This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2mu-tPL4satT9iOmHbmF2HpYFAw.roa File: 2mu-tPL4satT9iOmHbmF2HpYFAw.roa (raw, json) Hash identifier: 4rK4GmVEjB/TKojCxRbXTTmzXLKJ+xEO5prNhsIn8VI= Subject key identifier: DA:6B:BE:B4:F2:F8:B1:AB:53:F6:23:A6:1D:B9:85:D8:7A:58:14:0C Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019BA84295A36A2777EA9600C1B4024B87C0 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2mu-tPL4satT9iOmHbmF2HpYFAw.roa Signing time: Sat 10 Jan 2026 14:14:54 +0000 ROA not before: Sat 10 Jan 2026 14:14:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213035 IP address blocks: 212.192.218.0/24 maxlen: 24 212.192.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a8:42:95:a3:6a:27:77:ea:96:00:c1:b4:02:4b:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 10 14:14:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da6bbeb4f2f8b1ab53f623a61db985d87a58140c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f4:65:5d:f3:1b:fc:7a:c2:ef:b0:ec:1c:d7: e3:42:dc:88:ee:11:22:46:91:37:81:ac:49:33:32: 4d:05:dc:99:24:df:19:46:e5:d6:4a:9d:ba:ed:90: 98:37:ef:7c:ee:2d:e1:4a:d5:2b:e9:bd:87:e3:01: 01:03:d3:90:f1:db:9b:bb:b6:0f:21:d2:15:20:f7: 98:10:29:c1:41:48:f3:c1:62:1a:84:c1:f9:44:08: 76:03:57:f3:41:f3:34:7f:34:64:a3:5d:3f:a4:c9: 69:1c:0f:1b:fd:06:d7:5f:b0:bc:6e:23:e8:dc:c1: f3:55:74:ab:66:bb:fa:ba:de:3d:14:25:3b:bc:77: 00:bc:a6:58:4b:f9:6c:11:a1:32:19:3c:a3:ea:06: 41:e6:9e:72:73:b7:c6:fb:47:b7:88:a4:2a:fa:05: 4c:e1:2e:24:50:af:b0:c0:0c:e9:41:ab:43:c5:db: 39:b1:77:1f:4c:81:46:a0:99:3d:04:76:22:b4:0b: c9:d8:c3:1a:fb:79:9e:96:cd:ad:ac:d0:33:97:2c: c5:49:55:51:3d:99:19:ac:8b:c4:ec:b9:8a:da:5f: ef:f8:0a:19:ce:8e:01:4f:d8:fa:8f:9d:c1:6f:0f: dc:2e:74:10:e9:a0:4b:ff:da:ef:60:f8:e9:86:37: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6B:BE:B4:F2:F8:B1:AB:53:F6:23:A6:1D:B9:85:D8:7A:58:14:0C X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2mu-tPL4satT9iOmHbmF2HpYFAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.192.218.0/23 Signature Algorithm: sha256WithRSAEncryption 85:98:0a:b3:39:16:d4:c5:23:ee:4c:e3:d6:da:77:29:a7:c6: 75:65:bb:d0:d5:9d:bd:67:93:30:1a:1a:e5:51:15:e5:26:d5: b4:1b:ae:25:94:e1:55:01:e2:6d:7f:0a:09:af:6b:52:a9:3f: 22:81:46:08:33:cd:a4:c9:59:40:0c:b5:7b:18:10:92:93:bf: fc:5c:17:6e:7e:23:b4:f5:c2:76:2b:1e:51:70:a4:3d:f3:cd: 2d:05:be:e8:f3:a9:e8:f9:94:74:38:46:06:04:e1:0c:fb:5f: dc:b4:ed:b1:65:5c:79:d6:1e:c8:05:f2:52:12:2e:f4:ed:4b: d3:3f:89:53:d5:43:e6:21:77:69:b7:db:29:15:d5:19:64:8f: c5:45:39:cf:14:6c:f1:a6:1b:25:85:44:e0:f9:95:c6:b4:3c: 6e:67:92:48:2a:20:e7:43:38:cf:8e:27:6f:64:d5:45:f9:fc: d1:1d:85:97:47:f6:cd:b8:dd:c5:e3:c3:c1:3b:fb:8c:aa:71: 6f:3d:0d:67:1d:b4:58:b7:02:eb:d6:0a:bb:11:f3:25:96:3e: e8:58:3b:32:bc:9f:22:04:1d:1a:f6:3f:55:9e:bd:a4:11:9f: 07:22:14:9a:4d:df:53:2f:1d:b7:ab:2d:33:de:9b:4c:ee:85: 05:05:03:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuoQpWjaid36pYAwbQCS4fAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTEwMTQxNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTZiYmViNGYyZjhiMWFiNTNmNjIzYTYxZGI5ODVkODdhNTgxNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fRlXfMb/HrC77DsHNfjQtyI7hEi RpE3gaxJMzJNBdyZJN8ZRuXWSp267ZCYN+987i3hStUr6b2H4wEBA9OQ8dubu7YP IdIVIPeYECnBQUjzwWIahMH5RAh2A1fzQfM0fzRko10/pMlpHA8b/QbXX7C8biPo 3MHzVXSrZrv6ut49FCU7vHcAvKZYS/lsEaEyGTyj6gZB5p5yc7fG+0e3iKQq+gVM 4S4kUK+wwAzpQatDxds5sXcfTIFGoJk9BHYitAvJ2MMa+3mels2trNAzlyzFSVVR PZkZrIvE7LmK2l/v+AoZzo4BT9j6j53Bbw/cLnQQ6aBL/9rvYPjphjeXmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNprvrTy+LGrU/Yjph25hdh6WBQMMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvMm11LXRQTDRzYXRUOWlPbUhibUYySHBZRkF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1MDaMA0G CSqGSIb3DQEBCwUAA4IBAQCFmAqzORbUxSPuTOPW2ncpp8Z1ZbvQ1Z29Z5MwGhrl URXlJtW0G64llOFVAeJtfwoJr2tSqT8igUYIM82kyVlADLV7GBCSk7/8XBdufiO0 9cJ2Kx5RcKQ9880tBb7o86no+ZR0OEYGBOEM+1/ctO2xZVx51h7IBfJSEi707UvT P4lT1UPmIXdpt9spFdUZZI/FRTnPFGzxphslhUTg+ZXGtDxuZ5JIKiDnQzjPjidv ZNVF+fzRHYWXR/bNuN3F48PBO/uMqnFvPQ1nHbRYtwLr1gq7EfMllj7oWDsyvJ8i BB0a9j9Vnr2kEZ8HIhSaTd9TLx23qy0z3ptM7oUFBQPN -----END CERTIFICATE-----Generated at Mon Jan 19 14:41:00 2026 by rpki-client