This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/32be63-eb23-4505-abe0-e0f6e315f5b8/1/2dAucBc06xa-RSOd-82T94ffkQs.roa File: 2dAucBc06xa-RSOd-82T94ffkQs.roa (raw, json) Hash identifier: qBoTXVzjJUJQzxt6M9jxa+Sec2XF+7kt7/vpuSj2zhw= Subject key identifier: D9:D0:2E:70:17:34:EB:16:BE:45:23:9D:FB:CD:93:F7:87:DF:91:0B Certificate issuer: /CN=86790ecdb86ac6faa2bcc7eeb20d274cfa4650b0 Certificate serial: 019B7F15987EFE27FD8B6D6BF0ED6B6BD460 Authority key identifier: 86:79:0E:CD:B8:6A:C6:FA:A2:BC:C7:EE:B2:0D:27:4C:FA:46:50:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnkOzbhqxvqivMfusg0nTPpGULA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/32be63-eb23-4505-abe0-e0f6e315f5b8/1/2dAucBc06xa-RSOd-82T94ffkQs.roa Signing time: Fri 02 Jan 2026 14:21:20 +0000 ROA not before: Fri 02 Jan 2026 14:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201399 IP address blocks: 128.127.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/32be63-eb23-4505-abe0-e0f6e315f5b8/1/hnkOzbhqxvqivMfusg0nTPpGULA.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/32be63-eb23-4505-abe0-e0f6e315f5b8/1/hnkOzbhqxvqivMfusg0nTPpGULA.mft rsync://rpki.ripe.net/repository/DEFAULT/hnkOzbhqxvqivMfusg0nTPpGULA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:98:7e:fe:27:fd:8b:6d:6b:f0:ed:6b:6b:d4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86790ecdb86ac6faa2bcc7eeb20d274cfa4650b0 Validity Not Before: Jan 2 14:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9d02e701734eb16be45239dfbcd93f787df910b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:2a:b2:0e:cb:eb:aa:1e:50:fd:d2:83:21: 32:26:1d:56:d4:66:bb:3a:35:c3:fd:a8:6d:04:af: 49:ca:2c:7d:ec:25:07:1a:ca:3c:93:a9:19:f1:36: 96:d0:fa:79:72:2a:43:e6:80:7e:3a:8b:1d:5b:93: 62:3b:53:aa:ed:5c:7e:c4:91:56:b1:00:66:71:30: 75:36:9b:9a:ea:6d:63:5c:fa:c7:a9:ff:bb:2d:4e: 41:5b:0c:9b:2d:e1:ab:01:a1:08:e3:f5:dc:59:63: 67:cc:af:74:7e:6a:f1:02:f3:62:ca:a9:6a:33:74: 41:8d:03:1d:4d:86:29:a0:ff:7c:09:74:e0:fb:0a: a5:cd:47:70:3d:ed:d7:5a:63:66:01:ae:c6:c8:29: a2:c6:98:4a:29:e9:94:b4:cc:6b:e9:92:51:b3:d9: 69:a4:d0:f3:b0:94:3c:0b:e7:3a:b7:1b:d7:be:44: 86:a5:08:3b:3a:62:31:73:81:73:31:c4:4b:9e:9e: 3d:0b:0a:da:53:17:81:46:c5:c6:82:1e:4b:e5:e8: c8:d7:2c:8d:4d:a6:a4:eb:02:7f:c4:fe:cc:ba:6b: 4b:84:e7:54:10:53:6e:f0:6a:53:0a:83:fe:52:a8: 54:ff:ab:de:be:52:1e:a6:bc:66:9c:42:89:b8:d8: 29:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D0:2E:70:17:34:EB:16:BE:45:23:9D:FB:CD:93:F7:87:DF:91:0B X509v3 Authority Key Identifier: keyid:86:79:0E:CD:B8:6A:C6:FA:A2:BC:C7:EE:B2:0D:27:4C:FA:46:50:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnkOzbhqxvqivMfusg0nTPpGULA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/32be63-eb23-4505-abe0-e0f6e315f5b8/1/2dAucBc06xa-RSOd-82T94ffkQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/32be63-eb23-4505-abe0-e0f6e315f5b8/1/hnkOzbhqxvqivMfusg0nTPpGULA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.127.176.0/22 