This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/u2DoRyUakqrjwSyZA3BmkWIxCdY.roa File: u2DoRyUakqrjwSyZA3BmkWIxCdY.roa (raw, json) Hash identifier: ysQW56gBC1VncDg2ReMXXp9OOHCKYs21ZfB3qLDw5IY= Subject key identifier: BB:60:E8:47:25:1A:92:AA:E3:C1:2C:99:03:70:66:91:62:31:09:D6 Certificate issuer: /CN=6f060474088606ec4ee8eed7c41b6943f89a09bd Certificate serial: 019B7CED781D72ACA9C12525B97E58EC2D50 Authority key identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/u2DoRyUakqrjwSyZA3BmkWIxCdY.roa Signing time: Fri 02 Jan 2026 04:18:16 +0000 ROA not before: Fri 02 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212038 IP address blocks: 185.218.197.0/24 maxlen: 24 2a10:c780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:78:1d:72:ac:a9:c1:25:25:b9:7e:58:ec:2d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f060474088606ec4ee8eed7c41b6943f89a09bd Validity Not Before: Jan 2 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb60e847251a92aae3c12c9903706691623109d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:c0:b5:e5:0e:c9:e3:d1:5f:a7:8c:13:95: ad:b4:b9:1a:19:f6:be:06:c5:d1:25:ea:8e:d6:0e: 48:33:30:ad:76:81:3d:73:48:2b:53:87:1f:fd:78: 89:91:3d:bd:67:2d:62:a7:3d:f0:25:3a:0f:a7:0a: 8d:c4:6b:0f:88:7a:3f:be:b9:45:c5:75:78:71:f2: d8:9a:75:07:19:82:30:2a:87:d9:7e:52:55:d1:8e: 07:fc:99:ab:3e:92:5e:ba:42:80:8e:0c:98:75:24: f3:23:89:55:1e:42:86:8c:e0:2b:09:d2:2f:c9:6b: 39:10:c6:2e:cb:b1:b5:e3:a6:95:3e:f5:8a:a8:d8: 3c:46:28:3b:09:4a:f0:af:8a:2f:42:cd:30:61:f6: 46:ad:d9:2b:9e:84:e6:83:b2:4c:f1:b3:d4:8e:d1: 06:17:d5:2c:55:50:36:80:16:e5:d3:b0:3d:e8:c1: 3c:ae:8d:09:87:8e:54:33:0b:63:df:73:89:ab:fe: 06:83:18:81:f7:73:04:db:d8:44:5e:90:73:51:dd: 1f:3a:fa:37:b3:1d:13:fa:dd:cf:3c:8d:d3:d1:6d: a2:a7:ca:57:e5:88:d7:44:6a:4c:03:a5:4c:1c:a6: e4:c6:fc:b5:a1:9c:95:c6:02:0e:b8:0e:64:98:a6: f3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:60:E8:47:25:1A:92:AA:E3:C1:2C:99:03:70:66:91:62:31:09:D6 X509v3 Authority Key Identifier: keyid:6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/u2DoRyUakqrjwSyZA3BmkWIxCdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.197.0/24 IPv6: 2a10:c780::/29 Signature Algorithm: sha256WithRSAEncryption 92:2e:68:f6:e9:03:07:f5:49:32:5f:9e:04:24:8b:0c:75:3b: 70:28:75:e1:4a:9d:5f:99:07:3e:eb:e4:3a:9b:2e:57:4d:fa: 95:fb:e7:67:bc:83:d2:c3:25:dc:cc:18:b8:92:b2:2c:de:5f: 61:ae:8d:4b:38:5b:7d:94:18:bd:ef:86:5a:4c:2f:9f:d8:14: d2:f2:60:a8:94:0a:a4:bf:e8:66:01:98:6a:8b:86:8e:2b:15: 59:9a:4e:83:14:15:fd:c2:a1:6c:5f:f8:60:7b:e2:f6:ec:26: 68:38:27:83:2d:16:4a:2c:df:e4:a2:2c:d8:41:70:a3:2d:a6: 8e:2a:b4:88:92:16:35:ce:15:73:b8:40:3a:2b:7b:2d:cf:f9: 37:0e:64:df:ac:58:e6:c8:3e:ed:1f:f0:8e:0a:50:fc:be:b7: 12:3d:87:74:36:a6:40:d9:ec:e4:95:b2:3c:f6:43:f2:ac:f5: 9b:95:a0:ad:f3:c4:60:ff:85:e9:5a:f0:73:8a:91:8e:6d:23: 18:84:b7:8e:d6:4e:a6:d8:45:0e:ac:50:79:58:52:e3:60:96: e3:c6:09:8a:a1:a2:83:d2:6c:bd:46:37:9b:ea:1c:fc:e9:a9: b4:28:98:f7:1b:c4:8e:07:a3:cf:c6:40:81:89:6a:8e:51:e7: 83:d9:ee:34 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87XgdcqypwSUluX5Y7C1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMDYwNDc0MDg4NjA2ZWM0ZWU4ZWVkN2M0MWI2OTQzZjg5 YTA5YmQwHhcNMjYwMTAyMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjYwZTg0NzI1MWE5MmFhZTNjMTJjOTkwMzcwNjY5MTYyMzEwOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv/AteUOyePRX6eME5WttLkaGfa+ BsXRJeqO1g5IMzCtdoE9c0grU4cf/XiJkT29Zy1ipz3wJToPpwqNxGsPiHo/vrlF xXV4cfLYmnUHGYIwKofZflJV0Y4H/JmrPpJeukKAjgyYdSTzI4lVHkKGjOArCdIv yWs5EMYuy7G146aVPvWKqNg8Rig7CUrwr4ovQs0wYfZGrdkrnoTmg7JM8bPUjtEG F9UsVVA2gBbl07A96ME8ro0Jh45UMwtj33OJq/4GgxiB93ME29hEXpBzUd0fOvo3 sx0T+t3PPI3T0W2ip8pX5YjXRGpMA6VMHKbkxvy1oZyVxgIOuA5kmKbzIQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLtg6EclGpKq48EsmQNwZpFiMQnWMB8GA1UdIwQY MBaAFG8GBHQIhgbsTuju18QbaUP4mgm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndZRWRBaUdCdXhPNk83WHhCdHBRX2lhQ2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yYmZhNmItYmFhOC00YzhjLTliYzYt N2FhNmViMDEyMTkwLzEvdTJEb1J5VWFrcXJqd1N5WkEzQm1rV0l4Q2RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yYmZhNmItYmFhOC00YzhjLTliYzYtN2FhNmViMDEyMTkw LzEvYndZRWRBaUdCdXhPNk83WHhCdHBRX2lhQ2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudrFMA0E AgACMAcDBQMqEMeAMA0GCSqGSIb3DQEBCwUAA4IBAQCSLmj26QMH9UkyX54EJIsM dTtwKHXhSp1fmQc+6+Q6my5XTfqV++dnvIPSwyXczBi4krIs3l9hro1LOFt9lBi9 74ZaTC+f2BTS8mColAqkv+hmAZhqi4aOKxVZmk6DFBX9wqFsX/hge+L27CZoOCeD LRZKLN/koizYQXCjLaaOKrSIkhY1zhVzuEA6K3stz/k3DmTfrFjmyD7tH/COClD8 vrcSPYd0NqZA2ezklbI89kPyrPWblaCt88Rg/4XpWvBzipGObSMYhLeO1k6m2EUO rFB5WFLjYJbjxgmKoaKD0my9Rjeb6hz86am0KJj3G8SOB6PPxkCBiWqOUeeD2e40 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:46 2026 by rpki-client