This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/2WxdqqM958PVrJHpue1sOWo5DeY.roa File: 2WxdqqM958PVrJHpue1sOWo5DeY.roa (raw, json) Hash identifier: 08keWtjbfRy+0LcrlgTdbivbYjdNCbd/nHEIlee6pJ0= Subject key identifier: D9:6C:5D:AA:A3:3D:E7:C3:D5:AC:91:E9:B9:ED:6C:39:6A:39:0D:E6 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79114676E95D30A4F419E378DC0D9D9E Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/2WxdqqM958PVrJHpue1sOWo5DeY.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 64.137.44.0/24 maxlen: 24 64.137.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:46:76:e9:5d:30:a4:f4:19:e3:78:dc:0d:9d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d96c5daaa33de7c3d5ac91e9b9ed6c396a390de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:64:a2:f0:77:11:06:c3:17:02:88:30:3d: 6d:cc:e1:bf:09:78:f8:7f:e9:0d:70:2b:17:aa:19: e7:23:65:19:99:ca:61:05:23:ae:26:05:30:ce:bf: 46:b6:d5:a3:c2:0d:17:93:87:b3:06:dd:e1:33:a1: 0f:b0:0a:d3:b9:e7:34:9e:85:98:af:7d:f4:70:3d: 91:0e:40:52:a6:af:77:e1:71:e1:57:51:c6:7b:af: 5a:42:2b:83:53:26:b2:c1:d3:1a:ba:8d:7f:0a:ee: a5:c5:d3:c1:bf:2c:e8:1c:f2:17:ab:b5:81:af:f7: 08:98:14:ee:96:30:40:b0:81:ad:1c:63:06:7b:21: ac:3d:90:b9:7a:d5:83:cc:71:ea:b9:26:ae:40:93: 1d:e1:2e:ec:66:2a:7c:8d:be:0c:e1:25:c5:11:8a: bf:12:61:ba:f0:e3:f6:b0:98:cd:b0:08:a4:4d:b2: 11:32:79:5a:ca:2d:74:f1:83:83:dc:56:d4:0f:e8: 99:3e:98:6b:89:58:12:da:f0:53:ff:f1:b0:2a:df: 3e:73:b1:7a:ad:ed:54:fc:a5:39:95:92:63:39:e6: 73:fa:df:11:44:0e:24:6d:19:25:34:bb:bc:19:b0: 27:40:49:af:b4:44:f0:fd:b9:f4:39:4d:78:b5:06: f5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6C:5D:AA:A3:3D:E7:C3:D5:AC:91:E9:B9:ED:6C:39:6A:39:0D:E6 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/2WxdqqM958PVrJHpue1sOWo5DeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.137.44.0/24 64.137.46.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:25:be:d1:70:91:1b:6b:25:6a:b0:e1:62:17:5c:0d:75:61: 08:b5:81:96:e7:ff:91:65:25:c7:09:8a:32:46:23:6b:02:b9: cb:f4:32:7c:5f:78:70:83:65:70:ec:c8:9d:ea:de:8f:57:11: a1:87:91:49:65:b4:53:ab:da:7c:88:ef:bf:bc:87:79:5a:6b: b9:fc:0a:b2:3e:2a:59:92:5f:8e:bc:5f:aa:f6:54:91:d8:5a: b7:51:50:a4:f1:3b:a3:ea:54:d3:81:a1:ac:6c:32:2a:db:84: e4:5f:e4:e9:4a:bd:9a:cd:d7:89:65:1b:97:fa:3c:fb:32:00: a4:94:30:f7:8b:e7:a2:8d:73:f6:13:63:9c:4f:3e:1f:df:8e: 8f:68:8c:6f:5a:07:9d:e8:42:79:ac:fb:1e:17:b3:3a:46:9b: 57:bf:2e:18:21:84:61:9a:d4:7d:4e:80:9a:36:3b:67:ed:89: e6:ea:04:d4:db:e0:fc:22:a0:30:88:d8:c6:95:89:04:8a:7b: 49:83:3c:a3:98:3c:7a:10:80:66:38:73:a0:38:64:21:f6:2f: df:fe:8b:d0:7b:ba:e4:8e:7a:79:dd:55:c7:79:fc:12:38:ac: f3:36:df:32:b4:33:94:de:68:29:e2:25:5f:1a:0a:87:a6:58: ee:42:ca:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EUZ26V0wpPQZ43jcDZ2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTZjNWRhYWEzM2RlN2MzZDVhYzkxZTliOWVkNmMzOTZhMzkwZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5BkovB3EQbDFwKIMD1tzOG/CXj4 f+kNcCsXqhnnI2UZmcphBSOuJgUwzr9GttWjwg0Xk4ezBt3hM6EPsArTuec0noWY r330cD2RDkBSpq934XHhV1HGe69aQiuDUyaywdMauo1/Cu6lxdPBvyzoHPIXq7WB r/cImBTuljBAsIGtHGMGeyGsPZC5etWDzHHquSauQJMd4S7sZip8jb4M4SXFEYq/ EmG68OP2sJjNsAikTbIRMnlayi108YOD3FbUD+iZPphriVgS2vBT//GwKt8+c7F6 re1U/KU5lZJjOeZz+t8RRA4kbRklNLu8GbAnQEmvtETw/bn0OU14tQb1eQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNlsXaqjPefD1ayR6bntbDlqOQ3mMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvMld4ZHFxTTk1OFBWckpIcHVlMXNPV281RGVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQIksAwQA QIkuMA0GCSqGSIb3DQEBCwUAA4IBAQB9Jb7RcJEbayVqsOFiF1wNdWEItYGW5/+R ZSXHCYoyRiNrArnL9DJ8X3hwg2Vw7Mid6t6PVxGhh5FJZbRTq9p8iO+/vId5Wmu5 /AqyPipZkl+OvF+q9lSR2Fq3UVCk8Tuj6lTTgaGsbDIq24TkX+TpSr2azdeJZRuX +jz7MgCklDD3i+eijXP2E2OcTz4f346PaIxvWged6EJ5rPseF7M6RptXvy4YIYRh mtR9ToCaNjtn7Ynm6gTU2+D8IqAwiNjGlYkEintJgzyjmDx6EIBmOHOgOGQh9i/f /ovQe7rkjnp53VXHefwSOKzzNt8ytDOU3mgp4iVfGgqHpljuQsqo -----END CERTIFICATE-----Generated at Fri Jan 2 02:42:13 2026 by rpki-client