This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/2A6g2VEm6YdiW4fp1FPWAfGTXzs.roa File: 2A6g2VEm6YdiW4fp1FPWAfGTXzs.roa (raw, json) Hash identifier: m5M46o3a75vj6oPFWSqdzUbza/mY+wrNQURerudzAu4= Subject key identifier: D8:0E:A0:D9:51:26:E9:87:62:5B:87:E9:D4:53:D6:01:F1:93:5F:3B Certificate issuer: /CN=11c971ff0d25f2034c05ab2958a86f732bc67734 Certificate serial: 019B7C129A0CEE87DD8005B2A20B4AF3F17D Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/2A6g2VEm6YdiW4fp1FPWAfGTXzs.roa Signing time: Fri 02 Jan 2026 00:19:12 +0000 ROA not before: Fri 02 Jan 2026 00:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202040 IP address blocks: 185.54.76.0/22 maxlen: 22 193.141.27.0/24 maxlen: 24 2a04:d140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9a:0c:ee:87:dd:80:05:b2:a2:0b:4a:f3:f1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d80ea0d95126e987625b87e9d453d601f1935f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:53:11:dc:53:6d:30:b4:df:c3:87:68:98:ac: aa:3a:66:22:f1:bf:80:f7:d6:43:ff:02:b7:bd:ca: 60:ed:49:91:97:0c:f0:74:0f:92:5f:c0:1f:56:47: 29:fe:86:59:95:0e:4e:6c:8a:a4:66:a9:e0:d6:22: 02:ed:7a:f2:1b:86:6e:a3:0a:06:b8:77:6b:43:60: e1:63:e1:3e:29:ac:40:42:62:14:53:5d:5c:15:62: 5e:af:41:ad:77:ff:2f:c5:f8:5e:39:74:45:6d:24: c8:f8:a8:a7:44:c5:44:98:4b:d7:1e:4b:88:e0:ad: ae:e6:32:88:d0:d6:61:be:a8:76:15:ac:df:6b:7a: e6:69:80:b9:57:31:e7:8b:c7:03:5a:85:64:58:5a: f9:db:9b:cb:0b:0b:e5:ac:09:b3:55:78:11:0a:75: 21:12:09:a6:f0:ab:24:82:df:11:ac:ec:c1:d0:56: 36:f0:39:c8:13:86:3b:1c:02:2b:dc:e3:00:ab:94: f9:7a:27:81:f1:c4:30:2a:b1:02:14:ad:36:a2:b5: 52:c2:a7:1d:c0:96:a9:17:34:3c:50:80:fa:55:2a: c4:2c:9d:9a:07:f0:fc:be:12:9b:bd:15:6c:54:23: a3:fb:89:9f:f5:4c:eb:7c:75:e8:a6:31:e9:ac:04: 72:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0E:A0:D9:51:26:E9:87:62:5B:87:E9:D4:53:D6:01:F1:93:5F:3B X509v3 Authority Key Identifier: keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/2A6g2VEm6YdiW4fp1FPWAfGTXzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.76.0/22 193.141.27.0/24 IPv6: 2a04:d140::/29 Signature Algorithm: sha256WithRSAEncryption 39:74:18:71:0d:24:c3:0a:ef:7d:7f:ea:d3:75:48:59:72:f8: 90:73:2f:4b:d2:79:85:f0:7a:86:af:21:e3:69:57:a6:6c:46: 26:a5:c7:db:5b:47:96:be:9c:ef:1c:4a:28:01:4f:dd:c5:9c: b4:b3:63:f9:be:a2:88:1a:14:ee:65:be:5e:7f:2f:05:46:f1: 01:30:39:78:5f:b6:05:6b:f9:4a:8e:b8:95:86:45:be:00:b3: e0:05:59:88:a6:d7:75:71:f8:13:49:f6:ba:ab:fd:2f:01:1c: f7:13:8f:fe:b5:68:fa:72:e6:79:20:11:06:1c:b6:3e:71:83: 0e:be:ee:70:9d:d2:7c:51:95:be:47:88:f3:b7:62:47:76:42: 17:36:12:a8:e3:86:8a:5f:40:4b:7f:58:95:f5:dd:f4:20:db: b8:0e:2f:d7:23:de:c3:24:44:8e:1a:97:f6:20:7d:73:48:08: db:c8:0b:7a:d9:01:39:68:a2:27:e6:a8:d1:8d:14:99:dd:f3: be:81:0e:ac:53:8d:1a:67:31:55:fd:0a:f1:ea:03:a8:86:83: ec:43:bd:3e:55:35:d6:b6:79:ed:9d:a6:31:9c:7d:cf:66:97: 90:fd:74:45:25:8c:32:7d:8f:5b:99:ec:ac:10:5b:98:42:31: 1f:7d:e9:9d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8EpoM7ofdgAWyogtK8/F9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYzk3MWZmMGQyNWYyMDM0YzA1YWIyOTU4YTg2ZjczMmJj Njc3MzQwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODBlYTBkOTUxMjZlOTg3NjI1Yjg3ZTlkNDUzZDYwMWYxOTM1ZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01MR3FNtMLTfw4domKyqOmYi8b+A 99ZD/wK3vcpg7UmRlwzwdA+SX8AfVkcp/oZZlQ5ObIqkZqng1iIC7XryG4ZuowoG uHdrQ2DhY+E+KaxAQmIUU11cFWJer0Gtd/8vxfheOXRFbSTI+KinRMVEmEvXHkuI 4K2u5jKI0NZhvqh2Fazfa3rmaYC5VzHni8cDWoVkWFr525vLCwvlrAmzVXgRCnUh Egmm8Kskgt8RrOzB0FY28DnIE4Y7HAIr3OMAq5T5eieB8cQwKrECFK02orVSwqcd wJapFzQ8UID6VSrELJ2aB/D8vhKbvRVsVCOj+4mf9UzrfHXopjHprARySwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNgOoNlRJumHYluH6dRT1gHxk187MB8GA1UdIwQY MBaAFBHJcf8NJfIDTAWrKViob3Mrxnc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWNseF93MGw4Z05NQmFzcFdLaHZjeXZHZHpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMTlkMDItMDAyYS00Y2I3LWFmYmIt ZWYyZDdhMjNmNjA5LzEvMkE2ZzJWRW02WWRpVzRmcDFGUFdBZkdUWHpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hMTlkMDItMDAyYS00Y2I3LWFmYmItZWYyZDdhMjNmNjA5 LzEvRWNseF93MGw4Z05NQmFzcFdLaHZjeXZHZHpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuTZMAwQA wY0bMA0EAgACMAcDBQMqBNFAMA0GCSqGSIb3DQEBCwUAA4IBAQA5dBhxDSTDCu99 f+rTdUhZcviQcy9L0nmF8HqGryHjaVembEYmpcfbW0eWvpzvHEooAU/dxZy0s2P5 vqKIGhTuZb5efy8FRvEBMDl4X7YFa/lKjriVhkW+ALPgBVmIptd1cfgTSfa6q/0v ARz3E4/+tWj6cuZ5IBEGHLY+cYMOvu5wndJ8UZW+R4jzt2JHdkIXNhKo44aKX0BL f1iV9d30INu4Di/XI97DJESOGpf2IH1zSAjbyAt62QE5aKIn5qjRjRSZ3fO+gQ6s U40aZzFV/Qrx6gOohoPsQ70+VTXWtnntnaYxnH3PZpeQ/XRFJYwyfY9bmeysEFuY QjEffemd -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:16 2026 by rpki-client