This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/2JYWg4gqZMghUwSsH_cELClo_DE.roa File: 2JYWg4gqZMghUwSsH_cELClo_DE.roa (raw, json) Hash identifier: XmfRPL/CjIz58Jli7M5Cw1QTYVH2xAtyBdeQbzz9+4Q= Subject key identifier: D8:96:16:83:88:2A:64:C8:21:53:04:AC:1F:F7:04:2C:29:68:FC:31 Certificate issuer: /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc Certificate serial: 019B7E389F7F5D6A91E46BB6383DBE75CFE2 Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/2JYWg4gqZMghUwSsH_cELClo_DE.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38934 IP address blocks: 5.158.96.0/19 maxlen: 24 80.251.48.0/20 maxlen: 24 193.178.120.0/22 maxlen: 24 2a01:fc40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9f:7f:5d:6a:91:e4:6b:b6:38:3d:be:75:cf:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8961683882a64c8215304ac1ff7042c2968fc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:f2:3b:0e:2f:2d:49:ea:be:4a:53:5b:05: 10:3d:7d:9c:df:fd:86:bd:e3:ff:7f:21:d8:31:a3: 79:5f:f1:46:57:93:4e:99:74:06:ae:fc:71:c2:29: 0b:d6:d4:f5:d0:4a:c0:b4:24:27:c4:3c:b7:de:61: e4:d1:45:ee:cd:7d:8c:c4:da:53:4a:7d:cc:5e:86: eb:b9:18:58:c8:e1:27:c6:2a:84:41:cc:15:ad:40: 92:f9:9e:7a:aa:cb:a3:3a:c8:85:12:a7:0f:40:4d: d3:b4:59:c7:2e:b3:03:51:6e:84:50:4f:53:68:5e: 7f:b1:16:27:b7:b3:7c:ab:bb:f7:07:a3:e8:f1:71: 6a:aa:1c:83:a2:ba:d0:ae:28:b1:74:08:89:8f:3e: 43:b2:d7:67:de:9b:44:62:d9:18:b5:36:48:d5:e8: 41:c5:16:2d:b4:a2:6a:a6:cf:62:72:88:e5:0d:37: 9a:6d:49:f8:a3:6c:2c:9c:98:d9:74:df:ee:d8:fb: 1a:f4:be:61:f1:5b:89:23:99:ee:4d:a8:19:ab:0c: cb:12:c3:d5:56:61:7d:0d:bb:b5:93:14:3b:06:fe: 43:4c:73:9b:b5:92:75:d0:3e:7a:d7:cc:5d:46:bb: 08:ec:19:45:39:48:6f:82:cf:dd:8d:6f:34:68:7a: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:96:16:83:88:2A:64:C8:21:53:04:AC:1F:F7:04:2C:29:68:FC:31 X509v3 Authority Key Identifier: keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/2JYWg4gqZMghUwSsH_cELClo_DE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.158.96.0/19 80.251.48.0/20 193.178.120.0/22 IPv6: 2a01:fc40::/32 Signature Algorithm: sha256WithRSAEncryption 5a:31:32:83:5d:97:de:3f:d0:a3:db:73:c1:eb:0f:28:f3:9e: e9:a5:0d:ec:05:52:df:5c:82:6b:4e:7a:ee:ee:30:a0:01:52: 3f:f9:69:eb:a4:50:92:c8:48:52:7a:56:12:bb:3d:5f:17:7d: ea:6c:e2:50:f1:7b:45:d0:59:b0:d3:aa:99:c3:2c:f5:b2:b2: 99:8a:fe:8e:d9:b7:85:06:f6:c7:b2:c3:96:96:c5:76:78:c1: 3f:52:87:35:5f:0d:f3:67:3e:d6:f0:56:82:2a:cb:3a:1b:6a: b1:ee:83:a8:64:94:a5:ce:ba:dd:23:59:47:ca:28:39:7f:ee: 07:98:8f:7b:b2:de:7d:f3:65:4c:30:0a:5d:8e:1b:8a:bf:cd: 27:0f:65:4c:86:53:6d:97:73:d6:7d:bc:bd:3c:db:57:8d:70: 2c:a6:e9:39:6b:41:41:2a:e5:9e:97:93:77:e1:d1:bc:b3:fa: 46:64:34:48:40:86:ab:1a:b1:05:c9:63:1b:d3:38:e4:e4:ed: 4a:fd:40:08:c9:30:a1:fb:82:c9:de:7a:a7:27:66:ba:67:b2: dc:61:ab:e1:1f:d1:a5:dc:1d:51:9e:1a:42:15:88:a6:b2:ab: 8d:c5:7d:54:7c:02:d8:7e:60:9a:0f:df:e5:84:6c:1f:59:64: fe:85:57:4d -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+OJ9/XWqR5Gu2OD2+dc/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYmZhZGYyOTIzOWVkOGNmM2Y2YzY5M2Q4YmRiNzlmNDIw MDBhYmMwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODk2MTY4Mzg4MmE2NGM4MjE1MzA0YWMxZmY3MDQyYzI5NjhmYzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDLyOw4vLUnqvkpTWwUQPX2c3/2G veP/fyHYMaN5X/FGV5NOmXQGrvxxwikL1tT10ErAtCQnxDy33mHk0UXuzX2MxNpT Sn3MXobruRhYyOEnxiqEQcwVrUCS+Z56qsujOsiFEqcPQE3TtFnHLrMDUW6EUE9T aF5/sRYnt7N8q7v3B6Po8XFqqhyDorrQriixdAiJjz5Dstdn3ptEYtkYtTZI1ehB xRYttKJqps9icojlDTeabUn4o2wsnJjZdN/u2Psa9L5h8VuJI5nuTagZqwzLEsPV VmF9Dbu1kxQ7Bv5DTHObtZJ10D5618xdRrsI7BlFOUhvgs/djW80aHpWmwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNiWFoOIKmTIIVMErB/3BCwpaPwxMB8GA1UdIwQY MBaAFNC/rfKSOe2M8/bGk9i9t59CAAq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAt N2JiMzY1ZjM0YzZjLzEvMkpZV2c0Z3FaTWdoVXdTc0hfY0VMQ2xvX0RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAtN2JiMzY1ZjM0YzZj LzEvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFBZ5gAwQE UPswAwQCwbJ4MA0EAgACMAcDBQAqAfxAMA0GCSqGSIb3DQEBCwUAA4IBAQBaMTKD XZfeP9Cj23PB6w8o857ppQ3sBVLfXIJrTnru7jCgAVI/+WnrpFCSyEhSelYSuz1f F33qbOJQ8XtF0Fmw06qZwyz1srKZiv6O2beFBvbHssOWlsV2eME/Uoc1Xw3zZz7W 8FaCKss6G2qx7oOoZJSlzrrdI1lHyig5f+4HmI97st5982VMMApdjhuKv80nD2VM hlNtl3PWfby9PNtXjXAspuk5a0FBKuWel5N34dG8s/pGZDRIQIarGrEFyWMb0zjk 5O1K/UAIyTCh+4LJ3nqnJ2a6Z7LcYavhH9Gl3B1RnhpCFYimsquNxX1UfALYfmCa D9/lhGwfWWT+hVdN -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:17 2026 by rpki-client