This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa File: 2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa (raw, json) Hash identifier: VpwFMCxf02N3s6qbKcrB7OwUNutAGhYjp7y72GSVaW4= Subject key identifier: D9:CB:3A:06:D6:85:57:71:F9:3D:75:3A:9D:93:80:F1:4B:BF:37:04 Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02 Certificate serial: 019B791140D47277B3031FEFE77F8309C823 Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.215.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:40:d4:72:77:b3:03:1f:ef:e7:7f:83:09:c8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9cb3a06d6855771f93d753a9d9380f14bbf3704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:08:37:41:4b:0d:d1:2d:01:7a:f5:fa:a3:ec: 44:85:22:4b:e3:5d:50:8a:a8:b9:05:24:79:bf:6d: c5:ef:26:9b:fd:71:d2:2e:05:3a:67:e9:41:4f:4d: e3:93:43:4e:b9:2e:13:e5:36:7d:41:28:41:ad:3e: d8:f1:94:68:87:ef:67:6d:41:55:49:0e:f8:fa:7a: 02:08:38:49:a0:b7:3f:5a:33:e3:ab:96:d5:59:a6: a6:43:dc:2b:14:57:d1:b0:10:e9:1a:fa:c3:a8:44: fd:6d:b5:4f:1f:f4:e5:2e:a3:44:d7:f8:45:73:04: bc:8c:9c:f6:06:40:cb:3b:ae:af:5c:4a:e6:12:ce: b6:12:97:87:f4:71:6a:44:03:88:7a:f2:b4:de:da: 4c:c3:23:92:55:b8:89:3f:fd:1d:db:2d:db:68:49: f6:14:ef:90:07:57:ea:b2:42:34:03:e2:0e:87:d3: 98:36:a6:81:3d:e1:ce:ae:26:4b:8c:91:c6:8a:10: 2d:df:34:c3:4f:74:e3:a9:2a:d6:22:78:ba:c3:54: ed:92:41:b4:ed:2c:e2:e4:e5:0c:60:66:28:0b:c6: ca:4e:85:0f:45:c8:3e:d9:47:82:3e:e6:38:c8:0c: 7c:e0:0b:24:41:bc:d5:90:5c:11:bd:2e:71:ff:8c: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CB:3A:06:D6:85:57:71:F9:3D:75:3A:9D:93:80:F1:4B:BF:37:04 X509v3 Authority Key Identifier: keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.115.0/24 Signature Algorithm: sha256WithRSAEncryption 77:2c:5b:c4:87:d0:cd:6c:3c:42:57:af:06:9b:32:85:4d:d1: ed:5c:77:95:62:f9:94:7d:51:7a:e0:13:d7:56:e4:b1:ea:60: ab:b6:24:8f:22:2d:12:18:97:8c:15:a5:78:7f:01:2e:6b:8f: cb:df:44:37:a3:00:a8:c7:84:42:6f:48:7d:78:8f:f8:4e:05: 05:4d:b5:90:13:ae:6a:8e:50:95:88:df:ea:18:cb:1c:51:0a: da:34:89:e1:d7:d0:f0:1d:ad:29:80:dd:0a:a1:43:f9:e6:e7: 79:ce:57:80:32:c8:5f:6a:7f:5d:f4:85:07:e1:33:4c:7d:43: 5c:9f:60:69:16:fd:c6:88:2a:da:ee:c1:36:49:92:94:26:6f: f5:c3:35:2f:0c:ad:32:09:e1:32:36:9c:53:a2:31:f2:7a:2c: 4b:7b:51:21:aa:1b:8f:e6:31:5e:3b:7d:a8:5b:8c:03:a7:2d: 05:46:ad:0d:c9:71:be:5d:a1:85:5a:12:5a:6d:5f:24:df:51: 4b:95:69:89:00:25:b9:0d:18:2e:6d:65:8e:73:7c:7b:47:08: 67:63:0f:e3:b4:5d:76:07:ff:a1:8d:fa:47:75:ef:e7:fa:25: ea:1f:db:ea:41:c0:6a:ff:a1:45:13:fd:be:19:ca:01:43:8d: 60:a2:3d:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUDUcnezAx/v53+DCcgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OGNkZGJmYzc2YmRhMjZhMDI5ZWE4MGM4OTg3Nzk4NzQ1 ZjFmMDIwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWNiM2EwNmQ2ODU1NzcxZjkzZDc1M2E5ZDkzODBmMTRiYmYzNzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gg3QUsN0S0BevX6o+xEhSJL411Q iqi5BSR5v23F7yab/XHSLgU6Z+lBT03jk0NOuS4T5TZ9QShBrT7Y8ZRoh+9nbUFV SQ74+noCCDhJoLc/WjPjq5bVWaamQ9wrFFfRsBDpGvrDqET9bbVPH/TlLqNE1/hF cwS8jJz2BkDLO66vXErmEs62EpeH9HFqRAOIevK03tpMwyOSVbiJP/0d2y3baEn2 FO+QB1fqskI0A+IOh9OYNqaBPeHOriZLjJHGihAt3zTDT3TjqSrWIni6w1TtkkG0 7Szi5OUMYGYoC8bKToUPRcg+2UeCPuY4yAx84AskQbzVkFwRvS5x/4yjKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNnLOgbWhVdx+T11Op2TgPFLvzcEMB8GA1UdIwQY MBaAFLeM3b/Ha9omoCnqgMiYd5h0Xx8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMGI4ZTktZTdkNC00MGNjLWFkNWYt M2M3NDEyMjBlYTAwLzEvMmNzNkJ0YUZWM0g1UFhVNm5aT0E4VXVfTndRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zMGI4ZTktZTdkNC00MGNjLWFkNWYtM2M3NDEyMjBlYTAw LzEvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuddzMA0G CSqGSIb3DQEBCwUAA4IBAQB3LFvEh9DNbDxCV68GmzKFTdHtXHeVYvmUfVF64BPX VuSx6mCrtiSPIi0SGJeMFaV4fwEua4/L30Q3owCox4RCb0h9eI/4TgUFTbWQE65q jlCViN/qGMscUQraNInh19DwHa0pgN0KoUP55ud5zleAMshfan9d9IUH4TNMfUNc n2BpFv3GiCra7sE2SZKUJm/1wzUvDK0yCeEyNpxTojHyeixLe1EhqhuP5jFeO32o W4wDpy0FRq0NyXG+XaGFWhJabV8k31FLlWmJACW5DRgubWWOc3x7RwhnYw/jtF12 B/+hjfpHde/n+iXqH9vqQcBq/6FFE/2+GcoBQ41goj2X -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:29 2026 by rpki-client