This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/RL2hMxLt8_7tP_oSaX71ZrVeYlU.roa File: RL2hMxLt8_7tP_oSaX71ZrVeYlU.roa (raw, json) Hash identifier: WuW+kAVdi/p0IrSzhb4fa25p/RWfxuiBYYZTZl8qcwE= Subject key identifier: 44:BD:A1:33:12:ED:F3:FE:ED:3F:FA:12:69:7E:F5:66:B5:5E:62:55 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E3799EDEB24D02D1EBF677440BDA181 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/RL2hMxLt8_7tP_oSaX71ZrVeYlU.roa Signing time: Fri 02 Jan 2026 10:18:51 +0000 ROA not before: Fri 02 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6282 IP address blocks: 31.131.8.0/23 maxlen: 23 31.131.10.0/23 maxlen: 23 64.43.100.0/22 maxlen: 22 77.36.24.0/22 maxlen: 22 81.161.0.0/23 maxlen: 23 93.120.16.0/22 maxlen: 22 93.120.20.0/22 maxlen: 22 176.96.52.0/22 maxlen: 22 176.111.160.0/23 maxlen: 23 176.111.162.0/23 maxlen: 23 176.113.184.0/22 maxlen: 22 176.113.188.0/22 maxlen: 22 176.116.32.0/22 maxlen: 22 176.116.36.0/22 maxlen: 22 178.159.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:99:ed:eb:24:d0:2d:1e:bf:67:74:40:bd:a1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44bda13312edf3feed3ffa12697ef566b55e6255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:d1:67:66:c5:8e:48:3e:9e:2f:0a:5b:ab: 30:8f:a2:83:7c:c2:84:2d:24:4c:0a:80:d5:85:89: 94:87:49:4f:40:6e:5c:be:f7:12:1c:b7:1c:e3:f2: e4:41:e4:5f:83:32:a3:2e:0c:85:b2:71:9a:e5:b3: ad:39:22:5f:90:e6:0b:cd:9d:43:a6:74:99:0f:b5: a0:60:54:74:16:8e:dc:72:d5:6b:45:30:11:d7:e7: 4a:4f:17:58:85:93:5b:6b:f2:ed:73:98:c6:ee:14: 97:ca:ca:23:07:b1:2e:4a:93:ac:e1:a1:00:dd:81: d1:7d:66:2c:f7:07:77:d1:d2:19:d5:37:70:be:17: b6:b0:27:dc:67:ce:d2:f5:34:c0:0f:38:00:91:fd: f1:83:e2:30:49:0b:75:c2:b7:77:c8:07:52:3b:0d: c0:ac:20:d8:9c:d0:38:17:5d:86:f4:2b:a3:8f:9b: 42:6b:37:3c:e7:2b:7c:ea:0e:4a:84:8c:15:2f:13: d7:18:19:ea:63:e5:c3:26:59:15:dc:ef:41:0b:c0: 2d:0a:f6:b4:3e:5c:c5:7b:1a:38:ce:e9:01:17:36: 77:4e:74:4a:29:e2:19:d5:86:0c:a6:36:f1:cf:fb: 1e:9b:87:98:cf:8a:4c:04:f0:16:fe:16:16:a2:1a: 8b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BD:A1:33:12:ED:F3:FE:ED:3F:FA:12:69:7E:F5:66:B5:5E:62:55 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/RL2hMxLt8_7tP_oSaX71ZrVeYlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.131.8.0/22 64.43.100.0/22 77.36.24.0/22 