This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/2eq1zQiZruK_fgcYKv9VqgWsnLg.roa File: 2eq1zQiZruK_fgcYKv9VqgWsnLg.roa (raw, json) Hash identifier: dGmPb+aKqyf+4gPgmSdPDA+kT9hY/m7lfSRDQRbeow8= Subject key identifier: D9:EA:B5:CD:08:99:AE:E2:BF:7E:07:18:2A:FF:55:AA:05:AC:9C:B8 Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68 Certificate serial: 019B77C6E723B1E601DEB71735D9DA702CF3 Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/2eq1zQiZruK_fgcYKv9VqgWsnLg.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197692 IP address blocks: 31.22.120.0/21 maxlen: 24 185.131.0.0/22 maxlen: 24 2a02:6f00::/29 maxlen: 48 2a02:6f00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e7:23:b1:e6:01:de:b7:17:35:d9:da:70:2c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9eab5cd0899aee2bf7e07182aff55aa05ac9cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:45:42:5b:b6:fd:31:cd:e6:11:04:cc:68: 5b:58:0a:7b:fb:8f:16:eb:d4:50:e9:b5:00:0a:ad: 5c:42:3a:88:58:c9:54:dc:cc:02:4d:7e:64:58:83: a0:ae:26:b0:06:58:45:33:3e:76:e7:4c:1b:1a:6f: e7:b2:c6:e9:40:92:87:b2:3f:e8:fc:58:a4:1c:1e: b9:fc:29:e5:d8:54:83:14:31:0c:b6:35:73:e4:4c: 10:61:bd:2d:0b:d7:04:29:d1:03:be:82:9f:c4:da: e9:0e:7a:34:5f:68:9e:c6:0e:38:3b:30:6c:a6:2f: 7d:51:88:75:a9:83:5d:47:98:49:bb:de:89:9b:48: eb:4a:ba:2b:2e:02:42:1d:9e:50:64:e3:2f:28:91: 8c:9b:eb:97:a0:c5:f0:44:1c:41:95:34:0a:26:73: cd:0b:64:df:bc:f0:72:e3:f2:53:22:26:8f:46:f3: ef:bc:b6:f5:47:50:6a:db:26:48:ac:ad:b5:0e:02: e3:1c:38:0c:14:f2:40:c0:0f:3c:67:53:6c:5a:ad: 1c:f6:09:df:7c:9a:fc:2c:a0:43:b2:2d:2b:6c:53: ce:32:68:39:2c:80:71:02:f3:3b:1e:bf:da:ef:60: 92:7f:2c:a9:07:7d:8e:bc:c0:02:35:49:da:b5:bf: 2a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EA:B5:CD:08:99:AE:E2:BF:7E:07:18:2A:FF:55:AA:05:AC:9C:B8 X509v3 Authority Key Identifier: keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/2eq1zQiZruK_fgcYKv9VqgWsnLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.120.0/21 185.131.0.0/22 IPv6: 2a02:6f00::/29 Signature Algorithm: sha256WithRSAEncryption 1d:c2:24:51:61:3b:20:27:9f:df:fb:11:ee:94:d3:5b:02:bc: 6d:f6:6c:50:c9:6d:42:62:58:86:19:14:46:95:86:8b:96:35: 54:c9:c9:b7:1c:90:85:2e:5d:ec:cb:6a:08:74:b0:a7:8c:d7: b6:2d:9e:fa:cc:97:70:f3:d6:e7:1f:10:68:b9:2d:95:ad:0c: ac:4c:fb:8d:45:b2:8c:fa:33:cd:77:95:7f:40:e2:fa:84:9b: f9:58:4c:ff:35:b4:49:b8:3c:d6:66:e2:9c:fc:68:9b:54:82: 64:99:9b:47:d6:e3:16:e1:c0:fd:ea:40:b9:5f:0c:47:e9:32: b0:16:07:84:37:6d:2c:4b:c4:e6:47:93:a6:fe:4f:ee:09:92: b6:84:02:c1:17:4e:0e:11:08:94:78:5d:21:c9:00:7f:78:34: b4:5c:98:b2:32:0a:bf:c2:68:3c:c7:13:18:1c:83:85:e7:f6: 37:c0:a4:25:35:c4:80:f6:82:51:15:e7:0d:3e:ac:7b:89:0d: ae:b0:9b:74:70:33:a7:4a:39:4a:39:d8:ec:0c:fa:15:4d:de: 21:ac:2c:fc:7d:6f:96:82:c5:e6:eb:9f:c7:94:90:29:ad:ba: d0:c3:9f:54:52:69:9f:bf:d1:0a:d0:44:9e:6f:9a:fc:35:4c: 44:9d:5e:67 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xucjseYB3rcXNdnacCzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWJhMWZkZjZjNGRlMTkyYzFkM2VkZjhhODAwY2E1OTdm OTdkNjgwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWVhYjVjZDA4OTlhZWUyYmY3ZTA3MTgyYWZmNTVhYTA1YWM5Y2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0plFQlu2/THN5hEEzGhbWAp7+48W 69RQ6bUACq1cQjqIWMlU3MwCTX5kWIOgriawBlhFMz5250wbGm/nssbpQJKHsj/o /FikHB65/Cnl2FSDFDEMtjVz5EwQYb0tC9cEKdEDvoKfxNrpDno0X2iexg44OzBs pi99UYh1qYNdR5hJu96Jm0jrSrorLgJCHZ5QZOMvKJGMm+uXoMXwRBxBlTQKJnPN C2TfvPBy4/JTIiaPRvPvvLb1R1Bq2yZIrK21DgLjHDgMFPJAwA88Z1NsWq0c9gnf fJr8LKBDsi0rbFPOMmg5LIBxAvM7Hr/a72CSfyypB32OvMACNUnatb8qEwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNnqtc0Ima7iv34HGCr/VaoFrJy4MB8GA1UdIwQY MBaAFMTrof32xN4ZLB0+34qADKWX+X1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYt NTEyODU2MGRiZGZjLzEvMmVxMXpRaVpydUtfZmdjWUt2OVZxZ1dzbkxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYtNTEyODU2MGRiZGZj LzEveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDHxZ4AwQC uYMAMA0EAgACMAcDBQMqAm8AMA0GCSqGSIb3DQEBCwUAA4IBAQAdwiRRYTsgJ5/f +xHulNNbArxt9mxQyW1CYliGGRRGlYaLljVUycm3HJCFLl3sy2oIdLCnjNe2LZ76 zJdw89bnHxBouS2VrQysTPuNRbKM+jPNd5V/QOL6hJv5WEz/NbRJuDzWZuKc/Gib VIJkmZtH1uMW4cD96kC5XwxH6TKwFgeEN20sS8TmR5Om/k/uCZK2hALBF04OEQiU eF0hyQB/eDS0XJiyMgq/wmg8xxMYHIOF5/Y3wKQlNcSA9oJRFecNPqx7iQ2usJt0 cDOnSjlKOdjsDPoVTd4hrCz8fW+WgsXm65/HlJAprbrQw59UUmmfv9EK0ESeb5r8 NUxEnV5n -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:37 2026 by rpki-client