This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/2rVgJyxoTboo6DUxsVd0VYXicAU.roa File: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (raw, json) Hash identifier: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8= Subject key identifier: DA:B5:60:27:2C:68:4D:BA:28:E8:35:31:B1:57:74:55:85:E2:70:05 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019B7DC984DEF76F1C3651743D1E4119C5A2 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/2rVgJyxoTboo6DUxsVd0VYXicAU.roa Signing time: Fri 02 Jan 2026 08:18:37 +0000 ROA not before: Fri 02 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213296 IP address blocks: 158.46.188.0/24 maxlen: 24 158.46.191.0/24 maxlen: 24 158.46.192.0/22 maxlen: 22 178.171.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:84:de:f7:6f:1c:36:51:74:3d:1e:41:19:c5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jan 2 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dab560272c684dba28e83531b157745585e27005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0c:fe:53:d4:af:2a:4c:aa:f8:b2:27:ce:b8: 5b:6e:53:81:43:2a:ae:5a:68:6c:60:73:7f:29:00: d5:02:49:39:5c:9f:45:85:00:44:d0:cc:e5:3d:db: 19:c0:aa:41:1c:a6:5f:34:90:78:fc:5d:e1:20:b4: b0:61:53:bb:5e:3c:4a:c0:0f:81:95:54:f5:4b:fe: 13:55:c2:c8:27:33:6e:5b:60:39:f1:22:ef:7f:94: 6f:b6:ba:2b:36:3c:f7:51:c8:81:4d:67:c9:e2:e3: c7:42:71:8b:93:60:f8:35:e9:76:ff:54:c2:de:39: d2:c3:3e:e6:87:62:f0:05:48:60:a8:45:97:76:a2: 2d:1d:53:31:2c:9a:d9:9f:56:04:4c:c9:db:3a:9d: 28:a4:ec:73:f5:42:8f:f4:0b:46:80:41:69:82:6c: a8:ab:b5:64:ec:05:ff:3b:90:3a:5e:8b:f6:ab:f7: 87:f6:d3:16:29:a4:ec:49:44:b1:26:d8:9c:a8:c0: 67:0d:25:17:47:14:42:94:77:f5:20:6a:76:8d:05: 0f:78:2b:d4:93:1c:1f:c9:fe:05:1d:75:dc:d5:21: 52:3c:a1:85:00:4a:56:e8:7b:7c:bd:80:af:ce:f4: 95:12:1c:0f:ee:dd:5b:d6:45:ed:e5:ed:1e:51:32: ce:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B5:60:27:2C:68:4D:BA:28:E8:35:31:B1:57:74:55:85:E2:70:05 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/2rVgJyxoTboo6DUxsVd0VYXicAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.46.188.0/24 158.46.191.0-158.46.195.255 178.171.22.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:d3:2b:11:db:80:62:3e:69:56:bd:55:db:cb:6b:00:af:50: bc:f7:b5:a3:6c:c4:57:53:d9:0b:d8:cf:74:03:20:09:fa:36: db:5a:da:f0:6a:08:e9:74:00:54:eb:2d:d4:ef:75:40:4f:2c: 62:42:09:e5:1b:56:97:80:35:5b:97:e2:e6:13:03:d5:88:fa: 1e:f4:3b:18:7b:73:9c:10:a6:42:7a:12:a0:5d:81:e2:66:1f: c1:a7:1d:cb:38:ec:3f:de:5a:ec:4c:ee:8e:03:7e:4c:32:0c: 37:eb:01:98:ec:7b:cf:3c:a4:99:94:32:de:6a:58:24:03:29: 51:57:06:31:ad:44:aa:1c:9b:b4:90:ea:50:97:12:0c:bf:a5: ef:04:61:d2:19:7a:49:cf:1f:30:f7:e5:8b:48:d9:3c:ad:7c: 39:f0:a2:d1:d8:e6:e1:16:8c:42:3c:6f:36:29:88:03:a9:05: b3:1b:99:63:53:46:1c:ec:20:ab:a6:c5:4a:bd:11:ae:aa:5b: 35:4b:d1:ae:c4:83:b8:11:ca:f2:78:b6:0d:2b:b8:95:04:1c: cb:f9:dd:d2:e6:87:3f:b0:9d:88:54:35:57:dc:75:1c:7f:a3: 5a:df:11:7d:86:31:26:ff:52:a1:bb:93:5f:4d:84:4c:19:51: 63:fc:9f:94 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9yYTe928cNlF0PR5BGcWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwMTAyMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWI1NjAyNzJjNjg0ZGJhMjhlODM1MzFiMTU3NzQ1NTg1ZTI3MDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Qz+U9SvKkyq+LInzrhbblOBQyqu WmhsYHN/KQDVAkk5XJ9FhQBE0MzlPdsZwKpBHKZfNJB4/F3hILSwYVO7XjxKwA+B lVT1S/4TVcLIJzNuW2A58SLvf5RvtrorNjz3UciBTWfJ4uPHQnGLk2D4Nel2/1TC 3jnSwz7mh2LwBUhgqEWXdqItHVMxLJrZn1YETMnbOp0opOxz9UKP9AtGgEFpgmyo q7Vk7AX/O5A6Xov2q/eH9tMWKaTsSUSxJticqMBnDSUXRxRClHf1IGp2jQUPeCvU kxwfyf4FHXXc1SFSPKGFAEpW6Ht8vYCvzvSVEhwP7t1b1kXt5e0eUTLO8QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNq1YCcsaE26KOg1MbFXdFWF4nAFMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvMnJWZ0p5eG9UYm9vNkRVeHNWZDBWWVhpY0FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAni68MAwD BACeLr8DBAKeLsADBACyqxYwDQYJKoZIhvcNAQELBQADggEBAI/TKxHbgGI+aVa9 VdvLawCvULz3taNsxFdT2QvYz3QDIAn6Ntta2vBqCOl0AFTrLdTvdUBPLGJCCeUb VpeANVuX4uYTA9WI+h70Oxh7c5wQpkJ6EqBdgeJmH8GnHcs47D/eWuxM7o4Dfkwy DDfrAZjse888pJmUMt5qWCQDKVFXBjGtRKocm7SQ6lCXEgy/pe8EYdIZeknPHzD3 5YtI2TytfDnwotHY5uEWjEI8bzYpiAOpBbMbmWNTRhzsIKumxUq9Ea6qWzVL0a7E g7gRyvJ4tg0ruJUEHMv53dLmhz+wnYhUNVfcdRx/o1rfEX2GMSb/UqG7k19NhEwZ UWP8n5Q= -----END CERTIFICATE-----Generated at Tue Jan 20 00:58:00 2026 by rpki-client