This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/1p2ABoTmHppjIUEVK5pg2mIhNow.roa File: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (raw, json) Hash identifier: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8= Subject key identifier: D6:9D:80:06:84:E6:1E:9A:63:21:41:15:2B:9A:60:DA:62:21:36:8C Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699 Certificate serial: 019B797E8BA3ABC7EF5199A642ED05EA75C1 Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/1p2ABoTmHppjIUEVK5pg2mIhNow.roa Signing time: Thu 01 Jan 2026 12:18:15 +0000 ROA not before: Thu 01 Jan 2026 12:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.222.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:8b:a3:ab:c7:ef:51:99:a6:42:ed:05:ea:75:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699 Validity Not Before: Jan 1 12:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d69d800684e61e9a632141152b9a60da6221368c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:d1:c8:10:91:a3:7d:28:22:24:36:b7:15: 3b:2d:b2:aa:2e:6b:37:c3:3e:5a:1c:82:93:b9:36: f7:e5:57:c2:bc:dd:4b:66:b9:56:08:4e:eb:8d:32: e3:a3:46:3a:68:c2:08:4a:97:00:3f:95:35:3e:20: 62:1c:6e:65:25:9a:6d:0a:2f:ef:09:8a:5f:7c:d5: 61:2e:36:42:29:cd:6f:1d:b5:94:cd:fb:c4:8e:37: 83:2d:c1:3a:17:01:9e:f1:4e:ca:9d:ad:97:fe:61: 87:53:bc:69:3f:77:d8:b7:f6:52:7c:a5:c5:a1:bb: b2:46:22:43:17:0a:39:86:86:01:cb:9b:40:0c:82: 2c:d8:bd:8d:60:20:25:1a:fc:8c:c1:a5:68:80:eb: df:b2:8d:ab:69:ef:65:9c:3f:7b:cf:81:ab:37:c6: cf:71:34:90:71:62:96:0e:87:ef:20:35:a2:c5:5c: 2d:51:bf:16:52:e9:e9:8d:75:29:cc:9d:b7:5e:5e: c6:d2:8f:25:c1:d2:47:f8:53:4d:d7:16:cb:e2:53: 73:95:57:46:92:fb:5c:0b:9a:c9:bd:7d:4d:03:4f: 04:94:99:90:06:0f:d7:bb:89:98:b1:15:05:70:e9: 70:3b:53:d6:f1:27:b2:20:98:5a:7c:77:16:26:94: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9D:80:06:84:E6:1E:9A:63:21:41:15:2B:9A:60:DA:62:21:36:8C X509v3 Authority Key Identifier: keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/1p2ABoTmHppjIUEVK5pg2mIhNow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.140.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:c4:f9:4f:5a:1d:93:3f:8b:66:17:02:53:c6:25:fe:11:22: f0:44:cf:ad:a6:72:52:04:7f:38:75:d1:3c:6c:59:7e:76:8d: ac:55:f2:32:4b:f3:4a:1a:79:b6:f9:cd:86:93:96:4b:46:58: 51:37:f3:d0:58:47:46:39:95:c2:30:e1:86:5c:9a:c3:a6:67: 9a:6d:de:3f:fd:13:a4:d3:43:cd:7e:a0:67:e4:50:63:1f:cf: cd:d7:6d:4a:6a:52:9a:22:e1:8b:c4:33:f4:33:8d:18:aa:fd: 78:65:5e:9f:fd:cb:87:df:7c:2d:e8:94:55:8a:d6:06:01:87: 9d:2d:50:25:77:68:b2:79:09:c2:e8:bc:8c:64:09:78:f7:24: 68:20:fe:29:ad:45:fc:af:8c:5f:1e:e4:e9:ea:29:c3:e1:35: 57:dd:d8:f3:28:72:b8:52:d2:39:41:bb:e2:d6:85:ec:bb:35: 1f:09:36:a3:31:6f:95:ba:5b:08:ca:f6:64:49:b3:6e:93:5d: e4:11:3e:1b:04:32:10:43:6f:0d:e9:d1:05:cf:9d:93:18:77: 06:80:d2:53:48:e2:ad:5c:a8:07:d9:df:2c:85:2c:11:23:c1: 33:b2:aa:dc:27:59:ec:66:21:51:88:77:6a:30:70:8d:a6:1c: 32:7d:9a:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5foujq8fvUZmmQu0F6nXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTY1MmI4MzhmZjJkOTY3MmFjOGNhNjZiYTY2MGRkNGU0 NWQ2OTkwHhcNMjYwMTAxMTIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjlkODAwNjg0ZTYxZTlhNjMyMTQxMTUyYjlhNjBkYTYyMjEzNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpLRyBCRo30oIiQ2txU7LbKqLms3 wz5aHIKTuTb35VfCvN1LZrlWCE7rjTLjo0Y6aMIISpcAP5U1PiBiHG5lJZptCi/v CYpffNVhLjZCKc1vHbWUzfvEjjeDLcE6FwGe8U7Kna2X/mGHU7xpP3fYt/ZSfKXF obuyRiJDFwo5hoYBy5tADIIs2L2NYCAlGvyMwaVogOvfso2rae9lnD97z4GrN8bP cTSQcWKWDofvIDWixVwtUb8WUunpjXUpzJ23Xl7G0o8lwdJH+FNN1xbL4lNzlVdG kvtcC5rJvX1NA08ElJmQBg/Xu4mYsRUFcOlwO1PW8SeyIJhafHcWJpS0NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNadgAaE5h6aYyFBFSuaYNpiITaMMB8GA1UdIwQY MBaAFDUWUrg4/y2WcqyMpmumYN1ORdaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQt MWNkNTA2MDcwYmI1LzEvMXAyQUJvVG1IcHBqSVVFVks1cGcybUloTm93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQtMWNkNTA2MDcwYmI1 LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCud6MMA0G CSqGSIb3DQEBCwUAA4IBAQAuxPlPWh2TP4tmFwJTxiX+ESLwRM+tpnJSBH84ddE8 bFl+do2sVfIyS/NKGnm2+c2Gk5ZLRlhRN/PQWEdGOZXCMOGGXJrDpmeabd4//ROk 00PNfqBn5FBjH8/N121KalKaIuGLxDP0M40Yqv14ZV6f/cuH33wt6JRVitYGAYed LVAld2iyeQnC6LyMZAl49yRoIP4prUX8r4xfHuTp6inD4TVX3djzKHK4UtI5Qbvi 1oXsuzUfCTajMW+VulsIyvZkSbNuk13kET4bBDIQQ28N6dEFz52TGHcGgNJTSOKt XKgH2d8shSwRI8EzsqrcJ1nsZiFRiHdqMHCNphwyfZop -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:26 2026 by rpki-client