This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2DBtkOdrMVIYOJjrmFIw0KeZZnc.roa File: 2DBtkOdrMVIYOJjrmFIw0KeZZnc.roa (raw, json) Hash identifier: dZ6dO5Z0zXmX/2/AOMdgTgcYhux3P4XS60B6r0/2mWk= Subject key identifier: D8:30:6D:90:E7:6B:31:52:18:38:98:EB:98:52:30:D0:A7:99:66:77 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019ADF7CC8E0F14661A2C038A2B505E453DE Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2DBtkOdrMVIYOJjrmFIw0KeZZnc.roa Signing time: Tue 02 Dec 2025 14:34:48 +0000 ROA not before: Tue 02 Dec 2025 14:34:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139057 IP address blocks: 87.82.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:7c:c8:e0:f1:46:61:a2:c0:38:a2:b5:05:e4:53:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 2 14:34:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d8306d90e76b3152183898eb985230d0a7996677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:4a:3a:2e:a4:61:9f:5a:e2:34:41:c5:a9: 8d:f3:46:05:26:97:2c:82:c2:9e:15:b2:9c:d8:d9: 61:24:76:59:be:e7:b6:5d:58:04:8f:3d:9c:23:a7: 38:04:59:75:f1:cb:36:96:50:7c:14:17:a3:26:41: 03:d9:c2:6a:f3:ea:07:29:03:e2:78:b1:ca:32:93: 4b:f8:70:43:9b:11:39:d5:2c:df:18:cc:d9:f6:84: c4:d1:b4:d6:89:8e:82:44:77:fd:99:e3:96:a8:a3: 96:7e:bd:27:64:3b:a6:f2:80:33:be:dc:31:96:22: 94:0c:ee:e2:09:b4:da:4f:65:84:7a:26:17:d2:b4: f7:7e:91:6e:75:88:fc:c4:7d:f4:66:7d:8c:af:4b: 39:d0:c9:3f:fb:57:1c:ef:17:e8:8c:8e:07:16:60: cb:31:6a:b1:c9:c3:58:aa:3e:ab:6b:c9:40:eb:29: cf:12:6c:70:58:7d:ba:56:1b:41:06:12:95:48:c2: 68:a1:a4:42:2b:98:10:ba:48:78:29:85:b4:d5:e1: 75:3e:a9:ef:b4:38:9f:6f:11:dc:24:7f:0b:e2:be: bf:e3:8e:86:be:db:9e:21:3a:6b:d2:a2:46:e3:d1: 82:6c:34:fa:4d:0a:92:b8:1e:55:8b:92:86:8a:79: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:30:6D:90:E7:6B:31:52:18:38:98:EB:98:52:30:D0:A7:99:66:77 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2DBtkOdrMVIYOJjrmFIw0KeZZnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.82.51.0/24 Signature Algorithm: sha256WithRSAEncryption c7:6f:de:05:01:fe:0b:00:b2:13:4e:47:8d:be:9c:3f:3b:f6: 5a:11:48:f3:cb:21:a7:00:ff:0f:7e:47:f8:d6:b9:91:2c:68: 9d:e6:e3:69:73:da:35:91:56:fc:bc:90:e3:93:a2:ee:12:fe: 52:44:66:1b:a7:17:bc:0e:65:1e:67:16:4b:11:cc:bb:ef:42: cd:18:b9:73:c8:43:bb:fb:83:72:a0:a6:71:8e:92:1e:ef:05: 4c:5d:96:6f:50:65:97:f6:4c:5d:74:10:e6:b2:e6:e1:03:fa: 37:3a:47:be:6b:31:36:0d:c9:f2:92:90:2c:65:b8:9a:8d:72: 13:21:48:9e:6c:81:00:89:2f:48:5d:ba:8a:37:bc:ed:f3:78: 4e:d8:2b:19:df:fb:81:ed:86:ab:5c:23:d6:81:2d:5a:7b:a5: bf:72:b6:1b:1a:de:fc:6d:4a:c6:35:04:db:14:67:ca:1c:99: ec:63:e6:3a:94:f7:1d:31:fe:55:8f:50:c9:04:0f:47:3a:f9: 05:8e:ad:1a:b0:a4:2e:59:0b:3f:14:37:a6:1a:df:d9:b4:72: f2:43:b1:1a:28:e8:69:ca:9b:db:4d:0e:a2:e5:73:9c:fa:45: 96:7d:81:ec:0e:4a:d4:23:5c:f0:4d:d3:ea:32:a4:9d:d2:14: 29:82:a7:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrffMjg8UZhosA4orUF5FPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjAyMTQzNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODMwNmQ5MGU3NmIzMTUyMTgzODk4ZWI5ODUyMzBkMGE3OTk2Njc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/BKOi6kYZ9a4jRBxamN80YFJpcs gsKeFbKc2NlhJHZZvue2XVgEjz2cI6c4BFl18cs2llB8FBejJkED2cJq8+oHKQPi eLHKMpNL+HBDmxE51SzfGMzZ9oTE0bTWiY6CRHf9meOWqKOWfr0nZDum8oAzvtwx liKUDO7iCbTaT2WEeiYX0rT3fpFudYj8xH30Zn2Mr0s50Mk/+1cc7xfojI4HFmDL MWqxycNYqj6ra8lA6ynPEmxwWH26VhtBBhKVSMJooaRCK5gQukh4KYW01eF1Pqnv tDifbxHcJH8L4r6/446GvtueITpr0qJG49GCbDT6TQqSuB5Vi5KGinnKfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNgwbZDnazFSGDiY65hSMNCnmWZ3MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvMkRCdGtPZHJNVklZT0pqcm1GSXcwS2VaWm5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1IzMA0G CSqGSIb3DQEBCwUAA4IBAQDHb94FAf4LALITTkeNvpw/O/ZaEUjzyyGnAP8Pfkf4 1rmRLGid5uNpc9o1kVb8vJDjk6LuEv5SRGYbpxe8DmUeZxZLEcy770LNGLlzyEO7 +4NyoKZxjpIe7wVMXZZvUGWX9kxddBDmsubhA/o3Oke+azE2DcnykpAsZbiajXIT IUiebIEAiS9IXbqKN7zt83hO2CsZ3/uB7YarXCPWgS1ae6W/crYbGt78bUrGNQTb FGfKHJnsY+Y6lPcdMf5Vj1DJBA9HOvkFjq0asKQuWQs/FDemGt/ZtHLyQ7EaKOhp ypvbTQ6i5XOc+kWWfYHsDkrUI1zwTdPqMqSd0hQpgqcN -----END CERTIFICATE-----Generated at Wed Dec 3 11:45:19 2025 by rpki-client