This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/2N5xpRJZNXE8KzyralBufJCFAGk.roa File: 2N5xpRJZNXE8KzyralBufJCFAGk.roa (raw, json) Hash identifier: Gqf6uvdiXISfNhnWADuNcf6vyOowNUUoaBaYKh4kdEc= Subject key identifier: D8:DE:71:A5:12:59:35:71:3C:2B:3C:AB:6A:50:6E:7C:90:85:00:69 Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39 Certificate serial: 019B7CEDD3B6AC8D8C9CC6952E9D774B3ED2 Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/2N5xpRJZNXE8KzyralBufJCFAGk.roa Signing time: Fri 02 Jan 2026 04:18:39 +0000 ROA not before: Fri 02 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212851 IP address blocks: 185.214.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d3:b6:ac:8d:8c:9c:c6:95:2e:9d:77:4b:3e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39 Validity Not Before: Jan 2 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8de71a5125935713c2b3cab6a506e7c90850069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:f3:c0:89:85:f8:b0:ac:4a:6d:57:4d:92: 41:05:7c:cf:6c:e6:d0:1a:99:72:94:d6:d2:1e:e9: cb:4d:c3:6a:d0:4d:9e:09:5b:a1:0b:6f:86:62:c0: d3:aa:53:4d:ee:66:ac:33:10:12:9e:d4:6a:dc:ea: a1:29:5a:f4:31:76:16:e6:95:e4:c0:80:63:d6:40: 21:20:d7:cb:af:9a:15:c5:f5:98:d2:aa:9d:d3:a0: 42:c6:d8:d8:f8:73:2d:87:2e:1c:e9:69:26:37:c3: a1:bc:11:81:1a:32:80:08:3b:97:ce:f8:c2:98:4b: 2c:4a:6e:38:eb:37:9d:2c:6d:91:d6:ce:7f:aa:84: 54:22:30:4a:e6:a1:17:89:fe:1a:fb:22:92:2e:64: 20:70:29:c6:25:a7:13:60:ee:5a:43:af:52:29:56: ca:aa:cf:30:62:c4:5e:af:f6:92:f2:6a:07:1e:a6: 03:44:28:d2:9b:cb:bb:d6:dd:41:62:e8:a5:24:a6: 6c:94:63:15:c0:cf:0d:1c:99:93:0c:dc:a6:10:c0: c8:c9:4f:76:75:a0:7d:5a:6b:cc:84:c5:6c:27:02: b8:cb:84:8b:00:5e:43:23:67:e3:87:c9:b7:1c:2d: 5d:09:b0:95:4e:3e:ef:c3:f1:2b:0a:c7:fa:8b:da: 13:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DE:71:A5:12:59:35:71:3C:2B:3C:AB:6A:50:6E:7C:90:85:00:69 X509v3 Authority Key Identifier: keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/2N5xpRJZNXE8KzyralBufJCFAGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.65.0/24 Signature Algorithm: sha256WithRSAEncryption 76:58:00:2a:24:14:cb:0c:34:12:7f:83:d0:ea:af:ff:7b:20: 58:15:05:15:c0:49:10:07:7c:df:07:fa:86:29:36:b1:4a:59: 0d:a8:4f:a6:35:77:f2:df:34:7d:e4:f4:95:24:a5:a5:bf:5c: 1c:25:3d:59:d3:42:b9:57:1c:7b:ee:16:f4:8b:f1:5f:52:52: c7:9e:f8:4a:fa:48:bf:55:68:e3:b1:b7:ad:ea:b8:61:a6:0d: 8c:a1:7a:c4:34:19:3e:b8:af:8c:c5:1a:00:d5:77:c1:94:7b: 76:7b:2d:b0:9c:51:39:e1:2d:ab:04:e1:ce:b2:bd:2d:bd:1f: d7:0d:69:9d:75:ca:33:e0:34:ca:85:94:26:33:b6:78:6a:e4: fe:3e:b8:fa:0d:f9:32:ff:81:4f:89:86:ef:da:93:c8:d5:bb: d2:e2:4e:0c:c5:af:02:74:1c:48:b9:52:61:bb:d8:a4:54:46: ee:c9:e3:bc:0c:14:c1:76:6e:63:2f:83:67:a4:30:73:11:d5: 35:d4:77:46:b7:89:a9:d3:95:8a:5a:3b:8e:ad:72:9f:bc:d9: f5:0f:2c:02:39:49:0a:ce:63:47:aa:80:e1:3d:10:88:eb:40: f7:e8:a7:28:47:30:e7:4a:4a:25:97:23:29:7f:8f:5f:05:48: 49:d3:f9:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87dO2rI2MnMaVLp13Sz7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMWJkNjJiZWVjYWIwZTkwM2IyOTgxMTI0MWRiMjQ0YmJm NTJjMzkwHhcNMjYwMTAyMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGRlNzFhNTEyNTkzNTcxM2MyYjNjYWI2YTUwNmU3YzkwODUwMDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnvzwImF+LCsSm1XTZJBBXzPbObQ GplylNbSHunLTcNq0E2eCVuhC2+GYsDTqlNN7masMxASntRq3OqhKVr0MXYW5pXk wIBj1kAhINfLr5oVxfWY0qqd06BCxtjY+HMthy4c6WkmN8OhvBGBGjKACDuXzvjC mEssSm446zedLG2R1s5/qoRUIjBK5qEXif4a+yKSLmQgcCnGJacTYO5aQ69SKVbK qs8wYsRer/aS8moHHqYDRCjSm8u71t1BYuilJKZslGMVwM8NHJmTDNymEMDIyU92 daB9WmvMhMVsJwK4y4SLAF5DI2fjh8m3HC1dCbCVTj7vw/ErCsf6i9oTqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNjecaUSWTVxPCs8q2pQbnyQhQBpMB8GA1UdIwQY MBaAFMsb1ivuyrDpA7KYESQdskS79Sw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lMDJiNDctZjJlMC00NDAyLTgxNGYt ZTQwMTZhZDUzY2M5LzEvMk41eHBSSlpOWEU4S3p5cmFsQnVmSkNGQUdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9lMDJiNDctZjJlMC00NDAyLTgxNGYtZTQwMTZhZDUzY2M5 LzEveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudZBMA0G CSqGSIb3DQEBCwUAA4IBAQB2WAAqJBTLDDQSf4PQ6q//eyBYFQUVwEkQB3zfB/qG KTaxSlkNqE+mNXfy3zR95PSVJKWlv1wcJT1Z00K5Vxx77hb0i/FfUlLHnvhK+ki/ VWjjsbet6rhhpg2MoXrENBk+uK+MxRoA1XfBlHt2ey2wnFE54S2rBOHOsr0tvR/X DWmddcoz4DTKhZQmM7Z4auT+Prj6Dfky/4FPiYbv2pPI1bvS4k4Mxa8CdBxIuVJh u9ikVEbuyeO8DBTBdm5jL4NnpDBzEdU11HdGt4mp05WKWjuOrXKfvNn1DywCOUkK zmNHqoDhPRCI60D36KcoRzDnSkollyMpf49fBUhJ0/kB -----END CERTIFICATE-----Generated at Tue Jan 27 07:44:05 2026 by rpki-client