This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/2NBuPX9Sr7_9fzAA2_SqLU2A0xs.roa File: 2NBuPX9Sr7_9fzAA2_SqLU2A0xs.roa (raw, json) Hash identifier: qnZc+3b2NxrywxDp6pPyOY9sOLIQiJ8XLeTOBtAP7ro= Subject key identifier: D8:D0:6E:3D:7F:52:AF:BF:FD:7F:30:00:DB:F4:AA:2D:4D:80:D3:1B Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804 Certificate serial: 019B77C72863F28E2610D00B695B719B9C23 Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/2NBuPX9Sr7_9fzAA2_SqLU2A0xs.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206687 IP address blocks: 195.150.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:28:63:f2:8e:26:10:d0:0b:69:5b:71:9b:9c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8d06e3d7f52afbffd7f3000dbf4aa2d4d80d31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:df:79:4a:f8:e7:84:68:5a:c0:02:31:11: 02:92:4b:93:92:48:b3:5b:79:ba:f4:e5:ea:88:0e: 35:6e:f9:a1:7f:3f:20:68:11:b6:1a:12:ce:25:86: e4:da:7b:0c:c1:9b:43:95:cd:eb:e7:3b:d1:6d:49: cd:4d:a6:8e:fe:e9:97:27:b3:09:86:9e:e4:97:44: 2a:bc:c0:8e:61:5b:1e:8b:9b:b7:63:d5:c7:4b:e0: f2:64:2d:ab:22:bb:8c:3d:ff:19:cc:95:34:4d:92: a8:d1:d3:a6:a9:ea:ea:63:72:8b:dc:be:20:7b:25: 3f:48:0e:66:f7:93:75:e2:1b:ed:8d:da:6a:55:8b: 5e:e1:fa:4b:63:a3:77:05:67:3c:e5:71:02:10:a3: d0:33:8c:1e:83:79:44:83:7b:83:ea:36:00:1d:6a: 13:b2:7c:5d:39:bb:8b:58:9d:6a:5f:6b:ba:6f:ca: 35:95:48:4a:6f:3d:30:ae:7d:cc:ae:3a:d1:b7:ab: 29:af:08:21:a6:bf:99:f7:6f:ba:f0:93:7f:2f:0b: 5b:6e:e8:f8:f5:b5:13:31:ec:49:11:9d:cf:a6:d6: c2:01:4d:0a:b5:6c:a0:e6:7f:3f:b3:b8:14:c5:17: c8:6a:7d:b7:f0:a0:60:28:f7:35:af:4f:9b:eb:2e: a3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D0:6E:3D:7F:52:AF:BF:FD:7F:30:00:DB:F4:AA:2D:4D:80:D3:1B X509v3 Authority Key Identifier: keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/2NBuPX9Sr7_9fzAA2_SqLU2A0xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.150.100.0/24 Signature Algorithm: sha256WithRSAEncryption 91:6d:65:fa:5b:65:4c:b1:02:12:20:a3:c7:02:2a:36:c8:1b: b9:9e:7c:92:63:4f:fc:e2:0f:62:b0:ac:40:da:4b:50:f7:a0: d6:ed:d1:47:ac:af:92:f2:55:47:4a:a4:79:9d:b7:38:de:df: 7d:fe:d2:dd:b1:7b:67:c4:64:31:b3:7a:c1:77:fc:f6:b2:9e: 0c:77:fe:ba:2f:9d:c4:ba:5c:54:20:27:02:ec:ef:1c:b3:9b: 09:fd:2a:53:4f:6b:5e:cd:e1:c9:47:56:5c:41:1b:c3:7c:be: b9:73:ac:a8:0d:e9:cf:7d:54:e4:96:25:4e:db:21:67:99:b9: 90:63:9d:5e:0d:7d:69:08:a6:03:a7:11:a4:d0:8f:b2:e5:52: 62:e5:93:a8:76:f2:a3:10:19:40:a8:02:44:c1:56:c0:0c:ee: 96:e4:49:eb:cd:46:29:ec:6c:4b:da:19:d0:e8:3b:72:f4:a6: 23:8c:99:7d:95:ef:11:e4:d7:3d:32:36:6b:7c:02:3a:47:ed: 1b:61:eb:0d:0a:da:ed:1c:73:ab:b9:c1:14:ab:f4:9e:bd:22: 46:81:dc:98:61:55:f9:2f:8c:1a:05:99:79:93:7c:ae:fa:a9: 77:76:be:7d:8d:ba:7b:03:9e:07:b3:eb:05:b0:72:c3:60:13: 45:de:65:41 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xyhj8o4mENALaVtxm5wjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4 ODE4MDQwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGQwNmUzZDdmNTJhZmJmZmQ3ZjMwMDBkYmY0YWEyZDRkODBkMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQTfeUr454RoWsACMRECkkuTkkiz W3m69OXqiA41bvmhfz8gaBG2GhLOJYbk2nsMwZtDlc3r5zvRbUnNTaaO/umXJ7MJ hp7kl0QqvMCOYVsei5u3Y9XHS+DyZC2rIruMPf8ZzJU0TZKo0dOmqerqY3KL3L4g eyU/SA5m95N14hvtjdpqVYte4fpLY6N3BWc85XECEKPQM4weg3lEg3uD6jYAHWoT snxdObuLWJ1qX2u6b8o1lUhKbz0wrn3MrjrRt6sprwghpr+Z92+68JN/Lwtbbuj4 9bUTMexJEZ3PptbCAU0KtWyg5n8/s7gUxRfIan238KBgKPc1r0+b6y6jVwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNjQbj1/Uq+//X8wANv0qi1NgNMbMB8GA1UdIwQY MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx LTE2Y2Q4ZjRmYjRiOS8xLzJOQnVQWDlTcjdfOWZ6QUEyX1NxTFUyQTB4cy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUxLTE2Y2Q4ZjRmYjRi OS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDlmQw DQYJKoZIhvcNAQELBQADggEBAJFtZfpbZUyxAhIgo8cCKjbIG7mefJJjT/ziD2Kw rEDaS1D3oNbt0Uesr5LyVUdKpHmdtzje333+0t2xe2fEZDGzesF3/Payngx3/rov ncS6XFQgJwLs7xyzmwn9KlNPa17N4clHVlxBG8N8vrlzrKgN6c99VOSWJU7bIWeZ uZBjnV4NfWkIpgOnEaTQj7LlUmLlk6h28qMQGUCoAkTBVsAM7pbkSevNRinsbEva GdDoO3L0piOMmX2V7xHk1z0yNmt8AjpH7Rth6w0K2u0cc6u5wRSr9J69IkaB3Jhh VfkvjBoFmXmTfK76qXd2vn2NunsDngez6wWwcsNgE0XeZUE= -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:39 2026 by rpki-client