Signature Algorithm: sha256WithRSAEncryption 71:63:fa:d7:ba:a8:53:9f:c1:a4:32:6b:bd:91:b9:e7:c9:bf: b1:aa:07:a9:e3:04:da:b9:0c:b7:a0:af:7a:43:62:44:f5:ba: 36:27:c1:6a:c3:17:a2:14:3b:84:ae:d1:ef:23:60:95:4a:09: 84:14:26:c7:d1:a9:ee:f5:79:5e:6d:0b:4f:dd:c0:3c:28:59: 74:93:d8:e8:51:6e:68:74:cc:31:57:fb:fa:ac:e7:f1:f6:bd: 5e:e8:67:fe:87:c0:4b:0f:00:08:92:17:15:06:f8:0d:a0:f2: c3:ed:9f:75:ae:c7:74:ec:4d:9b:e2:f8:bf:39:40:e4:21:52: 68:e8:84:44:4b:92:0c:93:a9:3d:87:dd:27:e6:b8:ed:7b:38: 9f:84:e4:77:b7:c3:43:f2:9f:a5:f0:18:34:5b:0a:25:37:28: 9c:90:45:4d:65:1e:d8:72:0a:8e:eb:04:68:1d:a2:30:1f:98: f9:0b:e8:c1:06:35:47:52:2f:07:93:cf:4e:16:24:4b:63:a7: 5d:7f:ab:16:97:45:f4:0d:7e:d4:98:e1:ac:e1:60:d8:f7:b1: a0:64:90:04:11:82:b1:de:0d:3e:6e:78:d8:f8:f8:5c:f6:4b: 24:d9:5f:68:68:d1:2b:2e:7d:85:8e:9f:ac:70:75:d7:22:58: 84:b2:23:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZh+/if9i21r8O1ra9RgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NzkwZWNkYjg2YWM2ZmFhMmJjYzdlZWIyMGQyNzRjZmE0 NjUwYjAwHhcNMjYwMTAyMTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWQwMmU3MDE3MzRlYjE2YmU0NTIzOWRmYmNkOTNmNzg3ZGY5MTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPwqsg7L66oeUP3SgyEyJh1W1Ga7 OjXD/ahtBK9Jyix97CUHGso8k6kZ8TaW0Pp5cipD5oB+OosdW5NiO1Oq7Vx+xJFW sQBmcTB1Npua6m1jXPrHqf+7LU5BWwybLeGrAaEI4/XcWWNnzK90fmrxAvNiyqlq M3RBjQMdTYYpoP98CXTg+wqlzUdwPe3XWmNmAa7GyCmixphKKemUtMxr6ZJRs9lp pNDzsJQ8C+c6txvXvkSGpQg7OmIxc4FzMcRLnp49CwraUxeBRsXGgh5L5ejI1yyN Taak6wJ/xP7MumtLhOdUEFNu8GpTCoP+UqhU/6vevlIeprxmnEKJuNgpeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNnQLnAXNOsWvkUjnfvNk/eH35ELMB8GA1UdIwQY MBaAFIZ5Ds24asb6orzH7rINJ0z6RlCwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG5rT3piaHF4dnFpdk1mdXNnMG5UUHBHVUxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMmJlNjMtZWIyMy00NTA1LWFiZTAt ZTBmNmUzMTVmNWI4LzEvMmRBdWNCYzA2eGEtUlNPZC04MlQ5NGZma1FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zMmJlNjMtZWIyMy00NTA1LWFiZTAtZTBmNmUzMTVmNWI4 LzEvaG5rT3piaHF4dnFpdk1mdXNnMG5UUHBHVUxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgH+wMA0G CSqGSIb3DQEBCwUAA4IBAQBxY/rXuqhTn8GkMmu9kbnnyb+xqgep4wTauQy3oK96 Q2JE9bo2J8FqwxeiFDuErtHvI2CVSgmEFCbH0anu9XlebQtP3cA8KFl0k9joUW5o dMwxV/v6rOfx9r1e6Gf+h8BLDwAIkhcVBvgNoPLD7Z91rsd07E2b4vi/OUDkIVJo 6IRES5IMk6k9h90n5rjtezifhOR3t8ND8p+l8Bg0WwolNyickEVNZR7YcgqO6wRo HaIwH5j5C+jBBjVHUi8Hk89OFiRLY6ddf6sWl0X0DX7UmOGs4WDY97GgZJAEEYKx 3g0+bnjY+Phc9ksk2V9oaNErLn2Fjp+scHXXIliEsiOa -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:32 2026 by rpki-client