This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2PIqOQ2YKu9TckYAVt6NOimQhVM.roa File: 2PIqOQ2YKu9TckYAVt6NOimQhVM.roa (raw, json) Hash identifier: +bIIIGe3mpsbamdxCB5GjQDuxExBCKhwQBTxWVuwDAo= Subject key identifier: D8:F2:2A:39:0D:98:2A:EF:53:72:46:00:56:DE:8D:3A:29:90:85:53 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35F79BAE187418155946C4746B3720 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2PIqOQ2YKu9TckYAVt6NOimQhVM.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35048 IP address blocks: 2.59.50.0/24 maxlen: 24 5.183.130.0/24 maxlen: 24 45.11.20.0/24 maxlen: 24 45.11.21.0/24 maxlen: 24 45.84.176.0/24 maxlen: 24 45.84.177.0/24 maxlen: 24 45.90.196.0/24 maxlen: 24 92.119.193.0/24 maxlen: 24 94.158.190.0/24 maxlen: 24 193.53.168.0/24 maxlen: 24 194.32.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f7:9b:ae:18:74:18:15:59:46:c4:74:6b:37:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8f22a390d982aef5372460056de8d3a29908553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:50:36:f1:fe:1e:87:02:31:dd:4b:8a:72:23: e9:92:9e:f8:6d:39:50:8a:84:be:ce:27:63:05:c4: 4d:6b:e4:65:1e:b8:be:83:a4:26:31:98:0a:9a:c9: 95:4f:d0:68:c4:6e:02:48:99:a1:db:f5:4e:2f:c0: d2:bb:7e:79:20:6a:e3:ca:41:7d:de:61:2e:ed:34: 15:e3:96:e3:07:2c:06:aa:1b:13:f2:a3:83:d0:1b: 0e:73:97:12:d4:3c:6f:73:be:cd:b2:f9:b1:b0:a1: fe:47:0b:1b:e6:e6:ac:4f:b6:39:95:70:ac:89:1c: 9d:88:77:11:95:f2:32:90:2c:ee:dd:8b:22:0b:a1: eb:0f:53:05:74:2e:d0:e7:7e:ac:e3:94:86:5b:e0: 90:4c:90:22:4d:44:5c:d4:9d:dc:ce:f1:41:4a:4a: a2:76:40:cb:51:2a:67:4f:82:96:bc:c8:c3:aa:75: 9a:8f:3e:4d:e0:47:47:d2:e8:86:eb:28:77:7a:9e: 67:3a:52:dd:b1:46:3b:46:9f:ff:30:19:97:ec:d9: bc:f3:4b:f7:6e:83:68:b0:37:be:4c:7e:ff:16:bc: 31:65:5e:b1:a9:5c:0a:e5:3d:97:96:e1:de:79:ea: 00:2b:64:73:0d:a0:21:3a:35:36:9a:c2:38:a8:38: 5f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F2:2A:39:0D:98:2A:EF:53:72:46:00:56:DE:8D:3A:29:90:85:53 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2PIqOQ2YKu9TckYAVt6NOimQhVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.50.0/24 5.183.130.0/24 45.11.20.0/23 45.84.176.0/23 45.90.196.0/24 92.119.193.0/24 94.158.190.0/24 193.53.168.0/24 194.32.237.0/24 Signature Algorithm: sha256WithRSAEncryption 50:55:d3:ff:27:ed:91:87:00:db:d8:d4:69:e6:6b:cc:1e:ec: 65:6f:a0:58:e4:8f:b3:28:92:e7:18:d5:88:3b:43:fe:98:3a: de:79:3a:dc:17:f8:00:1b:bf:b0:c9:ff:09:95:0a:37:e0:63: c2:c3:76:41:c3:8d:c5:f7:8a:c7:83:b9:d5:31:f2:d1:8c:86: 35:5d:07:c3:8b:2c:1e:79:5c:fe:20:4b:e8:c1:4c:41:ec:33: 2a:97:a6:ca:16:36:a5:b2:82:1a:b4:2d:97:c9:52:43:a1:11: 5f:07:31:28:03:bd:27:11:c6:14:fc:06:0c:b7:f0:82:e2:ad: a2:75:fd:fd:5b:32:52:57:e8:05:fd:9d:90:ad:9b:fc:e9:a7: f8:56:0c:59:d6:f9:21:fe:e4:16:25:e0:2d:12:ac:00:34:e6: ff:fa:ee:92:11:30:0a:bf:ad:28:44:2e:e2:38:3d:99:6b:05: 1b:d3:1a:ae:48:aa:c8:2c:42:b1:46:c5:99:8a:d5:58:53:18: 87:65:7e:70:ee:04:42:a1:3b:d1:ba:f9:a5:45:32:c5:82:ad: cd:99:ff:fb:77:25:1d:df:d7:70:16:87:08:24:f2:b4:e7:fe: 34:13:a4:c8:6b:27:8b:f7:9f:01:98:de:9d:06:67:85:a5:6a: 18:92:4b:b0 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7Nfebrhh0GBVZRsR0azcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGYyMmEzOTBkOTgyYWVmNTM3MjQ2MDA1NmRlOGQzYTI5OTA4NTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VA28f4ehwIx3UuKciPpkp74bTlQ ioS+zidjBcRNa+RlHri+g6QmMZgKmsmVT9BoxG4CSJmh2/VOL8DSu355IGrjykF9 3mEu7TQV45bjBywGqhsT8qOD0BsOc5cS1Dxvc77NsvmxsKH+Rwsb5uasT7Y5lXCs iRydiHcRlfIykCzu3YsiC6HrD1MFdC7Q536s45SGW+CQTJAiTURc1J3czvFBSkqi dkDLUSpnT4KWvMjDqnWajz5N4EdH0uiG6yh3ep5nOlLdsUY7Rp//MBmX7Nm880v3 boNosDe+TH7/FrwxZV6xqVwK5T2XluHeeeoAK2RzDaAhOjU2msI4qDhfbwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFNjyKjkNmCrvU3JGAFbejTopkIVTMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvMlBJcU9RMllLdTlUY2tZQVZ0Nk5PaW1RaFZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAAjsyAwQA BbeCAwQBLQsUAwQBLVSwAwQALVrEAwQAXHfBAwQAXp6+AwQAwTWoAwQAwiDtMA0G CSqGSIb3DQEBCwUAA4IBAQBQVdP/J+2RhwDb2NRp5mvMHuxlb6BY5I+zKJLnGNWI O0P+mDreeTrcF/gAG7+wyf8JlQo34GPCw3ZBw43F94rHg7nVMfLRjIY1XQfDiywe eVz+IEvowUxB7DMql6bKFjalsoIatC2XyVJDoRFfBzEoA70nEcYU/AYMt/CC4q2i df39WzJSV+gF/Z2QrZv86af4VgxZ1vkh/uQWJeAtEqwANOb/+u6SETAKv60oRC7i OD2ZawUb0xquSKrILEKxRsWZitVYUxiHZX5w7gRCoTvRuvmlRTLFgq3Nmf/7dyUd 39dwFocIJPK05/40E6TIayeL958BmN6dBmeFpWoYkkuw -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:33 2026 by rpki-client