This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/2D2Vo659VCE7_dNsyKDY_ySnp_s.roa File: 2D2Vo659VCE7_dNsyKDY_ySnp_s.roa (raw, json) Hash identifier: LZcXs72e2WHugD8ordyBZAMfRGav21lT1gfAGNPJNRQ= Subject key identifier: D8:3D:95:A3:AE:7D:54:21:3B:FD:D3:6C:C8:A0:D8:FF:24:A7:A7:FB Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa Certificate serial: 019B7CED10B9E3C78326AFD21F0ACB9E9B36 Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/2D2Vo659VCE7_dNsyKDY_ySnp_s.roa Signing time: Fri 02 Jan 2026 04:17:49 +0000 ROA not before: Fri 02 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202477 IP address blocks: 109.205.199.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:10:b9:e3:c7:83:26:af:d2:1f:0a:cb:9e:9b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa Validity Not Before: Jan 2 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d83d95a3ae7d54213bfdd36cc8a0d8ff24a7a7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:b1:29:35:cb:bb:5b:11:6b:75:81:a8:da: b0:09:0a:63:1f:3f:7d:e5:fe:44:34:b2:a2:9c:52: 2b:86:4d:83:af:8f:77:d7:c5:76:f0:32:33:45:b3: 78:1f:56:0c:8d:e7:78:f4:5f:57:52:7d:04:27:ec: 61:21:62:33:92:6b:5e:8d:c1:2f:dc:e7:1a:2e:09: f2:6d:f0:d6:34:70:44:8e:38:68:d7:17:da:93:e9: a6:18:6f:51:db:0b:74:18:a8:f1:2b:57:b0:86:72: db:26:18:b9:ac:ec:9b:61:20:3e:d4:df:60:11:5c: 6b:c2:0e:85:4a:d2:c9:0f:ad:21:4a:56:74:77:2c: 34:5e:8e:22:6f:8f:e4:0b:43:f0:c3:54:59:4b:f6: cf:a4:db:67:a0:fe:63:7b:b5:6d:d4:e8:f1:fe:4c: d3:94:ac:13:2c:9b:df:00:a5:a2:43:92:03:72:0c: 73:8c:ce:7c:16:cb:b3:1d:fd:40:0e:b0:01:c5:57: 82:ab:6b:05:a3:13:87:63:ac:c3:85:37:b7:5d:66: 8b:a5:6a:ad:0b:a1:2d:dc:d5:61:b3:0f:51:7d:dc: 48:d9:1e:ce:1b:01:80:2e:a3:b3:a5:a7:9f:e1:da: ae:22:36:af:da:bd:b9:f8:7b:00:4d:47:24:c4:56: 3d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3D:95:A3:AE:7D:54:21:3B:FD:D3:6C:C8:A0:D8:FF:24:A7:A7:FB X509v3 Authority Key Identifier: keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/2D2Vo659VCE7_dNsyKDY_ySnp_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.199.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:9b:e3:06:45:b1:05:a3:4c:90:d7:19:99:36:dd:34:71:f6: 5b:29:a6:e9:0c:3f:9d:50:31:a2:bb:22:f7:ec:d0:c6:51:fd: d7:47:bb:30:c8:74:ac:80:1f:c0:c1:7b:66:d9:5e:af:b4:9b: 05:cf:15:8a:78:3a:ec:33:3b:d2:e9:d2:20:52:b8:14:a8:83: 47:e1:b8:7e:d8:4f:6c:33:63:01:da:9c:96:50:c3:e3:00:b7: 8f:85:d0:85:f0:02:c0:78:0d:f4:5c:4c:3b:bf:f7:e8:96:e4: 12:44:56:1b:1b:3d:1d:ae:9e:fa:8e:3b:b2:95:dd:1e:21:12: a7:72:4b:ad:04:aa:54:d3:ea:3b:d0:45:f9:ff:b2:97:9f:b8: e8:d5:45:c8:dd:12:7a:27:99:d2:3b:2a:92:ce:c0:37:72:95: cd:52:0c:db:cd:fb:f2:f6:85:dd:16:52:3e:28:8e:63:10:27: 48:41:30:63:fe:0a:2c:a9:ae:12:dc:62:bd:d7:1a:5d:be:4a: 52:39:92:4c:e9:44:2e:b9:9f:f1:61:e2:1a:c9:b0:28:11:fc: 54:6f:f5:2b:b8:ec:36:db:4f:2f:dc:93:27:3b:e1:52:60:e7: 00:d6:26:1d:3e:43:0a:1a:6b:2a:e4:30:44:2a:9a:c0:72:04: 0f:e4:00:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87RC548eDJq/SHwrLnps2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDFhZDBlN2ZjMjJiZmJhYjU2N2JlODlmNjNkOTgwNWU1 ZWI5YWEwHhcNMjYwMTAyMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODNkOTVhM2FlN2Q1NDIxM2JmZGQzNmNjOGEwZDhmZjI0YTdhN2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw6xKTXLu1sRa3WBqNqwCQpjHz99 5f5ENLKinFIrhk2Dr49318V28DIzRbN4H1YMjed49F9XUn0EJ+xhIWIzkmtejcEv 3OcaLgnybfDWNHBEjjho1xfak+mmGG9R2wt0GKjxK1ewhnLbJhi5rOybYSA+1N9g EVxrwg6FStLJD60hSlZ0dyw0Xo4ib4/kC0Pww1RZS/bPpNtnoP5je7Vt1Ojx/kzT lKwTLJvfAKWiQ5IDcgxzjM58FsuzHf1ADrABxVeCq2sFoxOHY6zDhTe3XWaLpWqt C6Et3NVhsw9RfdxI2R7OGwGALqOzpaef4dquIjav2r25+HsATUckxFY9RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNg9laOufVQhO/3TbMig2P8kp6f7MB8GA1UdIwQY MBaAFJJBrQ5/wiv7q1Z76J9j2YBeXrmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDkt NDU0NGM2MTA5NzI5LzEvMkQyVm82NTlWQ0U3X2ROc3lLRFlfeVNucF9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDktNDU0NGM2MTA5NzI5 LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc3HMA0G CSqGSIb3DQEBCwUAA4IBAQCbm+MGRbEFo0yQ1xmZNt00cfZbKabpDD+dUDGiuyL3 7NDGUf3XR7swyHSsgB/AwXtm2V6vtJsFzxWKeDrsMzvS6dIgUrgUqINH4bh+2E9s M2MB2pyWUMPjALePhdCF8ALAeA30XEw7v/foluQSRFYbGz0drp76jjuyld0eIRKn ckutBKpU0+o70EX5/7KXn7jo1UXI3RJ6J5nSOyqSzsA3cpXNUgzbzfvy9oXdFlI+ KI5jECdIQTBj/gosqa4S3GK91xpdvkpSOZJM6UQuuZ/xYeIaybAoEfxUb/UruOw2 208v3JMnO+FSYOcA1iYdPkMKGmsq5DBEKprAcgQP5ABL -----END CERTIFICATE-----Generated at Mon Feb 9 20:08:53 2026 by rpki-client