This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/2x0cxx1yYzUrlMoLyh8t1vo0qDw.roa File: 2x0cxx1yYzUrlMoLyh8t1vo0qDw.roa (raw, json) Hash identifier: alzzm6xLDInbHwoysdg8AoFEYrkHfMDDElcExthLhbc= Subject key identifier: DB:1D:1C:C7:1D:72:63:35:2B:94:CA:0B:CA:1F:2D:D6:FA:34:A8:3C Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37DF91EE17B9C34F8EAAC30A2ED42D Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/2x0cxx1yYzUrlMoLyh8t1vo0qDw.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51202 IP address blocks: 31.25.11.0/24 maxlen: 24 62.169.152.0/24 maxlen: 24 89.36.32.0/24 maxlen: 24 89.36.35.0/24 maxlen: 24 109.175.211.0/24 maxlen: 24 185.121.132.0/24 maxlen: 24 185.121.133.0/24 maxlen: 24 185.121.135.0/24 maxlen: 24 185.144.70.0/24 maxlen: 24 185.144.71.0/24 maxlen: 24 212.232.18.0/24 maxlen: 24 212.232.19.0/24 maxlen: 24 2a0c:2500::/29 maxlen: 48 2a0c:2501::/32 maxlen: 48 2a0c:2502::/32 maxlen: 48 2a0c:2503::/32 maxlen: 48 2a14:6781::/32 maxlen: 48 2a14:6781:305::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:df:91:ee:17:b9:c3:4f:8e:aa:c3:0a:2e:d4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db1d1cc71d7263352b94ca0bca1f2dd6fa34a83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:45:6b:1a:30:c8:e5:ce:68:13:e5:f9:bc: 36:23:96:32:47:5d:da:43:0a:5f:40:78:3d:f1:78: 35:dd:60:f9:a7:4d:f2:ca:16:50:05:26:c5:fb:65: ce:f3:68:19:ef:e6:b5:04:5b:0c:ac:1d:69:fc:6d: 92:56:e9:a3:cf:47:51:63:6c:2a:04:a7:2d:fe:ce: 97:fa:f7:45:90:46:04:79:6c:d2:57:11:69:bc:ba: 71:a7:ab:5a:04:f1:f8:75:99:a0:33:8f:6d:78:fb: 11:a8:94:19:1c:30:86:30:5b:fa:31:49:32:8f:3f: b7:68:dd:7b:8f:92:07:20:82:ce:61:62:95:be:b8: b7:22:16:7c:0b:50:26:1d:1c:3f:ae:74:4d:ff:8c: 71:29:b7:da:75:1d:88:44:70:82:79:58:5e:c2:90: 35:87:ad:34:54:dc:f7:d2:b4:ba:74:eb:c8:e8:17: b0:bf:d1:86:92:f1:0e:30:76:ad:d2:01:09:59:72: 48:59:cc:9f:ce:1c:dc:49:e7:66:c4:1f:71:8c:60: 0f:0e:da:1f:e7:9c:10:f3:93:a8:f6:50:c2:7f:f2: 84:b9:88:24:ea:fb:a8:0f:60:37:7e:80:d4:c5:b0: 31:a2:a7:63:33:d6:28:8e:9d:fb:29:0b:64:51:a2: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1D:1C:C7:1D:72:63:35:2B:94:CA:0B:CA:1F:2D:D6:FA:34:A8:3C X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/2x0cxx1yYzUrlMoLyh8t1vo0qDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.11.0/24 62.169.152.0/24 89.36.32.0/24 89.36.35.0/24 