This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/_NXhURzxEgUQOx1t27VNmnsADf8.roa File: _NXhURzxEgUQOx1t27VNmnsADf8.roa (raw, json) Hash identifier: kmT3XzeKsZmAbDA1dijKJM9ptJsrZrB5WHGBEuWYsf4= Subject key identifier: FC:D5:E1:51:1C:F1:12:05:10:3B:1D:6D:DB:B5:4D:9A:7B:00:0D:FF Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d Certificate serial: 019B7C130346A7E50FC07988914C09625C89 Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/_NXhURzxEgUQOx1t27VNmnsADf8.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47447 IP address blocks: 91.216.248.0/24 maxlen: 24 91.227.74.0/24 maxlen: 24 176.103.220.0/23 maxlen: 23 193.148.68.0/22 maxlen: 22 2a10:fc80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:03:46:a7:e5:0f:c0:79:88:91:4c:09:62:5c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcd5e1511cf11205103b1d6ddbb54d9a7b000dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:10:a3:9d:2c:7a:7e:2f:0d:4e:90:fe:10:2a: 0f:da:59:51:db:03:00:2d:fa:cb:8a:8c:fd:d8:82: ac:8f:24:48:80:3c:0e:00:6d:55:64:f7:50:0e:24: b5:91:3b:94:48:2e:28:7a:87:3e:e6:c4:72:be:10: 65:31:8e:e1:98:da:6e:e2:a1:c7:37:df:c5:03:86: db:75:e4:3e:66:f5:cc:5a:02:79:48:4c:f6:6b:c1: f5:05:0f:8a:65:f1:37:03:06:6f:9d:71:8e:6e:59: 54:a5:84:cb:f8:83:25:6b:f6:99:a9:ad:81:31:21: 5e:e5:73:b6:7e:c2:15:d5:10:b3:5a:b1:aa:12:44: 32:d3:33:01:22:d6:e1:0e:01:cc:61:20:84:5c:b6: 18:4d:5f:71:13:17:ce:64:f0:84:7e:e9:af:44:dd: 7a:2c:8a:b3:27:77:26:a2:70:f3:17:7c:bb:7f:2d: 1b:1c:f4:0d:a5:3b:90:f8:41:cc:9e:61:13:7a:83: a4:1e:0c:56:e9:19:6a:6b:50:52:b7:b1:47:2c:06: 82:c1:6c:de:6b:88:cb:c3:eb:7f:ad:e7:df:b3:a4: a3:44:a2:0b:88:75:4e:55:2d:5a:7e:45:1c:15:96: f7:99:f0:6f:64:cc:5e:00:26:d7:cd:eb:9c:5c:ed: e4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D5:E1:51:1C:F1:12:05:10:3B:1D:6D:DB:B5:4D:9A:7B:00:0D:FF X509v3 Authority Key Identifier: keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/_NXhURzxEgUQOx1t27VNmnsADf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.248.0/24 91.227.74.0/24 176.103.220.0/23 193.148.68.0/22 IPv6: 2a10:fc80::/29 Signature Algorithm: sha256WithRSAEncryption 2d:88:2f:0a:23:fc:a9:95:df:0b:d4:de:40:a4:1b:c1:0e:fd: eb:78:29:55:96:14:ab:84:39:cb:ed:14:fd:47:e1:0a:92:77: 7a:69:a6:24:f1:4c:85:34:cb:80:ce:ca:8b:42:8a:37:a8:f9: fd:d2:58:ac:ef:29:04:a6:00:ae:ab:98:3c:f1:93:e7:e0:25: 85:ca:43:4b:10:0a:c2:2a:e4:f0:23:70:97:ab:a3:b5:ca:48: 6f:14:e4:0a:f4:54:58:cf:3e:33:7c:d3:de:70:6d:a4:0c:7b: 7e:eb:e5:48:6d:19:15:97:71:7f:9b:ce:6c:80:9e:89:4f:53: ff:5e:97:ea:dd:6c:36:52:b6:32:b7:78:5c:12:16:d3:ca:ff: 03:c2:0d:66:0b:98:ce:fc:08:a6:47:15:90:f0:a2:65:2d:1c: 1f:f1:89:bc:63:c9:a0:6f:f1:3f:da:fb:db:45:f3:0a:a0:cf: d3:51:eb:3f:82:62:e0:21:ac:b5:18:f7:18:48:9c:e4:2a:03: 3d:a0:d1:6e:84:5a:86:0a:fb:e9:db:e4:05:52:0f:be:b4:ba: f3:2a:39:63:7b:fb:cd:6c:7f:6e:c6:b0:57:f2:55:87:15:f9: f1:91:b0:86:1f:52:1d:a0:3e:39:79:77:38:38:c3:58:1a:66: 55:d6:73:5a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8EwNGp+UPwHmIkUwJYlyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTc3NmE2OTU1YzAxNjNjOWNmMWE4MzhjNDFkZmVlNWRh OWRiM2QwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2Q1ZTE1MTFjZjExMjA1MTAzYjFkNmRkYmI1NGQ5YTdiMDAwZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xCjnSx6fi8NTpD+ECoP2llR2wMA LfrLioz92IKsjyRIgDwOAG1VZPdQDiS1kTuUSC4oeoc+5sRyvhBlMY7hmNpu4qHH N9/FA4bbdeQ+ZvXMWgJ5SEz2a8H1BQ+KZfE3AwZvnXGObllUpYTL+IMla/aZqa2B MSFe5XO2fsIV1RCzWrGqEkQy0zMBItbhDgHMYSCEXLYYTV9xExfOZPCEfumvRN16 LIqzJ3cmonDzF3y7fy0bHPQNpTuQ+EHMnmETeoOkHgxW6Rlqa1BSt7FHLAaCwWze a4jLw+t/reffs6SjRKILiHVOVS1afkUcFZb3mfBvZMxeACbXzeucXO3k6wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPzV4VEc8RIFEDsdbdu1TZp7AA3/MB8GA1UdIwQY MBaAFCKndqaVXAFjyc8ag4xB3+5dqds9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMt YWYxZGUzZDBmMjE3LzEvX05YaFVSenhFZ1VRT3gxdDI3Vk5tbnNBRGY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMtYWYxZGUzZDBmMjE3 LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAW9j4AwQA W+NKAwQBsGfcAwQCwZREMA0EAgACMAcDBQMqEPyAMA0GCSqGSIb3DQEBCwUAA4IB AQAtiC8KI/ypld8L1N5ApBvBDv3reClVlhSrhDnL7RT9R+EKknd6aaYk8UyFNMuA zsqLQoo3qPn90lis7ykEpgCuq5g88ZPn4CWFykNLEArCKuTwI3CXq6O1ykhvFOQK 9FRYzz4zfNPecG2kDHt+6+VIbRkVl3F/m85sgJ6JT1P/Xpfq3Ww2UrYyt3hcEhbT yv8Dwg1mC5jO/AimRxWQ8KJlLRwf8Ym8Y8mgb/E/2vvbRfMKoM/TUes/gmLgIay1 GPcYSJzkKgM9oNFuhFqGCvvp2+QFUg++tLrzKjlje/vNbH9uxrBX8lWHFfnxkbCG H1IdoD45eXc4OMNYGmZV1nNa -----END CERTIFICATE-----Generated at Wed Jan 21 20:24:13 2026 by rpki-client