This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/X2pe7oZC92-YhI0Wjlbt7Or5j3U.roa File: X2pe7oZC92-YhI0Wjlbt7Or5j3U.roa (raw, json) Hash identifier: FFDTmh8Q3nrNL2M4JqNRzlrW4SSQct1GaW84BBkxSQ4= Subject key identifier: 5F:6A:5E:EE:86:42:F7:6F:98:84:8D:16:8E:56:ED:EC:EA:F9:8F:75 Certificate issuer: /CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51 Certificate serial: 019B7F829C88D45930DBD6B5B0928DFBAE91 Authority key identifier: D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/X2pe7oZC92-YhI0Wjlbt7Or5j3U.roa Signing time: Fri 02 Jan 2026 16:20:24 +0000 ROA not before: Fri 02 Jan 2026 16:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206584 IP address blocks: 185.182.148.0/23 maxlen: 23 185.182.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:9c:88:d4:59:30:db:d6:b5:b0:92:8d:fb:ae:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51 Validity Not Before: Jan 2 16:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f6a5eee8642f76f98848d168e56edeceaf98f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:05:2d:01:f8:7f:33:47:c0:09:35:e8:93:96: d1:61:af:14:2e:b7:06:80:ff:17:5d:b2:72:71:bb: 75:a7:d3:f7:ea:88:b6:78:60:0c:85:68:22:b1:35: 1a:95:4d:09:5f:28:50:16:f1:83:a3:7e:a1:5d:d8: ae:b4:81:70:a4:68:58:47:9b:4b:0b:c5:77:11:b4: eb:d8:15:67:72:b2:f0:49:87:a3:91:15:c8:8c:a2: f5:48:e6:d5:5b:fb:0d:3d:5b:0e:1b:6d:0e:36:73: 71:cb:ee:b0:53:3e:77:86:f2:40:6b:2c:5c:bc:f5: 75:cb:73:dd:23:ae:3b:69:25:fe:c4:82:d4:90:c3: 0c:a2:80:1a:89:7f:52:9a:0e:c0:d1:14:f0:f4:a5: 92:a4:5c:28:49:f1:aa:eb:e5:55:38:a1:8e:b6:45: 0f:2c:b9:32:8b:3d:1e:dd:d6:ca:79:ea:aa:fe:5e: e8:0a:79:c1:88:87:c7:24:15:5d:a3:57:c7:c5:34: 65:aa:67:73:66:fa:65:de:e9:12:1e:fa:db:76:5c: a0:18:4f:4e:a3:07:35:9f:c2:a7:4c:8e:11:4a:4c: 5a:d9:16:48:7c:03:b3:6f:49:c1:8b:5c:71:a0:9c: 84:1b:52:79:28:59:cc:94:5a:da:53:63:24:b5:76: 0f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6A:5E:EE:86:42:F7:6F:98:84:8D:16:8E:56:ED:EC:EA:F9:8F:75 X509v3 Authority Key Identifier: keyid:D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/X2pe7oZC92-YhI0Wjlbt7Or5j3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.148.0/22 Signature Algorithm: sha256WithRSAEncryption ba:63:4d:94:e8:2d:e5:cb:31:d2:e7:e8:46:dc:c0:33:1e:72: 35:ce:f9:d7:8e:b4:70:6a:9a:2c:5a:4a:02:22:d4:a3:83:81: e0:9d:5f:3c:48:32:dc:14:6d:13:c3:20:28:fa:a4:0f:c8:dc: c1:ab:be:49:a1:31:1b:c0:e5:ce:51:3b:48:b3:c4:6c:05:47: 63:00:b4:c4:43:34:67:81:fb:fe:3e:32:64:78:5c:80:58:7a: 59:3e:b0:a9:eb:78:74:0a:36:9c:28:ab:2f:d0:c3:19:0f:80: 47:1e:8b:52:aa:aa:2d:03:53:8c:1e:79:e7:7a:bd:9a:66:e1: 50:62:bd:0d:71:8a:53:1f:8a:ee:c4:f4:67:09:ab:c9:e2:01: 8b:67:36:9f:5d:3a:55:1c:92:f2:92:f6:44:e8:63:2d:50:98: b1:94:05:e7:5a:87:23:59:78:58:48:a1:1f:a8:9c:6f:df:1d: a7:90:81:60:79:9c:41:63:f8:23:80:5a:b8:0a:2d:ed:93:fa: 77:e4:7b:95:1a:94:e6:1e:2e:e6:e5:c4:35:77:15:81:89:0d: b1:cb:e8:aa:22:a6:18:eb:de:0b:ed:f7:69:f1:93:10:07:1c: 13:2b:db:f6:d3:62:3b:c1:22:f1:7e:48:2f:03:82:73:aa:db: f1:30:5a:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gpyI1Fkw29a1sJKN+66RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZTgyNTZjNGY2MjFkOGM0YzE3MDY2NWU4NzhlYTg4ZWNi YjNmNTEwHhcNMjYwMTAyMTYyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjZhNWVlZTg2NDJmNzZmOTg4NDhkMTY4ZTU2ZWRlY2VhZjk4Zjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwUtAfh/M0fACTXok5bRYa8ULrcG gP8XXbJycbt1p9P36oi2eGAMhWgisTUalU0JXyhQFvGDo36hXdiutIFwpGhYR5tL C8V3EbTr2BVncrLwSYejkRXIjKL1SObVW/sNPVsOG20ONnNxy+6wUz53hvJAayxc vPV1y3PdI647aSX+xILUkMMMooAaiX9Smg7A0RTw9KWSpFwoSfGq6+VVOKGOtkUP LLkyiz0e3dbKeeqq/l7oCnnBiIfHJBVdo1fHxTRlqmdzZvpl3ukSHvrbdlygGE9O owc1n8KnTI4RSkxa2RZIfAOzb0nBi1xxoJyEG1J5KFnMlFraU2MktXYPHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9qXu6GQvdvmISNFo5W7ezq+Y91MB8GA1UdIwQY MBaAFNXoJWxPYh2MTBcGZeh46ojsuz9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWYyYjQtZGQxMi00Yjk0LWJlM2It ZGNiM2Y4YWM3NTVlLzEvWDJwZTdvWkM5Mi1ZaEkwV2psYnQ3T3I1ajNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lYWYyYjQtZGQxMi00Yjk0LWJlM2ItZGNiM2Y4YWM3NTVl LzEvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubaUMA0G CSqGSIb3DQEBCwUAA4IBAQC6Y02U6C3lyzHS5+hG3MAzHnI1zvnXjrRwaposWkoC ItSjg4HgnV88SDLcFG0TwyAo+qQPyNzBq75JoTEbwOXOUTtIs8RsBUdjALTEQzRn gfv+PjJkeFyAWHpZPrCp63h0CjacKKsv0MMZD4BHHotSqqotA1OMHnnner2aZuFQ Yr0NcYpTH4ruxPRnCavJ4gGLZzafXTpVHJLykvZE6GMtUJixlAXnWocjWXhYSKEf qJxv3x2nkIFgeZxBY/gjgFq4Ci3tk/p35HuVGpTmHi7m5cQ1dxWBiQ2xy+iqIqYY 694L7fdp8ZMQBxwTK9v202I7wSLxfkgvA4JzqtvxMFoL -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:31 2026 by rpki-client