This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/2XECgtpjsen86VkC8yydIYPOl1c.roa File: 2XECgtpjsen86VkC8yydIYPOl1c.roa (raw, json) Hash identifier: BPZBQJjMYkB0nrNJVAIozX1sKQI4gxMXxsPOFyAaAE0= Subject key identifier: D9:71:02:82:DA:63:B1:E9:FC:E9:59:02:F3:2C:9D:21:83:CE:97:57 Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153 Certificate serial: 019B7BA37EB234BFEF9BC92AFE37B678D46F Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/2XECgtpjsen86VkC8yydIYPOl1c.roa Signing time: Thu 01 Jan 2026 22:17:50 +0000 ROA not before: Thu 01 Jan 2026 22:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 195.250.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:7e:b2:34:bf:ef:9b:c9:2a:fe:37:b6:78:d4:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153 Validity Not Before: Jan 1 22:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9710282da63b1e9fce95902f32c9d2183ce9757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:23:90:0b:d6:70:a4:6e:0d:23:93:33:f1:f7: 8d:ba:4f:56:b5:68:43:36:76:b9:6e:5b:9d:a7:b5: 21:c2:09:3f:97:07:df:28:ed:e7:98:66:b5:dd:6b: 99:11:33:35:0a:0c:43:7e:98:0f:f5:2a:74:e4:c7: 6f:2f:d0:83:3c:b7:b7:df:a7:d9:94:90:10:dc:9c: 15:92:b8:6e:95:00:37:da:3f:b5:37:09:8a:ee:09: df:fa:a1:89:d4:ee:87:b9:48:6c:c7:2b:76:1f:30: 53:72:32:e0:be:6f:3c:a8:23:b0:f8:1f:e3:ce:e8: bf:38:4c:02:cd:e9:e6:62:f6:11:b5:8c:8e:70:53: f3:f6:ea:2f:65:ca:7f:f6:a9:64:ae:68:8f:1a:39: d7:db:56:03:53:28:1b:4e:0e:d0:9d:f2:ef:eb:0e: d5:e6:43:c8:a1:00:cb:4e:e3:b9:fa:93:72:76:d5: 10:be:ff:5c:e7:5e:51:23:c3:52:a9:16:f6:e1:98: 8d:67:c6:36:58:12:e6:31:11:ee:6a:f2:aa:2d:7a: b2:2e:f3:e0:bf:2a:83:79:02:53:8d:6e:1f:2b:3c: 17:26:9b:ff:b2:e2:76:61:5a:48:ea:14:30:75:39: ea:55:cc:8a:0d:33:7f:eb:98:74:ed:6f:ff:49:8b: 67:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:71:02:82:DA:63:B1:E9:FC:E9:59:02:F3:2C:9D:21:83:CE:97:57 X509v3 Authority Key Identifier: keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/2XECgtpjsen86VkC8yydIYPOl1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.250.46.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:9a:ec:48:1b:cf:2e:98:0c:14:25:0d:d6:0f:81:af:d6:32: 1b:f5:01:4c:9c:16:64:5e:a4:80:34:24:60:80:67:1b:f5:e7: 5d:27:4f:5e:df:54:e7:44:d6:a9:67:1a:5f:c0:74:0d:7d:a8: e8:f2:b2:1a:1b:74:0e:f2:35:03:bb:dc:50:7d:bb:e5:85:71: 1f:8f:50:1c:61:fc:a9:59:74:26:61:92:77:65:b3:f5:a1:39: 03:be:ef:06:95:a0:c7:1d:24:2c:b4:17:7a:d7:5a:8e:ab:73: 95:93:47:c2:99:54:d2:9b:96:e4:ee:5c:11:de:1c:e9:ac:f1: 20:28:0a:e7:3b:79:08:34:1f:cf:a7:dc:d3:c0:67:55:31:3e: c1:56:66:47:03:4f:b2:18:53:16:ac:64:8b:fe:33:d5:e9:65: c1:23:4f:d5:d4:cc:fe:8e:b6:29:09:4d:61:09:4c:f4:53:bc: db:a6:b2:1b:a1:6a:28:fa:c4:b8:89:a1:45:cb:79:8a:71:ef: 7c:82:1c:2b:7a:b8:d2:ac:3d:87:55:8d:e7:b0:f2:9f:5e:ad: 5e:e9:a8:c5:06:4d:41:d4:4e:77:8f:a2:8d:de:b4:cd:9a:f8: b4:4f:c3:28:39:22:ae:22:31:7b:e3:ec:3f:9b:25:71:86:14: af:78:47:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o36yNL/vm8kq/je2eNRvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmRlYWQ0ZjFkMWM4ZGRhOTZkMWNkMTc4OWQ5ZGQzZTIz YmYxNTMwHhcNMjYwMTAxMjIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTcxMDI4MmRhNjNiMWU5ZmNlOTU5MDJmMzJjOWQyMTgzY2U5NzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCOQC9ZwpG4NI5Mz8feNuk9WtWhD Nna5bludp7Uhwgk/lwffKO3nmGa13WuZETM1CgxDfpgP9Sp05MdvL9CDPLe336fZ lJAQ3JwVkrhulQA32j+1NwmK7gnf+qGJ1O6HuUhsxyt2HzBTcjLgvm88qCOw+B/j zui/OEwCzenmYvYRtYyOcFPz9uovZcp/9qlkrmiPGjnX21YDUygbTg7QnfLv6w7V 5kPIoQDLTuO5+pNydtUQvv9c515RI8NSqRb24ZiNZ8Y2WBLmMRHuavKqLXqyLvPg vyqDeQJTjW4fKzwXJpv/suJ2YVpI6hQwdTnqVcyKDTN/65h07W//SYtnpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNlxAoLaY7Hp/OlZAvMsnSGDzpdXMB8GA1UdIwQY MBaAFK696tTx0cjdqW0c0XidndPiO/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjIt ODgzN2NhNjllMzk2LzEvMlhFQ2d0cGpzZW44NlZrQzh5eWRJWVBPbDFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjItODgzN2NhNjllMzk2 LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/ouMA0G CSqGSIb3DQEBCwUAA4IBAQAbmuxIG88umAwUJQ3WD4Gv1jIb9QFMnBZkXqSANCRg gGcb9eddJ09e31TnRNapZxpfwHQNfajo8rIaG3QO8jUDu9xQfbvlhXEfj1AcYfyp WXQmYZJ3ZbP1oTkDvu8GlaDHHSQstBd611qOq3OVk0fCmVTSm5bk7lwR3hzprPEg KArnO3kINB/Pp9zTwGdVMT7BVmZHA0+yGFMWrGSL/jPV6WXBI0/V1Mz+jrYpCU1h CUz0U7zbprIboWoo+sS4iaFFy3mKce98ghwrerjSrD2HVY3nsPKfXq1e6ajFBk1B 1E53j6KN3rTNmvi0T8MoOSKuIjF74+w/myVxhhSveEf6 -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:00 2026 by rpki-client