This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa File: 2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa (raw, json) Hash identifier: RkvyHwjfWKAPyzciHocJpPKvG0Wkaxk6iDB72eKrEGY= Subject key identifier: D9:FE:5D:5C:9A:D3:EF:3B:8A:C6:11:27:05:3C:2B:AB:A7:A2:FB:FB Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f Certificate serial: 019B78A356EC190C19DC4C27BEC184DBCAED Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa Signing time: Thu 01 Jan 2026 08:18:48 +0000 ROA not before: Thu 01 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12329 IP address blocks: 194.24.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:56:ec:19:0c:19:dc:4c:27:be:c1:84:db:ca:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9fe5d5c9ad3ef3b8ac61127053c2baba7a2fbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6c:74:bb:2a:67:ed:2a:34:71:d7:02:2f:65: 43:fe:b0:f3:fa:bf:b1:d7:b1:d8:9b:09:e3:d6:ad: 0e:e9:b5:30:5c:dd:17:b9:b4:10:f7:2c:08:51:60: 9c:e8:c3:88:ff:52:85:8d:17:fb:a1:88:39:d1:5a: 7d:54:ff:97:48:b7:0e:5f:a3:9a:ca:dd:8b:42:6c: 0e:aa:a0:3b:b5:ee:2b:aa:4f:42:4e:33:7e:9a:99: b3:98:94:8e:55:21:8a:cd:b6:c7:52:2e:8a:29:df: 31:4a:9e:90:76:cf:c6:88:c9:c9:b0:73:22:55:3c: 6e:2b:5f:d0:e8:9d:75:a5:2c:e8:3b:a0:02:2f:79: 20:f9:7c:b9:69:92:2c:0f:a3:a5:88:90:ab:5a:58: 39:4c:2e:c1:06:1d:4e:de:8d:e0:55:39:36:39:2a: 99:f5:50:49:46:4d:d5:56:ca:fe:a2:e5:cc:88:a7: b8:81:55:50:0b:94:7f:02:6c:bc:4a:2f:b3:9b:eb: 30:cf:f1:e1:23:74:1d:de:cc:ab:e7:1b:ca:a7:3d: ee:05:d5:74:63:be:c1:26:bc:4d:00:3e:31:8c:a0: e4:52:58:b7:e7:c9:bf:5d:bb:48:2d:3b:0e:8a:9d: b7:bf:c9:c1:d9:c7:1e:35:75:2d:46:40:85:fa:d8: 09:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FE:5D:5C:9A:D3:EF:3B:8A:C6:11:27:05:3C:2B:AB:A7:A2:FB:FB X509v3 Authority Key Identifier: keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.24.230.0/24 Signature Algorithm: sha256WithRSAEncryption d1:0f:c3:86:5e:96:96:68:d0:73:8b:46:37:8c:43:4a:79:55: 3a:4f:43:91:a0:59:3d:19:0a:cc:5b:c2:3d:ba:52:88:1d:93: 3a:ba:e6:f7:b9:75:13:81:5e:53:d3:24:cf:e5:80:d1:98:21: 10:25:9c:00:0f:57:85:e4:96:7e:11:c1:26:d0:cf:89:5d:dd: aa:b3:50:fe:0d:67:c1:2f:81:0a:db:00:d7:27:c5:59:3e:5c: 8e:47:da:aa:2c:40:1a:ae:6a:bc:93:2f:9b:c6:89:2b:c5:1a: 62:aa:3e:57:32:23:44:97:ee:c3:86:72:df:24:7a:61:8a:8e: 20:87:99:19:ac:db:9b:be:66:84:0f:f7:2e:12:a2:3b:cb:ae: f9:c8:e4:b5:36:81:02:e3:64:1f:64:13:de:57:46:da:c0:07: c0:36:76:ee:02:c7:d7:9c:62:59:ea:e2:41:36:ea:4e:86:3a: b4:94:0a:0b:df:40:6a:30:ff:bf:00:0c:0b:e0:39:67:64:31: 1c:3d:6b:cf:16:d8:a4:2e:6b:75:43:49:b5:a1:f1:44:71:f3: 81:70:d0:fa:4b:85:54:3b:8f:21:d0:4e:94:7e:06:65:88:c2: b2:de:a5:97:06:23:11:ca:7c:3b:40:c7:49:12:56:d3:50:00: 32:24:ae:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1bsGQwZ3EwnvsGE28rtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh NTQ0NmYwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWZlNWQ1YzlhZDNlZjNiOGFjNjExMjcwNTNjMmJhYmE3YTJmYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2x0uypn7So0cdcCL2VD/rDz+r+x 17HYmwnj1q0O6bUwXN0XubQQ9ywIUWCc6MOI/1KFjRf7oYg50Vp9VP+XSLcOX6Oa yt2LQmwOqqA7te4rqk9CTjN+mpmzmJSOVSGKzbbHUi6KKd8xSp6Qds/GiMnJsHMi VTxuK1/Q6J11pSzoO6ACL3kg+Xy5aZIsD6OliJCrWlg5TC7BBh1O3o3gVTk2OSqZ 9VBJRk3VVsr+ouXMiKe4gVVQC5R/Amy8Si+zm+swz/HhI3Qd3syr5xvKpz3uBdV0 Y77BJrxNAD4xjKDkUli358m/XbtILTsOip23v8nB2cceNXUtRkCF+tgJ4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNn+XVya0+87isYRJwU8K6unovv7MB8GA1UdIwQY MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt ODQ3N2I2NjM4ZjMxLzEvMmY1ZFhKclQ3enVLeGhFbkJUd3JxNmVpLV9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhjmMA0G CSqGSIb3DQEBCwUAA4IBAQDRD8OGXpaWaNBzi0Y3jENKeVU6T0ORoFk9GQrMW8I9 ulKIHZM6uub3uXUTgV5T0yTP5YDRmCEQJZwAD1eF5JZ+EcEm0M+JXd2qs1D+DWfB L4EK2wDXJ8VZPlyOR9qqLEAarmq8ky+bxokrxRpiqj5XMiNEl+7DhnLfJHphio4g h5kZrNubvmaED/cuEqI7y675yOS1NoEC42QfZBPeV0bawAfANnbuAsfXnGJZ6uJB NupOhjq0lAoL30BqMP+/AAwL4DlnZDEcPWvPFtikLmt1Q0m1ofFEcfOBcND6S4VU O48h0E6UfgZliMKy3qWXBiMRynw7QMdJElbTUAAyJK72 -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:16 2026 by rpki-client