81.161.0.0/23 93.120.16.0/21 176.96.52.0/22 176.111.160.0/22 176.113.184.0/21 176.116.32.0/21 178.159.144.0/23 Signature Algorithm: sha256WithRSAEncryption 45:56:b3:e0:ca:fb:16:fe:70:33:f2:66:92:c3:ac:95:74:86: 13:e6:ee:52:bf:31:ff:0d:43:e8:a8:9b:fe:74:0e:0b:1d:f3: cc:af:2a:4d:fe:f2:cb:1a:39:a5:13:c1:8f:a5:58:58:4e:19: 08:15:d1:d4:b8:2c:ce:69:0b:d4:25:2c:3d:94:71:bc:9b:06: 1b:fa:c0:6c:e0:25:b5:40:87:fa:9b:0c:c8:bb:41:67:58:51: ca:8b:36:1e:82:d8:3c:4a:9d:dc:ad:33:d9:93:56:26:bc:27: 59:a2:d4:f9:e7:c8:0f:d6:fb:0c:34:79:64:38:54:2f:42:9b: a5:5a:ef:96:27:24:1c:13:f2:fd:04:c7:77:a3:66:09:eb:37: 52:9d:83:ab:ea:a5:d9:24:f5:05:4d:d0:81:df:e2:81:be:92: 53:00:d6:10:26:ce:95:d4:0a:bf:cc:44:3d:54:b9:0d:f2:65: cd:a5:8b:e3:74:51:d5:b5:99:df:9f:72:a9:52:b1:86:6a:88: 52:e2:36:9b:c3:2a:21:3f:40:7d:0b:a4:3b:ac:0a:bc:a7:d1: 4a:99:43:ae:60:7d:e7:e4:3f:0d:51:ef:d9:16:6f:37:eb:e4: ef:a1:c9:36:65:b0:05:88:ed:00:bf:11:e7:f5:65:b1:13:2c: bf:41:de:44 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt+N5nt6yTQLR6/Z3RAvaGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGJkYTEzMzEyZWRmM2ZlZWQzZmZhMTI2OTdlZjU2NmI1NWU2MjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQbRZ2bFjkg+ni8KW6swj6KDfMKE LSRMCoDVhYmUh0lPQG5cvvcSHLcc4/LkQeRfgzKjLgyFsnGa5bOtOSJfkOYLzZ1D pnSZD7WgYFR0Fo7cctVrRTAR1+dKTxdYhZNba/Ltc5jG7hSXysojB7EuSpOs4aEA 3YHRfWYs9wd30dIZ1Tdwvhe2sCfcZ87S9TTADzgAkf3xg+IwSQt1wrd3yAdSOw3A rCDYnNA4F12G9Cujj5tCazc85yt86g5KhIwVLxPXGBnqY+XDJlkV3O9BC8AtCva0 PlzFexo4zukBFzZ3TnRKKeIZ1YYMpjbxz/sem4eYz4pMBPAW/hYWohqLfQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFES9oTMS7fP+7T/6Eml+9Wa1XmJVMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvUkwyaE14THQ4Xzd0UF9vU2FYNzFaclZlWWxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCH4MIAwQC QCtkAwQCTSQYAwQBUaEAAwQDXXgQAwQCsGA0AwQCsG+gAwQDsHG4AwQDsHQgAwQB sp+QMA0GCSqGSIb3DQEBCwUAA4IBAQBFVrPgyvsW/nAz8maSw6yVdIYT5u5SvzH/ DUPoqJv+dA4LHfPMrypN/vLLGjmlE8GPpVhYThkIFdHUuCzOaQvUJSw9lHG8mwYb +sBs4CW1QIf6mwzIu0FnWFHKizYegtg8Sp3crTPZk1YmvCdZotT558gP1vsMNHlk OFQvQpulWu+WJyQcE/L9BMd3o2YJ6zdSnYOr6qXZJPUFTdCB3+KBvpJTANYQJs6V 1Aq/zEQ9VLkN8mXNpYvjdFHVtZnfn3KpUrGGaohS4jabwyohP0B9C6Q7rAq8p9FK mUOuYH3n5D8NUe/ZFm836+Tvock2ZbAFiO0AvxHn9WWxEyy/Qd5E -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:19 2026 by rpki-client