This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/2-_2_IDxpsQLzWDQlDdWQeC93So.roa File: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (raw, json) Hash identifier: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88= Subject key identifier: DB:EF:F6:FC:80:F1:A6:C4:0B:CD:60:D0:94:37:56:41:E0:BD:DD:2A Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86 Certificate serial: 019B7910E323EC57B5A51755E2C88DF4BF8F Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/2-_2_IDxpsQLzWDQlDdWQeC93So.roa Signing time: Thu 01 Jan 2026 10:18:28 +0000 ROA not before: Thu 01 Jan 2026 10:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 91.225.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e3:23:ec:57:b5:a5:17:55:e2:c8:8d:f4:bf:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86 Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbeff6fc80f1a6c40bcd60d094375641e0bddd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f3:a9:66:f5:0c:b4:4b:5b:f6:f9:31:a8:bf: 19:60:d0:d0:e1:ff:ff:c7:25:cd:4f:1c:18:ee:78: 45:11:be:7b:0e:17:b3:7e:78:5d:2f:cf:f0:f9:7a: 65:9d:18:f9:f7:c6:5a:fc:24:95:66:18:f2:1a:5f: 05:e5:6e:cb:73:3a:11:60:c1:85:1d:c1:41:d6:60: f1:cc:72:e2:83:3d:7d:f4:0a:47:51:54:cc:52:3f: a6:f6:cd:c4:1e:0e:67:1b:22:73:15:35:cf:81:1e: f3:7f:7d:09:fc:ab:af:12:69:f3:e6:90:c2:85:fd: 6c:c9:db:dc:7b:58:e1:e2:b0:c1:99:e9:c4:ae:7e: cd:e2:fd:0f:ab:02:cc:cf:c0:ea:7d:cb:1c:7b:43: ec:07:a3:75:e7:a1:bb:f3:9b:83:95:b6:0e:c4:21: a8:88:ca:51:de:cd:fb:27:f1:2a:93:5a:4a:fa:7f: 66:27:a3:2a:1b:72:99:66:f5:a0:1f:a6:d0:e7:e0: 2e:3d:cc:18:d8:fb:97:ca:30:4f:a1:f4:fe:61:e3: 93:1b:55:8d:c1:e4:d2:23:dc:40:90:85:19:80:1e: 70:c8:28:18:b8:27:ea:21:a0:d4:59:e2:bd:1d:e2: 78:77:a9:80:6f:9f:a3:63:36:57:d2:04:3d:ad:a1: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EF:F6:FC:80:F1:A6:C4:0B:CD:60:D0:94:37:56:41:E0:BD:DD:2A X509v3 Authority Key Identifier: keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/2-_2_IDxpsQLzWDQlDdWQeC93So.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.248.0/24 Signature Algorithm: sha256WithRSAEncryption 01:16:6f:51:17:54:02:c4:44:2c:2a:d4:65:52:47:1a:3f:57: 5a:87:6d:f7:84:89:f1:1c:19:06:30:3c:a3:4a:39:d7:14:39: 72:b8:73:cb:c6:76:08:d6:16:42:26:e3:43:6b:c4:06:74:e7: 8d:0a:f6:55:04:4f:56:42:24:de:b3:8c:6a:1b:ef:e5:39:da: d0:63:46:0d:85:45:0d:01:13:75:37:b3:5a:1f:77:82:8a:f5: 84:51:91:f8:7c:0e:d2:9d:0a:b6:b5:1c:fa:a6:9c:bc:da:ec: 31:ab:1a:c4:78:64:a4:2a:49:0d:76:dc:9c:6f:0e:2a:3c:17: f0:1b:66:07:d3:88:56:ed:70:f6:bd:f0:ed:d4:6e:0e:e4:23: 83:c2:64:62:4c:84:f1:59:2b:45:6c:45:96:6e:75:c6:b5:aa: 12:f6:bf:bb:20:2c:66:6a:58:10:4d:7e:e6:a1:fa:e3:b3:64: a9:9f:e8:ed:80:4a:01:2f:cd:f1:bd:9c:ed:d5:5a:a7:72:ae: 42:22:c6:d5:fa:88:2e:04:6f:07:9b:23:98:fe:ba:53:10:aa: fc:c7:16:b8:2d:29:02:24:96:c6:b4:cb:9e:8b:28:b8:67:76: 0f:36:1c:0c:dd:cc:96:73:e2:38:68:1c:81:12:22:6f:98:16: fd:a9:73:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOMj7Fe1pRdV4siN9L+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZTg2ZmY5OTczYzkzYWJlNjM5OGYwMzE5NjZjMjlkNzVh M2JhODYwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmVmZjZmYzgwZjFhNmM0MGJjZDYwZDA5NDM3NTY0MWUwYmRkZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8POpZvUMtEtb9vkxqL8ZYNDQ4f// xyXNTxwY7nhFEb57DhezfnhdL8/w+XplnRj598Za/CSVZhjyGl8F5W7LczoRYMGF HcFB1mDxzHLigz199ApHUVTMUj+m9s3EHg5nGyJzFTXPgR7zf30J/KuvEmnz5pDC hf1sydvce1jh4rDBmenErn7N4v0PqwLMz8Dqfcsce0PsB6N156G785uDlbYOxCGo iMpR3s37J/Eqk1pK+n9mJ6MqG3KZZvWgH6bQ5+AuPcwY2PuXyjBPofT+YeOTG1WN weTSI9xAkIUZgB5wyCgYuCfqIaDUWeK9HeJ4d6mAb5+jYzZX0gQ9raELOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNvv9vyA8abEC81g0JQ3VkHgvd0qMB8GA1UdIwQY MBaAFCHob/mXPJOr5jmPAxlmwp11o7qGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWIt MzJmZWViNTY2ZWU2LzEvMi1fMl9JRHhwc1FMeldEUWxEZFdRZUM5M1NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWItMzJmZWViNTY2ZWU2 LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+H4MA0G CSqGSIb3DQEBCwUAA4IBAQABFm9RF1QCxEQsKtRlUkcaP1dah233hInxHBkGMDyj SjnXFDlyuHPLxnYI1hZCJuNDa8QGdOeNCvZVBE9WQiTes4xqG+/lOdrQY0YNhUUN ARN1N7NaH3eCivWEUZH4fA7SnQq2tRz6ppy82uwxqxrEeGSkKkkNdtycbw4qPBfw G2YH04hW7XD2vfDt1G4O5CODwmRiTITxWStFbEWWbnXGtaoS9r+7ICxmalgQTX7m ofrjs2Spn+jtgEoBL83xvZzt1Vqncq5CIsbV+oguBG8HmyOY/rpTEKr8xxa4LSkC JJbGtMueiyi4Z3YPNhwM3cyWc+I4aByBEiJvmBb9qXO1 -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:25 2026 by rpki-client