This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/bk2cqNjTbXCT3a5I1-tm07qD07A.roa File: bk2cqNjTbXCT3a5I1-tm07qD07A.roa (raw, json) Hash identifier: Gw1Ewr87S1Hl49EF+LWPAblSCpXq1qbdHzOGfcAA7Bc= Subject key identifier: 6E:4D:9C:A8:D8:D3:6D:70:93:DD:AE:48:D7:EB:66:D3:BA:83:D3:B0 Certificate issuer: /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550 Certificate serial: 019B7E3869BEAC299B9A7EE11AED34B0A27B Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/bk2cqNjTbXCT3a5I1-tm07qD07A.roa Signing time: Fri 02 Jan 2026 10:19:44 +0000 ROA not before: Fri 02 Jan 2026 10:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206606 IP address blocks: 185.177.160.0/22 maxlen: 22 2a0a:3e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:69:be:ac:29:9b:9a:7e:e1:1a:ed:34:b0:a2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550 Validity Not Before: Jan 2 10:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e4d9ca8d8d36d7093ddae48d7eb66d3ba83d3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:96:61:3c:d8:de:69:66:53:29:de:4e:34:fa: 76:c5:40:a3:25:c0:4e:3a:ba:81:b8:34:01:da:eb: f3:43:9d:cd:46:27:4f:e8:c9:9e:5b:9d:77:6d:5a: f8:23:26:f2:f2:53:1b:c8:2d:13:15:d7:80:75:59: f0:12:30:69:e0:81:5a:96:51:77:eb:25:d8:27:68: 58:ef:c9:91:80:dd:97:f5:70:88:ec:f8:b9:95:ad: 2f:4d:5e:6f:18:64:aa:26:d4:d9:22:c2:b5:b3:f2: a9:60:da:68:60:96:cc:d3:b2:45:52:bc:98:2b:24: 8c:29:f2:21:b1:51:b5:0c:3c:6a:1f:e1:6d:7e:bd: c0:f3:43:f4:de:cf:f5:0d:b1:8a:13:dc:da:6e:71: c5:e8:be:0d:7a:11:04:b9:96:04:6c:95:a4:e6:15: 5a:96:74:1e:e0:50:1f:be:1f:b2:5b:8b:c6:f8:57: 7d:e2:90:0a:30:87:88:71:a3:7f:6b:4e:ed:65:84: 04:0f:57:7a:08:7a:09:e2:92:d9:2b:57:3d:92:0f: 27:ac:a4:4e:97:e6:28:4b:61:1b:9c:9a:fb:aa:09: 38:3b:db:63:2f:47:f9:55:91:b0:b9:2d:5a:9a:d1: 0e:e3:c2:92:de:3c:e2:d3:af:29:27:68:fa:76:90: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4D:9C:A8:D8:D3:6D:70:93:DD:AE:48:D7:EB:66:D3:BA:83:D3:B0 X509v3 Authority Key Identifier: keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/bk2cqNjTbXCT3a5I1-tm07qD07A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.160.0/22 IPv6: 2a0a:3e80::/29 Signature Algorithm: sha256WithRSAEncryption 9d:71:53:eb:83:ed:55:d1:93:6d:e7:ad:57:c5:8a:9d:50:23: e8:d2:43:79:f7:49:81:aa:6c:33:ad:4a:e7:1e:2c:8f:e4:63: 86:68:ef:ad:6f:0a:48:92:a1:c9:89:ac:bf:72:bb:ad:47:0c: 38:5c:10:29:7d:bc:80:be:89:28:79:f5:7d:07:df:29:89:88: 8e:c9:db:69:a9:f2:b0:d6:b6:40:49:44:57:b6:48:77:8e:03: 4e:6a:b4:03:7d:3e:a8:fd:a3:a2:b5:32:aa:f9:5b:1c:94:e5: dd:b3:17:cf:19:ae:cc:69:74:9b:f0:b2:dc:3b:18:16:d8:90: b4:f2:8a:76:83:1b:c1:39:3c:6c:f5:06:50:f8:ef:e1:33:79: a5:49:8d:2a:b7:dd:b0:58:04:40:e5:54:2e:93:58:0b:77:b5: d8:ea:85:17:a7:4f:19:0a:91:e9:07:a7:81:d4:8e:ac:ca:95: 9b:2c:32:79:b0:02:9b:44:7e:a8:b7:83:73:bc:f5:4e:e0:9b: 91:ef:81:61:e3:dd:a7:b3:f1:88:99:92:2f:96:5a:08:99:4c: c8:10:2d:ba:7d:f9:72:28:bb:24:74:53:48:7b:eb:30:5f:85: d9:2e:a4:85:2e:c6:af:6f:95:7e:69:7a:33:27:1b:ec:e7:d2: b6:82:b0:36 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OGm+rCmbmn7hGu00sKJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiY2VlNGQ5NTIzZjE1MjkxYzU3Njc1ZmQyNmRjOTUwYTdj ZDU1NTAwHhcNMjYwMTAyMTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTRkOWNhOGQ4ZDM2ZDcwOTNkZGFlNDhkN2ViNjZkM2JhODNkM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JZhPNjeaWZTKd5ONPp2xUCjJcBO OrqBuDQB2uvzQ53NRidP6MmeW513bVr4Iyby8lMbyC0TFdeAdVnwEjBp4IFallF3 6yXYJ2hY78mRgN2X9XCI7Pi5la0vTV5vGGSqJtTZIsK1s/KpYNpoYJbM07JFUryY KySMKfIhsVG1DDxqH+Ftfr3A80P03s/1DbGKE9zabnHF6L4NehEEuZYEbJWk5hVa lnQe4FAfvh+yW4vG+Fd94pAKMIeIcaN/a07tZYQED1d6CHoJ4pLZK1c9kg8nrKRO l+YoS2EbnJr7qgk4O9tjL0f5VZGwuS1amtEO48KS3jzi068pJ2j6dpCazwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG5NnKjY021wk92uSNfrZtO6g9OwMB8GA1UdIwQY MBaAFCvO5NlSPxUpHFdnX9JtyVCnzVVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzg3azJWSV9GU2tjVjJkZjBtM0pVS2ZOVlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84YmJjMjctMjA4OC00Y2M5LWI4ZDMt YTAzMTY5ZDY4YTE5LzEvYmsyY3FOalRiWENUM2E1STEtdG0wN3FEMDdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84YmJjMjctMjA4OC00Y2M5LWI4ZDMtYTAzMTY5ZDY4YTE5 LzEvSzg3azJWSV9GU2tjVjJkZjBtM0pVS2ZOVlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubGgMA0E AgACMAcDBQMqCj6AMA0GCSqGSIb3DQEBCwUAA4IBAQCdcVPrg+1V0ZNt561XxYqd UCPo0kN590mBqmwzrUrnHiyP5GOGaO+tbwpIkqHJiay/crutRww4XBApfbyAvoko efV9B98piYiOydtpqfKw1rZASURXtkh3jgNOarQDfT6o/aOitTKq+VsclOXdsxfP Ga7MaXSb8LLcOxgW2JC08op2gxvBOTxs9QZQ+O/hM3mlSY0qt92wWARA5VQuk1gL d7XY6oUXp08ZCpHpB6eB1I6sypWbLDJ5sAKbRH6ot4NzvPVO4JuR74Fh492ns/GI mZIvlloImUzIEC26fflyKLskdFNIe+swX4XZLqSFLsavb5V+aXozJxvs59K2grA2 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:14 2026 by rpki-client