This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/y4V7z4zgAZ-xkRHwN15WVILbdEA.roa File: y4V7z4zgAZ-xkRHwN15WVILbdEA.roa (raw, json) Hash identifier: 9JMbptZqg78oPgN1kW4Etd7vu4uHSobcSaTHaJbvEiM= Subject key identifier: CB:85:7B:CF:8C:E0:01:9F:B1:91:11:F0:37:5E:56:54:82:DB:74:40 Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b Certificate serial: 019B7C129F05DD3CE1528A9414B9F5F5854E Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/y4V7z4zgAZ-xkRHwN15WVILbdEA.roa Signing time: Fri 02 Jan 2026 00:19:13 +0000 ROA not before: Fri 02 Jan 2026 00:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200675 IP address blocks: 138.124.188.0/22 maxlen: 22 185.71.176.0/22 maxlen: 22 185.232.76.0/22 maxlen: 22 2a05:3400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9f:05:dd:3c:e1:52:8a:94:14:b9:f5:f5:85:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb857bcf8ce0019fb19111f0375e565482db7440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:f9:a5:27:b9:56:7f:6f:b3:40:23:f8:be: dd:49:33:9e:0d:73:f5:a0:f2:0f:65:d0:30:ce:11: 99:6b:11:c8:a8:b4:9c:c0:bd:cf:7e:bf:9b:ec:03: 77:64:0f:01:d9:59:bf:f5:4f:31:fa:40:1e:8a:2c: db:b2:ba:d9:91:ed:64:f5:a3:dc:dd:77:51:5c:d2: da:2c:3b:8b:65:46:c2:94:65:d2:f0:51:bc:05:ab: 25:8d:69:f8:d6:e8:96:0f:fc:57:78:77:11:19:92: 4e:68:a6:e3:c3:20:91:ac:2c:ae:f5:33:02:a2:9b: bd:3a:d9:b4:d2:d8:19:89:41:21:49:db:fa:42:10: c6:9b:26:85:42:68:f0:8d:90:0e:91:c4:82:03:cc: 08:5f:72:6a:be:45:89:f0:5f:6d:3b:40:62:3c:0b: cf:9b:1c:35:52:d3:43:df:3b:73:a9:91:1c:36:fc: 6b:f8:1e:a9:dd:95:36:5f:0e:d8:72:43:ad:2a:ff: c4:85:b7:6e:9d:8e:d1:73:71:d0:23:72:c6:34:21: c8:be:05:e6:43:9f:bd:76:cb:c3:73:c3:54:40:62: ac:17:b4:0a:2c:03:f7:34:a8:65:32:26:35:94:0a: 5c:00:dd:7c:db:31:be:25:db:17:01:e2:04:ab:58: f7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:85:7B:CF:8C:E0:01:9F:B1:91:11:F0:37:5E:56:54:82:DB:74:40 X509v3 Authority Key Identifier: keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/y4V7z4zgAZ-xkRHwN15WVILbdEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.188.0/22 185.71.176.0/22 185.232.76.0/22 IPv6: 2a05:3400::/29 Signature Algorithm: sha256WithRSAEncryption 04:72:e5:31:3e:f3:cd:c7:00:11:45:ca:c7:79:50:14:0a:4b: a4:a8:cb:0f:0b:f6:6a:a6:20:5b:a2:17:b5:01:c9:c6:0b:b6: d2:0c:de:18:7c:e5:bb:82:4d:65:2f:b1:1a:c6:09:b3:fd:6b: 71:f2:11:21:bb:96:22:52:b6:de:42:ad:0b:2a:24:e8:f0:d5: 59:8c:6c:5e:c1:82:8d:8b:b6:9c:7b:7b:5d:0f:04:a3:bf:e9: c3:58:8b:6b:64:b1:75:eb:cc:22:32:1f:2a:be:3a:d6:0a:c7: 71:df:75:08:22:38:54:60:63:10:80:f0:ca:ee:da:50:2d:df: e4:28:b9:d9:b2:61:9e:0d:5b:9b:6d:88:36:50:16:d4:94:e2: 65:38:ff:8d:1f:98:00:4f:b0:c6:4d:4e:e7:f1:00:f1:96:5a: 5d:12:c1:3e:af:c8:0e:aa:35:e2:4b:3d:bf:e9:f5:cb:31:76: 14:cd:8a:ae:ef:73:e4:ef:6e:dc:33:83:28:b1:04:63:24:73: c1:9b:be:55:43:77:e0:c7:ae:79:4d:e5:a5:c4:6f:21:7f:e9: 41:2a:79:af:c9:ea:4e:0d:b1:4a:38:77:53:fc:79:52:69:f2: 59:de:6c:c1:fa:82:49:76:d8:ff:4e:3b:ef:43:8a:7d:d8:d7: 7c:f2:f9:bc -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8Ep8F3TzhUoqUFLn19YVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZWFkZWU1OGY4NjRmNDcyZWI0MjJiMGI5NTQ5N2I4NTA3 NWExMmIwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjg1N2JjZjhjZTAwMTlmYjE5MTExZjAzNzVlNTY1NDgyZGI3NDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVn5pSe5Vn9vs0Aj+L7dSTOeDXP1 oPIPZdAwzhGZaxHIqLScwL3Pfr+b7AN3ZA8B2Vm/9U8x+kAeiizbsrrZke1k9aPc 3XdRXNLaLDuLZUbClGXS8FG8BasljWn41uiWD/xXeHcRGZJOaKbjwyCRrCyu9TMC opu9Otm00tgZiUEhSdv6QhDGmyaFQmjwjZAOkcSCA8wIX3JqvkWJ8F9tO0BiPAvP mxw1UtND3ztzqZEcNvxr+B6p3ZU2Xw7YckOtKv/EhbdunY7Rc3HQI3LGNCHIvgXm Q5+9dsvDc8NUQGKsF7QKLAP3NKhlMiY1lApcAN182zG+JdsXAeIEq1j3vQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFMuFe8+M4AGfsZER8DdeVlSC23RAMB8GA1UdIwQY MBaAFCzq3uWPhk9HLrQisLlUl7hQdaErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83YzJlODQtZTZjYy00NzUxLTg4N2It YmM3YTI0YzJlMjE5LzEveTRWN3o0emdBWi14a1JId04xNVdWSUxiZEVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83YzJlODQtZTZjYy00NzUxLTg4N2ItYmM3YTI0YzJlMjE5 LzEvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCiny8AwQC uUewAwQCuehMMA0EAgACMAcDBQMqBTQAMA0GCSqGSIb3DQEBCwUAA4IBAQAEcuUx PvPNxwARRcrHeVAUCkukqMsPC/ZqpiBbohe1AcnGC7bSDN4YfOW7gk1lL7Eaxgmz /Wtx8hEhu5YiUrbeQq0LKiTo8NVZjGxewYKNi7ace3tdDwSjv+nDWItrZLF168wi Mh8qvjrWCsdx33UIIjhUYGMQgPDK7tpQLd/kKLnZsmGeDVubbYg2UBbUlOJlOP+N H5gAT7DGTU7n8QDxllpdEsE+r8gOqjXiSz2/6fXLMXYUzYqu73Pk727cM4MosQRj JHPBm75VQ3fgx655TeWlxG8hf+lBKnmvyepODbFKOHdT/HlSafJZ3mzB+oJJdtj/ TjvvQ4p92Nd88vm8 -----END CERTIFICATE-----Generated at Wed Feb 4 16:44:44 2026 by rpki-client