This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/t2J9ADUQu_2Ult3KlZNjZGs_6Lo.roa File: t2J9ADUQu_2Ult3KlZNjZGs_6Lo.roa (raw, json) Hash identifier: BCmk0DiD14B7xlwMbjMv/mD5SI6hO0QJQKNwSFLmHzE= Subject key identifier: B7:62:7D:00:35:10:BB:FD:94:96:DD:CA:95:93:63:64:6B:3F:E8:BA Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016 Certificate serial: 019B783551E45B3754428AEEFA51F85B14EC Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/t2J9ADUQu_2Ult3KlZNjZGs_6Lo.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51055 IP address blocks: 46.17.160.0/21 maxlen: 24 185.62.156.0/22 maxlen: 24 193.34.186.0/23 maxlen: 24 194.33.13.0/24 maxlen: 24 2a00:5f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:51:e4:5b:37:54:42:8a:ee:fa:51:f8:5b:14:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7627d003510bbfd9496ddca959363646b3fe8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:b3:e2:38:71:9e:40:a5:84:49:36:b5:d7: dd:e6:b6:ff:fb:42:85:20:9e:dc:a0:bb:0e:9b:ef: f3:96:f9:62:96:68:d8:4a:e9:ae:8c:50:75:19:d8: 6d:74:fe:db:f7:28:61:3a:58:4d:af:be:c7:cc:60: bb:db:67:70:43:ed:3b:62:27:77:a5:3c:a6:e7:0d: e5:35:11:b2:0e:6c:6d:59:2f:e9:3c:d3:c4:1a:38: 24:8c:7f:cb:8a:3e:5f:13:f3:0a:03:2e:78:d2:81: 76:d3:1a:fa:d2:a0:7d:16:cc:96:f3:f1:bd:fe:c0: c9:88:46:f4:33:04:9f:7b:06:c1:2e:03:c4:b9:d5: 38:c3:c3:a8:d6:bd:64:36:a0:8f:5d:1a:f6:9e:dc: a1:e2:dc:05:1d:fa:3d:a8:2a:1d:a6:c2:90:2f:d6: d8:3f:da:5b:94:1a:cc:18:3d:c7:17:74:71:3b:68: a5:73:84:7c:3d:1f:e5:08:7e:84:a7:5c:7c:a4:26: 62:ff:58:51:e9:34:2e:81:8e:25:29:be:7b:f8:33: df:d0:8f:53:02:8e:53:13:43:9d:2b:58:e6:cc:6c: 79:ac:0a:86:71:3a:f9:92:44:cf:29:74:22:1c:fd: 77:c7:25:85:43:5c:05:74:b9:71:51:8d:68:cb:c2: 9c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:62:7D:00:35:10:BB:FD:94:96:DD:CA:95:93:63:64:6B:3F:E8:BA X509v3 Authority Key Identifier: keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/t2J9ADUQu_2Ult3KlZNjZGs_6Lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.160.0/21 185.62.156.0/22 193.34.186.0/23 194.33.13.0/24 IPv6: 2a00:5f00::/32 Signature Algorithm: sha256WithRSAEncryption cd:82:5c:4d:35:e1:bf:d4:f2:29:24:5d:92:65:e2:a3:7b:c1: 54:6b:0a:8b:fa:f0:aa:d4:76:ea:33:76:c0:62:1b:d1:94:18: 91:8d:02:75:34:c4:9d:8f:68:b3:26:ae:ff:2e:d8:dd:91:e5: 38:4f:a4:8d:a6:8d:ed:49:15:37:70:f5:91:b0:73:6e:4d:16: da:e1:83:08:bc:ce:17:7f:da:22:34:8a:c3:91:cf:31:c5:91: fa:fa:09:ef:01:95:6f:b3:a9:29:47:5f:58:2a:92:34:e1:7d: 5d:f4:40:cf:25:e5:a2:65:6a:c7:8b:02:3e:41:d2:40:af:59: ab:cc:94:d4:a2:44:55:f2:1c:38:30:a5:b6:e6:9e:3d:48:bb: 93:2e:de:5b:32:87:99:6d:19:da:93:84:83:6d:c7:10:dc:02: 1e:4f:a5:3b:e5:60:95:0f:c0:45:b7:20:fa:76:33:ab:32:de: de:eb:29:0c:52:0d:37:63:b1:1f:a6:81:65:f2:90:3b:7e:8a: b8:bb:05:db:92:76:ab:0f:52:92:c7:91:03:34:2f:05:e7:d7: 75:87:59:c8:b2:65:96:f5:34:e0:dc:76:c4:29:ae:44:5f:a5: bb:8b:04:f7:33:f2:d2:2c:51:8c:07:6f:35:c1:d3:4a:48:0f: 7a:41:a1:e0 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4NVHkWzdUQoru+lH4WxTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Mjc1MzI3YTVlODVmM2M4YzE0Yzk4NDAzNmY0OTNmZWI1 OWIwMTYwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzYyN2QwMDM1MTBiYmZkOTQ5NmRkY2E5NTkzNjM2NDZiM2ZlOGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiSz4jhxnkClhEk2tdfd5rb/+0KF IJ7coLsOm+/zlvlilmjYSumujFB1GdhtdP7b9yhhOlhNr77HzGC722dwQ+07Yid3 pTym5w3lNRGyDmxtWS/pPNPEGjgkjH/Lij5fE/MKAy540oF20xr60qB9FsyW8/G9 /sDJiEb0MwSfewbBLgPEudU4w8Oo1r1kNqCPXRr2ntyh4twFHfo9qCodpsKQL9bY P9pblBrMGD3HF3RxO2ilc4R8PR/lCH6Ep1x8pCZi/1hR6TQugY4lKb57+DPf0I9T Ao5TE0OdK1jmzGx5rAqGcTr5kkTPKXQiHP13xyWFQ1wFdLlxUY1oy8KcaQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFLdifQA1ELv9lJbdypWTY2RrP+i6MB8GA1UdIwQY MBaAFCknUyel6F88jBTJhANvST/rWbAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1NkVEo2WG9YenlNRk1tRUEyOUpQLXRac0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hMWRlNDQtODZhOS00ZDI5LWI4ZTUt MTY2ZmRkMGIxODIyLzEvdDJKOUFEVVF1XzJVbHQzS2xaTmpaR3NfNkxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hMWRlNDQtODZhOS00ZDI5LWI4ZTUtMTY2ZmRkMGIxODIy LzEvS1NkVEo2WG9YenlNRk1tRUEyOUpQLXRac0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhGgAwQC uT6cAwQBwSK6AwQAwiENMA0EAgACMAcDBQAqAF8AMA0GCSqGSIb3DQEBCwUAA4IB AQDNglxNNeG/1PIpJF2SZeKje8FUawqL+vCq1HbqM3bAYhvRlBiRjQJ1NMSdj2iz Jq7/LtjdkeU4T6SNpo3tSRU3cPWRsHNuTRba4YMIvM4Xf9oiNIrDkc8xxZH6+gnv AZVvs6kpR19YKpI04X1d9EDPJeWiZWrHiwI+QdJAr1mrzJTUokRV8hw4MKW25p49 SLuTLt5bMoeZbRnak4SDbccQ3AIeT6U75WCVD8BFtyD6djOrMt7e6ykMUg03Y7Ef poFl8pA7foq4uwXbknarD1KSx5EDNC8F59d1h1nIsmWW9TTg3HbEKa5EX6W7iwT3 M/LSLFGMB281wdNKSA96QaHg -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:39 2026 by rpki-client