This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/R2DSGkXp2tD1CPLW3SJgACnZ-U4.roa File: R2DSGkXp2tD1CPLW3SJgACnZ-U4.roa (raw, json) Hash identifier: JcjqTJ6u4BkDf1c4CSNYFXzWmDeRFEeHd+21Baxb2HU= Subject key identifier: 47:60:D2:1A:45:E9:DA:D0:F5:08:F2:D6:DD:22:60:00:29:D9:F9:4E Certificate issuer: /CN=c15c57c496c4378e804c2613398075d54ef8a962 Certificate serial: 019B797E89650B51B8A0892FB5514E69BF0F Authority key identifier: C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/R2DSGkXp2tD1CPLW3SJgACnZ-U4.roa Signing time: Thu 01 Jan 2026 12:18:14 +0000 ROA not before: Thu 01 Jan 2026 12:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57979 IP address blocks: 185.84.128.0/22 maxlen: 22 185.251.92.0/22 maxlen: 22 188.119.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:89:65:0b:51:b8:a0:89:2f:b5:51:4e:69:bf:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15c57c496c4378e804c2613398075d54ef8a962 Validity Not Before: Jan 1 12:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4760d21a45e9dad0f508f2d6dd22600029d9f94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:78:cd:e0:a1:b7:86:55:6d:84:f9:a8:26:45: 0d:e7:00:c2:01:18:cf:46:70:2e:cc:e9:9e:5e:63: dd:bb:a8:7f:27:cd:dd:ca:0d:6b:33:d7:c5:e2:2e: d2:78:26:7e:c8:e4:ce:0e:76:18:82:44:0c:79:97: 89:74:bd:48:44:4b:34:e4:68:03:6b:04:23:0d:ae: 0e:5f:8a:34:50:f0:1e:0a:58:f0:59:10:be:46:4a: cf:9c:42:2d:54:5b:8d:79:9b:19:cb:39:09:1d:26: 3b:e8:6f:97:4e:66:b5:73:75:fd:80:be:b4:2b:c8: 92:c6:f7:51:2d:7c:ac:a9:36:a8:d6:02:86:eb:99: 9c:ee:da:a1:08:5c:9d:86:94:a6:a5:9b:66:4c:81: b0:97:8e:45:03:53:97:72:57:6f:7f:59:a6:4f:9e: f0:97:ca:02:dc:02:91:c2:75:f3:72:6d:b7:30:df: 27:98:e5:ac:60:f9:10:88:26:8d:ae:fc:51:e3:88: cc:4e:5b:0a:bb:68:0f:5e:5f:ac:60:aa:12:62:8c: c1:5b:dc:55:9c:e6:b4:02:d6:47:75:97:72:c0:9d: 64:a2:d6:64:e6:0d:f2:80:c4:c1:b6:69:8a:8a:73: 06:2e:76:b3:91:3f:c1:88:fa:2e:ae:be:7d:a0:9e: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:60:D2:1A:45:E9:DA:D0:F5:08:F2:D6:DD:22:60:00:29:D9:F9:4E X509v3 Authority Key Identifier: keyid:C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/R2DSGkXp2tD1CPLW3SJgACnZ-U4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.128.0/22 185.251.92.0/22 188.119.72.0/22 Signature Algorithm: sha256WithRSAEncryption 61:96:85:c9:14:41:83:d7:3a:11:7c:42:fb:60:d9:9f:94:cf: 81:a4:1d:0f:ac:85:42:e8:65:41:fd:13:36:0e:5b:cc:33:b3: