This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/2MBWyl5KjpR2d1Q3Tfe1fmaw1cs.roa File: 2MBWyl5KjpR2d1Q3Tfe1fmaw1cs.roa (raw, json) Hash identifier: hSEPcTmeRmUuQfaQKnQ/zcOXepkHDDHZ8GMknAXPBM4= Subject key identifier: D8:C0:56:CA:5E:4A:8E:94:76:77:54:37:4D:F7:B5:7E:66:B0:D5:CB Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B2C8A652A837DCE5B83D7E1C08678 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/2MBWyl5KjpR2d1Q3Tfe1fmaw1cs.roa Signing time: Thu 01 Jan 2026 16:19:14 +0000 ROA not before: Thu 01 Jan 2026 16:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 45.85.244.0/23 maxlen: 24 45.85.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2c:8a:65:2a:83:7d:ce:5b:83:d7:e1:c0:86:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8c056ca5e4a8e94767754374df7b57e66b0d5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:a8:86:9e:7c:31:d0:f9:0b:d7:6e:96:e4: 68:2a:0a:4c:50:57:7c:6d:0a:11:c4:c9:e4:f3:f3: cc:1f:57:d4:d5:7a:04:3e:91:1a:1b:ec:93:b1:50: 16:18:86:18:ed:db:9e:96:57:92:d9:cc:f9:94:2c: 48:ea:81:19:99:e7:04:8d:e0:c2:38:86:c9:61:cb: db:b5:e3:f4:13:b7:f3:3a:41:5b:49:d3:08:fe:e5: 3d:33:0a:cb:2f:7f:91:0f:2f:0d:6e:3f:9a:d0:5e: 23:3c:73:2b:59:5f:db:37:05:66:e5:30:35:88:6b: e8:42:4b:6e:cc:80:68:58:16:ec:69:83:8c:a8:61: 51:8e:32:2d:b7:b6:c8:c0:aa:e1:d1:27:b9:d3:f9: 64:10:6e:0e:50:9f:d5:ab:5c:5b:a6:72:ae:ea:21: 9b:73:6d:4c:90:dd:51:b5:73:29:7e:48:7e:7c:60: cf:b1:31:16:08:d2:02:bb:13:78:d0:92:18:7e:ad: 13:0b:e1:ca:22:ab:c9:77:1c:3d:50:91:56:65:d2: 4b:c6:d7:5f:ee:90:1f:a5:ff:87:29:71:e8:9d:b5: ab:4c:39:00:1a:49:f2:9e:2a:65:e6:47:dc:da:a4: 93:a3:0d:0b:f6:aa:47:e4:6e:96:d6:0b:db:e5:48: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C0:56:CA:5E:4A:8E:94:76:77:54:37:4D:F7:B5:7E:66:B0:D5:CB X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/2MBWyl5KjpR2d1Q3Tfe1fmaw1cs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.244.0-45.85.246.255 Signature Algorithm: sha256WithRSAEncryption 4c:48:9a:54:f5:aa:f8:6a:38:5d:c1:fe:97:12:42:b7:c9:51: ce:73:8e:1b:6a:2e:25:3b:13:ab:ff:d6:49:de:3b:fa:55:22: e0:ae:af:8e:72:58:bf:d4:8b:d4:e8:28:f6:e5:69:c6:fb:8d: c7:30:7f:c2:3c:58:7c:c5:9f:fa:2d:2c:59:88:21:44:60:ad: 1d:05:2e:c6:9d:e5:7e:ea:78:7e:18:19:93:51:21:f1:8f:0f: 5b:9b:7e:31:02:45:4d:a6:f9:ba:a1:ec:05:f5:6e:18:80:54: 9a:10:3b:92:36:ba:dc:b5:73:aa:28:0b:75:1e:5d:f8:ca:b6: 20:71:16:16:b9:83:27:83:7e:a9:9e:b6:19:fa:60:83:9a:62: 75:81:c7:1f:a9:e6:91:3a:0f:d1:8e:ed:df:08:b6:68:ad:71: 84:5a:4d:0d:83:18:a2:b0:a2:fe:71:b4:be:64:fa:79:ff:f3: 68:91:80:76:24:33:75:0d:14:1c:ac:c2:13:db:56:34:5a:1c: d2:71:8a:66:a5:db:b9:e4:61:c0:83:e4:6a:18:49:24:14:39: b1:09:a3:d3:38:48:2d:fa:2d:50:c1:b6:c6:88:80:7e:31:db: f3:67:33:52:37:4b:0f:7c:6f:d8:56:d7:60:e8:4b:1a:20:a6: 0b:1e:a8:e6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6WyyKZSqDfc5bg9fhwIZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGMwNTZjYTVlNGE4ZTk0NzY3NzU0Mzc0ZGY3YjU3ZTY2YjBkNWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCqohp58MdD5C9duluRoKgpMUFd8 bQoRxMnk8/PMH1fU1XoEPpEaG+yTsVAWGIYY7duelleS2cz5lCxI6oEZmecEjeDC OIbJYcvbteP0E7fzOkFbSdMI/uU9MwrLL3+RDy8Nbj+a0F4jPHMrWV/bNwVm5TA1 iGvoQktuzIBoWBbsaYOMqGFRjjItt7bIwKrh0Se50/lkEG4OUJ/Vq1xbpnKu6iGb c21MkN1RtXMpfkh+fGDPsTEWCNICuxN40JIYfq0TC+HKIqvJdxw9UJFWZdJLxtdf 7pAfpf+HKXHonbWrTDkAGknynipl5kfc2qSTow0L9qpH5G6W1gvb5Uj5vQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNjAVspeSo6UdndUN033tX5msNXLMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvMk1CV3lsNUtqcFIyZDFRM1RmZTFmbWF3MWNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItVfQD BAAtVfYwDQYJKoZIhvcNAQELBQADggEBAExImlT1qvhqOF3B/pcSQrfJUc5zjhtq LiU7E6v/1kneO/pVIuCur45yWL/Ui9ToKPblacb7jccwf8I8WHzFn/otLFmIIURg rR0FLsad5X7qeH4YGZNRIfGPD1ubfjECRU2m+bqh7AX1bhiAVJoQO5I2uty1c6oo C3UeXfjKtiBxFha5gyeDfqmethn6YIOaYnWBxx+p5pE6D9GO7d8ItmitcYRaTQ2D GKKwov5xtL5k+nn/82iRgHYkM3UNFByswhPbVjRaHNJximal27nkYcCD5GoYSSQU ObEJo9M4SC36LVDBtsaIgH4x2/NnM1I3Sw98b9hW12DoSxogpgseqOY= -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:13 2026 by rpki-client