This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2POC7PKfUsDvkqOynbzWKwQJ4ow.roa File: 2POC7PKfUsDvkqOynbzWKwQJ4ow.roa (raw, json) Hash identifier: 81DNubz3RI314729JCyjLvU6zCZnKLnX6ox9m09xWa4= Subject key identifier: D8:F3:82:EC:F2:9F:52:C0:EF:92:A3:B2:9D:BC:D6:2B:04:09:E2:8C Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F504D77282D3AB7522AA97B3427DA Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2POC7PKfUsDvkqOynbzWKwQJ4ow.roa Signing time: Thu 01 Jan 2026 12:19:05 +0000 ROA not before: Thu 01 Jan 2026 12:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212069 IP address blocks: 213.238.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:50:4d:77:28:2d:3a:b7:52:2a:a9:7b:34:27:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8f382ecf29f52c0ef92a3b29dbcd62b0409e28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:f0:4d:1f:81:f7:79:de:39:d7:77:f6:e0: 79:7f:e5:51:31:c9:65:ab:21:0f:32:e6:01:a4:54: ce:2a:1d:fa:27:53:ed:8e:71:e5:d1:6f:45:98:89: 40:86:85:f0:9c:eb:6c:93:88:00:93:fb:06:9b:2d: 90:c1:b6:ce:68:29:fe:98:97:91:e5:74:2e:c9:c4: d9:52:f6:ec:0a:4b:32:19:f9:23:99:51:90:89:17: 71:13:14:9a:52:ca:c6:c5:3c:dc:4c:60:da:17:3c: db:bd:bd:66:b6:99:83:1c:5b:e1:00:89:49:45:fa: e7:5c:8e:1f:89:c9:e2:28:8b:13:7e:2d:1c:56:3d: 1b:d6:b0:43:38:40:5b:ff:0f:da:f2:95:a7:eb:46: c9:3e:67:cf:52:2d:74:f9:5f:58:32:03:40:36:5b: 22:91:a3:56:f8:d1:cb:2e:7a:ef:e6:b3:a7:c7:0e: 31:a6:7f:0a:ec:33:fb:7f:67:e8:18:a1:15:74:41: 56:c5:01:60:6b:2c:a0:4a:b8:61:1a:bc:bd:b0:38: 7c:a9:4e:cf:cf:cd:2b:cb:b1:ba:03:ff:e9:c5:24: 51:e2:5b:98:e9:39:71:13:40:01:ed:fa:b4:34:cf: 1d:48:b8:52:f3:07:99:77:89:40:fa:6b:1a:33:69: 34:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F3:82:EC:F2:9F:52:C0:EF:92:A3:B2:9D:BC:D6:2B:04:09:E2:8C X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2POC7PKfUsDvkqOynbzWKwQJ4ow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.168.0/24 Signature Algorithm: sha256WithRSAEncryption 67:cc:26:9a:ef:7c:9d:82:45:35:65:96:20:89:fe:66:2c:34: 64:c3:bc:b8:7b:70:ce:1f:1a:f8:ed:23:ad:21:c5:bb:74:c5: f9:a2:ef:d3:ff:1e:a7:89:31:8c:9e:ce:94:6e:b4:c4:2b:52: 33:0e:03:ac:1c:d0:7b:4c:84:c0:ea:71:0d:e2:14:63:fd:23: c8:07:f6:5f:0d:e0:8a:00:69:a4:ba:ef:65:8f:0b:e6:3c:60: d3:ea:3f:0e:7f:c4:5a:e4:ad:4f:f5:73:7c:c4:4f:10:c1:5d: 1f:c6:d5:9e:1f:f9:3a:83:8e:aa:f8:42:91:27:29:44:bb:ff: fa:61:d4:40:68:54:9a:06:f4:95:ff:b9:a3:49:6c:53:2f:5c: c3:04:49:f7:5c:3b:06:ca:91:64:7d:c1:c3:4a:cd:39:51:bc: 51:4b:2a:87:b8:31:9f:7c:51:9c:99:d5:82:a0:1e:19:25:70: 85:6c:66:7f:1b:3b:62:38:33:2c:a6:12:23:15:30:4d:ec:f4: 8f:bb:2a:4f:07:47:73:05:0b:09:3c:9b:35:05:4f:4b:20:8d: f1:a7:fb:c9:6a:db:12:46:87:25:e9:0a:2c:86:3a:a3:9e:bf: ba:e0:ef:61:4c:79:94:9a:04:30:af:44:09:3b:4e:78:0d:35: ea:2f:ab:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f1BNdygtOrdSKql7NCfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGYzODJlY2YyOWY1MmMwZWY5MmEzYjI5ZGJjZDYyYjA0MDllMjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttbwTR+B93neOdd39uB5f+VRMcll qyEPMuYBpFTOKh36J1PtjnHl0W9FmIlAhoXwnOtsk4gAk/sGmy2QwbbOaCn+mJeR 5XQuycTZUvbsCksyGfkjmVGQiRdxExSaUsrGxTzcTGDaFzzbvb1mtpmDHFvhAIlJ RfrnXI4ficniKIsTfi0cVj0b1rBDOEBb/w/a8pWn60bJPmfPUi10+V9YMgNANlsi kaNW+NHLLnrv5rOnxw4xpn8K7DP7f2foGKEVdEFWxQFgayygSrhhGry9sDh8qU7P z80ry7G6A//pxSRR4luY6TlxE0AB7fq0NM8dSLhS8weZd4lA+msaM2k08QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNjzguzyn1LA75Kjsp281isECeKMMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvMlBPQzdQS2ZVc0R2a3FPeW5ieldLd1FKNG93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6oMA0G CSqGSIb3DQEBCwUAA4IBAQBnzCaa73ydgkU1ZZYgif5mLDRkw7y4e3DOHxr47SOt IcW7dMX5ou/T/x6niTGMns6UbrTEK1IzDgOsHNB7TITA6nEN4hRj/SPIB/ZfDeCK AGmkuu9ljwvmPGDT6j8Of8Ra5K1P9XN8xE8QwV0fxtWeH/k6g46q+EKRJylEu//6 YdRAaFSaBvSV/7mjSWxTL1zDBEn3XDsGypFkfcHDSs05UbxRSyqHuDGffFGcmdWC oB4ZJXCFbGZ/GztiODMsphIjFTBN7PSPuypPB0dzBQsJPJs1BU9LII3xp/vJatsS Rocl6Qoshjqjnr+64O9hTHmUmgQwr0QJO054DTXqL6sc -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:27 2026 by rpki-client