This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/2dRtK5SgykkBJukn17Yq5DPzVc0.roa File: 2dRtK5SgykkBJukn17Yq5DPzVc0.roa (raw, json) Hash identifier: wUS6ehBTRJETqX2oU/1L/6oJii+BNdsZeKhz7Ba1e6w= Subject key identifier: D9:D4:6D:2B:94:A0:CA:49:01:26:E9:27:D7:B6:2A:E4:33:F3:55:CD Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a Certificate serial: 019B76EAB5D9B0F799670C37C4A3DA8E195B Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/2dRtK5SgykkBJukn17Yq5DPzVc0.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38927 IP address blocks: 46.226.80.0/21 maxlen: 21 87.237.120.0/21 maxlen: 21 93.191.48.0/21 maxlen: 21 185.146.236.0/22 maxlen: 22 2a02:420::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b5:d9:b0:f7:99:67:0c:37:c4:a3:da:8e:19:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9d46d2b94a0ca490126e927d7b62ae433f355cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:50:c2:d9:6f:0c:be:31:28:b4:98:73:6c:a2: 87:b0:73:c8:dc:0e:a7:48:0e:57:c1:7f:92:e4:c3: 15:49:61:36:c8:c4:c8:77:1a:86:aa:82:13:11:f5: 34:51:78:82:a6:1f:ce:fc:a9:41:ad:99:89:43:38: 14:b6:05:c2:b3:07:77:32:0e:25:6a:70:00:5e:81: e4:11:d4:4b:04:26:56:25:96:38:c3:1c:ef:9d:1d: 4e:d3:1c:3d:d0:80:fc:c2:79:ea:5d:23:af:37:83: 02:89:8c:ce:1f:57:7f:08:ed:27:ce:41:c1:ed:74: ab:88:14:b9:48:93:fe:5c:14:ad:ab:53:6e:0a:22: 75:84:3d:8c:1d:26:39:47:16:d1:2e:51:cd:d7:ba: 13:ee:36:c9:28:08:a5:50:4b:19:ec:98:16:5e:96: 49:97:22:75:39:0f:ff:43:0a:07:aa:f4:c1:22:80: 38:bd:4c:d4:b5:59:0f:e0:36:e7:68:a7:c2:63:f0: 49:2a:a2:68:f5:49:c3:e9:0e:b2:53:ae:1b:91:b1: bf:23:9a:be:7e:7b:21:2c:12:43:a2:7d:b8:d9:2a: 37:7f:d4:68:e4:be:0d:b7:44:ab:45:1d:b5:cc:14: ab:fb:33:cb:99:17:71:96:7f:51:01:36:c8:ac:2b: 53:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D4:6D:2B:94:A0:CA:49:01:26:E9:27:D7:B6:2A:E4:33:F3:55:CD X509v3 Authority Key Identifier: keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/2dRtK5SgykkBJukn17Yq5DPzVc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.80.0/21 87.237.120.0/21 93.191.48.0/21 185.146.236.0/22 IPv6: 2a02:420::/29 Signature Algorithm: sha256WithRSAEncryption 37:d9:ee:cc:5f:55:c6:0d:f4:72:f8:38:52:0b:1e:be:c1:af: 71:ca:95:9a:83:a1:80:e7:b0:69:97:52:c1:72:9f:8d:f0:94: a1:4d:31:97:51:34:70:f0:21:f3:2e:72:78:a6:4b:ca:33:80: b8:df:4c:43:9a:22:f4:dd:60:92:1e:ee:fa:b9:cf:86:25:14: d8:e5:d2:79:16:54:e2:3c:b3:a0:2b:9d:1c:fb:9c:67:4d:1c: fa:b6:49:55:d1:13:71:82:bb:3e:60:3f:5e:cb:bb:03:9b:f2: 46:cc:d4:2c:e0:5c:06:26:84:22:fc:65:3e:2c:88:b7:ae:23: 54:da:d8:3c:f6:c3:8b:a7:22:a4:82:6b:ca:0a:1e:9b:4e:7a: 99:22:9a:04:f5:4b:5d:83:1c:63:54:21:2d:71:96:9b:bf:94: 96:db:26:6e:64:37:1b:f1:f5:a8:c4:60:8a:87:01:4b:c3:81: 5a:11:c7:73:17:91:df:86:c4:f2:01:19:17:ed:39:f7:96:a4: 19:fa:4c:ed:33:6d:73:16:0d:b7:33:fd:67:ee:30:8a:64:c1: 27:f8:f8:ca:a4:7d:6e:61:b4:b1:0d:ce:27:6b:d5:9f:b0:b7: f9:d8:55:a6:72:dd:dd:96:d2:76:6a:70:38:39:ac:46:2f:bc: 1a:c3:46:19 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt26rXZsPeZZww3xKPajhlbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYjAwZWQ2MmJlZWYzMDcwYTEzNmRkOTg0NWZkMjZlMjFm ZDI2MWEwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWQ0NmQyYjk0YTBjYTQ5MDEyNmU5MjdkN2I2MmFlNDMzZjM1NWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41DC2W8MvjEotJhzbKKHsHPI3A6n SA5XwX+S5MMVSWE2yMTIdxqGqoITEfU0UXiCph/O/KlBrZmJQzgUtgXCswd3Mg4l anAAXoHkEdRLBCZWJZY4wxzvnR1O0xw90ID8wnnqXSOvN4MCiYzOH1d/CO0nzkHB 7XSriBS5SJP+XBStq1NuCiJ1hD2MHSY5RxbRLlHN17oT7jbJKAilUEsZ7JgWXpZJ lyJ1OQ//QwoHqvTBIoA4vUzUtVkP4DbnaKfCY/BJKqJo9UnD6Q6yU64bkbG/I5q+ fnshLBJDon242So3f9Ro5L4Nt0SrRR21zBSr+zPLmRdxln9RATbIrCtT4wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNnUbSuUoMpJASbpJ9e2KuQz81XNMB8GA1UdIwQY MBaAFKywDtYr7vMHChNt2YRf0m4h/SYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zYTdlY2MtNDU5MS00YWRjLTk4ODAt YWFjODlmMmYxN2NkLzEvMmRSdEs1U2d5a2tCSnVrbjE3WXE1RFB6VmMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8zYTdlY2MtNDU5MS00YWRjLTk4ODAtYWFjODlmMmYxN2Nk LzEvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLuJQAwQD V+14AwQDXb8wAwQCuZLsMA0EAgACMAcDBQMqAgQgMA0GCSqGSIb3DQEBCwUAA4IB AQA32e7MX1XGDfRy+DhSCx6+wa9xypWag6GA57Bpl1LBcp+N8JShTTGXUTRw8CHz LnJ4pkvKM4C430xDmiL03WCSHu76uc+GJRTY5dJ5FlTiPLOgK50c+5xnTRz6tklV 0RNxgrs+YD9ey7sDm/JGzNQs4FwGJoQi/GU+LIi3riNU2tg89sOLpyKkgmvKCh6b TnqZIpoE9UtdgxxjVCEtcZabv5SW2yZuZDcb8fWoxGCKhwFLw4FaEcdzF5HfhsTy ARkX7Tn3lqQZ+kztM21zFg23M/1n7jCKZMEn+PjKpH1uYbSxDc4na9WfsLf52FWm ct3dltJ2anA4OaxGL7waw0YZ -----END CERTIFICATE-----Generated at Wed Jan 21 13:49:41 2026 by rpki-client