This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2chrEuDecGJR571jYLAlApC5x2g.roa File: 2chrEuDecGJR571jYLAlApC5x2g.roa (raw, json) Hash identifier: TrwqAwMCt50JsbHxH/o5agapLdZ2EasWeYclvMM8FHw= Subject key identifier: D9:C8:6B:12:E0:DE:70:62:51:E7:BD:63:60:B0:25:02:90:B9:C7:68 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA40AE21F698BD62D87787FECE96360 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2chrEuDecGJR571jYLAlApC5x2g.roa Signing time: Thu 01 Jan 2026 22:18:26 +0000 ROA not before: Thu 01 Jan 2026 22:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201670 IP address blocks: 185.229.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:0a:e2:1f:69:8b:d6:2d:87:78:7f:ec:e9:63:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9c86b12e0de706251e7bd6360b0250290b9c768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:78:92:bd:7d:d9:81:58:48:e7:84:3a:d6: cd:ef:6b:ff:a1:cb:f6:27:6e:d3:67:42:a8:27:85: 93:55:90:0d:fe:26:04:63:c6:22:99:cc:67:cf:20: ac:13:e7:86:ba:bb:51:06:5a:32:7c:b3:2d:43:b7: 57:85:df:33:61:dd:bd:3e:d0:c3:34:63:cd:d4:c3: 0d:76:7f:28:77:d4:20:6a:e3:29:23:28:4b:e7:4e: 4a:c1:68:6a:af:17:d0:b2:18:cc:a0:9d:b7:7c:e7: bf:4d:f2:bc:20:72:8f:6f:cd:39:ec:6c:a2:fc:01: 4b:16:f6:67:11:7f:ca:d0:ec:ab:3b:44:d1:57:18: 09:de:3f:0f:97:49:9f:1c:dd:3b:36:15:d9:32:4f: ff:0a:53:64:45:60:23:7a:45:b2:12:22:08:d0:65: 9b:15:fa:85:62:68:c1:98:cb:dd:7c:33:a3:c5:08: be:30:54:0e:d2:2f:8a:fc:ee:44:c9:50:84:36:70: ed:21:12:f3:48:79:22:75:26:b3:8d:f3:5d:1a:aa: 24:14:ef:d3:f5:ae:07:7f:0c:e5:32:af:f2:1f:31: 17:28:bd:47:c0:70:cd:35:76:95:c5:81:50:c3:bc: 0f:08:77:52:3b:62:a6:d1:38:be:ff:15:d5:f3:f7: 60:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C8:6B:12:E0:DE:70:62:51:E7:BD:63:60:B0:25:02:90:B9:C7:68 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2chrEuDecGJR571jYLAlApC5x2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.64.0/24 Signature Algorithm: sha256WithRSAEncryption c5:83:51:c7:a1:14:46:ba:d2:ec:73:f8:d9:d2:08:ba:c2:94: 65:2b:55:c5:f9:9f:ce:9f:70:eb:0c:93:6b:48:0a:c0:00:12: 32:b9:38:db:b0:bb:2d:1e:e3:86:3f:ce:62:43:55:9d:e8:13: e6:6a:b2:00:c9:c4:ea:12:49:b2:d8:c6:42:69:5f:49:2c:4c: f1:29:cc:71:b0:c6:0e:96:ad:df:8d:24:9c:35:d2:1c:54:87: 78:34:27:fd:23:d3:53:a5:6e:df:bc:10:11:18:92:5e:83:e1: 48:a8:b7:13:c6:b7:78:90:32:f1:9a:75:54:06:a5:d6:f0:61: 74:b8:d4:53:4c:3f:0c:ff:cb:47:67:fc:1b:f6:2e:58:ce:7f: 3e:7b:a6:31:09:8c:27:a9:ad:0b:7d:2c:48:a3:ec:73:7a:8e: 74:a7:ac:8d:bf:08:3f:82:34:93:ee:64:76:fd:73:0e:ed:be: d0:6f:03:31:85:43:a3:6c:da:3f:72:86:1b:37:07:cd:e8:6f: 16:0e:0b:11:24:7d:90:34:4a:17:f3:8f:8f:0a:f5:c4:a2:9b: c2:78:5b:1c:94:e4:3f:08:ac:17:dd:e7:7e:1c:02:27:f8:55: c4:e5:63:09:62:ed:18:44:5e:cd:28:61:e6:01:22:f6:f4:81: 3a:e7:43:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pAriH2mL1i2HeH/s6WNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWM4NmIxMmUwZGU3MDYyNTFlN2JkNjM2MGIwMjUwMjkwYjljNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDV4kr192YFYSOeEOtbN72v/ocv2 J27TZ0KoJ4WTVZAN/iYEY8YimcxnzyCsE+eGurtRBloyfLMtQ7dXhd8zYd29PtDD NGPN1MMNdn8od9QgauMpIyhL505KwWhqrxfQshjMoJ23fOe/TfK8IHKPb8057Gyi /AFLFvZnEX/K0OyrO0TRVxgJ3j8Pl0mfHN07NhXZMk//ClNkRWAjekWyEiII0GWb FfqFYmjBmMvdfDOjxQi+MFQO0i+K/O5EyVCENnDtIRLzSHkidSazjfNdGqokFO/T 9a4HfwzlMq/yHzEXKL1HwHDNNXaVxYFQw7wPCHdSO2Km0Ti+/xXV8/dgMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNnIaxLg3nBiUee9Y2CwJQKQucdoMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvMmNockV1RGVjR0pSNTcxallMQWxBcEM1eDJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueVAMA0G CSqGSIb3DQEBCwUAA4IBAQDFg1HHoRRGutLsc/jZ0gi6wpRlK1XF+Z/On3DrDJNr SArAABIyuTjbsLstHuOGP85iQ1Wd6BPmarIAycTqEkmy2MZCaV9JLEzxKcxxsMYO lq3fjSScNdIcVId4NCf9I9NTpW7fvBARGJJeg+FIqLcTxrd4kDLxmnVUBqXW8GF0 uNRTTD8M/8tHZ/wb9i5Yzn8+e6YxCYwnqa0LfSxIo+xzeo50p6yNvwg/gjST7mR2 /XMO7b7QbwMxhUOjbNo/coYbNwfN6G8WDgsRJH2QNEoX84+PCvXEopvCeFsclOQ/ CKwX3ed+HAIn+FXE5WMJYu0YRF7NKGHmASL29IE650NJ -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:24 2026 by rpki-client