This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/2gL5kS5knkNfeejSTgCsY7lVOJg.roa File: 2gL5kS5knkNfeejSTgCsY7lVOJg.roa (raw, json) Hash identifier: M7tZEiNHhGn+2BXSnDrAoQUr1eF6UodCnHxeC7Oeok4= Subject key identifier: DA:02:F9:91:2E:64:9E:43:5F:79:E8:D2:4E:00:AC:63:B9:55:38:98 Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd Certificate serial: 019B775929112B21BB57D6872DD9B12B0843 Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/2gL5kS5knkNfeejSTgCsY7lVOJg.roa Signing time: Thu 01 Jan 2026 02:18:10 +0000 ROA not before: Thu 01 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209659 IP address blocks: 94.142.251.0/24 maxlen: 24 2a12:5bc0::/32 maxlen: 48 2a12:5bc1::/48 maxlen: 48 2a12:5bc2::/48 maxlen: 48 2a12:5bc3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:29:11:2b:21:bb:57:d6:87:2d:d9:b1:2b:08:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da02f9912e649e435f79e8d24e00ac63b9553898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:68:7d:ec:99:47:21:ea:ae:93:50:63:69: 3f:50:0e:2e:e1:fd:6e:cc:96:ec:e4:54:cf:68:09: 42:e8:6c:50:4f:06:f5:a2:52:ee:5a:f8:de:7c:a5: eb:d9:bd:3f:1a:8f:8c:61:3f:34:64:10:0d:45:fc: 6b:22:dc:ae:72:50:d3:14:9e:5b:1f:60:3f:0b:5e: ca:c1:33:f6:f4:53:27:19:1c:48:56:3a:bd:1e:6a: 22:f0:3e:db:ad:a0:35:c7:c2:da:84:fd:a6:aa:9d: 88:8f:bf:94:e9:7a:6d:a1:fc:a1:55:6c:c9:cf:0c: 65:df:a9:2e:61:7e:96:09:bf:e8:e3:b6:13:58:49: 2a:83:ac:3a:fc:27:6b:51:5d:bd:f6:f1:d1:7f:2a: e9:a7:b6:af:cb:4e:06:24:dd:13:80:02:9b:26:0d: 70:af:ef:b5:56:9d:38:99:09:fb:06:24:82:5e:c8: 3b:18:5d:e3:17:74:16:15:1b:3d:0a:d9:e1:5a:26: 8d:9b:87:a9:3c:38:b7:6b:5a:80:5c:b2:c4:de:fe: cb:0c:86:5d:0d:0f:15:51:7b:2f:f7:50:8e:6c:d5: bd:b8:e5:ac:14:db:8d:da:c3:8a:2b:c9:73:54:c8: 4c:dc:31:65:91:85:fc:66:06:b4:27:fe:81:b0:27: 79:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:02:F9:91:2E:64:9E:43:5F:79:E8:D2:4E:00:AC:63:B9:55:38:98 X509v3 Authority Key Identifier: keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/2gL5kS5knkNfeejSTgCsY7lVOJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.251.0/24 IPv6: 2a12:5bc0::-2a12:5bc1:0:ffff:ffff:ffff:ffff:ffff 2a12:5bc2::/48 2a12:5bc3::/48 Signature Algorithm: sha256WithRSAEncryption 42:49:df:6d:57:c2:a9:c8:08:64:67:fe:53:b1:2e:3b:b4:c4: 28:91:fb:ba:65:0e:93:56:68:76:d6:63:96:cd:2f:dc:5b:7b: 79:b3:c6:93:93:51:f0:d8:04:05:a6:73:97:2a:68:ab:cb:b7: fb:f7:83:a1:4f:39:19:59:7e:ff:ac:13:f0:c9:07:17:47:61: 1e:5b:f4:1a:d5:59:b6:72:07:b6:70:f5:d0:be:26:a5:81:a2: 8b:69:e2:e9:c8:81:11:08:10:bf:8d:22:25:df:59:3f:40:c1: fd:28:b5:b2:6e:df:f2:f7:52:c6:45:f4:bb:4c:61:88:72:46: c4:f4:37:63:e3:35:e7:2e:33:cf:53:9c:32:36:c0:5d:a6:37: 2b:a7:f2:da:49:48:d4:75:c2:f9:7f:ed:cb:12:8c:65:4f:ff: 66:e0:54:5e:aa:91:39:d0:1d:55:ba:95:df:16:6e:b1:e4:65: c6:19:7f:fa:b2:f7:54:87:ef:c4:75:7d:ec:9a:38:1d:20:83: d6:9f:2b:89:b6:58:25:d4:ab:7f:62:50:b5:ee:b0:4a:28:31: a7:be:86:e2:bc:7e:a8:42:92:e2:60:41:51:5d:76:bf:6a:56: 6b:4c:a9:97:d6:e2:3e:6c:dc:5d:11:02:54:f7:cb:af:71:25: f6:bd:8e:5d -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt3WSkRKyG7V9aHLdmxKwhDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMTZmMGU5YWZmMzlhOGIxOTZjNDgzZTA4NWRlNzlmMjQ2 ZDlmZGQwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTAyZjk5MTJlNjQ5ZTQzNWY3OWU4ZDI0ZTAwYWM2M2I5NTUzODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4BofeyZRyHqrpNQY2k/UA4u4f1u zJbs5FTPaAlC6GxQTwb1olLuWvjefKXr2b0/Go+MYT80ZBANRfxrItyuclDTFJ5b H2A/C17KwTP29FMnGRxIVjq9Hmoi8D7braA1x8LahP2mqp2Ij7+U6XptofyhVWzJ zwxl36kuYX6WCb/o47YTWEkqg6w6/CdrUV299vHRfyrpp7avy04GJN0TgAKbJg1w r++1Vp04mQn7BiSCXsg7GF3jF3QWFRs9CtnhWiaNm4epPDi3a1qAXLLE3v7LDIZd DQ8VUXsv91CObNW9uOWsFNuN2sOKK8lzVMhM3DFlkYX8Zga0J/6BsCd5QQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFNoC+ZEuZJ5DX3no0k4ArGO5VTiYMB8GA1UdIwQY MBaAFEEW8Omv85qLGWxIPghd558kbZ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAt MjQwZDFmZmQwOWI4LzEvMmdMNWtTNWtua05mZWVqU1RnQ3NZN2xWT0pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAtMjQwZDFmZmQwOWI4 LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAXo77MCoE AgACMCQwEAMFBioSW8ADBwAqElvBAAADBwAqElvCAAADBwAqElvDAAAwDQYJKoZI hvcNAQELBQADggEBAEJJ321XwqnICGRn/lOxLju0xCiR+7plDpNWaHbWY5bNL9xb e3mzxpOTUfDYBAWmc5cqaKvLt/v3g6FPORlZfv+sE/DJBxdHYR5b9BrVWbZyB7Zw 9dC+JqWBootp4unIgREIEL+NIiXfWT9Awf0otbJu3/L3UsZF9LtMYYhyRsT0N2Pj NecuM89TnDI2wF2mNyun8tpJSNR1wvl/7csSjGVP/2bgVF6qkTnQHVW6ld8WbrHk ZcYZf/qy91SH78R1feyaOB0gg9afK4m2WCXUq39iULXusEooMae+huK8fqhCkuJg QVFddr9qVmtMqZfW4j5s3F0RAlT3y69xJfa9jl0= -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:55 2026 by rpki-client