki-client