This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa File: 2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa (raw, json) Hash identifier: xcDU75sza534zn4A1SLY0N4eKvAgRsSzSIlzRIhia7Y= Subject key identifier: D9:87:39:3D:CF:F0:E0:40:6B:A8:E3:0A:98:52:90:2E:14:CB:91:DC Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9 Certificate serial: 019B783558077D359B9A483FEA61B6BE769D Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa Signing time: Thu 01 Jan 2026 06:18:40 +0000 ROA not before: Thu 01 Jan 2026 06:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 194.76.30.0/23 maxlen: 23 194.76.30.0/24 maxlen: 24 194.76.31.0/24 maxlen: 24 194.127.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:58:07:7d:35:9b:9a:48:3f:ea:61:b6:be:76:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d987393dcff0e0406ba8e30a9852902e14cb91dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:ff:ae:00:55:02:3e:14:9e:5c:29:5f:5e: c2:c6:54:05:3d:c7:cb:05:0a:69:30:94:b9:d2:f0: bb:d4:40:b6:d8:76:f3:56:63:12:87:5e:37:d1:af: d1:74:c8:2a:bb:17:22:86:a2:8c:76:55:2a:e9:da: 38:8c:61:20:83:3e:36:f5:05:de:94:4b:79:42:5b: 26:ac:fb:ff:35:ba:3f:21:dc:fd:f1:94:58:de:6d: 96:88:9f:ec:73:06:2c:91:bb:76:5a:a2:9c:2b:41: f7:d4:37:7a:4b:71:65:0f:cd:94:96:cc:89:d2:49: e3:56:a9:bf:00:f5:57:34:7c:87:8c:31:65:1b:ea: ab:b0:77:a9:de:1e:e1:af:2d:c4:ca:29:c8:64:da: 77:c9:33:c9:5c:1d:54:34:95:37:9b:d7:eb:60:54: b1:30:ba:ac:43:48:2e:38:6d:00:27:57:c1:30:4a: 74:44:6d:06:5f:c9:76:4e:30:69:dc:8a:3c:fc:6a: e3:66:34:09:6a:69:ab:76:c1:03:57:68:f7:2e:34: dc:1f:b0:e4:cb:5c:79:47:65:06:6e:3a:60:d1:f7: 59:0c:df:07:6a:4a:0a:3a:0d:b1:ed:33:71:83:98: c0:75:30:fb:2b:ee:5e:37:c5:59:a9:82:b1:91:8b: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:87:39:3D:CF:F0:E0:40:6B:A8:E3:0A:98:52:90:2E:14:CB:91:DC X509v3 Authority Key Identifier: keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.30.0/23 194.127.134.0/24 Signature Algorithm: sha256WithRSAEncryption 75:24:8b:69:d5:1b:d7:84:6e:41:21:3b:03:f2:9c:1b:17:6f: cc:18:d3:97:2a:42:55:9a:ab:67:18:e9:1a:38:a9:c5:eb:c3: 2f:f4:b3:fc:f6:cf:57:51:95:de:dc:a1:ac:d3:22:3c:84:03: e2:17:4f:2c:b3:a8:13:f2:8e:98:44:78:34:a0:e8:5d:c3:45: 82:24:08:28:fb:6d:70:aa:09:05:71:ca:d8:e9:22:a1:ec:f8: fc:47:47:57:28:c4:22:54:c9:d9:35:a5:f6:a3:a5:3b:03:e2: 30:26:5e:7a:d8:a6:2c:a8:91:d4:2a:ab:67:69:b5:df:15:5a: 9f:30:36:7a:fb:0b:01:d7:d7:86:6c:39:7b:92:a0:6e:a8:ba: 71:9a:27:82:cc:05:42:5b:7f:67:89:dc:fb:68:23:4e:bb:20: 1e:ff:25:c4:50:95:2e:d5:4e:6f:0a:5b:c8:5a:12:e9:75:00: 2e:15:49:92:47:cd:e9:05:c5:c5:b9:1c:28:13:28:36:91:80: 6e:45:80:62:81:60:84:8a:84:58:25:6c:4f:f8:30:66:94:1f: 73:62:d4:ae:e1:6c:79:ac:26:b3:e4:ff:f1:7e:c8:39:37:f3: 23:5b:3a:15:27:bc:4c:4e:f2:46:9e:9b:ee:9b:55:aa:65:e1: 75:69:a0:73 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NVgHfTWbmkg/6mG2vnadMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZDFhODM2NmMyMTE1OWYwNzk0NzhhOTAzMDg0M2ZiZjYw NjMxYjkwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTg3MzkzZGNmZjBlMDQwNmJhOGUzMGE5ODUyOTAyZTE0Y2I5MWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTv/rgBVAj4UnlwpX17CxlQFPcfL BQppMJS50vC71EC22HbzVmMSh1430a/RdMgquxcihqKMdlUq6do4jGEggz429QXe lEt5QlsmrPv/Nbo/Idz98ZRY3m2WiJ/scwYskbt2WqKcK0H31Dd6S3FlD82UlsyJ 0knjVqm/APVXNHyHjDFlG+qrsHep3h7hry3EyinIZNp3yTPJXB1UNJU3m9frYFSx MLqsQ0guOG0AJ1fBMEp0RG0GX8l2TjBp3Io8/GrjZjQJammrdsEDV2j3LjTcH7Dk y1x5R2UGbjpg0fdZDN8HakoKOg2x7TNxg5jAdTD7K+5eN8VZqYKxkYslGQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNmHOT3P8OBAa6jjCphSkC4Uy5HcMB8GA1UdIwQY MBaAFODRqDZsIRWfB5R4qQMIQ/v2BjG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjIt ZjhhZTBkYmM1ZGYyLzEvMlljNVBjX3c0RUJycU9NS21GS1FMaFRMa2R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjItZjhhZTBkYmM1ZGYy LzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwkweAwQA wn+GMA0GCSqGSIb3DQEBCwUAA4IBAQB1JItp1RvXhG5BITsD8pwbF2/MGNOXKkJV mqtnGOkaOKnF68Mv9LP89s9XUZXe3KGs0yI8hAPiF08ss6gT8o6YRHg0oOhdw0WC JAgo+21wqgkFccrY6SKh7Pj8R0dXKMQiVMnZNaX2o6U7A+IwJl562KYsqJHUKqtn abXfFVqfMDZ6+wsB19eGbDl7kqBuqLpxmieCzAVCW39nidz7aCNOuyAe/yXEUJUu 1U5vClvIWhLpdQAuFUmSR83pBcXFuRwoEyg2kYBuRYBigWCEioRYJWxP+DBmlB9z YtSu4Wx5rCaz5P/xfsg5N/MjWzoVJ7xMTvJGnpvum1WqZeF1aaBz -----END CERTIFICATE-----Generated at Mon Jan 19 11:48:28 2026 by rpki-client