This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2a-q69vSHulHafGM8PmVUSn4N-o.roa File: 2a-q69vSHulHafGM8PmVUSn4N-o.roa (raw, json) Hash identifier: mtL4zbNB+tPhZJl8Rb1GulgvlHyNtS4gdQXJjpRDlDQ= Subject key identifier: D9:AF:AA:EB:DB:D2:1E:E9:47:69:F1:8C:F0:F9:95:51:29:F8:37:EA Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D7652F4E1108DEBFE545D5ED59FCD Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2a-q69vSHulHafGM8PmVUSn4N-o.roa Signing time: Fri 02 Jan 2026 06:20:35 +0000 ROA not before: Fri 02 Jan 2026 06:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215232 IP address blocks: 185.238.191.0/24 maxlen: 24 2a0e:b107:2693::/48 maxlen: 48 2a0e:b107:27de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:76:52:f4:e1:10:8d:eb:fe:54:5d:5e:d5:9f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9afaaebdbd21ee94769f18cf0f9955129f837ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c3:9d:56:f4:1b:a1:b9:d5:ec:30:87:b5:e2: a5:68:e0:b5:22:63:d1:1c:23:ba:56:b4:99:fb:c7: a9:19:77:42:e3:f5:8c:e7:35:33:b9:a4:d4:fe:b4: ae:a4:8c:0c:fd:25:c4:d2:87:42:93:c6:eb:bd:c3: cb:04:7c:1d:9b:a3:e1:34:59:46:d4:37:98:80:a1: 07:c2:92:34:40:6f:eb:72:bf:64:0b:87:d6:9b:cd: ea:1a:3f:2b:d0:3c:b4:d2:b0:5f:60:bd:5c:74:b0: bd:c1:0e:fb:29:f6:52:1c:46:a1:b6:4e:05:1c:c6: f8:24:cd:80:ed:e5:af:6f:c8:04:50:b6:3d:5a:f3: 0f:45:6d:c5:15:c6:3f:10:0e:fb:92:32:64:70:68: 9b:93:c8:9f:a3:cc:22:44:7e:1e:f4:e5:d4:c6:ac: 40:1b:67:7f:54:ce:3f:48:5b:a2:82:15:58:4b:1e: 07:75:81:22:60:68:59:62:ac:91:44:5e:2a:3c:c7: 72:aa:92:ba:3f:87:3b:d8:09:56:b1:9e:63:29:54: 54:97:a2:06:2a:59:ea:e1:50:7f:e6:fe:a8:e0:ae: 37:df:81:d2:95:f3:a7:ed:89:ec:ad:b9:ec:44:99: 81:2f:b0:5c:e1:e3:b5:3c:b6:e6:c6:22:50:d5:9e: 3a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AF:AA:EB:DB:D2:1E:E9:47:69:F1:8C:F0:F9:95:51:29:F8:37:EA X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2a-q69vSHulHafGM8PmVUSn4N-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.191.0/24 IPv6: 2a0e:b107:2693::/48 2a0e:b107:27de::/48 Signature Algorithm: sha256WithRSAEncryption 95:47:ec:a0:b9:30:68:dd:8a:2d:7d:06:69:00:a1:16:12:32: 60:65:58:31:a5:c2:9e:f0:b2:42:90:9d:14:5d:01:bb:4a:32: b8:89:42:c5:4e:db:18:a7:d7:cd:00:35:16:d7:fa:4f:9f:d3: da:f9:8b:77:7f:cb:49:76:42:96:91:b5:05:e8:f4:5d:96:ef: e6:56:5a:d4:a0:0b:b5:5c:32:2b:f2:37:6b:fc:a0:52:ef:92: 09:c1:94:9b:7c:2f:6a:d7:b9:2b:87:e4:0a:52:49:96:ed:af: 2e:b1:7a:9e:8e:c8:2c:01:4d:b8:71:2e:7a:90:b4:47:cf:46: c6:78:03:70:1d:6f:3e:93:ca:6a:8c:a9:18:d9:7d:9b:ba:f2: 06:3f:2f:75:90:24:fe:f4:a8:32:21:af:db:04:a4:a8:5a:16: ee:22:4d:46:09:d2:03:88:ab:1f:ff:4d:7f:d2:a2:e8:4e:bc: ca:fd:6f:99:81:af:0e:6f:d2:ac:30:42:a1:42:17:86:b4:8f: 55:e2:58:39:1c:9c:12:73:5d:80:5b:0a:ff:e1:b9:7f:5a:2c: c5:47:d7:b7:c6:a9:3d:d5:ad:98:fe:11:3c:3c:88:7c:0b:27: a1:6b:23:77:2f:12:12:04:cf:9f:9f:f6:a7:b6:3d:dc:40:67: f9:a6:e4:ff -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9XXZS9OEQjev+VF1e1Z/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWFmYWFlYmRiZDIxZWU5NDc2OWYxOGNmMGY5OTU1MTI5ZjgzN2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMOdVvQbobnV7DCHteKlaOC1ImPR HCO6VrSZ+8epGXdC4/WM5zUzuaTU/rSupIwM/SXE0odCk8brvcPLBHwdm6PhNFlG 1DeYgKEHwpI0QG/rcr9kC4fWm83qGj8r0Dy00rBfYL1cdLC9wQ77KfZSHEahtk4F HMb4JM2A7eWvb8gEULY9WvMPRW3FFcY/EA77kjJkcGibk8ifo8wiRH4e9OXUxqxA G2d/VM4/SFuighVYSx4HdYEiYGhZYqyRRF4qPMdyqpK6P4c72AlWsZ5jKVRUl6IG Klnq4VB/5v6o4K4334HSlfOn7YnsrbnsRJmBL7Bc4eO1PLbmxiJQ1Z46EwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNmvquvb0h7pR2nxjPD5lVEp+DfqMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMmEtcTY5dlNIdWxIYWZHTThQbVZVU240Ti1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAue6/MBgE AgACMBIDBwAqDrEHJpMDBwAqDrEHJ94wDQYJKoZIhvcNAQELBQADggEBAJVH7KC5 MGjdii19BmkAoRYSMmBlWDGlwp7wskKQnRRdAbtKMriJQsVO2xin180ANRbX+k+f 09r5i3d/y0l2QpaRtQXo9F2W7+ZWWtSgC7VcMivyN2v8oFLvkgnBlJt8L2rXuSuH 5ApSSZbtry6xep6OyCwBTbhxLnqQtEfPRsZ4A3Adbz6TymqMqRjZfZu68gY/L3WQ JP70qDIhr9sEpKhaFu4iTUYJ0gOIqx//TX/SouhOvMr9b5mBrw5v0qwwQqFCF4a0 j1XiWDkcnBJzXYBbCv/huX9aLMVH17fGqT3VrZj+ETw8iHwLJ6FrI3cvEhIEz5+f 9qe2PdxAZ/mm5P8= -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:06 2026 by rpki-client