This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/2cbClVS4xXob8cs6ACu_LpO57kA.roa File: 2cbClVS4xXob8cs6ACu_LpO57kA.roa (raw, json) Hash identifier: cEaz1GVKnw/Si3BKd+mDzCUn+hrl/3nYfWBCaz+jW9g= Subject key identifier: D9:C6:C2:95:54:B8:C5:7A:1B:F1:CB:3A:00:2B:BF:2E:93:B9:EE:40 Certificate issuer: /CN=20b0da202d2c34a473a6d76af093e8de0311b95b Certificate serial: 019B76EB81608B029C840D642BD4464E10E1 Authority key identifier: 20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/2cbClVS4xXob8cs6ACu_LpO57kA.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14717 IP address blocks: 5.133.72.0/22 maxlen: 24 91.199.136.0/24 maxlen: 24 94.125.192.0/21 maxlen: 24 2a02:2ba8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:81:60:8b:02:9c:84:0d:64:2b:d4:46:4e:10:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b0da202d2c34a473a6d76af093e8de0311b95b Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9c6c29554b8c57a1bf1cb3a002bbf2e93b9ee40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:24:31:47:f6:46:60:1c:43:9a:d5:df:1f: 73:a3:73:72:5d:1b:f3:44:41:ee:66:e0:f1:6f:0e: 03:5d:f4:35:f3:ac:08:b5:52:cd:6d:ed:2b:59:f6: c2:8e:4b:8f:19:79:d0:b5:0e:0c:f7:e1:8f:2c:47: 57:2c:29:f3:a3:a7:64:2f:aa:93:85:05:b6:8e:3f: ac:ae:42:10:bf:d1:fe:3d:70:07:d4:bd:d8:50:ff: 4b:cf:ab:59:86:8e:6e:80:d3:ec:c1:e5:ef:d9:f5: ac:26:bf:6e:a8:36:f5:7c:df:96:d6:14:92:2f:0b: b4:be:8a:9f:67:42:ad:de:94:34:15:dc:6e:d3:1a: 13:2e:8c:a6:08:eb:61:c8:14:f9:42:20:62:02:37: 08:7e:40:58:b6:14:7b:86:ff:3d:bf:10:db:b9:0e: 32:04:9a:9c:6f:34:5c:c7:1e:4b:5a:f3:32:74:7a: 87:b4:0c:66:36:1a:cb:14:6a:67:75:2a:75:36:1e: bc:80:e1:48:e4:67:bf:c9:d8:24:e1:ca:75:6a:4a: 7c:9c:82:db:29:b6:af:58:cd:71:cf:8e:e2:a4:92: 37:f1:9c:14:09:ec:8b:aa:5f:70:8d:29:71:3e:c2: 4b:40:a6:8f:0e:a3:cd:42:a9:11:54:ec:c7:ed:0e: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C6:C2:95:54:B8:C5:7A:1B:F1:CB:3A:00:2B:BF:2E:93:B9:EE:40 X509v3 Authority Key Identifier: keyid:20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/2cbClVS4xXob8cs6ACu_LpO57kA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.72.0/22 91.199.136.0/24 94.125.192.0/21 IPv6: 2a02:2ba8::/32 Signature Algorithm: sha256WithRSAEncryption 08:42:76:18:1d:08:1c:9c:44:3a:35:ec:50:3c:0e:43:5e:80: 38:93:a0:55:94:97:7b:aa:ff:6d:0a:94:40:b8:67:eb:7f:3e: 91:ce:b5:77:1f:d3:66:b6:9f:a3:e2:85:47:b4:0c:9b:5f:f7: 