This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/S2Rr6_hn2BX5-GlRfv2PnCiP4xk.roa File: S2Rr6_hn2BX5-GlRfv2PnCiP4xk.roa (raw, json) Hash identifier: 7r472AWf04Pi1AuDVC711AyL3xDv3j2X7wUK1jCkLQk= Subject key identifier: 4B:64:6B:EB:F8:67:D8:15:F9:F8:69:51:7E:FD:8F:9C:28:8F:E3:19 Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f Certificate serial: 019B7C8043CCAD9929AE62DB86F6EFAA65B7 Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/S2Rr6_hn2BX5-GlRfv2PnCiP4xk.roa Signing time: Fri 02 Jan 2026 02:18:59 +0000 ROA not before: Fri 02 Jan 2026 02:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198944 IP address blocks: 81.161.96.0/23 maxlen: 23 185.82.228.0/22 maxlen: 22 185.137.112.0/23 maxlen: 23 185.137.114.0/23 maxlen: 23 185.247.100.0/22 maxlen: 22 2001:67c:2a68::/48 maxlen: 48 2a03:6960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:43:cc:ad:99:29:ae:62:db:86:f6:ef:aa:65:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b646bebf867d815f9f869517efd8f9c288fe319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:4d:a8:f2:29:27:a9:a8:91:28:57:5e:a1: ab:b0:cc:9d:68:b8:a9:fd:b6:ac:01:c8:f6:94:d2: 70:13:cd:88:d3:cc:7f:d3:78:d0:a3:1e:13:a5:da: 2c:7f:17:f8:19:43:3f:b7:d6:f3:b6:55:87:f6:bb: 9e:32:82:3b:5c:59:27:97:ba:be:0d:5c:67:95:ea: 0d:70:6b:78:c2:01:52:af:7a:62:5c:da:c2:ec:83: b7:ce:b9:2e:1e:12:ba:c9:9f:3e:19:a4:65:dd:10: c0:d5:77:1b:55:d2:24:4a:d7:59:3c:e7:09:96:e0: c3:e8:8c:30:81:d8:a2:e1:36:29:80:4e:e5:4f:72: 21:91:b4:f2:67:aa:13:18:3b:dd:96:75:a8:24:ea: 27:47:6e:84:f6:6f:2b:39:75:f4:55:23:cc:f9:0d: 71:4f:f1:4b:6a:f3:b1:71:30:5c:43:1e:eb:9a:eb: 14:89:67:48:a2:e7:fb:64:e4:f8:84:2a:bb:41:5b: 85:4d:d6:77:93:61:90:e4:98:a3:9c:0e:1b:cf:aa: 73:45:81:a0:7d:aa:85:ef:22:9b:0c:3a:1e:d2:08: 9a:f2:1a:62:80:20:ce:28:64:c6:72:21:75:cc:fa: af:c6:2d:5c:f3:69:d0:4f:87:f2:3d:a8:38:64:bb: 95:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:64:6B:EB:F8:67:D8:15:F9:F8:69:51:7E:FD:8F:9C:28:8F:E3:19 X509v3 Authority Key Identifier: keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/S2Rr6_hn2BX5-GlRfv2PnCiP4xk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.96.0/23 185.82.228.0/22 185.137.112.0/22 185.247.100.0/22 IPv6: 2001:67c:2a68::/48 2a03:6960::/32 Signature Algorithm: sha256WithRSAEncryption bd:7b:32:2b:ef:35:c5:38:00:26:f3:a6:94:dc:47:62:98:93: db:ea:7b:8e:07:5e:f2:df:f6:55:5e:24:6e:5f:02:d2:a1:71: f6:33:98:02:53:a5:99:ca:7a:24:4b:17:ec:02:74:cf:6c:33: 8c:2b:c1:5c:39:d6:4d:aa:b6:5b:29:ab:9a:2a:93:85:81:ed: 76:56:5a:0c:3c:00:65:fd:ce:97:10:59:05:c5:0b:4a:e5:6d: 79:20:20:22:37:c8:59:94:d8:b0:0f:4b:47:66:a9:df:63:98: de:da:8d:a5:22:7d:48:d5:00:e3:bd:6f:de:d4:dc:fc:72:b7: 60:d5:52:c1:25:b5:cf:63:86:1c:d2:e8:c4:e8:b8:15:60:2c: 57:4b:f5:e4:1b:8e:d6:00:4d:50:3c:8a:45:2d:32:2b:0d:37: da:21:fe:eb:93:c1:51:fc:8a:13:00:0b:9e:f9:97:ea:35:cd: bd:8d:83:49:0e:fe:f4:d1:aa:41:59:38:90:b3:ab:e7:1f:b2: 79:f6:bf:35:f1:b5:54:22:5f:c8:d0:0c:64:b9:45:e8:db:8e: 46:93:cf:f5:e0:59:46:4f:ac:4e:f0:d8:0f:ea:e3:5c:86:96: c5:a3:df:8f:f0:ad:d0:c9:49:1f:f0:20:49:66:41:23:9f:72: 07:5a:d3:4d -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt8gEPMrZkprmLbhvbvqmW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZWEwOGVmYTliM2Y3OGM5ZWY5ZGI3NjdhZGMyMWRkNjE4 MzRlMGYwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjY0NmJlYmY4NjdkODE1ZjlmODY5NTE3ZWZkOGY5YzI4OGZlMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj9NqPIpJ6mokShXXqGrsMydaLip /basAcj2lNJwE82I08x/03jQox4Tpdosfxf4GUM/t9bztlWH9rueMoI7XFknl7q+ DVxnleoNcGt4wgFSr3piXNrC7IO3zrkuHhK6yZ8+GaRl3RDA1XcbVdIkStdZPOcJ luDD6Iwwgdii4TYpgE7lT3IhkbTyZ6oTGDvdlnWoJOonR26E9m8rOXX0VSPM+Q1x T/FLavOxcTBcQx7rmusUiWdIouf7ZOT4hCq7QVuFTdZ3k2GQ5JijnA4bz6pzRYGg faqF7yKbDDoe0gia8hpigCDOKGTGciF1zPqvxi1c82nQT4fyPag4ZLuVHQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFEtka+v4Z9gV+fhpUX79j5woj+MZMB8GA1UdIwQY MBaAFDPqCO+ps/eMnvnbdnrcId1hg04PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjct ZGVjY2ZhM2VhNjM1LzEvUzJScjZfaG4yQlg1LUdsUmZ2MlBuQ2lQNHhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjctZGVjY2ZhM2VhNjM1 LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQBUaFgAwQC uVLkAwQCuYlwAwQCufdkMBYEAgACMBADBwAgAQZ8KmgDBQAqA2lgMA0GCSqGSIb3 DQEBCwUAA4IBAQC9ezIr7zXFOAAm86aU3EdimJPb6nuOB17y3/ZVXiRuXwLSoXH2 M5gCU6WZynokSxfsAnTPbDOMK8FcOdZNqrZbKauaKpOFge12VloMPABl/c6XEFkF xQtK5W15ICAiN8hZlNiwD0tHZqnfY5je2o2lIn1I1QDjvW/e1Nz8crdg1VLBJbXP Y4Yc0ujE6LgVYCxXS/XkG47WAE1QPIpFLTIrDTfaIf7rk8FR/IoTAAue+ZfqNc29 jYNJDv700apBWTiQs6vnH7J59r818bVUIl/I0AxkuUXo245Gk8/14FlGT6xO8NgP 6uNchpbFo9+P8K3QyUkf8CBJZkEjn3IHWtNN -----END CERTIFICATE-----Generated at Mon Feb 2 08:08:20 2026 by rpki-client