This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/2lNKUKMFEbf99s5ruYSyx3kpqBA.roa File: 2lNKUKMFEbf99s5ruYSyx3kpqBA.roa (raw, json) Hash identifier: frbfhLN2U1B/a1tCRS0GooGGeNzUszrYFqD6uG7ghHw= Subject key identifier: DA:53:4A:50:A3:05:11:B7:FD:F6:CE:6B:B9:84:B2:C7:79:29:A8:10 Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf Certificate serial: 019B7B362A8496EF9FA985368C844D50EAD7 Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/2lNKUKMFEbf99s5ruYSyx3kpqBA.roa Signing time: Thu 01 Jan 2026 20:18:25 +0000 ROA not before: Thu 01 Jan 2026 20:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51938 IP address blocks: 185.54.96.0/22 maxlen: 22 185.54.96.0/24 maxlen: 24 185.54.97.0/24 maxlen: 24 185.54.98.0/24 maxlen: 24 185.54.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2a:84:96:ef:9f:a9:85:36:8c:84:4d:50:ea:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf Validity Not Before: Jan 1 20:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da534a50a30511b7fdf6ce6bb984b2c77929a810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:57:f6:ed:d8:b3:15:b9:2d:bd:3d:69:9d:0a: 0b:a3:82:73:cf:c2:40:3c:f6:bc:25:7a:c8:49:7a: 4c:9a:07:6d:50:63:f0:ac:49:fb:73:52:c8:66:1d: 50:c7:0e:fa:b2:eb:c6:fb:0a:2c:52:1d:64:c1:88: 1b:d0:a0:ec:b2:5d:50:01:b6:c5:75:5b:94:4a:ee: 4a:6a:da:ce:6c:b3:64:a1:81:a7:cf:76:35:eb:11: 67:e2:d6:78:3f:da:a3:8d:fb:2c:0a:47:40:d3:51: 3c:a2:cc:22:88:68:10:c4:62:c5:c2:e7:14:72:f7: 48:5b:c6:33:8a:1a:55:cf:b5:ff:a7:64:00:e4:48: 76:3a:b8:0f:df:16:eb:8f:fb:5c:c6:be:10:f7:f8: 98:08:b9:cb:54:78:3c:76:8e:f3:d2:e1:50:e6:60: 95:58:3e:61:25:c8:b9:d4:3d:2b:fb:c0:8e:1c:fa: e6:7a:b8:ba:83:ce:1a:97:81:b1:24:f4:f5:f4:d8: 73:1d:d7:bd:53:d4:2e:c2:b0:42:a6:87:d5:29:c9: a6:60:78:5e:cc:b7:d2:6f:02:a9:81:c1:59:77:f9: 1d:4f:95:e6:59:c6:1f:a6:33:d1:df:c0:80:28:d9: 36:f0:5c:68:b3:a4:88:4f:71:de:41:84:8c:51:fb: ae:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:53:4A:50:A3:05:11:B7:FD:F6:CE:6B:B9:84:B2:C7:79:29:A8:10 X509v3 Authority Key Identifier: keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/2lNKUKMFEbf99s5ruYSyx3kpqBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.96.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:f5:bb:96:a0:6a:cc:d9:81:f9:4c:5b:0b:5f:6c:77:22:94: de:e3:56:f4:2c:61:d6:58:cb:89:49:92:47:65:28:29:de:b6: ee:c6:47:ea:bc:d5:00:6f:82:51:7f:b7:92:24:3e:7b:9c:3c: 3a:94:3b:bf:ff:72:69:83:82:15:17:4f:3e:bd:cc:2c:ee:90: 6c:73:55:19:c9:d0:49:ba:97:d9:ef:77:2e:38:94:e6:2e:4d: c6:c2:79:74:5a:e5:0c:2b:37:4c:2e:c6:1e:ef:3d:2a:f5:34: b9:1d:b7:2e:81:65:3c:fa:23:fd:9a:f8:eb:41:54:44:34:40: 8e:b7:89:46:5f:32:a9:a5:cb:45:3e:35:cb:3c:01:82:9b:af: fb:a5:1e:3c:2c:ba:a4:97:24:0b:16:70:01:bc:05:e5:e6:6c: 43:8c:4d:92:2a:04:f9:08:a8:f0:f0:d3:71:b9:3d:be:76:0c: 78:73:fd:bc:a5:a7:a8:20:92:e4:1e:9b:a9:c4:d6:17:3c:bf: cf:49:9d:a4:b7:ef:5a:9a:06:2e:98:50:84:5c:11:30:d5:5d: 6b:51:2a:2d:90:46:66:5b:76:95:27:26:c3:16:4a:9e:14:c7: 7f:0c:2c:fe:80:8f:8d:4a:67:74:40:9c:96:e2:33:78:00:5b: ea:3d:b8:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NiqElu+fqYU2jIRNUOrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkN2NiMjk3OGJiNTRlYjU1N2NhZTNmZmIzNWU0NmFjNGQ1 YzIyYmYwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTUzNGE1MGEzMDUxMWI3ZmRmNmNlNmJiOTg0YjJjNzc5MjlhODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVf27dizFbktvT1pnQoLo4Jzz8JA PPa8JXrISXpMmgdtUGPwrEn7c1LIZh1Qxw76suvG+wosUh1kwYgb0KDssl1QAbbF dVuUSu5KatrObLNkoYGnz3Y16xFn4tZ4P9qjjfssCkdA01E8oswiiGgQxGLFwucU cvdIW8YzihpVz7X/p2QA5Eh2OrgP3xbrj/tcxr4Q9/iYCLnLVHg8do7z0uFQ5mCV WD5hJci51D0r+8COHPrmeri6g84al4GxJPT19NhzHde9U9QuwrBCpofVKcmmYHhe zLfSbwKpgcFZd/kdT5XmWcYfpjPR38CAKNk28Fxos6SIT3HeQYSMUfuubQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNpTSlCjBRG3/fbOa7mEssd5KagQMB8GA1UdIwQY MBaAFH18speLtU61V8rj/7NeRqxNXCK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5Mzct MjRjM2Q5ZTI1NDAxLzEvMmxOS1VLTUZFYmY5OXM1cnVZU3l4M2twcUJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5MzctMjRjM2Q5ZTI1NDAx LzEvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTZgMA0G CSqGSIb3DQEBCwUAA4IBAQBq9buWoGrM2YH5TFsLX2x3IpTe41b0LGHWWMuJSZJH ZSgp3rbuxkfqvNUAb4JRf7eSJD57nDw6lDu//3Jpg4IVF08+vcws7pBsc1UZydBJ upfZ73cuOJTmLk3Gwnl0WuUMKzdMLsYe7z0q9TS5HbcugWU8+iP9mvjrQVRENECO t4lGXzKppctFPjXLPAGCm6/7pR48LLqklyQLFnABvAXl5mxDjE2SKgT5CKjw8NNx uT2+dgx4c/28paeoIJLkHpupxNYXPL/PSZ2kt+9amgYumFCEXBEw1V1rUSotkEZm W3aVJybDFkqeFMd/DCz+gI+NSmd0QJyW4jN4AFvqPbiM -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:05 2026 by rpki-client