This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/2TejQ9qdrUejplvg2pRdV5ySwCU.roa File: 2TejQ9qdrUejplvg2pRdV5ySwCU.roa (raw, json) Hash identifier: z2B5UlkMWFYxdzwShhvSwDpIukaDaNgAut2hvjv+b1A= Subject key identifier: D9:37:A3:43:DA:9D:AD:47:A3:A6:5B:E0:DA:94:5D:57:9C:92:C0:25 Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98 Certificate serial: 019B79ECD43691C85E3BCD128876CE9F5753 Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/2TejQ9qdrUejplvg2pRdV5ySwCU.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212763 IP address blocks: 185.165.0.0/22 maxlen: 24 185.165.0.0/23 maxlen: 23 185.165.0.0/24 maxlen: 24 185.165.1.0/24 maxlen: 24 185.165.2.0/23 maxlen: 23 185.165.2.0/24 maxlen: 24 185.165.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d4:36:91:c8:5e:3b:cd:12:88:76:ce:9f:57:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d937a343da9dad47a3a65be0da945d579c92c025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:f4:21:bc:9e:a7:01:dd:2c:c5:52:33:19: 23:c2:66:69:96:0b:9f:c6:75:38:12:90:44:13:46: 25:de:3a:1b:35:7e:d3:98:f2:b1:3b:55:cd:8a:fa: 24:bd:c1:f1:6a:7f:60:17:e0:17:96:44:bf:f7:fd: e0:bc:b0:34:6a:68:41:0b:67:c7:53:de:08:1d:47: 22:50:5d:99:6c:7d:f2:bf:7f:d1:66:78:41:ae:01: 54:72:8c:5f:88:b1:4b:5f:04:73:49:28:74:68:3b: 63:e5:bf:e6:2a:27:2e:d7:7f:47:f0:b4:77:6f:72: 8d:a2:13:ea:92:f7:eb:33:43:d2:3c:1a:6e:94:6a: 23:f1:02:57:9d:62:b2:a0:02:b3:32:ac:d2:36:68: c4:8e:55:fc:b3:2e:82:72:ec:95:0e:07:16:3d:15: 1b:b6:08:f0:8a:65:66:7a:2f:bb:aa:b2:64:d5:73: 01:dd:f1:83:4e:07:09:7d:9f:2d:74:66:ca:e1:27: c0:72:34:b6:e9:d3:04:d0:45:1c:8a:5c:27:ce:4a: df:22:3c:5f:68:3c:cf:bd:3c:eb:a5:34:cf:07:ec: 88:4d:3d:96:2f:99:b7:23:63:44:27:f7:60:50:4d: d7:74:15:2a:fc:55:fa:08:20:b9:ad:a7:e6:ee:6e: 36:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:37:A3:43:DA:9D:AD:47:A3:A6:5B:E0:DA:94:5D:57:9C:92:C0:25 X509v3 Authority Key Identifier: keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/2TejQ9qdrUejplvg2pRdV5ySwCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.0.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:71:81:76:a2:4e:f9:f3:35:a3:23:13:dc:df:e3:49:4a:29: c6:ec:b6:59:5b:a3:5c:20:31:53:11:99:18:30:9f:fd:b9:e2: f0:78:58:03:98:ce:20:ac:8a:62:ed:f6:5b:a0:fc:b8:c0:10: ca:e7:f0:3b:62:ef:4d:4c:dc:75:1d:9f:47:4d:f7:e2:f8:86: 22:2f:f2:82:45:95:ba:64:5b:51:94:6b:c7:c1:ef:28:52:7c: 11:f7:c4:d7:d4:05:a8:f0:43:c9:b6:75:a4:88:75:06:07:05: a8:13:0f:68:63:62:91:4d:e8:1d:3f:23:9e:17:b7:92:a7:8c: c7:b5:8a:3f:9e:06:f2:06:cc:dd:a7:30:fd:94:5c:fb:24:a3: 4f:e4:87:2e:4e:c7:08:2d:cc:42:db:f2:54:fb:fe:7c:b6:ff: 21:a2:c8:06:64:3a:98:38:bf:8f:13:67:dd:9e:84:55:79:7f: 2c:87:dd:ad:a9:f5:41:e8:01:3a:e0:d2:6c:9b:e7:eb:51:95: 3e:7d:8f:ce:49:ad:48:17:91:03:87:0b:16:69:88:81:8c:05: 91:16:47:2e:88:2e:ad:7d:70:e4:61:40:f0:75:9e:ac:89:01: ea:3e:65:f6:b6:7a:21:d2:33:01:51:bd:9a:a5:a8:c8:a0:e4: 46:c4:55:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57NQ2kcheO80SiHbOn1dTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMGM3MGQzNmUwMTNiMDdlNGU2ZDhlYzNlYTRlZTQxM2I0 YWFhOTgwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTM3YTM0M2RhOWRhZDQ3YTNhNjViZTBkYTk0NWQ1NzljOTJjMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuH0IbyepwHdLMVSMxkjwmZplguf xnU4EpBEE0Yl3jobNX7TmPKxO1XNivokvcHxan9gF+AXlkS/9/3gvLA0amhBC2fH U94IHUciUF2ZbH3yv3/RZnhBrgFUcoxfiLFLXwRzSSh0aDtj5b/mKicu139H8LR3 b3KNohPqkvfrM0PSPBpulGoj8QJXnWKyoAKzMqzSNmjEjlX8sy6CcuyVDgcWPRUb tgjwimVmei+7qrJk1XMB3fGDTgcJfZ8tdGbK4SfAcjS26dME0EUcilwnzkrfIjxf aDzPvTzrpTTPB+yITT2WL5m3I2NEJ/dgUE3XdBUq/FX6CCC5rafm7m42gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNk3o0Pana1Ho6Zb4NqUXVecksAlMB8GA1UdIwQY MBaAFCAMcNNuATsH5ObY7D6k7kE7SqqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUF4dzAyNEJPd2ZrNXRqc1BxVHVRVHRLcXBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kNWVlMGQtNDc1Zi00MWQ3LTljMjUt MTU4MDNmZmIxNzQ2LzEvMlRlalE5cWRyVWVqcGx2ZzJwUmRWNXlTd0NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kNWVlMGQtNDc1Zi00MWQ3LTljMjUtMTU4MDNmZmIxNzQ2 LzEvSUF4dzAyNEJPd2ZrNXRqc1BxVHVRVHRLcXBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaUAMA0G CSqGSIb3DQEBCwUAA4IBAQCdcYF2ok758zWjIxPc3+NJSinG7LZZW6NcIDFTEZkY MJ/9ueLweFgDmM4grIpi7fZboPy4wBDK5/A7Yu9NTNx1HZ9HTffi+IYiL/KCRZW6 ZFtRlGvHwe8oUnwR98TX1AWo8EPJtnWkiHUGBwWoEw9oY2KRTegdPyOeF7eSp4zH tYo/ngbyBszdpzD9lFz7JKNP5IcuTscILcxC2/JU+/58tv8hosgGZDqYOL+PE2fd noRVeX8sh92tqfVB6AE64NJsm+frUZU+fY/OSa1IF5EDhwsWaYiBjAWRFkcuiC6t fXDkYUDwdZ6siQHqPmX2tnoh0jMBUb2apajIoORGxFXV -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:57 2026 by rpki-client