This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2lv9helKrNfPc3TB_-Dn0Zts7o4.roa File: 2lv9helKrNfPc3TB_-Dn0Zts7o4.roa (raw, json) Hash identifier: 3lbss2o2h4CuATLyv+l9XLy36OCfQLbW8RjB8nT2FBA= Subject key identifier: DA:5B:FD:85:E9:4A:AC:D7:CF:73:74:C1:FF:E0:E7:D1:9B:6C:EE:8E Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38ACC7A5FAE5D16BCEFF523F9C221C Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2lv9helKrNfPc3TB_-Dn0Zts7o4.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58325 IP address blocks: 77.47.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ac:c7:a5:fa:e5:d1:6b:ce:ff:52:3f:9c:22:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da5bfd85e94aacd7cf7374c1ffe0e7d19b6cee8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:30:57:c5:e6:fa:ce:d4:d7:e0:a2:90:2c: 0b:7f:e1:59:6f:97:e2:fb:10:2c:d5:ee:fd:31:a8: 4a:be:32:40:ca:c0:d9:72:5b:2f:e8:57:60:08:e9: d4:27:29:52:aa:7b:67:c1:b8:af:52:35:7b:01:57: ef:3f:9e:96:6d:cc:cb:3b:2f:43:13:96:f6:1f:34: 79:bb:da:2b:54:25:28:35:20:e3:c0:08:76:ac:15: c3:14:6e:a9:19:2a:e2:19:85:f2:86:53:36:c1:11: e9:65:fa:ca:a1:45:2f:b3:da:f3:4e:00:ad:33:63: f1:8e:f1:95:fc:be:9b:ee:d3:99:dc:d6:35:00:ea: 98:40:a7:91:5f:12:3e:8a:18:e0:42:aa:78:4a:5e: d2:a4:50:1f:2f:cc:ce:c8:57:e4:10:7d:59:76:e5: a7:34:1b:b6:98:f0:e6:28:90:5a:10:b8:29:b4:78: 41:74:7e:f4:22:33:6c:98:e2:f3:65:39:4b:d9:a9: 48:b2:6d:95:96:0a:c3:42:79:fa:ee:13:d3:49:87: 48:49:63:e1:ae:3e:b2:d2:5e:73:e4:3b:c6:1d:e2: 39:76:c9:c1:9b:54:e3:d3:e1:ce:4e:ac:68:d2:32: 51:61:8d:dd:1a:f7:b9:ef:df:01:a5:b2:09:a9:87: 29:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5B:FD:85:E9:4A:AC:D7:CF:73:74:C1:FF:E0:E7:D1:9B:6C:EE:8E X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2lv9helKrNfPc3TB_-Dn0Zts7o4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.47.252.0/22 Signature Algorithm: sha256WithRSAEncryption b7:38:6b:b4:13:f9:91:aa:88:3e:de:75:d3:13:a8:11:cc:0a: 96:1c:ed:d3:3b:0e:17:b1:f3:94:10:bf:45:68:46:20:5f:8b: af:5a:b1:0e:65:06:b7:d3:da:6c:d4:1c:1d:74:60:36:d6:66: 56:db:a7:18:2a:85:64:60:24:1c:21:15:ce:9c:20:c8:5e:3b: 4c:27:9d:21:be:65:9b:ff:43:a6:10:5e:9d:18:e5:a0:b6:22: 90:0f:46:7f:d3:03:96:74:21:56:c0:aa:0a:da:a4:fc:59:24: 3e:92:0e:4c:ec:f7:af:45:02:f8:c0:fa:2c:11:65:92:4b:c1: 23:57:68:a5:63:2c:58:01:41:ff:d7:77:15:c1:67:78:0d:9c: d5:76:97:7b:fe:46:59:4f:30:e2:0f:cc:ac:ba:42:9a:7e:10: 38:16:02:0a:49:d1:75:62:52:f6:a5:24:89:87:1b:44:99:1b: 61:6b:a4:55:d3:73:11:29:3e:79:25:43:15:d8:6a:62:d6:a0: c7:73:f7:f3:35:c5:e5:92:ba:99:01:38:a0:94:a3:1f:bc:1a: 2a:70:36:d7:19:80:ff:82:64:d9:09:e4:8d:6c:7b:da:55:09: e8:86:df:a5:71:02:db:36:e0:19:33:e4:8d:b0:24:98:89:04: 2b:3c:d0:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKzHpfrl0WvO/1I/nCIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTViZmQ4NWU5NGFhY2Q3Y2Y3Mzc0YzFmZmUwZTdkMTliNmNlZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4QwV8Xm+s7U1+CikCwLf+FZb5fi +xAs1e79MahKvjJAysDZclsv6FdgCOnUJylSqntnwbivUjV7AVfvP56WbczLOy9D E5b2HzR5u9orVCUoNSDjwAh2rBXDFG6pGSriGYXyhlM2wRHpZfrKoUUvs9rzTgCt M2PxjvGV/L6b7tOZ3NY1AOqYQKeRXxI+ihjgQqp4Sl7SpFAfL8zOyFfkEH1ZduWn NBu2mPDmKJBaELgptHhBdH70IjNsmOLzZTlL2alIsm2VlgrDQnn67hPTSYdISWPh rj6y0l5z5DvGHeI5dsnBm1Tj0+HOTqxo0jJRYY3dGve5798BpbIJqYcppQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNpb/YXpSqzXz3N0wf/g59GbbO6OMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvMmx2OWhlbEtyTmZQYzNUQl8tRG4wWnRzN280LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTS/8MA0G CSqGSIb3DQEBCwUAA4IBAQC3OGu0E/mRqog+3nXTE6gRzAqWHO3TOw4XsfOUEL9F aEYgX4uvWrEOZQa309ps1BwddGA21mZW26cYKoVkYCQcIRXOnCDIXjtMJ50hvmWb /0OmEF6dGOWgtiKQD0Z/0wOWdCFWwKoK2qT8WSQ+kg5M7PevRQL4wPosEWWSS8Ej V2ilYyxYAUH/13cVwWd4DZzVdpd7/kZZTzDiD8ysukKafhA4FgIKSdF1YlL2pSSJ hxtEmRtha6RV03MRKT55JUMV2Gpi1qDHc/fzNcXlkrqZATiglKMfvBoqcDbXGYD/ gmTZCeSNbHvaVQnoht+lcQLbNuAZM+SNsCSYiQQrPNAW -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:27 2026 by rpki-client