This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2XMURQYbTKOQ_OaEYGZKx-5rE9w.roa File: 2XMURQYbTKOQ_OaEYGZKx-5rE9w.roa (raw, json) Hash identifier: qQkr/VKq0kYhVvtQzwhz0Rmj1LjokafhpOkpig9OIT8= Subject key identifier: D9:73:14:45:06:1B:4C:A3:90:FC:E6:84:60:66:4A:C7:EE:6B:13:DC Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B361D0895865BF1260DEC8727B4C5E7 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2XMURQYbTKOQ_OaEYGZKx-5rE9w.roa Signing time: Thu 01 Jan 2026 20:18:22 +0000 ROA not before: Thu 01 Jan 2026 20:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 45.83.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1d:08:95:86:5b:f1:26:0d:ec:87:27:b4:c5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9731445061b4ca390fce68460664ac7ee6b13dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:9c:3e:28:ae:6e:cb:35:02:f1:92:70:bd: 5b:67:e4:dd:a8:d0:3c:fb:1d:5d:14:f8:93:95:2a: 75:36:40:0b:a5:06:df:93:e6:71:68:91:27:81:49: 39:62:7e:67:3a:0a:cb:e7:76:24:11:d0:b0:e6:14: e5:ee:52:b3:00:97:76:3c:6b:3e:ef:35:44:b1:a7: 45:4b:ba:6d:8b:a9:67:48:95:5b:5a:4a:d4:7d:1d: 4d:20:81:c4:e5:35:32:40:18:22:f6:5b:0d:b9:71: 20:5e:a2:7f:a4:17:b3:08:f1:af:31:1f:69:60:c5: bc:5b:71:9c:06:a3:51:8a:37:e8:38:be:99:70:53: 16:12:4b:1a:b1:32:d5:88:33:56:fa:a1:a3:86:58: 19:16:bd:12:73:35:13:69:f2:c5:39:5a:35:df:df: f2:1f:7e:50:55:f5:dd:29:24:e4:c3:e0:51:b2:b5: f9:ae:fb:62:58:47:48:5e:37:ac:2c:d3:cb:61:d2: 4d:3a:9d:ae:1c:fb:b5:ad:fc:2c:ef:31:05:28:b0: 70:3c:7e:f2:ac:df:2a:1e:d4:c1:1f:80:94:be:af: 23:43:0d:df:cf:cb:86:ef:37:d3:fd:c7:88:96:a0: 6b:29:e2:2a:73:06:72:a1:a4:83:a2:cc:4f:77:47: d7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:73:14:45:06:1B:4C:A3:90:FC:E6:84:60:66:4A:C7:EE:6B:13:DC X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2XMURQYbTKOQ_OaEYGZKx-5rE9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.8.0/22 Signature Algorithm: sha256WithRSAEncryption 86:07:dd:82:31:e0:ca:6f:43:15:f2:41:7e:ab:96:5b:27:ea: a2:51:55:71:0e:ef:16:cb:3e:71:df:63:69:a4:4d:2d:c7:99: 54:e8:25:3c:fe:48:cb:4a:c0:cf:26:13:62:aa:b5:cb:36:84: 19:3c:b0:25:f8:43:cd:d3:c1:9a:3b:5d:68:d0:4a:9a:fc:49: bb:67:44:e9:cc:82:74:a5:12:96:8a:3d:62:f2:2f:56:49:a6: 02:94:96:d1:e5:de:08:9f:3f:46:1c:1e:91:b6:ed:9d:41:18: 83:c7:03:4c:a7:65:5d:dd:04:aa:31:e7:0a:0c:93:e7:58:a4: dc:d6:80:b5:cb:25:73:6c:63:08:ff:a2:29:b1:b9:71:21:f1: 2b:d7:c3:03:12:05:a7:62:1b:1d:38:b4:14:fb:d1:a7:a9:b8: bb:c5:be:7f:da:41:22:5b:91:24:51:d7:05:6b:fa:2f:c4:e3: b5:b7:ce:9a:17:7d:27:84:a2:5d:3c:fe:45:1c:47:71:00:b6: e2:4a:cc:db:e4:c6:1b:44:00:da:47:c6:f6:f8:a5:bc:55:c7: 7b:77:b2:c1:1c:be:10:62:0a:94:c1:ce:e2:8d:0d:e5:17:87: 83:b1:93:e1:6a:08:a9:cf:e1:c8:b9:39:e0:0f:80:fd:68:88: 8a:7a:d9:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nh0IlYZb8SYN7IcntMXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTczMTQ0NTA2MWI0Y2EzOTBmY2U2ODQ2MDY2NGFjN2VlNmIxM2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgucPiiubss1AvGScL1bZ+TdqNA8 +x1dFPiTlSp1NkALpQbfk+ZxaJEngUk5Yn5nOgrL53YkEdCw5hTl7lKzAJd2PGs+ 7zVEsadFS7pti6lnSJVbWkrUfR1NIIHE5TUyQBgi9lsNuXEgXqJ/pBezCPGvMR9p YMW8W3GcBqNRijfoOL6ZcFMWEksasTLViDNW+qGjhlgZFr0SczUTafLFOVo139/y H35QVfXdKSTkw+BRsrX5rvtiWEdIXjesLNPLYdJNOp2uHPu1rfws7zEFKLBwPH7y rN8qHtTBH4CUvq8jQw3fz8uG7zfT/ceIlqBrKeIqcwZyoaSDosxPd0fXswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNlzFEUGG0yjkPzmhGBmSsfuaxPcMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvMlhNVVJRWWJUS09RX09hRVlHWkt4LTVyRTl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVMIMA0G CSqGSIb3DQEBCwUAA4IBAQCGB92CMeDKb0MV8kF+q5ZbJ+qiUVVxDu8Wyz5x32Np pE0tx5lU6CU8/kjLSsDPJhNiqrXLNoQZPLAl+EPN08GaO11o0Eqa/Em7Z0TpzIJ0 pRKWij1i8i9WSaYClJbR5d4Inz9GHB6Rtu2dQRiDxwNMp2Vd3QSqMecKDJPnWKTc 1oC1yyVzbGMI/6IpsblxIfEr18MDEgWnYhsdOLQU+9Gnqbi7xb5/2kEiW5EkUdcF a/ovxOO1t86aF30nhKJdPP5FHEdxALbiSszb5MYbRADaR8b2+KW8Vcd7d7LBHL4Q YgqUwc7ijQ3lF4eDsZPhagipz+HIuTngD4D9aIiKetkG -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:33 2026 by rpki-client