This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa File: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (raw, json) Hash identifier: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A= Subject key identifier: 9F:67:36:03:86:8B:AC:FF:4D:9A:6E:F3:15:12:E7:D1:39:AF:47:01 Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019B76EB93DA409A5CEAE7235FACDBCEA1D5 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa Signing time: Thu 01 Jan 2026 00:18:28 +0000 ROA not before: Thu 01 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56724 IP address blocks: 178.236.140.0/22 maxlen: 22 178.236.140.0/23 maxlen: 23 178.236.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:93:da:40:9a:5c:ea:e7:23:5f:ac:db:ce:a1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f673603868bacff4d9a6ef31512e7d139af4701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:4e:e8:1a:c3:b0:48:7a:a9:9e:b0:50:e6: ce:66:4d:d7:64:25:b1:5b:ac:5b:79:f4:bb:a8:da: ca:69:0b:6b:21:2a:ae:62:4d:ec:7e:13:a3:76:d3: 61:43:e0:87:ae:42:7e:5d:62:ce:3b:4d:a9:7a:1d: 40:56:37:ab:9e:c1:b0:b4:db:9a:6d:4e:c0:25:40: 91:c7:40:e6:35:af:85:89:86:6e:ec:40:8f:e3:94: fd:b5:53:20:f7:a5:30:75:fe:fa:35:7c:c2:fc:ca: ba:d3:60:bb:2e:0d:c6:2c:48:11:71:8a:1b:e0:46: e4:4e:cb:29:92:88:02:a6:3e:10:c0:b6:a9:ad:85: 2e:a8:3e:fd:84:2e:73:94:16:63:3f:46:c8:03:ae: 1d:8f:95:ed:97:63:f7:f7:e9:0f:84:92:f2:7e:40: 0b:a3:9e:93:6b:4b:cc:e5:eb:01:41:c5:77:7c:50: 37:61:32:b5:bd:26:81:8e:26:95:4e:df:d4:03:91: 5c:2a:a2:e6:58:b2:4d:ed:f8:48:15:1e:6b:5a:4b: fd:6d:6e:f1:fe:bd:c1:e3:ff:08:d8:10:17:26:9d: fe:14:c6:70:a3:af:04:ba:63:85:eb:39:e2:2c:6f: fc:a7:0f:00:5f:f1:02:d3:88:47:dc:72:00:d1:19: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:67:36:03:86:8B:AC:FF:4D:9A:6E:F3:15:12:E7:D1:39:AF:47:01 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.140.0/22 Signature Algorithm: sha256WithRSAEncryption 01:07:43:7b:29:c0:a5:ea:47:74:92:34:f1:2e:67:65:af:de: 0c:7e:d4:0b:35:7a:55:70:c8:f3:bc:dc:0d:57:a7:ce:48:31: 40:42:a9:06:74:c0:8b:a0:57:cf:f8:7c:6f:d7:b6:81:a2:69: 72:a0:9c:b7:18:5a:ad:c7:23:38:46:f4:36:85:c9:22:38:a0: 32:3e:24:4c:08:e9:ed:79:ef:97:37:e3:2a:f6:99:91:57:0c: 8e:32:d0:a1:3f:a9:1d:5b:e5:ac:29:d0:c0:85:60:61:6f:73: ba:96:28:2c:26:26:6e:be:e7:ce:1a:70:a8:9c:16:9a:64:ed: 2d:e5:82:d8:9a:be:bb:3a:a1:b8:f2:93:07:23:0f:53:be:40: 1c:39:8e:c9:19:05:d3:36:51:41:4a:c4:e6:d9:8b:18:b1:df: 8a:81:0a:b4:f7:51:8e:2c:8f:5a:6d:ea:79:d0:a6:78:46:5b: 91:a1:de:58:f2:5a:5a:e5:1d:40:18:f0:2d:52:3b:e2:5e:07: fd:c3:92:98:5e:fb:9d:8e:12:29:f0:0c:d2:64:ce:e6:b6:63: 6f:d6:46:0c:f9:80:7a:f8:ad:94:9c:e2:17:dc:be:81:96:0d: 33:ed:fb:69:63:70:ff:49:1b:2e:8a:f9:d3:5d:ba:ef:38:0e: c3:62:5b:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265PaQJpc6ucjX6zbzqHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjY3MzYwMzg2OGJhY2ZmNGQ5YTZlZjMxNTEyZTdkMTM5YWY0NzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIpO6BrDsEh6qZ6wUObOZk3XZCWx W6xbefS7qNrKaQtrISquYk3sfhOjdtNhQ+CHrkJ+XWLOO02peh1AVjernsGwtNua bU7AJUCRx0DmNa+FiYZu7ECP45T9tVMg96Uwdf76NXzC/Mq602C7Lg3GLEgRcYob 4EbkTsspkogCpj4QwLaprYUuqD79hC5zlBZjP0bIA64dj5Xtl2P39+kPhJLyfkAL o56Ta0vM5esBQcV3fFA3YTK1vSaBjiaVTt/UA5FcKqLmWLJN7fhIFR5rWkv9bW7x /r3B4/8I2BAXJp3+FMZwo68EumOF6zniLG/8pw8AX/EC04hH3HIA0RkZSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9nNgOGi6z/TZpu8xUS59E5r0cBMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvbjJjMkE0YUxyUDlObW03ekZSTG4wVG12UndFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsuyMMA0G CSqGSIb3DQEBCwUAA4IBAQABB0N7KcCl6kd0kjTxLmdlr94MftQLNXpVcMjzvNwN V6fOSDFAQqkGdMCLoFfP+Hxv17aBomlyoJy3GFqtxyM4RvQ2hckiOKAyPiRMCOnt ee+XN+Mq9pmRVwyOMtChP6kdW+WsKdDAhWBhb3O6ligsJiZuvufOGnConBaaZO0t 5YLYmr67OqG48pMHIw9TvkAcOY7JGQXTNlFBSsTm2YsYsd+KgQq091GOLI9abep5 0KZ4RluRod5Y8lpa5R1AGPAtUjviXgf9w5KYXvudjhIp8AzSZM7mtmNv1kYM+YB6 +K2UnOIX3L6Blg0z7ftpY3D/SRsuivnTXbrvOA7DYls8 -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:25 2026 by rpki-client