This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/2Vs036RIRQoTV2qAx1ertXDI75Q.roa File: 2Vs036RIRQoTV2qAx1ertXDI75Q.roa (raw, json) Hash identifier: 3fM+Aj1+OVjee08EOwpC46t8Bux0tVGCFsexo6Rt54s= Subject key identifier: D9:5B:34:DF:A4:48:45:0A:13:57:6A:80:C7:57:AB:B5:70:C8:EF:94 Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672 Certificate serial: 019B7E3773E69A821DA84AA88C4CB59D3DC9 Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/2Vs036RIRQoTV2qAx1ertXDI75Q.roa Signing time: Fri 02 Jan 2026 10:18:41 +0000 ROA not before: Fri 02 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59987 IP address blocks: 176.119.196.0/24 maxlen: 24 2a06:6840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:73:e6:9a:82:1d:a8:4a:a8:8c:4c:b5:9d:3d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672 Validity Not Before: Jan 2 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d95b34dfa448450a13576a80c757abb570c8ef94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:8a:30:02:dc:30:5b:86:99:e7:06:fa:7c: 24:68:3d:5f:c9:42:18:a0:e6:9d:f6:39:3b:a5:ce: 57:f9:e4:fe:4d:95:b0:5d:e0:1c:19:26:44:bb:10: 9d:ea:21:78:b6:2a:e6:db:58:c7:a5:62:5d:68:c4: 96:27:17:47:06:b5:13:79:43:23:75:7c:15:39:78: 12:54:79:51:55:d2:3e:e7:d9:5b:af:a9:ea:fc:41: b2:58:68:5e:2b:7e:54:1d:63:2d:45:89:41:88:65: 68:b7:61:73:24:0a:1f:89:8d:07:37:1e:ac:c0:15: 5f:ff:d0:76:28:7d:b9:37:94:98:94:cd:c9:ac:cf: 6b:da:63:33:b7:66:36:e5:46:74:59:f0:80:7e:73: 9d:ef:19:7f:0b:42:02:18:75:e6:73:7d:b4:d0:d1: f0:12:17:98:37:59:e6:4e:b0:20:94:e0:a2:01:aa: 29:9e:3d:79:99:93:18:a3:04:70:ea:dc:d2:e7:29: 92:8b:50:48:11:ef:6e:a7:bb:ad:92:af:67:9d:95: 27:6d:d8:01:94:7e:32:02:ab:c7:15:22:f8:fe:74: 47:81:3c:63:07:9f:cf:18:b1:e5:ce:dc:0e:39:98: 0a:ed:84:ff:58:28:a6:b4:84:b5:72:0a:4b:29:74: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5B:34:DF:A4:48:45:0A:13:57:6A:80:C7:57:AB:B5:70:C8:EF:94 X509v3 Authority Key Identifier: keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/2Vs036RIRQoTV2qAx1ertXDI75Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.196.0/24 IPv6: 2a06:6840::/29 Signature Algorithm: sha256WithRSAEncryption 75:d1:42:ca:0c:24:e9:49:d5:e5:ff:7d:14:87:45:ba:09:f7: 74:50:b6:21:46:f7:4c:ac:ce:90:5d:c8:42:87:4f:7a:eb:ef: 34:9f:c6:64:8d:b2:9c:ca:6c:e6:9e:6d:60:7a:d8:29:c3:21: 25:62:e6:e5:e0:9f:c8:cc:1d:1d:cd:93:89:30:57:65:01:1e: e2:b6:36:19:6d:d5:f0:06:42:c3:6e:4b:35:ad:f6:23:cd:dc: fd:78:c3:1d:62:d0:7a:3f:bb:0a:89:15:22:a4:98:26:10:30: f5:f5:92:29:46:07:26:05:d8:94:f3:28:75:cd:39:d1:1b:76: 7f:4b:c5:01:11:0d:9b:d7:a2:09:52:9f:7d:35:f7:02:e5:08: c2:3f:0b:df:ba:35:e1:20:ac:19:2e:be:0c:33:54:d4:da:7a: b4:af:be:62:e7:18:4c:0f:ca:06:f4:47:04:5b:2a:35:a6:ff: 16:3f:6a:ec:6d:75:f4:4e:d0:d2:03:b3:23:b7:55:a1:a9:96: cc:30:49:ef:55:ac:f1:24:59:d6:6a:aa:de:dc:d8:25:e3:11: 2c:8e:3e:da:e7:b0:40:cf:7f:9b:22:e2:47:c0:a1:70:42:21: 70:df:6f:79:1a:f6:d5:c1:22:5c:5d:12:70:96:2d:bc:90:8f: ff:94:5e:6c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N3PmmoIdqEqojEy1nT3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzA4OWM0NWM1NTA4OGZlOTBlYjYxMDAyZjA3ZjBmOTU4 NjI2NzIwHhcNMjYwMTAyMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTViMzRkZmE0NDg0NTBhMTM1NzZhODBjNzU3YWJiNTcwYzhlZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi2KMALcMFuGmecG+nwkaD1fyUIY oOad9jk7pc5X+eT+TZWwXeAcGSZEuxCd6iF4tirm21jHpWJdaMSWJxdHBrUTeUMj dXwVOXgSVHlRVdI+59lbr6nq/EGyWGheK35UHWMtRYlBiGVot2FzJAofiY0HNx6s wBVf/9B2KH25N5SYlM3JrM9r2mMzt2Y25UZ0WfCAfnOd7xl/C0ICGHXmc3200NHw EheYN1nmTrAglOCiAaopnj15mZMYowRw6tzS5ymSi1BIEe9up7utkq9nnZUnbdgB lH4yAqvHFSL4/nRHgTxjB5/PGLHlztwOOZgK7YT/WCimtIS1cgpLKXRQNQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNlbNN+kSEUKE1dqgMdXq7VwyO+UMB8GA1UdIwQY MBaAFKVwicRcVQiP6Q62EALwfw+VhiZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jM2Y0YTItOGI4ZS00OWEzLWFhOWYt ZDkyZDY0YjlmODAxLzEvMlZzMDM2UklSUW9UVjJxQXgxZXJ0WERJNzVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9jM2Y0YTItOGI4ZS00OWEzLWFhOWYtZDkyZDY0YjlmODAx LzEvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAsHfEMA0E AgACMAcDBQMqBmhAMA0GCSqGSIb3DQEBCwUAA4IBAQB10ULKDCTpSdXl/30Uh0W6 Cfd0ULYhRvdMrM6QXchCh0966+80n8ZkjbKcymzmnm1getgpwyElYubl4J/IzB0d zZOJMFdlAR7itjYZbdXwBkLDbks1rfYjzdz9eMMdYtB6P7sKiRUipJgmEDD19ZIp RgcmBdiU8yh1zTnRG3Z/S8UBEQ2b16IJUp99NfcC5QjCPwvfujXhIKwZLr4MM1TU 2nq0r75i5xhMD8oG9EcEWyo1pv8WP2rsbXX0TtDSA7Mjt1WhqZbMMEnvVazxJFnW aqre3Ngl4xEsjj7a57BAz3+bIuJHwKFwQiFw3295GvbVwSJcXRJwli28kI//lF5s -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:50 2026 by rpki-client