This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/h_2qOElNrBzAnf1LUZW2aWng-XM.roa File: h_2qOElNrBzAnf1LUZW2aWng-XM.roa (raw, json) Hash identifier: rICSl+rZfnDOtpaXQ1fWuEhsduvsyeMqtvQvV1DpKH8= Subject key identifier: 87:FD:AA:38:49:4D:AC:1C:C0:9D:FD:4B:51:95:B6:69:69:E0:F9:73 Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 019B7AC7B4E404BD4726C9835D79DB75435B Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/h_2qOElNrBzAnf1LUZW2aWng-XM.roa Signing time: Thu 01 Jan 2026 18:17:46 +0000 ROA not before: Thu 01 Jan 2026 18:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49581 IP address blocks: 209.131.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b4:e4:04:bd:47:26:c9:83:5d:79:db:75:43:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87fdaa38494dac1cc09dfd4b5195b66969e0f973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7d:18:a7:c7:e3:a0:b9:ed:01:20:fd:94:fb: a5:67:8a:96:53:fb:2d:9c:fb:f8:52:21:45:f7:03: 37:69:47:33:c4:71:13:b4:da:1e:23:31:fd:0f:c9: d3:c4:2e:c4:a6:da:70:63:c6:17:e1:f6:84:e1:81: c6:57:88:47:a4:66:69:0e:f9:46:cc:ce:68:87:84: 1c:f3:8e:fa:42:68:46:1f:b7:6d:27:31:98:20:26: 6f:6c:3e:61:b9:66:6b:55:2e:2c:f2:67:92:a3:c5: 78:b0:ae:0c:e5:15:1a:5a:ea:9f:09:eb:cf:22:d1: 22:67:b2:2f:42:67:88:94:f8:40:68:d0:ef:c7:bd: ff:a5:e8:87:4f:0f:fc:75:e6:f1:9a:89:1d:54:56: ef:b2:47:aa:1d:4e:9b:9e:47:ff:f4:60:ed:ea:bf: b8:5e:d7:ca:24:c6:51:40:b7:af:cb:18:29:5a:63: aa:06:19:91:fd:fa:64:5f:fb:fa:d3:f6:9c:c5:ac: e5:04:f6:ff:56:82:ec:6a:6f:2c:a8:19:64:09:fb: f0:11:c8:03:dd:35:a4:6d:61:b4:49:eb:91:cc:f9: 41:0f:97:3d:07:fa:6b:a8:b8:2d:03:0d:cd:2d:8a: b7:8c:24:83:84:29:8d:05:d9:d4:13:cb:a5:be:31: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FD:AA:38:49:4D:AC:1C:C0:9D:FD:4B:51:95:B6:69:69:E0:F9:73 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/h_2qOElNrBzAnf1LUZW2aWng-XM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.131.67.0/24 Signature Algorithm: sha256WithRSAEncryption 71:6c:ef:96:17:cc:77:49:a2:f7:51:ec:8d:74:8b:a2:62:7c: fc:c7:57:cc:a7:b8:0d:38:1a:c0:d7:ae:06:74:8f:34:b2:bf: 5e:c8:86:cd:0f:b7:b7:3d:1f:95:51:67:b3:69:1c:76:8a:13: 9c:d6:64:65:df:5b:88:45:cc:f8:ae:bd:4d:4a:aa:55:10:63: 7d:07:06:a9:bc:ba:de:6f:0a:22:2a:7d:f8:6a:2b:96:87:e0: 34:e6:63:24:fb:7f:da:6d:8d:63:3e:78:c4:8e:78:5f:5b:39: 17:17:f2:2f:54:cd:f4:42:2c:de:9f:23:f5:c4:f6:a9:6d:b7: 52:17:c8:e7:95:e4:3e:a7:65:38:fc:93:db:25:3b:d9:2f:14: 8b:8a:59:bb:e3:1b:1f:c2:d8:43:7c:24:e5:3e:2d:71:33:ff: 65:e0:fd:2e:89:d1:c6:ef:f1:e4:99:59:a9:12:74:c5:c5:4f: 5c:c5:04:26:9c:55:2d:60:5d:aa:1c:d2:6a:bd:ec:bd:ee:22: ab:4f:77:60:5b:9c:58:df:ca:77:a5:d3:a9:04:97:5a:ca:38: 80:65:41:e8:2c:18:94:46:d8:3b:f5:3c:e6:44:98:d9:66:82: 68:e6:9a:fa:a4:74:24:ea:b4:23:57:fc:d9:55:d5:1f:d1:fe: 30:9d:f5:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x7TkBL1HJsmDXXnbdUNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2ZkYWEzODQ5NGRhYzFjYzA5ZGZkNGI1MTk1YjY2OTY5ZTBmOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA230Yp8fjoLntASD9lPulZ4qWU/st nPv4UiFF9wM3aUczxHETtNoeIzH9D8nTxC7EptpwY8YX4faE4YHGV4hHpGZpDvlG zM5oh4Qc8476QmhGH7dtJzGYICZvbD5huWZrVS4s8meSo8V4sK4M5RUaWuqfCevP ItEiZ7IvQmeIlPhAaNDvx73/peiHTw/8debxmokdVFbvskeqHU6bnkf/9GDt6r+4 XtfKJMZRQLevyxgpWmOqBhmR/fpkX/v60/acxazlBPb/VoLsam8sqBlkCfvwEcgD 3TWkbWG0SeuRzPlBD5c9B/prqLgtAw3NLYq3jCSDhCmNBdnUE8ulvjEqbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIf9qjhJTawcwJ39S1GVtmlp4PlzMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvaF8ycU9FbE5yQnpBbmYxTFVaVzJhV25nLVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YNDMA0G CSqGSIb3DQEBCwUAA4IBAQBxbO+WF8x3SaL3UeyNdIuiYnz8x1fMp7gNOBrA164G dI80sr9eyIbND7e3PR+VUWezaRx2ihOc1mRl31uIRcz4rr1NSqpVEGN9BwapvLre bwoiKn34aiuWh+A05mMk+3/abY1jPnjEjnhfWzkXF/IvVM30QizenyP1xPapbbdS F8jnleQ+p2U4/JPbJTvZLxSLilm74xsfwthDfCTlPi1xM/9l4P0uidHG7/HkmVmp EnTFxU9cxQQmnFUtYF2qHNJqvey97iKrT3dgW5xY38p3pdOpBJdayjiAZUHoLBiU Rtg79TzmRJjZZoJo5pr6pHQk6rQjV/zZVdUf0f4wnfWw -----END CERTIFICATE-----Generated at Wed Jan 21 09:13:54 2026 by rpki-client