This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/2nBYNNpL7DUTWC7t7_01sfvjbSY.roa File: 2nBYNNpL7DUTWC7t7_01sfvjbSY.roa (raw, json) Hash identifier: gZ0dRZlvFm+YPFIz5Atx1f7qRtb0ULpGbzwkVg6VEJ0= Subject key identifier: DA:70:58:34:DA:4B:EC:35:13:58:2E:ED:EF:FD:35:B1:FB:E3:6D:26 Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868 Certificate serial: 019B78A277B7705DF5EB419C049B45E9B82A Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/2nBYNNpL7DUTWC7t7_01sfvjbSY.roa Signing time: Thu 01 Jan 2026 08:17:51 +0000 ROA not before: Thu 01 Jan 2026 08:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41978 IP address blocks: 194.35.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:77:b7:70:5d:f5:eb:41:9c:04:9b:45:e9:b8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868 Validity Not Before: Jan 1 08:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da705834da4bec3513582eedeffd35b1fbe36d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:1e:6c:2c:70:bc:49:16:b4:ca:80:a2:be: f2:35:11:19:53:8e:5d:cb:33:94:85:5b:2f:1b:53: 73:8b:be:91:94:61:dd:1c:a9:de:1c:88:c1:18:b1: a5:63:78:4a:c3:cb:8b:cc:d4:32:37:6d:94:b2:ea: 83:c2:8d:0d:2e:0c:5e:e6:ee:c8:80:a4:fc:ea:3e: 0f:66:07:49:7f:2c:e0:ff:cc:bc:c1:aa:09:aa:14: 6a:f0:b4:15:da:bd:1a:a7:88:cf:d3:89:9d:8b:a5: 05:87:0d:29:41:48:c9:b8:94:35:23:35:b5:7c:d9: 9a:0b:8d:da:d4:ee:04:37:45:5e:ec:12:f7:f0:e6: 6d:52:57:77:88:37:5c:85:4f:69:cb:e3:b0:d6:a6: 5a:9e:87:9b:16:fb:c1:dd:bf:59:46:69:80:34:27: 3c:a7:2e:9c:a9:c3:b6:85:62:a3:98:9b:f8:ac:13: e2:87:23:44:71:d5:71:71:d7:ff:7a:24:ae:99:1c: 4e:11:78:0e:b1:ee:af:9c:47:89:0b:36:ca:a8:47: d0:a6:07:5f:ef:20:59:cf:27:ef:8c:f4:0f:1b:c2: a4:52:a5:ed:04:a7:f3:1f:f7:ca:a2:0c:ce:c8:b8: 4f:de:76:97:f0:85:d6:80:83:94:96:18:41:a0:26: 2a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:70:58:34:DA:4B:EC:35:13:58:2E:ED:EF:FD:35:B1:FB:E3:6D:26 X509v3 Authority Key Identifier: keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/2nBYNNpL7DUTWC7t7_01sfvjbSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.74.0/24 Signature Algorithm: sha256WithRSAEncryption c3:80:82:82:43:06:cb:8a:77:52:1c:5a:a2:78:76:b0:05:be: 17:ce:90:05:d7:45:96:40:b6:4f:f2:bd:bc:c3:95:18:32:6a: 38:a0:ed:92:98:2d:0b:98:6e:4b:b6:37:8f:d8:b4:f1:08:98: c9:02:fc:80:f3:58:a7:80:bc:9f:58:9d:f2:14:ca:c0:e5:e8: 47:73:c8:d2:af:a7:77:82:ed:ce:96:0f:15:bc:32:5d:79:5c: 30:84:f4:51:e2:b0:0f:ad:69:28:ff:0d:2b:06:b3:44:3f:e2: c1:3a:47:cb:4d:2f:32:3a:31:75:e7:fd:a5:1c:81:85:34:9e: 16:f4:fb:ca:6a:4f:6a:c1:6c:85:6d:78:78:d6:22:c8:cf:d8: a6:0f:44:73:5b:cf:08:b5:b3:09:f6:8b:1e:39:eb:80:e3:35: cc:35:92:a4:60:ab:01:07:7f:28:b0:43:bd:7c:4b:38:16:c7: 85:e2:9a:ba:6f:a7:48:33:dc:f3:78:3f:cf:c9:f4:57:78:0d: 86:50:dc:e6:b8:a3:b3:04:28:a5:a8:fd:c6:14:0c:41:79:56: 6b:7f:80:1a:d4:d2:8d:c1:39:23:d4:a3:41:49:d3:a5:d2:5b: 69:ae:a3:12:45:da:69:b2:12:b3:be:ae:21:ae:70:6a:2d:26: 7b:16:e7:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4one3cF3160GcBJtF6bgqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGYzMDFlNTkwYjgzZWFhMzhmYzEyMWI2NjA5ZmY2ZmU1 MmI4NjgwHhcNMjYwMTAxMDgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTcwNTgzNGRhNGJlYzM1MTM1ODJlZWRlZmZkMzViMWZiZTM2ZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1UebCxwvEkWtMqAor7yNREZU45d yzOUhVsvG1Nzi76RlGHdHKneHIjBGLGlY3hKw8uLzNQyN22UsuqDwo0NLgxe5u7I gKT86j4PZgdJfyzg/8y8waoJqhRq8LQV2r0ap4jP04mdi6UFhw0pQUjJuJQ1IzW1 fNmaC43a1O4EN0Ve7BL38OZtUld3iDdchU9py+Ow1qZanoebFvvB3b9ZRmmANCc8 py6cqcO2hWKjmJv4rBPihyNEcdVxcdf/eiSumRxOEXgOse6vnEeJCzbKqEfQpgdf 7yBZzyfvjPQPG8KkUqXtBKfzH/fKogzOyLhP3naX8IXWgIOUlhhBoCYqVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNpwWDTaS+w1E1gu7e/9NbH7420mMB8GA1UdIwQY MBaAFIZPMB5ZC4Pqo4/BIbZgn/b+UrhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGs4d0hsa0xnLXFqajhFaHRtQ2Y5djVTdUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82MjRmNjQtMGE0YS00ZDI1LWFmY2Ut MGYzOWM0YjM0MzFkLzEvMm5CWU5OcEw3RFVUV0M3dDdfMDFzZnZqYlNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi82MjRmNjQtMGE0YS00ZDI1LWFmY2UtMGYzOWM0YjM0MzFk LzEvaGs4d0hsa0xnLXFqajhFaHRtQ2Y5djVTdUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiNKMA0G CSqGSIb3DQEBCwUAA4IBAQDDgIKCQwbLindSHFqieHawBb4XzpAF10WWQLZP8r28 w5UYMmo4oO2SmC0LmG5LtjeP2LTxCJjJAvyA81ingLyfWJ3yFMrA5ehHc8jSr6d3 gu3Olg8VvDJdeVwwhPRR4rAPrWko/w0rBrNEP+LBOkfLTS8yOjF15/2lHIGFNJ4W 9PvKak9qwWyFbXh41iLIz9imD0RzW88ItbMJ9oseOeuA4zXMNZKkYKsBB38osEO9 fEs4FseF4pq6b6dIM9zzeD/PyfRXeA2GUNzmuKOzBCilqP3GFAxBeVZrf4Aa1NKN wTkj1KNBSdOl0ltprqMSRdppshKzvq4hrnBqLSZ7Fucb -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:13 2026 by rpki-client