This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2pMGhQ6--J-9tDwVQNf6DSHof1s.roa File: 2pMGhQ6--J-9tDwVQNf6DSHof1s.roa (raw, json) Hash identifier: pgI6814ebl3INu6GIh5qT/EMWl/SRcsYCMgplHM+++w= Subject key identifier: DA:93:06:85:0E:BE:F8:9F:BD:B4:3C:15:40:D7:FA:0D:21:E8:7F:5B Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DFE7B8D01AF7948D627C0F5B9FD37 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2pMGhQ6--J-9tDwVQNf6DSHof1s.roa Signing time: Thu 01 Jan 2026 12:17:38 +0000 ROA not before: Thu 01 Jan 2026 12:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 89.125.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fe:7b:8d:01:af:79:48:d6:27:c0:f5:b9:fd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da9306850ebef89fbdb43c1540d7fa0d21e87f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:42:82:2e:77:e0:f6:0c:38:a3:77:da:cd: 9f:32:fb:cf:00:a5:66:1a:71:b4:e8:f0:e0:a0:23: 7e:55:e8:99:a1:75:b1:ac:55:25:a8:f2:42:5a:81: b2:01:79:9f:00:91:86:87:87:e0:02:6d:de:2a:11: 7a:75:83:1f:1b:f8:2e:f1:46:35:c6:19:98:e3:79: 0f:7e:16:bd:08:f6:23:b7:ed:6f:d0:97:5e:2d:eb: 3d:6d:26:95:79:19:37:88:e0:1a:da:8f:96:34:91: 77:a1:9e:2a:57:0a:f8:07:cb:d0:4e:26:30:85:10: a7:b7:7f:cc:ce:54:f0:85:07:b7:36:43:22:b9:48: 72:a2:d1:bf:9b:2e:8b:67:5b:c3:b8:f3:39:35:53: 04:69:30:87:04:43:b1:00:97:1f:5f:d4:89:ec:b8: 65:4e:77:bd:53:f4:0f:f2:29:84:2d:ef:d9:39:fe: 36:33:cb:55:88:b5:dc:56:49:e3:9e:1b:f3:98:f4: 5a:22:41:10:2c:3d:2d:12:a0:26:c7:d2:bd:47:62: 25:c3:26:f3:3b:9a:f1:92:d6:a7:d7:6c:2c:a1:c3: 65:52:5d:33:15:5f:d0:bb:cc:7e:bb:b3:ae:95:4a: 17:20:55:3f:4c:04:e7:3f:45:d0:ef:44:ea:5c:5a: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:93:06:85:0E:BE:F8:9F:BD:B4:3C:15:40:D7:FA:0D:21:E8:7F:5B X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2pMGhQ6--J-9tDwVQNf6DSHof1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.24.0/22 Signature Algorithm: sha256WithRSAEncryption 78:75:ce:9a:3a:65:66:17:b5:7c:5a:da:93:00:25:8a:ca:32: a5:f3:c7:b3:88:f4:6c:11:ec:bf:56:9e:82:e2:20:2c:8f:10: 54:6c:cf:e5:fa:79:09:c1:0f:2d:a3:58:78:fc:1e:2b:30:52: 2c:b4:20:72:e2:72:8b:05:47:ff:5d:a2:d1:7c:2b:e4:2f:a0: 3c:70:54:89:fd:25:13:58:c3:29:4d:2b:f7:c5:f8:30:54:c7: a5:28:ad:d0:27:6d:79:7d:bb:46:28:21:d5:51:ee:6c:62:4c: aa:55:b8:97:65:d6:d1:46:76:34:32:88:af:e9:2d:48:06:73: 15:6b:82:d5:f9:04:11:7e:0c:6e:86:d1:35:b0:cb:bd:30:44: 31:c0:13:2d:31:e9:38:06:44:e6:cb:ef:48:9d:88:1a:74:85: 7b:cb:a4:81:50:e7:46:dd:f5:9c:71:4e:4e:5b:43:6c:37:57: 53:ea:50:3b:e8:18:16:10:15:55:a8:b4:65:35:36:07:16:c9: 28:d4:68:6e:7e:da:2c:0a:3b:2b:f3:f5:41:25:1e:55:53:7b: c5:e0:ae:8e:4a:41:cb:a0:04:e1:88:4e:99:ad:b4:d6:76:ca: 7f:03:16:55:70:4e:b0:5a:c4:12:19:d9:09:ed:4b:20:72:40: 13:b3:a5:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ff57jQGveUjWJ8D1uf03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTkzMDY4NTBlYmVmODlmYmRiNDNjMTU0MGQ3ZmEwZDIxZTg3ZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArURCgi534PYMOKN32s2fMvvPAKVm GnG06PDgoCN+VeiZoXWxrFUlqPJCWoGyAXmfAJGGh4fgAm3eKhF6dYMfG/gu8UY1 xhmY43kPfha9CPYjt+1v0JdeLes9bSaVeRk3iOAa2o+WNJF3oZ4qVwr4B8vQTiYw hRCnt3/MzlTwhQe3NkMiuUhyotG/my6LZ1vDuPM5NVMEaTCHBEOxAJcfX9SJ7Lhl Tne9U/QP8imELe/ZOf42M8tViLXcVknjnhvzmPRaIkEQLD0tEqAmx9K9R2Ilwybz O5rxktan12wsocNlUl0zFV/Qu8x+u7OulUoXIFU/TATnP0XQ70TqXFrZlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNqTBoUOvvifvbQ8FUDX+g0h6H9bMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvMnBNR2hRNi0tSi05dER3VlFOZjZEU0hvZjFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWX0YMA0G CSqGSIb3DQEBCwUAA4IBAQB4dc6aOmVmF7V8WtqTACWKyjKl88eziPRsEey/Vp6C 4iAsjxBUbM/l+nkJwQ8to1h4/B4rMFIstCBy4nKLBUf/XaLRfCvkL6A8cFSJ/SUT WMMpTSv3xfgwVMelKK3QJ215fbtGKCHVUe5sYkyqVbiXZdbRRnY0Moiv6S1IBnMV a4LV+QQRfgxuhtE1sMu9MEQxwBMtMek4BkTmy+9InYgadIV7y6SBUOdG3fWccU5O W0NsN1dT6lA76BgWEBVVqLRlNTYHFsko1GhuftosCjsr8/VBJR5VU3vF4K6OSkHL oAThiE6ZrbTWdsp/AxZVcE6wWsQSGdkJ7UsgckATs6VS -----END CERTIFICATE-----Generated at Mon Jan 19 14:39:46 2026 by rpki-client