This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/L2PV0X2D64oMo0GnEAuj-1lDAIc.roa File: L2PV0X2D64oMo0GnEAuj-1lDAIc.roa (raw, json) Hash identifier: kUPruxzCipMwCfnCm4k203rxKLbGUtvwDpyAt+2Wqic= Subject key identifier: 2F:63:D5:D1:7D:83:EB:8A:0C:A3:41:A7:10:0B:A3:FB:59:43:00:87 Certificate issuer: /CN=da96b5bdafb28332dafe847ced14f7a5fad45e69 Certificate serial: 019B7AC944D1F00DCA798448B0C1D2494BB5 Authority key identifier: DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/L2PV0X2D64oMo0GnEAuj-1lDAIc.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204296 IP address blocks: 185.254.60.0/23 maxlen: 23 185.254.62.0/24 maxlen: 24 185.254.63.0/24 maxlen: 24 2a0c:4840::/29 maxlen: 29 2a0c:4847:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:44:d1:f0:0d:ca:79:84:48:b0:c1:d2:49:4b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da96b5bdafb28332dafe847ced14f7a5fad45e69 Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f63d5d17d83eb8a0ca341a7100ba3fb59430087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:42:b5:4b:b8:22:b2:3d:77:fa:49:2d:b3: 7c:8e:72:4f:cd:bb:6a:10:63:2c:85:c7:21:9a:4f: 59:00:db:9b:f0:24:1e:b1:95:5a:b9:77:6b:12:b3: 4d:d9:dc:fb:a1:be:43:9b:a9:40:33:ad:ce:86:ce: 2e:1a:9b:31:81:e5:b1:73:d1:13:81:78:cd:79:aa: ab:68:a1:cd:97:b1:f4:5b:4c:9b:c3:82:cb:28:61: df:7b:13:cf:0a:bd:55:a7:20:0c:0f:44:d6:bb:06: 51:87:a4:26:c7:2d:5b:d0:bf:51:da:43:42:5a:1b: a2:4c:de:1e:53:cd:7e:93:62:6a:0a:1e:bd:70:41: de:da:18:85:18:b7:f7:6a:a1:b6:e8:de:3c:9c:ae: 71:7e:0d:2d:34:7d:55:a5:97:77:39:ef:9d:f7:2f: 04:6e:bf:40:33:7e:68:a0:74:b5:04:c6:1d:22:b6: 16:49:c2:65:9d:f4:88:af:cc:d7:3f:0d:f8:b7:09: b0:d6:a6:5b:5c:77:5f:24:a7:fb:22:d5:34:bf:bd: e3:31:3b:36:34:99:1f:76:1a:a3:f8:b3:7b:97:02: 9b:d6:20:87:09:a9:4f:fe:52:c2:e2:d8:6f:36:f8: e4:85:c6:24:25:ce:3c:29:86:65:2b:fb:0b:58:ef: 92:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:63:D5:D1:7D:83:EB:8A:0C:A3:41:A7:10:0B:A3:FB:59:43:00:87 X509v3 Authority Key Identifier: keyid:DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/L2PV0X2D64oMo0GnEAuj-1lDAIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.60.0/22 IPv6: 2a0c:4840::/29 Signature Algorithm: sha256WithRSAEncryption 2c:48:9a:08:cd:ee:09:df:0c:cf:12:f5:ff:a0:61:40:6b:2a: ea:cf:61:af:36:92:8c:50:75:7e:e3:fd:f4:cc:56:ac:04:e1: 1c:e4:a4:b2:a7:f5:27:33:31:22:bb:88:41:33:25:11:54:68: 96:82:95:00:f4:a3:12:dc:bc:31:f4:35:19:f7:39:10:fc:e9: 52:c4:25:ad:54:b1:fd:2e:55:cf:15:77:97:43:7e:1b:15:c4: 4e:17:23:26:c7:92:f5:f6:6f:6b:64:37:91:ad:4e:61:5b:59: a4:da:fa:64:24:9d:d4:67:14:06:cc:1b:30:54:31:77:1e:76: 4e:fc:7d:e4:6d:f6:1c:bc:24:2d:4c:7c:66:67:37:5f:b5:74: 77:02:97:d6:fa:5d:9a:05:26:dc:e0:08:25:21:12:2f:d6:6d: 8a:8b:60:36:cd:17:73:b7:54:97:e0:f4:d1:56:29:af:2b:ad: 78:81:c7:0c:9a:2c:63:4d:2f:6f:22:db:d9:e4:f3:cf:c2:16: ee:2a:bf:0b:4b:57:7a:41:52:21:02:53:27:78:f5:1d:25:b7: 08:73:9c:9e:46:9d:e2:b2:2d:8c:32:7b:00:c3:51:fd:cd:b4: b9:02:d3:e9:30:40:62:4c:63:a0:84:20:aa:c7:fa:c4:79:7f: b5:51:df:86 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yUTR8A3KeYRIsMHSSUu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOTZiNWJkYWZiMjgzMzJkYWZlODQ3Y2VkMTRmN2E1ZmFk NDVlNjkwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjYzZDVkMTdkODNlYjhhMGNhMzQxYTcxMDBiYTNmYjU5NDMwMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoglCtUu4IrI9d/pJLbN8jnJPzbtq EGMshcchmk9ZANub8CQesZVauXdrErNN2dz7ob5Dm6lAM63Ohs4uGpsxgeWxc9ET gXjNeaqraKHNl7H0W0ybw4LLKGHfexPPCr1VpyAMD0TWuwZRh6Qmxy1b0L9R2kNC WhuiTN4eU81+k2JqCh69cEHe2hiFGLf3aqG26N48nK5xfg0tNH1VpZd3Oe+d9y8E br9AM35ooHS1BMYdIrYWScJlnfSIr8zXPw34twmw1qZbXHdfJKf7ItU0v73jMTs2 NJkfdhqj+LN7lwKb1iCHCalP/lLC4thvNvjkhcYkJc48KYZlK/sLWO+SXQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC9j1dF9g+uKDKNBpxALo/tZQwCHMB8GA1UdIwQY MBaAFNqWtb2vsoMy2v6EfO0U96X61F5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnBhMXZhLXlnekxhX29SODdSVDNwZnJVWG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84MTkwODktNDczYi00NjNmLWI4N2It NDI1Mzk1MGYxMTU1LzEvTDJQVjBYMkQ2NG9NbzBHbkVBdWotMWxEQUljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84MTkwODktNDczYi00NjNmLWI4N2ItNDI1Mzk1MGYxMTU1 LzEvMnBhMXZhLXlnekxhX29SODdSVDNwZnJVWG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuf48MA0E AgACMAcDBQMqDEhAMA0GCSqGSIb3DQEBCwUAA4IBAQAsSJoIze4J3wzPEvX/oGFA ayrqz2GvNpKMUHV+4/30zFasBOEc5KSyp/UnMzEiu4hBMyURVGiWgpUA9KMS3Lwx 9DUZ9zkQ/OlSxCWtVLH9LlXPFXeXQ34bFcROFyMmx5L19m9rZDeRrU5hW1mk2vpk JJ3UZxQGzBswVDF3HnZO/H3kbfYcvCQtTHxmZzdftXR3ApfW+l2aBSbc4AglIRIv 1m2Ki2A2zRdzt1SX4PTRVimvK614gccMmixjTS9vItvZ5PPPwhbuKr8LS1d6QVIh AlMnePUdJbcIc5yeRp3isi2MMnsAw1H9zbS5AtPpMEBiTGOghCCqx/rEeX+1Ud+G -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:00 2026 by rpki-client