This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/2qXApSidpWdSFdmcOzHRk7MVJGA.roa File: 2qXApSidpWdSFdmcOzHRk7MVJGA.roa (raw, json) Hash identifier: tKuwIDkl0tJk8l/tFOJOI+xXJ+h2pTNYNZ9EsSNazNw= Subject key identifier: DA:A5:C0:A5:28:9D:A5:67:52:15:D9:9C:3B:31:D1:93:B3:15:24:60 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC78BA386DB232D4B1333218F62A353 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/2qXApSidpWdSFdmcOzHRk7MVJGA.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41022 IP address blocks: 185.195.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8b:a3:86:db:23:2d:4b:13:33:21:8f:62:a3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daa5c0a5289da5675215d99c3b31d193b3152460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:9d:d2:02:2c:12:bd:98:92:99:0d:db:bc: 77:5e:d1:68:e8:ad:1b:2f:d8:06:5c:c2:e3:ae:07: 4f:49:35:d6:8e:49:2e:b4:4d:be:66:48:46:aa:a7: 2c:27:1b:46:38:82:25:70:e8:93:4d:57:26:04:32: ea:49:8f:28:f5:e9:7d:6c:1e:9b:11:36:b9:8d:78: 84:3a:8f:43:08:48:33:b8:c3:79:64:18:bc:7e:83: 38:15:90:4a:55:95:2c:20:6f:8c:22:5f:44:bb:74: e2:0b:b2:8f:e5:81:3a:77:d5:3e:5c:26:35:9e:f9: 75:0e:a1:0b:e2:87:fd:0b:e9:d2:b3:20:57:0b:40: a7:32:2f:a8:54:18:98:ce:39:70:a0:77:97:8a:22: 27:6b:9e:f7:96:c8:21:ab:2b:b7:79:c2:fe:b9:7a: db:bd:50:24:33:67:eb:ca:35:5a:5c:c0:c6:6c:91: c9:79:c3:ea:6c:69:c9:65:9d:c0:d8:7c:79:d8:12: 98:a5:2c:fd:e3:c2:31:7c:dd:2a:52:25:38:1d:ba: f4:53:59:15:97:57:6d:c2:dd:db:9c:98:40:b6:d8: 37:1e:a8:54:6a:02:e6:29:43:bd:f3:19:92:59:b6: a6:aa:4d:87:2a:56:40:b1:86:11:4f:8d:2a:5b:f8: ad:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A5:C0:A5:28:9D:A5:67:52:15:D9:9C:3B:31:D1:93:B3:15:24:60 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/2qXApSidpWdSFdmcOzHRk7MVJGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.241.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:cd:78:7b:ea:f3:a9:9b:5f:83:0e:ed:43:a7:d3:ef:97:00: e0:87:bb:f9:23:60:d7:62:8a:80:d1:09:a4:89:79:ad:27:2d: 80:94:c5:c4:44:66:b6:a9:09:ea:33:32:f7:c0:0e:97:2c:e0: e6:c8:60:ca:40:01:10:74:22:f4:7e:ef:c7:4b:fc:d2:f9:e5: 48:ad:ec:61:06:af:81:61:7b:44:3f:79:7d:e7:fa:82:57:df: 16:b1:81:c9:bf:61:58:8a:71:6a:d0:1c:10:8d:49:d3:9c:b7: 45:99:89:fa:2e:8e:30:f6:9a:7b:62:35:c5:c8:68:58:e4:81: 2d:09:81:36:77:6b:1a:aa:b6:43:f9:71:01:92:b0:6e:40:19: 20:23:19:af:0e:93:a6:62:3f:93:f4:11:e1:79:d5:2f:74:82: 2b:fc:96:60:ac:6d:16:90:7b:a6:14:e9:06:54:9e:f2:4b:da: 4c:ef:36:ad:ae:97:5b:38:61:de:ce:78:3e:68:e7:96:7c:72: 37:bb:eb:10:bf:02:8c:c0:fc:3f:1b:e8:37:a5:da:4b:33:6f: f0:40:bf:51:c5:bb:10:47:83:fd:b3:94:9c:b3:10:4b:d2:b9: 60:25:6c:b8:be:77:90:9b:1c:01:af:68:06:79:11:6b:64:ab: 5d:f9:fe:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4ujhtsjLUsTMyGPYqNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWE1YzBhNTI4OWRhNTY3NTIxNWQ5OWMzYjMxZDE5M2IzMTUyNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzISd0gIsEr2YkpkN27x3XtFo6K0b L9gGXMLjrgdPSTXWjkkutE2+ZkhGqqcsJxtGOIIlcOiTTVcmBDLqSY8o9el9bB6b ETa5jXiEOo9DCEgzuMN5ZBi8foM4FZBKVZUsIG+MIl9Eu3TiC7KP5YE6d9U+XCY1 nvl1DqEL4of9C+nSsyBXC0CnMi+oVBiYzjlwoHeXiiIna573lsghqyu3ecL+uXrb vVAkM2fryjVaXMDGbJHJecPqbGnJZZ3A2Hx52BKYpSz948IxfN0qUiU4Hbr0U1kV l1dtwt3bnJhAttg3HqhUagLmKUO98xmSWbamqk2HKlZAsYYRT40qW/itDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNqlwKUonaVnUhXZnDsx0ZOzFSRgMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvMnFYQXBTaWRwV2RTRmRtY096SFJrN01WSkdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucPxMA0G CSqGSIb3DQEBCwUAA4IBAQAazXh76vOpm1+DDu1Dp9PvlwDgh7v5I2DXYoqA0Qmk iXmtJy2AlMXERGa2qQnqMzL3wA6XLODmyGDKQAEQdCL0fu/HS/zS+eVIrexhBq+B YXtEP3l95/qCV98WsYHJv2FYinFq0BwQjUnTnLdFmYn6Lo4w9pp7YjXFyGhY5IEt CYE2d2saqrZD+XEBkrBuQBkgIxmvDpOmYj+T9BHhedUvdIIr/JZgrG0WkHumFOkG VJ7yS9pM7zatrpdbOGHezng+aOeWfHI3u+sQvwKMwPw/G+g3pdpLM2/wQL9RxbsQ R4P9s5ScsxBL0rlgJWy4vneQmxwBr2gGeRFrZKtd+f45 -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:45 2026 by rpki-client