This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/2XpRI5kbe2GcxnCcvXnUxOpReg8.roa File: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (raw, json) Hash identifier: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow= Subject key identifier: D9:7A:51:23:99:1B:7B:61:9C:C6:70:9C:BD:79:D4:C4:EA:51:7A:0F Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719 Certificate serial: 019B7BA3385D8EEFA6CDFEC8DBDFF10FB2E7 Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/2XpRI5kbe2GcxnCcvXnUxOpReg8.roa Signing time: Thu 01 Jan 2026 22:17:32 +0000 ROA not before: Thu 01 Jan 2026 22:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198437 IP address blocks: 91.234.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:38:5d:8e:ef:a6:cd:fe:c8:db:df:f1:0f:b2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719 Validity Not Before: Jan 1 22:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d97a5123991b7b619cc6709cbd79d4c4ea517a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:47:65:37:f3:42:c5:a8:68:7b:99:2b:52:9d: 6a:0e:d6:46:e6:0c:39:f0:4b:8c:c1:53:ae:f0:ae: de:4c:dc:69:c4:89:6d:c6:a4:4e:17:bf:10:2e:f0: 71:dc:99:9a:39:7d:f4:02:2b:3b:8d:80:a3:5c:1a: b1:64:3b:2f:b0:c4:87:7f:79:23:4d:90:47:30:ea: aa:a0:f9:e1:67:ab:00:fe:6e:18:fb:5a:f9:d9:de: 30:86:66:93:03:37:1f:0c:79:58:5e:5f:e6:3b:ff: 08:97:7c:80:13:cd:95:30:dd:8b:c7:61:17:47:2d: 81:10:ac:2c:ae:14:38:ee:fe:bb:35:a9:dc:83:00: 53:a8:c6:92:6e:6b:81:57:8d:0b:e7:22:72:64:f7: 71:ab:dd:70:6e:54:6e:43:1b:6b:a3:eb:34:8f:69: 0c:f2:d3:88:58:6c:aa:38:c9:00:2a:e5:bd:bf:d8: a4:57:1f:47:fc:59:3a:1a:69:c1:44:c0:61:d1:72: 9b:3a:91:0b:de:06:04:71:22:8e:f1:14:43:98:ba: 29:8f:c0:04:24:5e:74:6b:9a:66:25:f6:77:20:ef: 74:4e:cd:07:e7:59:fa:44:3c:bb:90:e0:fa:e4:a3: f6:f2:3e:dd:27:41:a6:6e:83:8d:db:31:ab:40:17: cf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7A:51:23:99:1B:7B:61:9C:C6:70:9C:BD:79:D4:C4:EA:51:7A:0F X509v3 Authority Key Identifier: keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/2XpRI5kbe2GcxnCcvXnUxOpReg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.188.0/24 Signature Algorithm: sha256WithRSAEncryption 42:77:61:ce:43:d8:aa:df:e2:83:db:0e:c8:13:5f:ca:1c:f5: 8e:bd:d4:2b:bd:d9:12:20:4b:30:9e:fe:27:76:95:1d:6a:e3: ec:fe:d2:8c:47:9d:43:f1:ae:9a:26:18:12:88:2a:4e:25:09: 15:da:5a:30:8c:85:ee:75:ce:d7:5c:0e:b6:f2:38:c1:98:61: a6:69:c2:8b:c9:fd:5b:58:19:20:a3:b9:29:94:35:57:bf:e3: ac:80:fe:38:de:69:45:a0:14:89:87:9b:c0:9c:94:cd:ee:d1: e5:ab:92:f9:bf:ea:c5:19:7c:ef:cc:9e:17:d4:3d:94:18:ee: c0:28:a7:10:3d:37:11:06:ce:2a:c5:3e:f4:c8:74:44:4a:e6: 2e:b1:7c:f4:42:0b:70:05:4e:dc:56:bd:67:f4:8d:b3:40:8d: 6f:e5:2e:65:4d:78:90:ab:dd:86:c6:b9:ed:72:9c:47:71:49: b1:31:07:9a:a7:4d:36:69:44:c0:87:eb:14:dd:95:e4:52:d1: 01:23:4f:98:39:9c:34:1f:41:5d:b8:0c:d1:a8:b6:85:20:dd: 2f:f1:4e:da:fe:52:12:85:d5:97:32:e4:8b:c7:c2:71:f9:bc: d2:84:c2:dd:d8:12:c1:0d:b5:1a:0b:d3:10:9c:1f:31:e0:4d: ba:82:d5:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7ozhdju+mzf7I29/xD7LnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OTRiNzAwNzA1ZTBiYWE3MzZhNWRkMDkwYWNkMWNiOTEy YzE3MTkwHhcNMjYwMTAxMjIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTdhNTEyMzk5MWI3YjYxOWNjNjcwOWNiZDc5ZDRjNGVhNTE3YTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEdlN/NCxahoe5krUp1qDtZG5gw5 8EuMwVOu8K7eTNxpxIltxqROF78QLvBx3JmaOX30Ais7jYCjXBqxZDsvsMSHf3kj TZBHMOqqoPnhZ6sA/m4Y+1r52d4whmaTAzcfDHlYXl/mO/8Il3yAE82VMN2Lx2EX Ry2BEKwsrhQ47v67NancgwBTqMaSbmuBV40L5yJyZPdxq91wblRuQxtro+s0j2kM 8tOIWGyqOMkAKuW9v9ikVx9H/Fk6GmnBRMBh0XKbOpEL3gYEcSKO8RRDmLopj8AE JF50a5pmJfZ3IO90Ts0H51n6RDy7kOD65KP28j7dJ0GmboON2zGrQBfP9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNl6USOZG3thnMZwnL151MTqUXoPMB8GA1UdIwQY MBaAFAeUtwBwXguqc2pd0JCs0cuRLBcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YmFjM2ItM2QwYS00MWM4LTg5MzYt OTRlMDJjOWYxNTBjLzEvMlhwUkk1a2JlMkdjeG5DY3ZYblV4T3BSZWc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82YmFjM2ItM2QwYS00MWM4LTg5MzYtOTRlMDJjOWYxNTBj LzEvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+q8MA0G CSqGSIb3DQEBCwUAA4IBAQBCd2HOQ9iq3+KD2w7IE1/KHPWOvdQrvdkSIEswnv4n dpUdauPs/tKMR51D8a6aJhgSiCpOJQkV2lowjIXudc7XXA628jjBmGGmacKLyf1b WBkgo7kplDVXv+OsgP443mlFoBSJh5vAnJTN7tHlq5L5v+rFGXzvzJ4X1D2UGO7A KKcQPTcRBs4qxT70yHRESuYusXz0QgtwBU7cVr1n9I2zQI1v5S5lTXiQq92Gxrnt cpxHcUmxMQeap002aUTAh+sU3ZXkUtEBI0+YOZw0H0FduAzRqLaFIN0v8U7a/lIS hdWXMuSLx8Jx+bzShMLd2BLBDbUaC9MQnB8x4E26gtVC -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:55 2026 by rpki-client