This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/2seAXHyzsjxKcx9vONA5t8NDpKo.roa File: 2seAXHyzsjxKcx9vONA5t8NDpKo.roa (raw, json) Hash identifier: Ss780hXc9q/xSZtDwQf9FFDagk9C3ewnlo2owJwuyeM= Subject key identifier: DA:C7:80:5C:7C:B3:B2:3C:4A:73:1F:6F:38:D0:39:B7:C3:43:A4:AA Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37A1657EE51D4A453457475F00D3A8 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/2seAXHyzsjxKcx9vONA5t8NDpKo.roa Signing time: Fri 02 Jan 2026 10:18:53 +0000 ROA not before: Fri 02 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204229 IP address blocks: 91.245.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a1:65:7e:e5:1d:4a:45:34:57:47:5f:00:d3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dac7805c7cb3b23c4a731f6f38d039b7c343a4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:24:3e:16:82:09:b6:61:5d:cf:d8:c6:03:c7: 70:49:08:c4:b5:ed:c6:6a:bf:bd:27:5d:f2:ec:60: 83:10:fd:9e:d3:e9:91:7a:3f:b2:00:37:4e:37:24: ba:33:ee:59:50:6f:d4:53:9e:3f:7b:e6:1d:02:5b: 48:07:a6:49:7b:0f:75:d5:dc:7e:cf:8e:8e:06:af: 33:54:44:c9:0b:28:2d:e0:7a:f5:74:93:b6:e7:84: dd:2b:bb:80:66:2b:fe:37:32:a0:34:21:bc:76:66: 85:04:b5:14:dd:44:1a:47:86:1b:50:72:0d:66:21: 17:88:b4:d0:ef:99:aa:05:24:55:80:48:70:74:c2: 4c:a3:0d:49:4b:de:8d:2d:57:56:66:17:d5:ce:a8: 07:3e:2c:bf:79:ed:8a:1d:71:f1:de:49:03:85:14: 9b:44:4b:78:8e:4c:81:55:4c:64:70:61:b5:c8:de: 2f:f7:82:7d:bb:51:c5:db:6b:9c:ee:5f:bb:49:5f: 10:0f:72:80:6b:ef:ab:60:2d:b0:b0:c8:c6:6e:73: 5e:45:e4:43:5f:10:f9:ec:c2:eb:e1:6d:ce:b7:fe: 31:12:9f:a0:79:5c:7a:6f:56:81:87:e0:5f:b5:d1: ff:4e:2c:d6:53:38:a4:f1:db:4b:a4:83:65:9b:1e: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C7:80:5C:7C:B3:B2:3C:4A:73:1F:6F:38:D0:39:B7:C3:43:A4:AA X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/2seAXHyzsjxKcx9vONA5t8NDpKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.188.0/22 Signature Algorithm: sha256WithRSAEncryption 49:53:aa:33:a2:29:d7:b4:70:64:9a:e4:5c:cf:0d:b4:45:37: 35:9f:6f:e7:9a:e0:39:31:df:8d:2b:95:1b:74:69:94:c6:23: 9c:e9:6b:80:0c:2d:74:c5:37:9e:5a:84:ad:b9:81:f5:42:e9: 25:a8:c4:52:10:b8:16:39:b0:d5:d0:61:1a:9b:f3:7e:ca:8e: 19:52:17:dc:c0:9d:f0:0c:1c:1a:e2:f8:ac:08:4e:40:c5:55: c3:fd:0b:3d:8e:d6:8d:be:85:98:2f:db:88:a1:60:f2:6e:13: 6e:8c:28:9d:26:1d:28:ae:cb:e0:32:0c:6f:71:25:94:88:5a: 0f:c4:63:1c:7c:03:a0:09:a3:e7:7c:cf:c5:13:1c:60:83:c2: 09:e3:b3:8a:db:58:f2:2a:04:23:ff:43:da:b6:d0:c2:e1:28: b4:4f:f4:9b:22:0e:9a:ae:2e:bd:09:4c:0a:16:91:9f:e9:e1: e2:73:31:b2:f7:93:d1:19:bc:19:06:04:ec:15:fd:27:e4:69: e8:51:96:6c:1e:83:9b:b9:16:b2:85:06:ad:27:46:ec:cf:e4: 55:01:de:5b:80:70:68:09:bc:bb:70:7e:7a:78:73:f1:f2:a4: 00:10:07:6a:ad:29:f5:78:7c:e1:b4:ad:71:c2:19:54:53:44: 0b:f0:26:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N6FlfuUdSkU0V0dfANOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWM3ODA1YzdjYjNiMjNjNGE3MzFmNmYzOGQwMzliN2MzNDNhNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSQ+FoIJtmFdz9jGA8dwSQjEte3G ar+9J13y7GCDEP2e0+mRej+yADdONyS6M+5ZUG/UU54/e+YdAltIB6ZJew911dx+ z46OBq8zVETJCygt4Hr1dJO254TdK7uAZiv+NzKgNCG8dmaFBLUU3UQaR4YbUHIN ZiEXiLTQ75mqBSRVgEhwdMJMow1JS96NLVdWZhfVzqgHPiy/ee2KHXHx3kkDhRSb REt4jkyBVUxkcGG1yN4v94J9u1HF22uc7l+7SV8QD3KAa++rYC2wsMjGbnNeReRD XxD57MLr4W3Ot/4xEp+geVx6b1aBh+BftdH/TizWUzik8dtLpINlmx7uMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNrHgFx8s7I8SnMfbzjQObfDQ6SqMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvMnNlQVhIeXpzanhLY3g5dk9OQTV0OE5EcEtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW/W8MA0G CSqGSIb3DQEBCwUAA4IBAQBJU6ozoinXtHBkmuRczw20RTc1n2/nmuA5Md+NK5Ub dGmUxiOc6WuADC10xTeeWoStuYH1QuklqMRSELgWObDV0GEam/N+yo4ZUhfcwJ3w DBwa4visCE5AxVXD/Qs9jtaNvoWYL9uIoWDybhNujCidJh0orsvgMgxvcSWUiFoP xGMcfAOgCaPnfM/FExxgg8IJ47OK21jyKgQj/0PattDC4Si0T/SbIg6ari69CUwK FpGf6eHiczGy95PRGbwZBgTsFf0n5GnoUZZsHoObuRayhQatJ0bsz+RVAd5bgHBo Cby7cH56eHPx8qQAEAdqrSn1eHzhtK1xwhlUU0QL8CYx -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:20 2026 by rpki-client