This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/2RIVIVRmKa9CYW5k__SxCIzxcbs.roa File: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (raw, json) Hash identifier: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44= Subject key identifier: D9:12:15:21:54:66:29:AF:42:61:6E:64:FF:F4:B1:08:8C:F1:71:BB Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6 Certificate serial: 019B78A2B611FFCB3A18A9967348EEC17544 Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/2RIVIVRmKa9CYW5k__SxCIzxcbs.roa Signing time: Thu 01 Jan 2026 08:18:07 +0000 ROA not before: Thu 01 Jan 2026 08:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 92.205.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b6:11:ff:cb:3a:18:a9:96:73:48:ee:c1:75:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6 Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9121521546629af42616e64fff4b1088cf171bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:d2:5e:83:b0:41:1a:82:27:21:10:e7:d7: 76:71:5a:1e:67:7b:8a:12:32:17:34:c6:bc:9e:33: a5:54:23:e8:8d:63:e9:11:8f:0f:e9:2c:9a:1d:6c: d4:58:cd:15:89:ae:cf:66:f1:a4:9f:0f:8b:a2:e3: 90:48:65:ff:b8:59:60:81:2c:be:52:0d:44:e3:04: f5:8f:20:b4:de:80:0b:d9:ea:f9:6f:44:a2:f8:04: 39:b4:92:d5:2d:72:ee:8e:3f:e3:5c:a5:b7:db:dd: dd:94:86:83:fe:27:e4:cc:b3:0d:0c:f1:5a:a9:04: d6:a0:9d:8c:15:9b:73:38:47:78:b4:bd:55:d1:b6: a6:e1:81:28:89:88:f9:4c:01:66:82:ea:ad:52:72: f4:4d:aa:b4:d7:d4:10:80:f1:bf:d7:dd:5d:69:ea: 69:be:1e:dc:1c:0a:8a:dc:8b:20:ad:7e:1e:0d:03: 14:95:c9:76:0d:1f:b2:65:c3:1e:4e:18:f3:46:b0: dc:55:de:06:d0:d4:8f:56:ae:96:18:97:79:cb:44: 38:9c:fd:60:dd:84:47:d8:9d:a0:eb:22:d2:42:10: 0f:24:a8:4d:e0:91:69:81:eb:03:e2:ed:0f:6d:f1: 5d:ba:58:45:16:ed:36:17:5b:a4:2c:62:03:fb:db: 24:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:12:15:21:54:66:29:AF:42:61:6E:64:FF:F4:B1:08:8C:F1:71:BB X509v3 Authority Key Identifier: keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/2RIVIVRmKa9CYW5k__SxCIzxcbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.205.117.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:9e:3e:39:f1:ae:ab:45:6a:4c:5e:8f:eb:1c:dc:1e:63:c3: 1f:54:e1:e9:ba:ee:76:35:50:e6:d4:fa:14:0b:ca:49:a8:fc: 65:93:26:88:65:67:04:5b:ec:59:7b:63:ed:b5:f8:77:20:17: 3f:80:43:c1:59:22:df:41:5a:03:4e:d6:57:db:d4:7b:ed:11: b0:ae:4d:d7:3d:75:99:2c:cc:4a:53:29:f0:96:4e:ce:74:88: ca:f6:6c:4a:36:69:07:8b:5a:43:66:f9:be:47:e4:b4:5d:68: e8:e9:5a:92:f1:b6:0e:da:fd:52:ca:5e:c4:2a:70:55:7a:cc: 5a:67:3a:e7:8a:d0:ce:41:a5:45:e9:3f:1b:58:db:3c:e0:b3: e8:43:6a:30:e8:d0:a2:bf:7b:6d:28:24:ea:88:30:2e:13:45: 3e:a2:34:fd:10:c8:6d:7a:b9:9f:62:1b:b5:39:ed:f8:e4:22: 56:18:3f:3b:6d:9e:cb:d6:94:11:4b:88:b1:28:9e:85:33:00: b9:c0:fa:94:be:57:bd:dc:2a:ad:33:a2:ab:3a:c5:90:7d:07: 6a:d1:c9:d9:17:da:6b:46:be:3f:c8:9f:86:60:0a:0f:77:30: c5:bf:57:76:f2:c8:e4:e5:42:b4:81:d4:36:96:0d:04:2f:2f: bf:48:e9:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4orYR/8s6GKmWc0juwXVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZTQ5MThmYzdmZGZiNzNiYmE4Y2Y1OGQ0Y2I1ZmU0NDlj ZjgzZjYwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTEyMTUyMTU0NjYyOWFmNDI2MTZlNjRmZmY0YjEwODhjZjE3MWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLTSXoOwQRqCJyEQ59d2cVoeZ3uK EjIXNMa8njOlVCPojWPpEY8P6SyaHWzUWM0Via7PZvGknw+LouOQSGX/uFlggSy+ Ug1E4wT1jyC03oAL2er5b0Si+AQ5tJLVLXLujj/jXKW3293dlIaD/ifkzLMNDPFa qQTWoJ2MFZtzOEd4tL1V0bam4YEoiYj5TAFmguqtUnL0Taq019QQgPG/191daepp vh7cHAqK3IsgrX4eDQMUlcl2DR+yZcMeThjzRrDcVd4G0NSPVq6WGJd5y0Q4nP1g 3YRH2J2g6yLSQhAPJKhN4JFpgesD4u0PbfFdulhFFu02F1ukLGID+9skSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNkSFSFUZimvQmFuZP/0sQiM8XG7MB8GA1UdIwQY MBaAFKjkkY/H/ftzu6jPWNTLX+RJz4P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMt MDE1ZWE1MDE5NTIwLzEvMlJJVklWUm1LYTlDWVc1a19fU3hDSXp4Y2JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMtMDE1ZWE1MDE5NTIw LzEvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXM11MA0G CSqGSIb3DQEBCwUAA4IBAQBMnj458a6rRWpMXo/rHNweY8MfVOHpuu52NVDm1PoU C8pJqPxlkyaIZWcEW+xZe2Pttfh3IBc/gEPBWSLfQVoDTtZX29R77RGwrk3XPXWZ LMxKUynwlk7OdIjK9mxKNmkHi1pDZvm+R+S0XWjo6VqS8bYO2v1Syl7EKnBVesxa ZzrnitDOQaVF6T8bWNs84LPoQ2ow6NCiv3ttKCTqiDAuE0U+ojT9EMhtermfYhu1 Oe345CJWGD87bZ7L1pQRS4ixKJ6FMwC5wPqUvle93CqtM6KrOsWQfQdq0cnZF9pr Rr4/yJ+GYAoPdzDFv1d28sjk5UK0gdQ2lg0ELy+/SOlc -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:54 2026 by rpki-client