This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/2SN63uiR84jB4gjJ1oeZd3LxGmw.roa File: 2SN63uiR84jB4gjJ1oeZd3LxGmw.roa (raw, json) Hash identifier: +QrxXlt+PAoes4BS6/9AYSbkj6CREEueCsrUnrPMn9w= Subject key identifier: D9:23:7A:DE:E8:91:F3:88:C1:E2:08:C9:D6:87:99:77:72:F1:1A:6C Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b Certificate serial: 019B998A44FF8F4B7FFBBF5A927F7300EF6C Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/2SN63uiR84jB4gjJ1oeZd3LxGmw.roa Signing time: Wed 07 Jan 2026 17:38:54 +0000 ROA not before: Wed 07 Jan 2026 17:38:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210895 IP address blocks: 45.66.11.0/24 maxlen: 24 81.91.177.0/24 maxlen: 24 185.203.240.0/24 maxlen: 24 185.224.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:8a:44:ff:8f:4b:7f:fb:bf:5a:92:7f:73:00:ef:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b Validity Not Before: Jan 7 17:38:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9237adee891f388c1e208c9d687997772f11a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:2e:ff:92:7e:2a:1e:e0:54:2c:eb:d9:8f: 41:9f:0f:3a:20:44:26:8f:6f:7b:94:87:74:e1:b8: bf:c0:f1:82:a0:48:d1:ea:7a:79:68:6a:90:19:f6: 3f:4a:e1:e4:6c:ee:ef:04:89:e7:c7:b2:40:73:c4: f6:1f:34:6e:6b:89:76:18:37:ba:89:32:eb:d0:f7: 5f:d6:d2:48:3d:9c:16:e4:04:95:97:2d:95:63:4b: b7:52:a1:ff:53:40:3f:22:27:ab:6d:75:50:18:69: 33:c7:cc:d7:d7:40:fb:73:42:95:ed:33:ed:35:be: 18:15:47:0c:9f:0c:9a:d3:f9:91:89:c4:18:28:60: 15:06:c3:df:bc:46:d6:88:3d:ba:49:43:ee:f0:09: 6e:04:fb:6d:52:d7:dd:34:bf:8e:37:43:2a:6e:60: 9f:9d:58:80:59:2c:70:b0:c2:3c:af:de:38:6d:63: 6e:c1:2b:f9:a3:22:c2:1d:35:9e:35:03:db:9f:78: b6:17:01:b6:58:b7:f1:b1:64:52:9b:f3:24:82:da: 92:57:2e:af:91:2c:eb:6e:ed:0a:ce:90:e9:2e:b3: 20:b1:28:92:85:59:8d:eb:2d:b5:e1:12:22:c7:c0: 73:b9:ba:45:e4:0d:84:5a:c4:0e:9f:6b:cc:31:9a: 20:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:23:7A:DE:E8:91:F3:88:C1:E2:08:C9:D6:87:99:77:72:F1:1A:6C X509v3 Authority Key Identifier: keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/2SN63uiR84jB4gjJ1oeZd3LxGmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.11.0/24 81.91.177.0/24 185.203.240.0/24 185.224.132.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:39:ac:fb:e4:85:9b:db:77:49:a8:bd:30:5d:82:10:69:04: fd:24:1b:3b:4d:f7:44:39:fc:72:ab:fd:40:58:b0:31:d1:ec: 40:1e:fe:22:18:22:06:6e:52:23:92:8a:be:c7:2e:6a:65:95: b6:a0:99:5e:f4:90:09:ce:36:b8:60:3a:1f:68:6c:3d:be:42: ca:a8:14:26:f0:17:5d:3b:9c:4a:77:f3:71:26:38:47:d5:83: c3:c0:d1:66:10:5d:61:75:f4:ed:50:d9:0c:24:24:43:26:34: ea:78:10:7b:3b:08:75:b5:8a:65:11:69:cf:a4:ea:f7:81:9a: 73:99:23:13:6c:8d:a5:7e:03:b4:f6:a3:ba:d3:cb:0a:97:fc: eb:fd:d0:84:f2:0c:c3:4b:2c:83:e4:4d:28:da:21:e8:39:e1: 28:a6:c7:64:09:b9:75:f7:57:53:72:00:43:52:47:6e:63:75: a4:b0:83:78:d6:03:61:62:bd:7d:16:a1:83:0c:66:fc:a2:b1: d7:38:6a:04:dd:b3:db:8c:2d:a4:34:3d:a6:ad:08:9b:81:b9: df:40:8c:80:7e:6b:29:fc:ff:6b:cf:fc:e9:7d:9b:d0:65:aa: d7:1a:d2:63:2f:9d:cd:1a:61:4c:54:dd:be:1d:f8:a1:d2:a1: 61:6a:aa:e1 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuZikT/j0t/+79akn9zAO9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZDM2OWU2NmNkYmUzMGQ3YjNhZmY2MDgxZjIwYzE3YTk4 ZmRjNWIwHhcNMjYwMTA3MTczODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTIzN2FkZWU4OTFmMzg4YzFlMjA4YzlkNjg3OTk3NzcyZjExYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBEu/5J+Kh7gVCzr2Y9Bnw86IEQm j297lId04bi/wPGCoEjR6np5aGqQGfY/SuHkbO7vBInnx7JAc8T2HzRua4l2GDe6 iTLr0Pdf1tJIPZwW5ASVly2VY0u3UqH/U0A/IierbXVQGGkzx8zX10D7c0KV7TPt Nb4YFUcMnwya0/mRicQYKGAVBsPfvEbWiD26SUPu8AluBPttUtfdNL+ON0MqbmCf nViAWSxwsMI8r944bWNuwSv5oyLCHTWeNQPbn3i2FwG2WLfxsWRSm/MkgtqSVy6v kSzrbu0KzpDpLrMgsSiShVmN6y214RIix8BzubpF5A2EWsQOn2vMMZogJQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNkjet7okfOIweIIydaHmXdy8RpsMB8GA1UdIwQY MBaAFMHTaeZs2+MNezr/YIHyDBepj9xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2ROcDVtemI0dzE3T3Y5Z2dmSU1GNm1QM0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yMjQzNTEtM2E0Ny00MDE0LWIzOTUt YTYzNDc5NjEwOTY4LzEvMlNONjN1aVI4NGpCNGdqSjFvZVpkM0x4R213LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yMjQzNTEtM2E0Ny00MDE0LWIzOTUtYTYzNDc5NjEwOTY4 LzEvd2ROcDVtemI0dzE3T3Y5Z2dmSU1GNm1QM0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALUILAwQA UVuxAwQAucvwAwQAueCEMA0GCSqGSIb3DQEBCwUAA4IBAQAPOaz75IWb23dJqL0w XYIQaQT9JBs7TfdEOfxyq/1AWLAx0exAHv4iGCIGblIjkoq+xy5qZZW2oJle9JAJ zja4YDofaGw9vkLKqBQm8BddO5xKd/NxJjhH1YPDwNFmEF1hdfTtUNkMJCRDJjTq eBB7Owh1tYplEWnPpOr3gZpzmSMTbI2lfgO09qO608sKl/zr/dCE8gzDSyyD5E0o 2iHoOeEopsdkCbl191dTcgBDUkduY3WksIN41gNhYr19FqGDDGb8orHXOGoE3bPb jC2kND2mrQibgbnfQIyAfmsp/P9rz/zpfZvQZarXGtJjL53NGmFMVN2+Hfih0qFh aqrh -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:23 2026 by rpki-client