This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/2tLIG-0F4pyXslqiRGqTKTBHrYg.roa File: 2tLIG-0F4pyXslqiRGqTKTBHrYg.roa (raw, json) Hash identifier: eYNKy82bS91MfRi14r5WCRNJpu5XJvmqn53/5LunFO0= Subject key identifier: DA:D2:C8:1B:ED:05:E2:9C:97:B2:5A:A2:44:6A:93:29:30:47:AD:88 Certificate issuer: /CN=cef446fe4472ba694fc2298298a4f8d155995e16 Certificate serial: 019BC9F50DD5C3A27E4E1F85F958A7B960E9 Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/2tLIG-0F4pyXslqiRGqTKTBHrYg.roa Signing time: Sat 17 Jan 2026 03:17:18 +0000 ROA not before: Sat 17 Jan 2026 03:17:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209083 IP address blocks: 128.204.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c9:f5:0d:d5:c3:a2:7e:4e:1f:85:f9:58:a7:b9:60:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16 Validity Not Before: Jan 17 03:17:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dad2c81bed05e29c97b25aa2446a93293047ad88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:6f:d9:bc:1e:5e:de:7c:cd:8a:bb:5c:3a: c2:93:9d:f0:c4:43:ea:eb:65:84:1a:62:67:62:dd: 90:ee:0f:05:9b:46:8f:5f:0c:15:99:d9:ef:9a:a4: 0c:6a:eb:a5:d4:e0:dc:f0:01:83:1b:12:61:13:9d: e5:ee:82:61:78:18:95:8c:c4:f0:41:0f:11:0f:63: ba:27:de:aa:6d:01:d2:df:0d:21:ab:6c:48:f6:3b: 27:be:03:d9:5e:59:e3:70:6d:0d:53:5a:f2:ee:b5: 52:89:f9:d2:b9:41:07:53:5d:c3:c7:12:85:4a:7b: 31:85:40:2e:28:19:04:af:8d:1b:9b:9b:16:3a:b9: 74:d6:7b:a9:01:b3:e8:73:b0:57:b5:df:cf:18:d7: 86:6b:91:d6:48:9d:b8:ee:8b:7c:64:a2:c4:9a:68: 6e:09:07:b0:89:6e:c8:29:4d:66:96:d5:1d:3e:5b: 9e:3b:a0:48:75:c0:0c:4f:e8:35:3e:e1:09:3f:37: 15:db:f0:5a:55:e2:54:25:82:6a:19:e2:22:75:7d: 40:62:ee:44:fa:94:62:81:a5:f7:e1:c1:9d:15:26: a5:6e:4e:28:fd:a0:9f:2f:d5:1d:b8:7a:e4:10:90: 4f:5f:0c:33:c1:9b:90:dc:e2:67:ce:48:2a:7b:c2: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D2:C8:1B:ED:05:E2:9C:97:B2:5A:A2:44:6A:93:29:30:47:AD:88 X509v3 Authority Key Identifier: keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/2tLIG-0F4pyXslqiRGqTKTBHrYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.204.193.0/24 Signature Algorithm: sha256WithRSAEncryption be:f7:db:d9:80:68:6d:1d:dd:3a:df:41:d6:62:2f:d7:18:f6: f9:59:d5:fd:48:56:ca:c0:76:f0:74:32:07:1e:47:b1:46:83: 3d:e1:ae:a6:79:16:57:e2:28:18:fe:82:a0:8a:02:bc:8a:1e: 00:89:89:c3:ae:6c:d9:22:97:bb:a9:44:e3:06:d1:9a:33:e7: fa:9e:79:8b:43:84:90:bc:1c:67:5c:4e:a4:13:0a:21:fc:a1: 9a:2e:78:61:b0:1f:20:4b:87:72:a8:b9:f4:01:e6:25:5c:63: 41:e8:92:d4:84:72:15:1f:53:2f:4d:ec:07:39:24:5e:58:fd: d7:9e:45:62:97:42:9f:57:6d:12:bf:ae:b1:f4:9a:00:4c:8c: ad:92:44:5b:fb:b1:36:42:de:a3:94:d9:81:df:fa:d8:99:d7: bd:a1:f5:b3:a7:2f:15:93:f3:61:d2:36:83:13:c5:05:38:e1: 5d:4f:31:cd:ae:7b:7a:e6:bf:72:eb:70:f9:3b:e7:be:6d:24: d4:0e:14:bc:6c:ee:49:97:4f:5e:79:08:36:b4:a4:76:59:95: c4:37:dd:5b:1d:67:6b:2f:38:7d:f7:dd:bc:f1:06:65:c2:c2: 31:6e:81:d1:c0:34:50:66:49:32:39:b3:aa:d4:5e:4a:d0:bb: 14:d0:2c:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvJ9Q3Vw6J+Th+F+VinuWDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjQ0NmZlNDQ3MmJhNjk0ZmMyMjk4Mjk4YTRmOGQxNTU5 OTVlMTYwHhcNMjYwMTE3MDMxNzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWQyYzgxYmVkMDVlMjljOTdiMjVhYTI0NDZhOTMyOTMwNDdhZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFVv2bweXt58zYq7XDrCk53wxEPq 62WEGmJnYt2Q7g8Fm0aPXwwVmdnvmqQMauul1ODc8AGDGxJhE53l7oJheBiVjMTw QQ8RD2O6J96qbQHS3w0hq2xI9jsnvgPZXlnjcG0NU1ry7rVSifnSuUEHU13DxxKF SnsxhUAuKBkEr40bm5sWOrl01nupAbPoc7BXtd/PGNeGa5HWSJ247ot8ZKLEmmhu CQewiW7IKU1mltUdPlueO6BIdcAMT+g1PuEJPzcV2/BaVeJUJYJqGeIidX1AYu5E +pRigaX34cGdFSalbk4o/aCfL9UduHrkEJBPXwwzwZuQ3OJnzkgqe8JCMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNrSyBvtBeKcl7JaokRqkykwR62IMB8GA1UdIwQY MBaAFM70Rv5EcrppT8Ipgpik+NFVmV4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81MDg0MmEtZWQwMi00YTlmLWE3ODkt OTAxMDA2YmMxZmQ4LzEvMnRMSUctMEY0cHlYc2xxaVJHcVRLVEJIcllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81MDg0MmEtZWQwMi00YTlmLWE3ODktOTAxMDA2YmMxZmQ4 LzEvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgMzBMA0G CSqGSIb3DQEBCwUAA4IBAQC+99vZgGhtHd0630HWYi/XGPb5WdX9SFbKwHbwdDIH HkexRoM94a6meRZX4igY/oKgigK8ih4AiYnDrmzZIpe7qUTjBtGaM+f6nnmLQ4SQ vBxnXE6kEwoh/KGaLnhhsB8gS4dyqLn0AeYlXGNB6JLUhHIVH1MvTewHOSReWP3X nkVil0KfV20Sv66x9JoATIytkkRb+7E2Qt6jlNmB3/rYmde9ofWzpy8Vk/Nh0jaD E8UFOOFdTzHNrnt65r9y63D5O+e+bSTUDhS8bO5Jl09eeQg2tKR2WZXEN91bHWdr Lzh999288QZlwsIxboHRwDRQZkkyObOq1F5K0LsU0CzM -----END CERTIFICATE-----Generated at Mon Jan 26 23:43:24 2026 by rpki-client