This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/2IRl_xTGVsHML4htKUJ_WxgAa6I.roa File: 2IRl_xTGVsHML4htKUJ_WxgAa6I.roa (raw, json) Hash identifier: Whl5xYBFDPOniYmTRL6Ne857if6B4W9DGqAY9abFaZ0= Subject key identifier: D8:84:65:FF:14:C6:56:C1:CC:2F:88:6D:29:42:7F:5B:18:00:6B:A2 Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883 Certificate serial: 019B77588BE34E46BFC53EA4DD4F3DC04817 Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/2IRl_xTGVsHML4htKUJ_WxgAa6I.roa Signing time: Thu 01 Jan 2026 02:17:30 +0000 ROA not before: Thu 01 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196655 IP address blocks: 185.40.200.0/22 maxlen: 24 193.142.23.0/24 maxlen: 24 2a00:1f50::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8b:e3:4e:46:bf:c5:3e:a4:dd:4f:3d:c0:48:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d88465ff14c656c1cc2f886d29427f5b18006ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:38:1e:05:06:ae:5e:5e:92:be:07:7a:e4:d7: 79:b3:ae:97:54:74:13:98:fd:42:b6:57:4b:25:74: ac:27:11:4f:57:56:bd:27:57:f0:09:68:71:7e:c4: 61:c1:31:5a:ad:b9:77:2e:f4:c6:30:c6:76:c3:a5: 2d:34:f6:8e:71:f4:9c:82:3b:d6:7f:6f:2a:6e:9d: d3:1f:f7:17:8a:4b:76:f6:0c:94:73:90:94:8d:e7: 75:72:bc:db:13:0a:f7:c8:fe:73:62:19:cf:40:30: ea:55:cf:36:4b:c8:ba:35:67:10:ae:11:cc:dd:6e: fd:89:a3:9d:4c:ba:7c:08:85:4e:bf:97:0c:ee:21: 10:41:f9:1a:5d:9e:12:41:f5:f6:2f:8f:61:70:c0: e8:d1:60:82:35:cd:f8:4b:12:c9:c8:47:a6:79:71: 49:f1:06:56:c7:80:44:36:e6:3c:64:fd:53:66:10: de:d2:7e:63:83:70:ce:5d:75:6f:7e:36:1b:48:7e: 57:de:60:0c:91:22:17:b1:ce:d3:30:9a:96:a9:20: bc:a5:63:54:8d:45:36:c7:14:62:f9:50:d2:4b:d6: ea:06:c7:d3:f9:7a:53:16:e8:78:30:23:22:ed:54: e8:fd:8a:98:0a:74:c6:1e:5c:3b:6e:07:0e:df:12: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:84:65:FF:14:C6:56:C1:CC:2F:88:6D:29:42:7F:5B:18:00:6B:A2 X509v3 Authority Key Identifier: keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/2IRl_xTGVsHML4htKUJ_WxgAa6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.200.0/22 193.142.23.0/24 IPv6: 2a00:1f50::/32 Signature Algorithm: sha256WithRSAEncryption 36:d8:23:3a:a9:94:af:f5:9f:d1:a2:7c:25:0e:7f:e7:38:28: 51:fa:1d:d8:95:d9:53:58:46:ec:4d:4a:1b:47:de:69:2b:a0: 99:2b:12:1d:c9:69:33:0d:e7:35:3e:fa:d3:e6:2b:e2:bd:1e: 50:fa:a3:31:9a:8e:d6:2f:6e:d8:9a:89:0b:be:40:70:7c:c6: 04:2d:26:91:33:b9:10:54:91:c8:96:5c:d9:67:71:90:7e:42: 37:5d:2f:ea:0a:84:e1:18:35:ab:aa:49:fc:9d:2b:05:8e:37: 3a:85:ed:cd:c8:ae:83:00:62:0c:08:91:1f:7b:42:8a:de:1a: 01:47:a4:de:67:27:87:8e:39:65:d9:58:99:e2:68:2a:34:76: 7c:e0:54:04:53:99:34:23:8d:75:73:29:1d:8e:6c:af:cf:6b: 9a:31:8f:ef:0a:14:2f:4d:4e:19:38:5b:b7:e5:5e:1b:6e:4d: 09:89:b9:76:56:5f:23:87:6a:26:5d:e2:1e:37:8e:5c:22:88: 15:c9:33:78:0f:c7:ba:1e:13:22:34:64:b4:6b:ad:f5:45:0e: 72:d0:59:46:29:3e:36:ee:a8:6e:e6:96:d6:ba:e5:35:07:17: 0e:f5:04:ac:69:59:76:d3:53:81:c5:c2:8c:61:95:aa:8d:b8: 1d:9c:14:6f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WIvjTka/xT6k3U89wEgXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YTllODkxZTA2ZDQyMjc3ZGM0ZmI1ZmJkNjllOWFiZDhl Mjk4ODMwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODg0NjVmZjE0YzY1NmMxY2MyZjg4NmQyOTQyN2Y1YjE4MDA2YmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzgeBQauXl6Svgd65Nd5s66XVHQT mP1CtldLJXSsJxFPV1a9J1fwCWhxfsRhwTFarbl3LvTGMMZ2w6UtNPaOcfScgjvW f28qbp3TH/cXikt29gyUc5CUjed1crzbEwr3yP5zYhnPQDDqVc82S8i6NWcQrhHM 3W79iaOdTLp8CIVOv5cM7iEQQfkaXZ4SQfX2L49hcMDo0WCCNc34SxLJyEemeXFJ 8QZWx4BENuY8ZP1TZhDe0n5jg3DOXXVvfjYbSH5X3mAMkSIXsc7TMJqWqSC8pWNU jUU2xxRi+VDSS9bqBsfT+XpTFuh4MCMi7VTo/YqYCnTGHlw7bgcO3xJKsQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNiEZf8UxlbBzC+IbSlCf1sYAGuiMB8GA1UdIwQY MBaAFEmp6JHgbUInfcT7X71p6avY4piDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2Fub2tlQnRRaWQ5eFB0ZnZXbnBxOWppbUlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81MzY5NmYtZjk3My00N2ZiLThkNzkt YWRkYzZkNGJiMmU3LzEvMklSbF94VEdWc0hNTDRodEtVSl9XeGdBYTZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81MzY5NmYtZjk3My00N2ZiLThkNzktYWRkYzZkNGJiMmU3 LzEvU2Fub2tlQnRRaWQ5eFB0ZnZXbnBxOWppbUlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuSjIAwQA wY4XMA0EAgACMAcDBQAqAB9QMA0GCSqGSIb3DQEBCwUAA4IBAQA22CM6qZSv9Z/R onwlDn/nOChR+h3YldlTWEbsTUobR95pK6CZKxIdyWkzDec1PvrT5ivivR5Q+qMx mo7WL27YmokLvkBwfMYELSaRM7kQVJHIllzZZ3GQfkI3XS/qCoThGDWrqkn8nSsF jjc6he3NyK6DAGIMCJEfe0KK3hoBR6TeZyeHjjll2ViZ4mgqNHZ84FQEU5k0I411 cykdjmyvz2uaMY/vChQvTU4ZOFu35V4bbk0Jibl2Vl8jh2omXeIeN45cIogVyTN4 D8e6HhMiNGS0a631RQ5y0FlGKT427qhu5pbWuuU1BxcO9QSsaVl201OBxcKMYZWq jbgdnBRv -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:48 2026 by rpki-client