f3:1a:05:5c:e5:e6:f6:63:39:3c:7b:88:9c:4b:02:f4:9c:9c: 7c:bd:13:99:2e:d6:09:fa:7b:3c:b2:19:b4:f4:f8:c7:30:13: 59:11:b1:bc:a5:4b:fa:a0:11:36:cb:87:89:3f:98:cf:f4:88: 2c:d4:94:53:86:86:bc:fd:b5:8a:bd:35:5e:ae:20:84:e4:0f: 74:eb:23:8c:ba:8a:c9:ef:0f:f2:d4:bd:0f:32:5c:b7:6f:2b: 90:0d:28:40:aa:4d:5d:35:65:cc:bf:dd:cb:06:49:b0:69:8b: 36:50:f2:7a:1d:93:09:bd:dc:85:8d:ad:ee:c5:17:bb:55:46: d5:41:df:a1:39:6f:33:1a:c3:fc:e4:83:2d:c7:11:87:e4:26: 0c:a9:bc:fd:f3:25:ec:5f:87:89:39:44:af:29:c0:27:0f:43: f2:ad:0a:3b:75:49:0c:4d:63:9c:39:49:6d:f6:50:d9:8e:b4: 6c:dc:b7:45:82:81:28:0e:0b:9d:33:17:ba:4e:a0:f9:15:df: 87:9d:7d:f2:d0:21:7f:ba:9a:02:b4:22:42:91:4c:41:8f:ab: 97:b2:3a:8f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5follC1G4oIkvtVFOab8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNWM1N2M0OTZjNDM3OGU4MDRjMjYxMzM5ODA3NWQ1NGVm OGE5NjIwHhcNMjYwMTAxMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzYwZDIxYTQ1ZTlkYWQwZjUwOGYyZDZkZDIyNjAwMDI5ZDlmOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8njN4KG3hlVthPmoJkUN5wDCARjP RnAuzOmeXmPdu6h/J83dyg1rM9fF4i7SeCZ+yOTODnYYgkQMeZeJdL1IREs05GgD awQjDa4OX4o0UPAeCljwWRC+RkrPnEItVFuNeZsZyzkJHSY76G+XTma1c3X9gL60 K8iSxvdRLXysqTao1gKG65mc7tqhCFydhpSmpZtmTIGwl45FA1OXcldvf1mmT57w l8oC3AKRwnXzcm23MN8nmOWsYPkQiCaNrvxR44jMTlsKu2gPXl+sYKoSYozBW9xV nOa0AtZHdZdywJ1kotZk5g3ygMTBtmmKinMGLnazkT/BiPourr59oJ6/wQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEdg0hpF6drQ9Qjy1t0iYAAp2flOMB8GA1UdIwQY MBaAFMFcV8SWxDeOgEwmEzmAddVO+KliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Z4WHhKYkVONDZBVENZVE9ZQjExVTc0cVdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kODQ3NTgtZjI1ZC00YjNkLTkxNzYt YTg4MTU2Mzc5NWQzLzEvUjJEU0drWHAydEQxQ1BMVzNTSmdBQ25aLVU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kODQ3NTgtZjI1ZC00YjNkLTkxNzYtYTg4MTU2Mzc5NWQz LzEvd1Z4WHhKYkVONDZBVENZVE9ZQjExVTc0cVdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuVSAAwQC uftcAwQCvHdIMA0GCSqGSIb3DQEBCwUAA4IBAQBhloXJFEGD1zoRfEL7YNmflM+B pB0PrIVC6GVB/RM2DlvMM7PzGgVc5eb2Yzk8e4icSwL0nJx8vROZLtYJ+ns8shm0 9PjHMBNZEbG8pUv6oBE2y4eJP5jP9Igs1JRThoa8/bWKvTVeriCE5A906yOMuorJ 7w/y1L0PMly3byuQDShAqk1dNWXMv93LBkmwaYs2UPJ6HZMJvdyFja3uxRe7VUbV Qd+hOW8zGsP85IMtxxGH5CYMqbz98yXsX4eJOUSvKcAnD0PyrQo7dUkMTWOcOUlt 9lDZjrRs3LdFgoEoDgudMxe6TqD5Fd+HnX3y0CF/upoCtCJCkUxBj6uXsjqP -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:18 2026 by rpki-client