This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/2CFiWjPHpaVJlZUTDr9i3ngvO-8.roa File: 2CFiWjPHpaVJlZUTDr9i3ngvO-8.roa (raw, json) Hash identifier: o6E4nUSkugq5sP9EdIqz6vNORtXVkV1RTL2nfUIeUVE= Subject key identifier: D8:21:62:5A:33:C7:A5:A5:49:95:95:13:0E:BF:62:DE:78:2F:3B:EF Certificate issuer: /CN=d7ca53ae8442236757a78066e4e21733f758407a Certificate serial: 019B7C7FCE4BE41F84A6F369DBBACEF7D8C1 Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/2CFiWjPHpaVJlZUTDr9i3ngvO-8.roa Signing time: Fri 02 Jan 2026 02:18:29 +0000 ROA not before: Fri 02 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211941 IP address blocks: 185.197.236.0/22 maxlen: 24 185.197.236.0/24 maxlen: 24 185.197.237.0/24 maxlen: 24 2a0a:7fc0:4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ce:4b:e4:1f:84:a6:f3:69:db:ba:ce:f7:d8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a Validity Not Before: Jan 2 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d821625a33c7a5a5499595130ebf62de782f3bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:38:48:ac:3e:6e:19:dc:a3:77:3c:d1:65: f0:67:ed:13:a7:60:12:ce:38:5f:1d:58:1b:02:fe: 88:42:8f:a9:5a:97:ab:a0:87:64:53:1f:70:c4:42: 08:b6:a5:71:bb:3e:c4:13:31:6b:f9:01:34:f2:67: 86:c7:aa:c5:33:8a:ab:87:a7:80:11:31:ec:77:eb: 6b:be:31:6e:fa:52:a5:eb:a8:fb:fd:10:2e:b2:56: f6:a4:cd:5c:99:b3:3e:55:4e:8b:7d:57:e9:eb:a5: 4b:7e:0c:5d:6d:90:f6:27:24:30:37:a4:e8:b2:c9: a3:ba:95:a2:87:ad:e9:2f:51:5b:c9:b6:f6:96:0e: b9:47:52:6a:69:f3:00:22:d5:13:e2:37:a2:9a:6c: 9f:6c:38:6f:24:60:54:c9:d1:1b:b9:dc:28:3b:e0: e2:19:ed:71:54:1f:b3:07:a8:3f:a6:82:ed:42:da: 95:7c:55:d5:29:08:c3:95:65:42:5f:65:e1:da:4e: b4:ae:05:ff:23:99:b0:14:83:f5:27:00:6b:09:67: 20:77:94:bd:da:14:70:61:99:cc:6e:13:a6:17:b5: 09:4c:44:7c:b4:d2:a3:bb:69:23:a4:19:a8:08:44: 39:04:28:ba:38:b4:cc:72:b0:a5:51:25:c0:83:1d: 62:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:21:62:5A:33:C7:A5:A5:49:95:95:13:0E:BF:62:DE:78:2F:3B:EF X509v3 Authority Key Identifier: keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/2CFiWjPHpaVJlZUTDr9i3ngvO-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.236.0/22 IPv6: 2a0a:7fc0:4::/46 Signature Algorithm: sha256WithRSAEncryption a4:e1:d7:8d:dc:d1:83:c1:21:d3:00:66:e7:3b:56:90:a2:41: 77:73:b0:25:60:8a:09:3e:ae:09:dd:a8:ea:6d:49:39:86:8e: 1c:39:c1:3c:b4:c2:b9:c2:8f:aa:f7:8d:1c:14:66:fa:c4:f9: 5d:38:57:7d:6c:f2:fd:83:82:3c:e7:34:f3:39:20:64:24:9d: c9:5f:8a:e4:3d:df:9e:bb:7f:94:14:1f:43:ed:d6:be:a9:ec: 7b:8f:07:95:a6:fe:df:dc:90:02:ad:43:36:16:ad:df:86:cd: 49:65:bc:12:9b:87:2c:81:95:77:4a:8d:ae:c0:2c:43:25:7c: b9:51:39:bf:88:f6:5a:cf:86:8a:7a:30:3b:e5:ab:7b:de:f3: 65:da:a0:96:8f:fc:0b:af:c8:72:17:2c:32:88:53:a9:c8:93: cc:9a:4d:85:6d:05:d9:ad:3b:b0:e2:fc:a0:08:3c:13:6f:2c: 11:a3:6c:b4:1e:65:a7:f5:e2:da:1d:e3:9a:2e:5f:6e:36:55: d2:14:d7:c8:ea:28:5c:46:d1:6e:e7:f6:70:b1:18:0b:0e:91: 7f:6c:c7:5c:47:a4:02:3a:96:35:59:56:13:eb:71:af:e9:e3: f6:1c:79:42:cd:48:05:6e:39:e4:a3:58:65:c3:c2:7c:e3:1b: f6:35:78:ef -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8f85L5B+EpvNp27rO99jBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Y2E1M2FlODQ0MjIzNjc1N2E3ODA2NmU0ZTIxNzMzZjc1 ODQwN2EwHhcNMjYwMTAyMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODIxNjI1YTMzYzdhNWE1NDk5NTk1MTMwZWJmNjJkZTc4MmYzYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQU4SKw+bhnco3c80WXwZ+0Tp2AS zjhfHVgbAv6IQo+pWperoIdkUx9wxEIItqVxuz7EEzFr+QE08meGx6rFM4qrh6eA ETHsd+trvjFu+lKl66j7/RAuslb2pM1cmbM+VU6LfVfp66VLfgxdbZD2JyQwN6To ssmjupWih63pL1Fbybb2lg65R1JqafMAItUT4jeimmyfbDhvJGBUydEbudwoO+Di Ge1xVB+zB6g/poLtQtqVfFXVKQjDlWVCX2Xh2k60rgX/I5mwFIP1JwBrCWcgd5S9 2hRwYZnMbhOmF7UJTER8tNKju2kjpBmoCEQ5BCi6OLTMcrClUSXAgx1iLQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNghYlozx6WlSZWVEw6/Yt54LzvvMB8GA1UdIwQY MBaAFNfKU66EQiNnV6eAZuTiFzP3WEB6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWIt OGM0OTgwNzc1NzhmLzEvMkNGaVdqUEhwYVZKbFpVVERyOWkzbmd2Ty04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWItOGM0OTgwNzc1Nzhm LzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCucXsMA8E AgACMAkDBwIqCn/AAAQwDQYJKoZIhvcNAQELBQADggEBAKTh143c0YPBIdMAZuc7 VpCiQXdzsCVgigk+rgndqOptSTmGjhw5wTy0wrnCj6r3jRwUZvrE+V04V31s8v2D gjznNPM5IGQknclfiuQ93567f5QUH0Pt1r6p7HuPB5Wm/t/ckAKtQzYWrd+GzUll vBKbhyyBlXdKja7ALEMlfLlROb+I9lrPhop6MDvlq3ve82XaoJaP/AuvyHIXLDKI U6nIk8yaTYVtBdmtO7Di/KAIPBNvLBGjbLQeZaf14tod45ouX242VdIU18jqKFxG 0W7n9nCxGAsOkX9sx1xHpAI6ljVZVhPrca/p4/YceULNSAVuOeSjWGXDwnzjG/Y1 eO8= -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:42 2026 by rpki-client