109.175.211.0/24 185.121.132.0/23 185.121.135.0/24 185.144.70.0/23 212.232.18.0/23 IPv6: 2a0c:2500::/29 2a14:6781::/32 Signature Algorithm: sha256WithRSAEncryption 9d:be:e9:71:aa:92:6d:97:d1:09:50:78:8e:c6:1d:f7:0c:00: eb:56:03:5e:cf:2d:f3:06:84:98:1d:bb:b8:f3:65:0c:71:ac: 28:5d:77:6c:fc:9e:a7:b1:4f:30:19:d8:23:53:94:c2:8f:2a: 5e:a3:6a:2d:07:41:b9:81:b3:ac:cd:cf:15:89:3b:dd:6e:af: b6:4d:15:71:07:fb:8e:41:14:94:f3:43:2f:b9:ab:75:f4:8b: 9f:37:b8:39:36:8f:6e:9d:9e:b6:c8:9c:20:12:23:7e:a2:51: d1:37:e2:ad:d2:02:15:78:9a:49:12:b1:eb:e5:76:4d:bf:70: 3e:fd:60:a8:56:db:80:73:46:1f:9d:b0:74:96:b5:dc:7d:45: 48:fc:e6:fb:e7:fc:16:8e:11:62:5a:47:70:39:38:9b:c4:1b: 4d:1d:f3:bd:36:89:43:9e:af:bc:cb:a9:08:4d:d5:a9:3f:e4: ea:51:5d:e6:1a:84:59:81:68:79:7f:a6:8a:6f:03:08:a4:eb: 19:e3:95:c6:1f:53:89:1d:a0:52:8a:38:12:84:b0:99:16:c4: e3:67:e9:55:9c:59:e7:2d:28:71:22:be:a6:46:2c:09:9f:e3: 17:0e:20:76:6d:22:95:8e:0e:1f:8f:16:59:50:c2:f2:69:56: 00:69:33:cf -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt+N9+R7he5w0+OqsMKLtQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjFkMWNjNzFkNzI2MzM1MmI5NGNhMGJjYTFmMmRkNmZhMzRhODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS1FaxowyOXOaBPl+bw2I5YyR13a QwpfQHg98Xg13WD5p03yyhZQBSbF+2XO82gZ7+a1BFsMrB1p/G2SVumjz0dRY2wq BKct/s6X+vdFkEYEeWzSVxFpvLpxp6taBPH4dZmgM49tePsRqJQZHDCGMFv6MUky jz+3aN17j5IHIILOYWKVvri3IhZ8C1AmHRw/rnRN/4xxKbfadR2IRHCCeVhewpA1 h600VNz30rS6dOvI6Bewv9GGkvEOMHat0gEJWXJIWcyfzhzcSedmxB9xjGAPDtof 55wQ85Oo9lDCf/KEuYgk6vuoD2A3foDUxbAxoqdjM9Yojp37KQtkUaJ4EwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFNsdHMcdcmM1K5TKC8ofLdb6NKg8MB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvMngwY3h4MXlZelVybE1vTHloOHQxdm8wcUR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQAHxkLAwQA PqmYAwQAWSQgAwQAWSQjAwQAba/TAwQBuXmEAwQAuXmHAwQBuZBGAwQB1OgSMBQE AgACMA4DBQMqDCUAAwUAKhRngTANBgkqhkiG9w0BAQsFAAOCAQEAnb7pcaqSbZfR CVB4jsYd9wwA61YDXs8t8waEmB27uPNlDHGsKF13bPyep7FPMBnYI1OUwo8qXqNq LQdBuYGzrM3PFYk73W6vtk0VcQf7jkEUlPNDL7mrdfSLnze4OTaPbp2etsicIBIj fqJR0TfirdICFXiaSRKx6+V2Tb9wPv1gqFbbgHNGH52wdJa13H1FSPzm++f8Fo4R YlpHcDk4m8QbTR3zvTaJQ56vvMupCE3VqT/k6lFd5hqEWYFoeX+mim8DCKTrGeOV xh9TiR2gUoo4EoSwmRbE42fpVZxZ5y0ocSK+pkYsCZ/jFw4gdm0ilY4OH48WWVDC 8mlWAGkzzw== -----END CERTIFICATE-----Generated at Wed Jan 21 11:10:00 2026 by rpki-client