This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/mq2lDiLFvhWJIWZYdoJKnejBoSY.roa File: mq2lDiLFvhWJIWZYdoJKnejBoSY.roa (raw, json) Hash identifier: H2YhuhQOUBlE8y/jypSZBUgHyWScaKRiBEWdWVxkNb8= Subject key identifier: 9A:AD:A5:0E:22:C5:BE:15:89:21:66:58:76:82:4A:9D:E8:C1:A1:26 Certificate issuer: /CN=b5160326be7e5cdc35b5c036441163cd25a4974d Certificate serial: 019B7C1220B67FFA0E810456F45456C8125F Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/mq2lDiLFvhWJIWZYdoJKnejBoSY.roa Signing time: Fri 02 Jan 2026 00:18:41 +0000 ROA not before: Fri 02 Jan 2026 00:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206374 IP address blocks: 185.188.132.0/24 maxlen: 24 185.188.133.0/24 maxlen: 24 2a0b:c480::/32 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:20:b6:7f:fa:0e:81:04:56:f4:54:56:c8:12:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d Validity Not Before: Jan 2 00:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9aada50e22c5be158921665876824a9de8c1a126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:d9:22:ea:9d:7c:b3:f6:5f:b2:5b:06:df: c7:30:e2:e8:4c:dc:13:df:a9:81:10:57:59:f6:6d: 9e:6d:83:53:ae:fc:88:21:9d:b8:95:b9:31:27:1a: 63:8a:a4:09:db:5f:68:42:df:ed:92:a8:b0:d5:a3: f9:70:21:85:0e:52:67:0b:2a:98:c5:59:98:7e:41: d1:34:c0:0c:7c:ad:3e:9f:94:66:29:3b:cc:fb:44: b4:02:f5:0b:57:ca:b7:f8:dc:1e:52:4a:72:4b:0b: 64:fe:74:39:5e:6c:21:6d:63:07:9c:45:f0:e9:6c: 46:b6:3b:6b:a5:fd:7f:e9:9b:bd:82:a5:29:16:d9: b7:14:af:7a:5b:54:8f:27:6b:ea:ee:48:37:80:8b: 9d:24:d9:d1:f9:70:d2:2a:b4:b2:2f:9c:2e:97:8c: 14:69:b4:a1:af:81:0f:34:2a:41:92:dc:d4:f6:7c: e4:ad:55:aa:3f:88:82:a0:24:7e:8c:36:d7:d7:92: 6d:d5:b1:a9:72:ba:87:ec:47:a7:24:e1:c3:d6:6c: 53:06:f8:c3:ca:42:2d:ca:ca:19:8c:cc:61:b8:9a: d6:c6:35:9d:57:51:06:69:03:f4:85:6b:96:75:19: 66:71:a4:94:9d:4d:d1:81:4a:8c:06:66:ec:1a:39: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AD:A5:0E:22:C5:BE:15:89:21:66:58:76:82:4A:9D:E8:C1:A1:26 X509v3 Authority Key Identifier: keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/mq2lDiLFvhWJIWZYdoJKnejBoSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.132.0/23 IPv6: 2a0b:c480::/32 Signature Algorithm: sha256WithRSAEncryption 27:fe:53:7e:2e:78:60:72:e0:02:df:83:63:55:cc:12:32:6b: ba:3d:48:f3:ef:76:b7:6f:ab:53:d8:2a:f3:ef:e1:7f:36:ea: a6:5d:10:96:b2:e1:3f:a3:f5:d5:34:a5:48:60:22:87:11:4a: 1d:f4:40:72:ac:d1:4e:3e:6c:a9:66:5e:a4:70:4b:1a:10:19: c1:b2:6d:3d:53:3a:16:ed:3e:55:ca:40:93:5c:af:c0:a6:98: 75:62:59:79:c6:2b:66:57:5f:2e:fb:e8:5d:df:50:23:2d:5d: ef:3f:6e:5c:ed:22:ec:ec:b8:02:b2:4f:91:79:7e:b3:f2:8d: 9e:30:b7:5c:46:10:b7:e9:c3:37:67:22:fe:45:f8:e7:44:9c: ef:18:9b:12:f8:23:10:18:1d:13:f5:ac:3d:55:a9:17:1b:ed: c8:4a:1c:ea:c1:88:e2:ba:86:05:32:22:d2:20:5d:5a:4b:85: ae:e2:69:b4:9e:b6:b2:c0:0a:9e:4a:e2:f0:9e:ad:28:aa:3c: 10:fd:53:db:b3:bf:df:72:b8:1c:7e:80:b3:8c:08:f8:23:87: 7d:14:46:a4:1b:5b:61:65:99:6a:2f:53:5e:6f:1a:40:b6:a3: 72:6f:9d:b5:b5:59:74:c1:9d:10:ce:60:61:2e:a6:a4:81:23: a9:17:38:73 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EiC2f/oOgQRW9FRWyBJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MTYwMzI2YmU3ZTVjZGMzNWI1YzAzNjQ0MTE2M2NkMjVh NDk3NGQwHhcNMjYwMTAyMDAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWFkYTUwZTIyYzViZTE1ODkyMTY2NTg3NjgyNGE5ZGU4YzFhMTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwDZIuqdfLP2X7JbBt/HMOLoTNwT 36mBEFdZ9m2ebYNTrvyIIZ24lbkxJxpjiqQJ219oQt/tkqiw1aP5cCGFDlJnCyqY xVmYfkHRNMAMfK0+n5RmKTvM+0S0AvULV8q3+NweUkpySwtk/nQ5XmwhbWMHnEXw 6WxGtjtrpf1/6Zu9gqUpFtm3FK96W1SPJ2vq7kg3gIudJNnR+XDSKrSyL5wul4wU abShr4EPNCpBktzU9nzkrVWqP4iCoCR+jDbX15Jt1bGpcrqH7EenJOHD1mxTBvjD ykItysoZjMxhuJrWxjWdV1EGaQP0hWuWdRlmcaSUnU3RgUqMBmbsGjkkYQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJqtpQ4ixb4ViSFmWHaCSp3owaEmMB8GA1UdIwQY MBaAFLUWAya+flzcNbXANkQRY80lpJdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZTVhYTItODQwOS00N2EwLWI0Nzkt ZjQ4YWEyZTc1NGU1LzEvbXEybERpTEZ2aFdKSVdaWWRvSktuZWpCb1NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wZTVhYTItODQwOS00N2EwLWI0NzktZjQ4YWEyZTc1NGU1 LzEvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBubyEMA0E AgACMAcDBQAqC8SAMA0GCSqGSIb3DQEBCwUAA4IBAQAn/lN+LnhgcuAC34NjVcwS Mmu6PUjz73a3b6tT2Crz7+F/NuqmXRCWsuE/o/XVNKVIYCKHEUod9EByrNFOPmyp Zl6kcEsaEBnBsm09UzoW7T5VykCTXK/Apph1Yll5xitmV18u++hd31AjLV3vP25c 7SLs7LgCsk+ReX6z8o2eMLdcRhC36cM3ZyL+RfjnRJzvGJsS+CMQGB0T9aw9VakX G+3IShzqwYjiuoYFMiLSIF1aS4Wu4mm0nraywAqeSuLwnq0oqjwQ/VPbs7/fcrgc foCzjAj4I4d9FEakG1thZZlqL1NebxpAtqNyb521tVl0wZ0QzmBhLqakgSOpFzhz -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:58 2026 by rpki-client