This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/2Kmu0cLG-L1kMQzDBhEI947wC7k.roa File: 2Kmu0cLG-L1kMQzDBhEI947wC7k.roa (raw, json) Hash identifier: bDHuJC+CusB1PkTp9s9X+HAoLv5WHt/aI7X+YlNDFLc= Subject key identifier: D8:A9:AE:D1:C2:C6:F8:BD:64:31:0C:C3:06:11:08:F7:8E:F0:0B:B9 Certificate issuer: /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25 Certificate serial: 019B7B36681E28BA82FEF7817FDD5332E4AF Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/2Kmu0cLG-L1kMQzDBhEI947wC7k.roa Signing time: Thu 01 Jan 2026 20:18:41 +0000 ROA not before: Thu 01 Jan 2026 20:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210627 IP address blocks: 185.188.40.0/24 maxlen: 24 2a11:2c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:68:1e:28:ba:82:fe:f7:81:7f:dd:53:32:e4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25 Validity Not Before: Jan 1 20:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8a9aed1c2c6f8bd64310cc3061108f78ef00bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:f5:35:fc:4b:65:83:0e:8d:63:07:f8:c8: cf:50:3f:f0:80:13:a7:11:62:7f:c0:77:61:4b:1b: 85:7b:3d:71:8b:d2:dd:b9:28:12:1c:89:d9:b9:09: ea:42:e1:a7:99:3a:73:74:3b:b8:1b:73:93:01:04: b5:04:94:fb:e8:6c:93:dc:a7:37:51:3e:75:00:8e: 04:19:a5:9d:f6:c0:ff:4d:83:da:1b:63:f8:dc:0c: 31:ad:8b:7f:fd:44:62:27:d3:ba:9a:bc:29:a0:51: 5f:11:63:31:82:eb:b8:98:84:ed:28:f5:e2:89:60: 98:b3:39:2e:3c:f7:4c:4d:55:c2:7c:5c:16:20:15: 71:93:c1:a8:26:3a:20:71:fe:75:7d:3f:ab:8a:aa: f0:11:c0:48:b2:0c:28:d7:ae:3b:1b:22:b7:6e:ea: 13:9d:56:b1:3e:be:df:2d:81:4f:26:71:4d:6b:0b: fd:b4:13:99:2e:15:72:e0:9c:b7:43:5c:f9:71:9f: b9:0d:3a:1c:c3:92:f4:59:fc:ad:ef:1a:a3:e4:1f: 95:61:2b:b2:57:d2:d4:7e:4b:2c:b4:b5:16:f5:cf: 6d:2f:3e:7c:60:43:a8:82:79:30:16:d6:94:57:ae: dc:b3:cb:65:85:ca:de:a6:47:20:42:f5:a1:c1:c3: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A9:AE:D1:C2:C6:F8:BD:64:31:0C:C3:06:11:08:F7:8E:F0:0B:B9 X509v3 Authority Key Identifier: keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/2Kmu0cLG-L1kMQzDBhEI947wC7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.40.0/24 IPv6: 2a11:2c0::/29 Signature Algorithm: sha256WithRSAEncryption 0a:c0:33:d4:c9:06:d9:2e:9a:95:db:da:37:68:88:54:35:45: f8:90:44:5a:44:ef:1a:42:b1:1f:0e:df:62:86:74:61:b4:81: 4d:5b:53:f2:7f:df:a3:88:8f:26:aa:ac:40:78:e3:ff:63:ae: 5d:19:a8:63:85:b1:ed:86:f6:44:dd:73:7d:b9:db:52:06:f7: 75:05:20:7d:59:b3:1c:c2:51:60:56:ec:cb:92:ab:b0:2d:a0: c3:a4:dd:2f:39:30:10:e2:08:0b:fa:40:67:40:c8:12:9e:8e: 2f:9b:13:7a:8e:ab:2b:c7:8c:5f:dd:43:46:66:7f:01:47:04: 85:7b:57:2e:64:27:9f:12:fc:a4:08:de:46:6c:63:05:46:d7: 8e:f0:ff:63:41:a5:67:54:84:31:7b:ad:65:02:4e:08:ae:d9: 47:86:49:22:a5:ef:70:77:f8:16:71:85:72:61:f9:3f:ae:d5: be:e2:ed:c5:20:48:22:8e:26:14:be:70:21:1c:aa:72:d3:87: c8:d7:a3:94:f6:50:79:d6:6e:58:0c:aa:88:9d:2c:59:c4:f8: 16:51:ca:10:fc:13:17:e0:6b:e6:6c:d6:c1:60:44:79:76:08: ec:83:0b:da:7d:26:81:6f:9d:da:4f:53:5a:e8:69:44:36:64: db:dc:9c:3a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NmgeKLqC/veBf91TMuSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWI5MzlhM2FjOTdkYWRhMDgyNTE2MWYzYTBlODUwMzNh ODJkMjUwHhcNMjYwMTAxMjAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGE5YWVkMWMyYzZmOGJkNjQzMTBjYzMwNjExMDhmNzhlZjAwYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttT1NfxLZYMOjWMH+MjPUD/wgBOn EWJ/wHdhSxuFez1xi9LduSgSHInZuQnqQuGnmTpzdDu4G3OTAQS1BJT76GyT3Kc3 UT51AI4EGaWd9sD/TYPaG2P43AwxrYt//URiJ9O6mrwpoFFfEWMxguu4mITtKPXi iWCYszkuPPdMTVXCfFwWIBVxk8GoJjogcf51fT+riqrwEcBIsgwo1647GyK3buoT nVaxPr7fLYFPJnFNawv9tBOZLhVy4Jy3Q1z5cZ+5DTocw5L0Wfyt7xqj5B+VYSuy V9LUfksstLUW9c9tLz58YEOognkwFtaUV67cs8tlhcrepkcgQvWhwcO8jwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNiprtHCxvi9ZDEMwwYRCPeO8Au5MB8GA1UdIwQY MBaAFKybk5o6yX2toIJRYfOg6FAzqC0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckp1VG1qckpmYTJnZ2xGaDg2RG9VRE9vTFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xYWEyYWEtYmZiZi00NDI4LWEzZGYt Mzg1NzIzMmY0NTZjLzEvMkttdTBjTEctTDFrTVF6REJoRUk5NDd3QzdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8xYWEyYWEtYmZiZi00NDI4LWEzZGYtMzg1NzIzMmY0NTZj LzEvckp1VG1qckpmYTJnZ2xGaDg2RG9VRE9vTFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAubwoMA0E AgACMAcDBQMqEQLAMA0GCSqGSIb3DQEBCwUAA4IBAQAKwDPUyQbZLpqV29o3aIhU NUX4kERaRO8aQrEfDt9ihnRhtIFNW1Pyf9+jiI8mqqxAeOP/Y65dGahjhbHthvZE 3XN9udtSBvd1BSB9WbMcwlFgVuzLkquwLaDDpN0vOTAQ4ggL+kBnQMgSno4vmxN6 jqsrx4xf3UNGZn8BRwSFe1cuZCefEvykCN5GbGMFRteO8P9jQaVnVIQxe61lAk4I rtlHhkkipe9wd/gWcYVyYfk/rtW+4u3FIEgijiYUvnAhHKpy04fI16OU9lB51m5Y DKqInSxZxPgWUcoQ/BMX4GvmbNbBYER5dgjsgwvafSaBb53aT1Na6GlENmTb3Jw6 -----END CERTIFICATE-----Generated at Mon Feb 9 23:56:12 2026 by rpki-client