This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2bCPgO0acM-cEYwNPjfQZSQog9c.roa File: 2bCPgO0acM-cEYwNPjfQZSQog9c.roa (raw, json) Hash identifier: l7bzL+trKwD4YEgD5uvG0wRkokuczT4Utyyvh/JmADc= Subject key identifier: D9:B0:8F:80:ED:1A:70:CF:9C:11:8C:0D:3E:37:D0:65:24:28:83:D7 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F4C0A059CF09A21BF73850645EF93 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2bCPgO0acM-cEYwNPjfQZSQog9c.roa Signing time: Thu 01 Jan 2026 12:19:04 +0000 ROA not before: Thu 01 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209275 IP address blocks: 213.238.160.0/24 maxlen: 24 213.238.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4c:0a:05:9c:f0:9a:21:bf:73:85:06:45:ef:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9b08f80ed1a70cf9c118c0d3e37d065242883d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f6:8e:32:04:01:a4:02:49:bd:f7:fb:28:09: a7:ad:22:6c:5d:85:c2:7a:25:f9:b5:d7:52:b5:cb: 17:a7:f8:57:d7:40:11:85:1f:31:42:ed:60:93:22: d8:0a:f1:9d:21:94:8b:21:8b:54:60:d5:07:3b:a1: 84:67:8e:5e:09:7a:1e:1a:b8:7d:d6:a7:cb:35:ef: fa:2e:11:19:c2:54:f0:62:77:0f:b8:29:13:4c:8e: 15:4c:6a:f8:ce:5c:8c:27:67:44:46:95:d8:f5:23: 9d:21:58:95:12:e9:3e:60:85:79:aa:52:f5:88:99: dd:76:62:85:24:a6:e9:e3:61:48:2e:02:9f:1f:d2: d2:22:a7:7b:58:c0:28:c8:ce:98:56:94:ec:f8:ab: e6:36:ee:23:ba:68:c2:3d:15:0f:3e:c9:a4:0a:a6: a3:7a:e9:b7:46:d1:af:7a:29:a3:a3:b4:a4:62:9c: 21:77:00:1c:f0:fd:49:a4:93:35:0e:99:08:24:64: 6c:af:6c:93:c2:77:b7:34:bd:ff:f1:29:8b:dc:26: f1:83:9a:37:0c:1a:cf:2a:23:87:36:63:fa:e3:3d: e2:cc:cb:03:8c:dd:2e:69:a2:dc:bb:fe:ba:6f:04: 84:7e:8c:39:54:2d:39:5f:7c:1f:75:d5:fb:b3:b9: 4e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B0:8F:80:ED:1A:70:CF:9C:11:8C:0D:3E:37:D0:65:24:28:83:D7 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2bCPgO0acM-cEYwNPjfQZSQog9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.160.0/24 213.238.167.0/24 Signature Algorithm: sha256WithRSAEncryption 40:57:ab:8e:50:bc:ca:24:6e:1a:54:7c:80:9c:69:cb:19:7f: a6:6c:9e:8c:1e:a5:97:58:9b:46:61:59:19:94:5f:6a:f8:30: 25:98:49:b3:21:e6:33:00:9f:72:53:9d:63:bb:6d:2e:26:8d: 13:7f:a3:2e:78:bd:8a:15:ed:9c:2b:56:b8:1a:0c:d0:0c:52: 1b:f5:51:8f:35:04:43:0c:c9:f4:cc:2d:cd:9b:5d:9b:92:64: 13:02:25:16:9f:4c:0a:af:fe:dd:b4:de:55:fb:6e:87:d5:fd: 20:03:66:77:67:ad:f4:c1:bc:ae:4d:d7:96:09:26:54:cf:71: 5c:eb:51:11:2c:50:6b:81:42:c1:31:a8:41:ff:eb:72:54:1b: 81:83:5f:12:fc:07:10:d5:e0:6b:7a:55:78:ba:ec:5b:24:31: 57:bb:cc:b0:95:1e:cd:3c:a7:53:e6:32:4d:a5:47:72:49:99: 6e:f2:9d:ce:a1:82:7d:06:b9:66:60:cb:ca:41:48:3c:6d:f9: a4:dc:6b:ba:6f:db:46:0b:66:3a:7f:a2:02:5b:b4:a7:88:99: cf:93:b0:1f:1b:3e:bb:b3:bf:29:66:d9:47:98:53:35:c9:87: 89:70:37:b1:36:8c:53:88:42:68:13:49:c3:c5:3a:f5:b4:26: ff:f4:97:83 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5f0wKBZzwmiG/c4UGRe+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWIwOGY4MGVkMWE3MGNmOWMxMThjMGQzZTM3ZDA2NTI0Mjg4M2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PaOMgQBpAJJvff7KAmnrSJsXYXC eiX5tddStcsXp/hX10ARhR8xQu1gkyLYCvGdIZSLIYtUYNUHO6GEZ45eCXoeGrh9 1qfLNe/6LhEZwlTwYncPuCkTTI4VTGr4zlyMJ2dERpXY9SOdIViVEuk+YIV5qlL1 iJnddmKFJKbp42FILgKfH9LSIqd7WMAoyM6YVpTs+KvmNu4jumjCPRUPPsmkCqaj eum3RtGveimjo7SkYpwhdwAc8P1JpJM1DpkIJGRsr2yTwne3NL3/8SmL3Cbxg5o3 DBrPKiOHNmP64z3izMsDjN0uaaLcu/66bwSEfow5VC05X3wfddX7s7lOuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNmwj4DtGnDPnBGMDT430GUkKIPXMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvMmJDUGdPMGFjTS1jRVl3TlBqZlFaU1FvZzljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1e6gAwQA 1e6nMA0GCSqGSIb3DQEBCwUAA4IBAQBAV6uOULzKJG4aVHyAnGnLGX+mbJ6MHqWX WJtGYVkZlF9q+DAlmEmzIeYzAJ9yU51ju20uJo0Tf6MueL2KFe2cK1a4GgzQDFIb 9VGPNQRDDMn0zC3Nm12bkmQTAiUWn0wKr/7dtN5V+26H1f0gA2Z3Z630wbyuTdeW CSZUz3Fc61ERLFBrgULBMahB/+tyVBuBg18S/AcQ1eBrelV4uuxbJDFXu8ywlR7N PKdT5jJNpUdySZlu8p3OoYJ9BrlmYMvKQUg8bfmk3Gu6b9tGC2Y6f6ICW7SniJnP k7AfGz67s78pZtlHmFM1yYeJcDexNoxTiEJoE0nDxTr1tCb/9JeD -----END CERTIFICATE-----Generated at Wed Jan 21 15:51:36 2026 by rpki-client