89:a3:51:dc:31:ad:8e:06:01:b4:d5:37:ac:36:ca:a1:31:b1: cb:d4:16:c3:4a:d1:61:98:cc:5e:a0:85:31:93:e1:f4:93:6c: ff:74:a4:b8:fa:38:c7:56:82:b5:e4:e6:30:63:62:1b:13:57: de:96:fe:a5:d7:8f:1d:f1:8e:76:65:ad:3e:f9:92:39:97:64: b1:df:6d:18:f4:7e:fc:cd:f1:99:65:be:0b:5b:dc:ab:7d:ea: 8c:37:48:73:6a:7d:08:a4:37:ff:3c:53:80:33:73:99:5a:07: ff:43:2b:c7:1b:fa:88:ad:14:a0:5d:40:e6:6b:cf:bc:d9:06: d0:3f:2c:9d:f0:17:f5:51:5a:19:a1:61:2b:41:23:ee:a8:16: df:4d:4a:a7:8d:a1:14:84:91:65:d5:e8:5d:03:6c:52:4e:df: 81:87:fb:c8:9d:fb:10:68:8c:b0:58:c7:ad:7d:b2:47:1f:cd: 43:4b:e4:6a:63:6b:4d:3d:f0:25:75:57:67:f4:25:3e:2b:be: 21:b0:19:56 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt264FgiwKchA1kK9RGThDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjBkYTIwMmQyYzM0YTQ3M2E2ZDc2YWYwOTNlOGRlMDMx MWI5NWIwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWM2YzI5NTU0YjhjNTdhMWJmMWNiM2EwMDJiYmYyZTkzYjllZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo60kMUf2RmAcQ5rV3x9zo3NyXRvz REHuZuDxbw4DXfQ186wItVLNbe0rWfbCjkuPGXnQtQ4M9+GPLEdXLCnzo6dkL6qT hQW2jj+srkIQv9H+PXAH1L3YUP9Lz6tZho5ugNPsweXv2fWsJr9uqDb1fN+W1hSS Lwu0voqfZ0Kt3pQ0Fdxu0xoTLoymCOthyBT5QiBiAjcIfkBYthR7hv89vxDbuQ4y BJqcbzRcxx5LWvMydHqHtAxmNhrLFGpndSp1Nh68gOFI5Ge/ydgk4cp1akp8nILb KbavWM1xz47ipJI38ZwUCeyLql9wjSlxPsJLQKaPDqPNQqkRVOzH7Q7DzQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNnGwpVUuMV6G/HLOgArvy6Tue5AMB8GA1UdIwQY MBaAFCCw2iAtLDSkc6bXavCT6N4DEblbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxEYUlDMHNOS1J6cHRkcThKUG8zZ01SdVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZWE5NzgtNWRhZS00YzhkLTliMmMt ZDhlZmY1ZDZhNjNiLzEvMmNiQ2xWUzR4WG9iOGNzNkFDdV9McE81N2tBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9kZWE5NzgtNWRhZS00YzhkLTliMmMtZDhlZmY1ZDZhNjNi LzEvSUxEYUlDMHNOS1J6cHRkcThKUG8zZ01SdVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCBYVIAwQA W8eIAwQDXn3AMA0EAgACMAcDBQAqAiuoMA0GCSqGSIb3DQEBCwUAA4IBAQAIQnYY HQgcnEQ6NexQPA5DXoA4k6BVlJd7qv9tCpRAuGfrfz6RzrV3H9Nmtp+j4oVHtAyb X/eJo1HcMa2OBgG01TesNsqhMbHL1BbDStFhmMxeoIUxk+H0k2z/dKS4+jjHVoK1 5OYwY2IbE1felv6l148d8Y52Za0++ZI5l2Sx320Y9H78zfGZZb4LW9yrfeqMN0hz an0IpDf/PFOAM3OZWgf/QyvHG/qIrRSgXUDma8+82QbQPyyd8Bf1UVoZoWErQSPu qBbfTUqnjaEUhJFl1ehdA2xSTt+Bh/vInfsQaIywWMetfbJHH81DS+RqY2tNPfAl dVdn9CU+K74hsBlW -----END CERTIFICATE-----Generated at Mon Jan 12 02:17:12 2026 by rpki-client