This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/2gFrlERikbTFKdI9rMWrqLB3sHI.roa File: 2gFrlERikbTFKdI9rMWrqLB3sHI.roa (raw, json) Hash identifier: +aPRdRcOO01yT/CtMcgLBuyFBxEuzS6PPgSrwq5FEhk= Subject key identifier: DA:01:6B:94:44:62:91:B4:C5:29:D2:3D:AC:C5:AB:A8:B0:77:B0:72 Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3 Certificate serial: 019B7D5BDE9298E98D53A3A6AFF897B80470 Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/2gFrlERikbTFKdI9rMWrqLB3sHI.roa Signing time: Fri 02 Jan 2026 06:18:51 +0000 ROA not before: Fri 02 Jan 2026 06:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206962 IP address blocks: 77.95.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:de:92:98:e9:8d:53:a3:a6:af:f8:97:b8:04:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3 Validity Not Before: Jan 2 06:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da016b94446291b4c529d23dacc5aba8b077b072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:5a:82:a1:52:28:3e:19:03:f7:9d:38:9b: 3f:d0:84:e4:e7:4d:24:1d:7f:59:1b:d7:9b:0c:39: 00:e2:38:69:57:dc:fa:0a:0e:26:78:05:60:f6:3b: 19:d0:13:69:68:60:c5:16:05:6d:6c:6f:a2:32:a8: 1d:52:12:cb:a3:25:77:72:7e:01:e1:69:61:01:93: f5:93:e1:31:74:8f:03:33:3c:b1:dc:59:98:0f:e1: 7f:96:4d:5f:19:db:e6:ea:41:48:c8:38:64:c4:fc: a8:8d:f3:ad:2a:6c:be:59:99:ba:a1:7a:a7:28:ec: 51:43:2e:4a:15:47:cc:29:f2:07:bf:22:7b:8b:4c: d5:b3:d5:8f:96:a4:18:4c:26:f9:79:b5:c9:43:43: f2:f0:cc:a2:13:b0:6e:fe:e2:1a:64:51:ac:44:7b: 68:52:b1:ef:d9:e0:87:39:3e:6a:47:0d:7d:5e:3e: 82:07:44:8f:7a:f3:1f:52:b9:91:0d:e6:27:e3:3c: 0c:1d:5a:91:4e:c4:ff:74:ef:8c:0b:03:11:ee:f2: 22:b2:34:53:57:2f:e4:fd:c9:a8:f5:e5:fe:46:da: 7f:e4:d4:c6:13:95:96:68:4f:ee:cb:d2:4f:be:6c: 43:96:2c:c6:84:f7:d6:3d:7e:ee:ac:bc:44:b6:24: 96:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:01:6B:94:44:62:91:B4:C5:29:D2:3D:AC:C5:AB:A8:B0:77:B0:72 X509v3 Authority Key Identifier: keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/2gFrlERikbTFKdI9rMWrqLB3sHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.216.0/24 Signature Algorithm: sha256WithRSAEncryption b9:5f:1d:f4:19:8a:a2:1d:90:2f:af:e5:a6:84:e1:e2:54:ee: 79:f1:e3:44:b0:df:02:f0:a5:e8:6d:d7:f1:21:5c:e0:92:06: e1:80:57:ec:bf:72:03:c0:6a:df:a6:ee:f9:ac:22:bf:55:eb: 9c:56:a6:a5:a4:23:2f:18:f4:44:4f:4a:1d:2d:16:a3:7e:5a: be:65:d5:24:44:a3:b2:b7:8e:fa:a5:86:4f:18:e6:fd:e1:fd: eb:15:e1:53:5f:87:17:d3:d2:11:1c:5d:60:30:5a:00:6f:43: b4:36:ac:75:ee:12:2a:1f:4d:53:17:9d:2e:ac:4f:56:30:59: bc:e8:e2:9c:c2:b1:88:2a:74:17:9f:84:31:f7:13:53:7c:83: 6e:78:7f:a8:4e:ff:a4:22:ff:6c:8f:2c:13:06:c6:95:5d:19: 1a:23:7d:0e:d3:bc:9f:bc:5d:33:02:a2:98:8b:b2:01:c4:ab: fd:66:e6:09:f7:07:ca:bf:2e:e7:9a:73:18:b0:16:d5:99:b0: 33:a1:23:9a:31:73:a5:94:50:53:fc:ee:af:23:9f:0d:94:34: 7b:16:3f:22:b0:19:a0:be:58:c0:2d:10:ce:53:eb:ef:76:e5: 44:a0:37:46:86:d3:a7:67:16:d6:ce:e2:93:42:f8:bb:50:56: ef:49:0a:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W96SmOmNU6Omr/iXuARwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NzExNTMyMTUwY2U3Yzk3YTdlYTQ4YzBkNzdhNDJlNmYw ZDVmYzMwHhcNMjYwMTAyMDYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTAxNmI5NDQ0NjI5MWI0YzUyOWQyM2RhY2M1YWJhOGIwNzdiMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0dagqFSKD4ZA/edOJs/0ITk500k HX9ZG9ebDDkA4jhpV9z6Cg4meAVg9jsZ0BNpaGDFFgVtbG+iMqgdUhLLoyV3cn4B 4WlhAZP1k+ExdI8DMzyx3FmYD+F/lk1fGdvm6kFIyDhkxPyojfOtKmy+WZm6oXqn KOxRQy5KFUfMKfIHvyJ7i0zVs9WPlqQYTCb5ebXJQ0Py8MyiE7Bu/uIaZFGsRHto UrHv2eCHOT5qRw19Xj6CB0SPevMfUrmRDeYn4zwMHVqRTsT/dO+MCwMR7vIisjRT Vy/k/cmo9eX+Rtp/5NTGE5WWaE/uy9JPvmxDlizGhPfWPX7urLxEtiSW/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNoBa5REYpG0xSnSPazFq6iwd7ByMB8GA1UdIwQY MBaAFAVxFTIVDOfJen6kjA13pC5vDV/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODIt N2JjZmQ2NGUwMjg4LzEvMmdGcmxFUmlrYlRGS2RJOXJNV3JxTEIzc0hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODItN2JjZmQ2NGUwMjg4 LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATV/YMA0G CSqGSIb3DQEBCwUAA4IBAQC5Xx30GYqiHZAvr+WmhOHiVO558eNEsN8C8KXobdfx IVzgkgbhgFfsv3IDwGrfpu75rCK/VeucVqalpCMvGPRET0odLRajflq+ZdUkRKOy t476pYZPGOb94f3rFeFTX4cX09IRHF1gMFoAb0O0Nqx17hIqH01TF50urE9WMFm8 6OKcwrGIKnQXn4Qx9xNTfINueH+oTv+kIv9sjywTBsaVXRkaI30O07yfvF0zAqKY i7IBxKv9ZuYJ9wfKvy7nmnMYsBbVmbAzoSOaMXOllFBT/O6vI58NlDR7Fj8isBmg vljALRDOU+vvduVEoDdGhtOnZxbWzuKTQvi7UFbvSQqM -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:11 2026 by rpki-client