This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/2SKAnmNppGmTIZV2xgVXbNnLQZE.roa File: 2SKAnmNppGmTIZV2xgVXbNnLQZE.roa (raw, json) Hash identifier: 0TEDM1XRgsWS8H5Ci7uA1v4v4wOO9F775kBBURCrd3c= Subject key identifier: D9:22:80:9E:63:69:A4:69:93:21:95:76:C6:05:57:6C:D9:CB:41:91 Certificate issuer: /CN=4148cbad1748205b4f4334bba638c64c2b21fc0e Certificate serial: 019B7C12C806AE0BB8609B8D39A9792A0CD6 Authority key identifier: 41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/2SKAnmNppGmTIZV2xgVXbNnLQZE.roa Signing time: Fri 02 Jan 2026 00:19:24 +0000 ROA not before: Fri 02 Jan 2026 00:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196936 IP address blocks: 178.217.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c8:06:ae:0b:b8:60:9b:8d:39:a9:79:2a:0c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4148cbad1748205b4f4334bba638c64c2b21fc0e Validity Not Before: Jan 2 00:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d922809e6369a46993219576c605576cd9cb4191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:4c:5e:9a:5d:65:8e:6f:d8:f3:99:db:dc: ba:73:9f:19:9b:0b:a5:f8:fc:a1:b0:ba:0f:41:e2: 02:8e:28:a4:08:38:02:10:63:85:a3:3e:76:80:13: 6c:6f:57:cc:ee:58:d5:1f:d2:25:c0:27:e9:4c:83: 63:51:da:74:29:6a:3e:16:4f:2e:71:ab:46:9b:0a: 48:94:ab:d3:ce:12:cd:f3:fd:71:43:a6:a7:b5:46: 36:f7:38:bf:e7:34:e4:a0:e0:20:11:84:92:58:0b: 03:e1:57:6b:49:e3:f5:76:9b:10:27:7d:4f:88:72: 39:95:04:98:32:85:47:3b:db:9c:b1:34:8c:45:5b: 48:7b:54:cd:2f:1d:8d:76:81:b7:b0:04:2f:87:a1: 1b:c7:b9:96:56:46:0f:9c:c9:28:fb:b7:4f:17:01: de:49:cc:5c:97:b1:0a:a7:53:15:fe:5c:29:63:f0: 5e:aa:94:ff:d0:d0:40:c8:00:47:3d:02:24:14:95: 87:77:d3:ce:b6:9a:53:52:67:cf:87:ec:89:d7:b1: 69:a4:51:26:e0:57:2c:da:43:bb:d5:4b:d3:72:a0: 6c:bb:8f:f3:24:10:77:8e:6f:10:6b:eb:02:0e:d7: 9d:11:e4:27:33:29:0b:08:91:87:bb:cf:e3:d7:4f: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:22:80:9E:63:69:A4:69:93:21:95:76:C6:05:57:6C:D9:CB:41:91 X509v3 Authority Key Identifier: keyid:41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/2SKAnmNppGmTIZV2xgVXbNnLQZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.217.96.0/23 Signature Algorithm: sha256WithRSAEncryption 54:0b:ec:3f:05:09:6e:0b:9c:8c:53:0c:0a:36:f1:7a:c0:f6: 73:5d:ba:cb:65:42:42:b6:0c:2a:b4:38:48:40:b6:0a:f5:04: 4d:4b:fa:91:35:d5:cc:5a:0c:0b:da:6b:a4:19:ec:e2:fd:f4: 44:22:92:8d:97:ce:f7:69:b2:ad:fa:f6:14:d9:45:88:a0:24: d5:48:39:02:0b:cc:3b:d8:23:07:29:ed:93:25:84:e9:12:9c: 19:f7:c9:04:13:c4:e9:c1:9e:f0:97:cf:a2:83:62:80:23:15: c1:c9:97:c9:47:fe:18:ee:ff:f8:e8:22:6e:86:aa:6c:c3:a6: a9:14:8a:57:88:d5:6b:ab:88:c3:24:c1:e4:3f:2d:f5:e3:47: 48:50:0f:da:66:14:a6:ab:e5:35:ae:ae:99:9f:e0:ba:c9:2a: 05:67:d5:d5:63:77:18:39:2e:0f:b9:00:28:26:fb:0e:f7:47: db:c9:be:4f:ac:31:24:91:ae:12:a3:9b:84:79:da:c1:6e:66: 60:74:91:e3:81:05:c9:a6:2e:c9:94:9d:f3:51:92:b7:7f:ed: 54:72:ae:2a:78:3c:9c:9f:02:58:6a:2c:32:de:c2:e1:67:84: c7:c6:89:bc:50:6b:af:f5:d4:4e:9d:4d:c9:83:7d:c7:03:76: 92:08:b2:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsgGrgu4YJuNOal5KgzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNDhjYmFkMTc0ODIwNWI0ZjQzMzRiYmE2MzhjNjRjMmIy MWZjMGUwHhcNMjYwMTAyMDAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTIyODA5ZTYzNjlhNDY5OTMyMTk1NzZjNjA1NTc2Y2Q5Y2I0MTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwRMXppdZY5v2POZ29y6c58Zmwul +PyhsLoPQeICjiikCDgCEGOFoz52gBNsb1fM7ljVH9IlwCfpTINjUdp0KWo+Fk8u catGmwpIlKvTzhLN8/1xQ6antUY29zi/5zTkoOAgEYSSWAsD4VdrSeP1dpsQJ31P iHI5lQSYMoVHO9ucsTSMRVtIe1TNLx2NdoG3sAQvh6Ebx7mWVkYPnMko+7dPFwHe Scxcl7EKp1MV/lwpY/BeqpT/0NBAyABHPQIkFJWHd9POtppTUmfPh+yJ17FppFEm 4Fcs2kO71UvTcqBsu4/zJBB3jm8Qa+sCDtedEeQnMykLCJGHu8/j109EOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNkigJ5jaaRpkyGVdsYFV2zZy0GRMB8GA1UdIwQY MBaAFEFIy60XSCBbT0M0u6Y4xkwrIfwOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVVqTHJSZElJRnRQUXpTN3BqakdUQ3NoX0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jZTIxYjMtYzRkZS00NTZkLWI1Mzgt OTc5NzVkMzRmYzZjLzEvMlNLQW5tTnBwR21USVpWMnhnVlhiTm5MUVpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jZTIxYjMtYzRkZS00NTZkLWI1MzgtOTc5NzVkMzRmYzZj LzEvUVVqTHJSZElJRnRQUXpTN3BqakdUQ3NoX0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBstlgMA0G CSqGSIb3DQEBCwUAA4IBAQBUC+w/BQluC5yMUwwKNvF6wPZzXbrLZUJCtgwqtDhI QLYK9QRNS/qRNdXMWgwL2mukGezi/fREIpKNl873abKt+vYU2UWIoCTVSDkCC8w7 2CMHKe2TJYTpEpwZ98kEE8TpwZ7wl8+ig2KAIxXByZfJR/4Y7v/46CJuhqpsw6ap FIpXiNVrq4jDJMHkPy3140dIUA/aZhSmq+U1rq6Zn+C6ySoFZ9XVY3cYOS4PuQAo JvsO90fbyb5PrDEkka4So5uEedrBbmZgdJHjgQXJpi7JlJ3zUZK3f+1Ucq4qeDyc nwJYaiwy3sLhZ4THxom8UGuv9dROnU3Jg33HA3aSCLKX -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:23 2026 by rpki-client