This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2DYof_CcJZtYgvoU1X33YJWLvyE.roa File: 2DYof_CcJZtYgvoU1X33YJWLvyE.roa (raw, json) Hash identifier: GYsdF4teWt24SNMJXf9oEFaSSF3BPrMwuZjEtr/U2bE= Subject key identifier: D8:36:28:7F:F0:9C:25:9B:58:82:FA:14:D5:7D:F7:60:95:8B:BF:21 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C134A3E314ECC1D1E127D4D3CE4D421 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2DYof_CcJZtYgvoU1X33YJWLvyE.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273829 IP address blocks: 185.229.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4a:3e:31:4e:cc:1d:1e:12:7d:4d:3c:e4:d4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d836287ff09c259b5882fa14d57df760958bbf21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:1d:c0:a1:9f:48:51:74:fe:bd:9b:87:4a: de:cf:5d:fe:84:ed:7e:ee:ae:b2:4c:e4:28:f1:db: 34:8a:d4:af:71:39:f0:64:b4:a2:58:08:3d:ee:ea: e6:5d:fb:2d:e4:d1:04:16:09:3e:aa:f2:26:3d:f9: b9:85:16:fc:5c:cc:df:19:b4:6d:ff:5f:18:5f:92: 01:66:62:a2:65:60:cc:e5:89:13:67:6c:b4:b1:fd: 5d:76:74:25:20:2f:9d:39:5d:27:9d:d0:46:dc:d3: ab:bb:8b:eb:59:9a:86:d8:a6:3d:06:a9:20:00:9a: ce:2c:63:70:99:40:45:95:53:50:cf:f5:d3:af:48: 83:23:ca:bf:4f:eb:af:2b:ac:39:71:7e:16:0c:9b: 69:56:f4:b0:68:cc:6e:b9:26:e3:67:09:67:08:a4: be:19:3e:3d:e1:1d:44:3a:23:73:33:04:26:66:a0: 1d:e5:0d:c9:07:96:e9:0a:09:aa:d9:4d:db:4a:b1: 5e:e6:74:1e:7e:9d:43:db:4b:fd:18:f0:b5:81:d9: 5d:02:4d:71:68:17:b8:3f:f5:4a:9b:65:59:37:e3: 0f:b5:e0:9b:f7:6b:86:4b:11:6c:e8:34:32:59:22: 1d:99:43:f0:68:9a:b8:66:a2:60:71:4c:29:8d:58: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:36:28:7F:F0:9C:25:9B:58:82:FA:14:D5:7D:F7:60:95:8B:BF:21 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2DYof_CcJZtYgvoU1X33YJWLvyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.216.0/24 Signature Algorithm: sha256WithRSAEncryption 66:d1:3a:ff:6d:f0:25:c2:d6:0b:2b:96:db:96:bb:99:99:dd: fb:85:cb:99:4e:b3:d3:1a:e5:0d:96:5d:ee:37:74:73:fd:3b: d1:3b:e3:03:3c:60:93:b3:71:24:29:8b:c7:2c:fd:d8:22:b1: 4c:8a:50:c3:71:d2:85:32:bd:63:50:5a:80:ab:c1:21:01:81: 36:54:45:be:9d:bb:46:7e:92:f2:08:fb:62:33:3c:3e:b9:8b: ff:78:e8:b4:0c:30:50:fc:05:e4:d4:8f:b8:ea:08:4a:c7:e2: 1b:c7:9c:04:a9:bf:63:7c:e0:6b:9b:1a:44:4f:cf:e9:5a:d5: dd:2c:d9:02:aa:f7:b9:71:f3:9d:96:2e:b4:80:08:e4:9b:71: 09:0b:e6:34:ab:3c:0b:1a:4a:55:92:ce:4d:83:94:1c:ed:30: ab:b9:57:de:ee:6a:4d:8f:29:d6:a1:9d:11:14:76:fe:5f:be: 97:d1:2b:68:e4:cb:b7:82:8b:62:39:b8:cc:00:e0:f3:e2:96: fb:33:c8:9b:67:1a:76:d8:fe:60:6e:a5:7f:4a:08:59:99:61: 11:cb:44:c3:81:b3:23:8d:5e:78:81:34:ee:60:12:67:84:67: af:3c:1f:6b:83:2b:af:d9:dd:94:db:a5:ad:5a:32:f9:c6:48: ef:2d:6a:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0o+MU7MHR4SfU085NQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODM2Mjg3ZmYwOWMyNTliNTg4MmZhMTRkNTdkZjc2MDk1OGJiZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOcdwKGfSFF0/r2bh0rez13+hO1+ 7q6yTOQo8ds0itSvcTnwZLSiWAg97urmXfst5NEEFgk+qvImPfm5hRb8XMzfGbRt /18YX5IBZmKiZWDM5YkTZ2y0sf1ddnQlIC+dOV0nndBG3NOru4vrWZqG2KY9Bqkg AJrOLGNwmUBFlVNQz/XTr0iDI8q/T+uvK6w5cX4WDJtpVvSwaMxuuSbjZwlnCKS+ GT494R1EOiNzMwQmZqAd5Q3JB5bpCgmq2U3bSrFe5nQefp1D20v9GPC1gdldAk1x aBe4P/VKm2VZN+MPteCb92uGSxFs6DQyWSIdmUPwaJq4ZqJgcUwpjVhM3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNg2KH/wnCWbWIL6FNV992CVi78hMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvMkRZb2ZfQ2NKWnRZZ3ZvVTFYMzNZSldMdnlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueXYMA0G CSqGSIb3DQEBCwUAA4IBAQBm0Tr/bfAlwtYLK5bblruZmd37hcuZTrPTGuUNll3u N3Rz/TvRO+MDPGCTs3EkKYvHLP3YIrFMilDDcdKFMr1jUFqAq8EhAYE2VEW+nbtG fpLyCPtiMzw+uYv/eOi0DDBQ/AXk1I+46ghKx+Ibx5wEqb9jfOBrmxpET8/pWtXd LNkCqve5cfOdli60gAjkm3EJC+Y0qzwLGkpVks5Ng5Qc7TCruVfe7mpNjynWoZ0R FHb+X76X0Sto5Mu3gotiObjMAODz4pb7M8ibZxp22P5gbqV/SghZmWERy0TDgbMj jV54gTTuYBJnhGevPB9rgyuv2d2U26WtWjL5xkjvLWrM -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:54 2026 by rpki-client