This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/2bJ2chGfdjROmt484R3iaMkBv5s.roa File: 2bJ2chGfdjROmt484R3iaMkBv5s.roa (raw, json) Hash identifier: qIi6O0mX3eNR+7L75XDWNrvKkZYX8S4LP3pHsAXc7mw= Subject key identifier: D9:B2:76:72:11:9F:76:34:4E:9A:DE:3C:E1:1D:E2:68:C9:01:BF:9B Certificate issuer: /CN=d09da99a73ba7202418f73718932dc8d7c153e32 Certificate serial: 019B7B36A62A09EC6BC388EFDE189E3BCBC5 Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/2bJ2chGfdjROmt484R3iaMkBv5s.roa Signing time: Thu 01 Jan 2026 20:18:57 +0000 ROA not before: Thu 01 Jan 2026 20:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198185 IP address blocks: 130.255.8.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a6:2a:09:ec:6b:c3:88:ef:de:18:9e:3b:cb:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32 Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9b27672119f76344e9ade3ce11de268c901bf9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:76:ae:ce:4d:c6:36:94:29:46:53:f4:54:73: 1d:4f:b9:ee:f5:5b:49:75:d5:6f:66:00:6e:df:13: cd:28:27:12:e3:8d:93:52:9f:0f:f1:4f:3f:7b:27: df:76:7f:d4:3c:53:58:b3:50:fc:1d:ca:9e:ae:ac: fc:44:d7:af:3a:4f:3e:cb:c9:3e:e9:e6:fc:2e:95: 2a:89:77:b1:12:83:20:ec:8a:d4:d0:4e:9e:1a:d7: 49:23:08:74:0f:ba:7f:56:4c:28:1b:91:01:fb:7d: 13:70:49:08:ab:d9:f7:40:2d:5f:8b:64:0f:c1:2a: a4:41:71:8d:4a:4e:f3:2d:45:94:e4:c8:30:9c:44: b1:bb:a3:8d:c7:81:46:03:95:3f:30:e0:4d:d5:8b: 46:73:c1:7b:07:e9:d6:0c:3a:a0:56:2f:cc:d7:27: 60:16:f6:94:ff:2c:8c:6a:15:55:44:f6:c4:ef:25: 4e:6c:86:e7:34:db:49:4e:db:20:b0:cb:7b:a6:40: 91:38:e6:d2:54:7e:4e:c6:6a:f7:a6:31:51:d7:e8: d9:f9:ed:4a:b1:22:61:25:b5:22:1d:75:f3:e0:2c: 48:ff:41:cb:84:63:fc:06:dd:33:7e:5a:a8:cc:f1: 37:bc:31:63:4d:3f:34:a1:21:a1:78:74:af:5a:ef: d6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B2:76:72:11:9F:76:34:4E:9A:DE:3C:E1:1D:E2:68:C9:01:BF:9B X509v3 Authority Key Identifier: keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/2bJ2chGfdjROmt484R3iaMkBv5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.8.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:d7:e4:56:41:28:2d:97:da:3a:ed:2f:b8:65:2b:89:01:97: 0d:86:93:be:66:0e:fa:d1:0f:7b:93:24:a2:20:8e:14:a1:f3: ea:69:47:73:b5:a4:00:23:5a:4c:50:8c:a6:b3:6c:58:67:2b: 0f:89:94:34:17:d0:31:ce:53:09:1a:fb:47:76:72:30:86:26: 02:b1:88:36:4e:e8:76:c9:2b:f3:8d:a5:0f:80:cd:68:48:16: 9d:c2:1d:c6:8f:5d:5a:8a:2f:c0:0d:15:ca:46:f7:ae:9d:6c: 81:95:aa:7e:c2:00:4c:ab:17:4f:f0:aa:c2:11:9b:2f:21:54: 4f:62:07:b5:2f:13:ba:30:c8:c2:48:31:0f:0f:ef:e8:46:c9: 71:7e:07:c0:43:1d:ea:79:01:ab:fb:86:3e:27:70:84:99:f9: 57:d5:5d:e6:06:82:06:22:02:c5:9d:9c:6e:51:3e:1a:4e:0e: 83:34:aa:03:15:14:1b:e7:12:0d:e1:71:6a:96:db:21:5d:e9: df:e0:08:99:e8:bd:2c:75:d7:2c:60:4f:15:63:c7:ea:51:e0: 80:d9:c8:9f:bf:53:dc:ca:c9:43:ec:8b:8b:0d:41:de:ed:4f: 30:3d:c6:14:32:93:ad:98:03:11:0a:3c:11:35:9a:46:99:73: 91:8c:eb:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqYqCexrw4jv3hieO8vFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOWRhOTlhNzNiYTcyMDI0MThmNzM3MTg5MzJkYzhkN2Mx NTNlMzIwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWIyNzY3MjExOWY3NjM0NGU5YWRlM2NlMTFkZTI2OGM5MDFiZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHauzk3GNpQpRlP0VHMdT7nu9VtJ ddVvZgBu3xPNKCcS442TUp8P8U8/eyffdn/UPFNYs1D8Hcqerqz8RNevOk8+y8k+ 6eb8LpUqiXexEoMg7IrU0E6eGtdJIwh0D7p/VkwoG5EB+30TcEkIq9n3QC1fi2QP wSqkQXGNSk7zLUWU5MgwnESxu6ONx4FGA5U/MOBN1YtGc8F7B+nWDDqgVi/M1ydg FvaU/yyMahVVRPbE7yVObIbnNNtJTtsgsMt7pkCROObSVH5Oxmr3pjFR1+jZ+e1K sSJhJbUiHXXz4CxI/0HLhGP8Bt0zflqozPE3vDFjTT80oSGheHSvWu/WQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNmydnIRn3Y0TprePOEd4mjJAb+bMB8GA1UdIwQY MBaAFNCdqZpzunICQY9zcYky3I18FT4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEoycG1uTzZjZ0pCajNOeGlUTGNqWHdWUGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84YTJjZWQtODdhZS00MWVhLWIzYjAt ZGNlYmY2MTk3ZTBlLzEvMmJKMmNoR2ZkalJPbXQ0ODRSM2lhTWtCdjVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC84YTJjZWQtODdhZS00MWVhLWIzYjAtZGNlYmY2MTk3ZTBl LzEvMEoycG1uTzZjZ0pCajNOeGlUTGNqWHdWUGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgv8IMA0G CSqGSIb3DQEBCwUAA4IBAQBO1+RWQSgtl9o67S+4ZSuJAZcNhpO+Zg760Q97kySi II4UofPqaUdztaQAI1pMUIyms2xYZysPiZQ0F9AxzlMJGvtHdnIwhiYCsYg2Tuh2 ySvzjaUPgM1oSBadwh3Gj11aii/ADRXKRveunWyBlap+wgBMqxdP8KrCEZsvIVRP Yge1LxO6MMjCSDEPD+/oRslxfgfAQx3qeQGr+4Y+J3CEmflX1V3mBoIGIgLFnZxu UT4aTg6DNKoDFRQb5xIN4XFqltshXenf4AiZ6L0sddcsYE8VY8fqUeCA2cifv1Pc yslD7IuLDUHe7U8wPcYUMpOtmAMRCjwRNZpGmXORjOul -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:29 2026 by rpki-client