This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/2B_TjSMzG_Qyjy_a889-yEM4ZUQ.roa File: 2B_TjSMzG_Qyjy_a889-yEM4ZUQ.roa (raw, json) Hash identifier: 0aiNkMB/Opb3pvqD1jWSeypzZe7gwQQUTXUmi/6/oKI= Subject key identifier: D8:1F:D3:8D:23:33:1B:F4:32:8F:2F:DA:F3:CF:7E:C8:43:38:65:44 Certificate issuer: /CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4 Certificate serial: 019BE3CDBF1F4276D0C793C58B8ADC130FA8 Authority key identifier: 63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/2B_TjSMzG_Qyjy_a889-yEM4ZUQ.roa Signing time: Thu 22 Jan 2026 03:44:30 +0000 ROA not before: Thu 22 Jan 2026 03:44:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44428 IP address blocks: 89.223.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e3:cd:bf:1f:42:76:d0:c7:93:c5:8b:8a:dc:13:0f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4 Validity Not Before: Jan 22 03:44:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d81fd38d23331bf4328f2fdaf3cf7ec843386544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2d:5f:9f:d0:5b:10:6b:c2:cd:8b:10:d7:e5: ba:15:d7:f2:6f:07:21:b5:29:fb:9c:ef:40:a5:00: a5:ea:09:1e:de:88:ee:0f:e1:de:34:90:4e:0b:b4: ed:08:d9:70:5c:6f:1d:e7:96:45:d7:fd:a8:94:0d: c8:50:86:1c:4d:22:29:3b:2a:3e:90:2d:be:d4:a8: b7:23:b8:c7:e5:33:af:a0:a9:47:ce:97:6c:55:15: c8:a2:9e:69:70:74:36:d8:79:ba:12:a9:2d:1c:38: ee:84:7d:9d:7e:3e:bd:df:ed:8d:64:44:fe:87:0f: ad:9d:17:35:56:25:6c:45:77:a3:a8:ca:39:2d:68: b0:ba:3a:5b:e7:61:be:f6:9a:3f:cb:60:da:41:99: 6c:2c:c1:b3:9b:bd:08:7b:80:7b:5c:66:bb:e6:d1: 34:c5:b3:25:d2:a4:27:28:72:60:cd:72:c3:f2:f7: da:19:45:0b:b5:eb:e1:71:c0:e6:c4:dd:b0:49:82: f3:35:e1:13:22:47:5f:31:e6:ed:a2:95:58:18:9f: e6:3b:db:ab:70:0b:6d:0e:2a:eb:0a:79:09:81:3e: ed:b1:c6:3e:6b:cc:57:af:9f:a0:0f:c8:88:f4:3a: d5:51:a5:10:4f:46:2a:04:3d:93:86:db:ad:ae:18: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1F:D3:8D:23:33:1B:F4:32:8F:2F:DA:F3:CF:7E:C8:43:38:65:44 X509v3 Authority Key Identifier: keyid:63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/2B_TjSMzG_Qyjy_a889-yEM4ZUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.223.79.0/24 Signature Algorithm: sha256WithRSAEncryption ba:84:ff:0d:95:96:81:8d:21:0c:7f:1b:85:96:f5:53:79:69: 58:ab:80:0b:d2:6f:93:08:e2:7f:fb:83:06:b1:a3:52:9c:dd: b9:7e:38:f7:6a:43:51:49:ec:b6:63:8c:f9:37:86:18:67:28: 9f:48:53:4e:2a:dc:1f:17:ed:c5:b0:57:3d:3d:67:a9:11:9c: 8c:dd:96:83:08:31:58:73:a8:25:9b:45:cb:eb:0a:11:47:2d: c6:23:ae:4e:4a:4d:6e:bf:53:cf:af:b0:39:e3:21:7b:1b:6f: f4:81:e6:fb:14:1b:52:f2:38:44:9f:01:72:39:22:4c:90:e6: 55:3f:34:83:82:5c:3e:5a:08:f7:d4:a1:a2:eb:e3:9e:10:29: 0c:7e:35:89:05:a5:db:10:88:e1:a4:46:a7:7f:e3:6b:4a:9a: e6:98:01:c2:bc:67:ed:3d:e4:a6:21:70:81:59:23:09:ed:e4: d6:35:20:ab:c0:d8:95:4d:57:ca:1e:3c:de:5f:44:00:3f:04: f8:67:dc:f4:8e:bc:e5:c7:75:d1:05:2d:83:f8:62:ec:83:39: df:03:5d:f5:07:cc:93:30:4c:0f:42:63:5c:bf:e2:d4:65:c6: e7:81:c2:83:cb:b1:e8:e3:6f:17:de:d0:44:a6:b0:d5:11:ce: 45:e2:6c:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvjzb8fQnbQx5PFi4rcEw+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzY2JmY2RhMWRjMDlkODhiM2FmNWNlZjkwZGEwMTYyZmRh Mzc0YjQwHhcNMjYwMTIyMDM0NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODFmZDM4ZDIzMzMxYmY0MzI4ZjJmZGFmM2NmN2VjODQzMzg2NTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC1fn9BbEGvCzYsQ1+W6Fdfybwch tSn7nO9ApQCl6gke3ojuD+HeNJBOC7TtCNlwXG8d55ZF1/2olA3IUIYcTSIpOyo+ kC2+1Ki3I7jH5TOvoKlHzpdsVRXIop5pcHQ22Hm6EqktHDjuhH2dfj693+2NZET+ hw+tnRc1ViVsRXejqMo5LWiwujpb52G+9po/y2DaQZlsLMGzm70Ie4B7XGa75tE0 xbMl0qQnKHJgzXLD8vfaGUULtevhccDmxN2wSYLzNeETIkdfMebtopVYGJ/mO9ur cAttDirrCnkJgT7tscY+a8xXr5+gD8iI9DrVUaUQT0YqBD2Thtutrhib5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNgf040jMxv0Mo8v2vPPfshDOGVEMB8GA1UdIwQY MBaAFGPL/NodwJ2Is69c75DaAWL9o3S0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTh2ODJoM0FuWWl6cjF6dmtOb0JZdjJqZExRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82ZmI3ZTYtMDRjMC00MzYxLTk0YzAt NzMzMWJmMjA3ZjRkLzEvMkJfVGpTTXpHX1F5anlfYTg4OS15RU00WlVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny82ZmI3ZTYtMDRjMC00MzYxLTk0YzAtNzMzMWJmMjA3ZjRk LzEvWTh2ODJoM0FuWWl6cjF6dmtOb0JZdjJqZExRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWd9PMA0G CSqGSIb3DQEBCwUAA4IBAQC6hP8NlZaBjSEMfxuFlvVTeWlYq4AL0m+TCOJ/+4MG saNSnN25fjj3akNRSey2Y4z5N4YYZyifSFNOKtwfF+3FsFc9PWepEZyM3ZaDCDFY c6glm0XL6woRRy3GI65OSk1uv1PPr7A54yF7G2/0geb7FBtS8jhEnwFyOSJMkOZV PzSDglw+Wgj31KGi6+OeECkMfjWJBaXbEIjhpEanf+NrSprmmAHCvGftPeSmIXCB WSMJ7eTWNSCrwNiVTVfKHjzeX0QAPwT4Z9z0jrzlx3XRBS2D+GLsgznfA131B8yT MEwPQmNcv+LUZcbngcKDy7Ho428X3tBEprDVEc5F4myE -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:23 2026 by rpki-client