This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/2lJfQEwlH-6kTxU9uw2QDAzX8pc.roa File: 2lJfQEwlH-6kTxU9uw2QDAzX8pc.roa (raw, json) Hash identifier: 4TrMtWPwHQYSgCG5YX55g5CmUXIDn1rAauN71eaqxdk= Subject key identifier: DA:52:5F:40:4C:25:1F:EE:A4:4F:15:3D:BB:0D:90:0C:0C:D7:F2:97 Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24 Certificate serial: 019B797E6AF4B0E474100BD72F1BAFA2A6F0 Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/2lJfQEwlH-6kTxU9uw2QDAzX8pc.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9145 IP address blocks: 194.15.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6a:f4:b0:e4:74:10:0b:d7:2f:1b:af:a2:a6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24 Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da525f404c251feea44f153dbb0d900c0cd7f297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:02:87:8a:19:e6:7a:2f:d9:48:dc:86:0e:c7: c0:d7:75:c0:72:ee:a3:db:61:7d:a1:62:c9:36:8c: f3:82:fa:f7:a1:b9:4a:84:04:ff:39:3f:09:9a:6d: 67:0d:bb:ed:ac:c7:d0:6c:84:2c:5b:bf:22:97:f6: 8e:b0:a0:16:7d:8a:2c:32:48:0f:b3:54:cf:1b:40: 33:71:58:81:5c:11:76:57:cf:dd:19:2a:a0:bc:27: 4c:da:39:0e:82:c7:69:e5:ef:a2:ee:61:9a:32:4d: 70:9b:ba:36:7c:f2:83:1b:c6:c9:df:39:d4:1a:4f: f2:ad:28:16:57:c9:43:24:69:b7:e1:96:b0:fa:1e: 0b:2d:68:35:8a:14:90:87:af:70:8c:30:83:c3:f1: ad:d7:97:62:04:31:ec:18:12:50:b6:ff:8c:40:18: 81:b7:e9:71:b8:75:2e:40:1e:17:01:6e:16:31:26: 0b:2f:0a:12:e7:e8:ef:8b:92:59:c5:bb:5e:a0:8a: 7e:68:24:89:14:1b:fe:7c:c7:1a:9f:30:04:af:74: e4:db:f5:7a:1c:92:12:05:88:0c:d5:5f:fc:7f:cb: 59:f8:d9:90:b9:42:27:10:6c:a0:c7:7f:d9:c2:71: 04:86:07:31:ba:a3:38:a8:cc:32:27:3a:8a:5f:dc: 88:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:52:5F:40:4C:25:1F:EE:A4:4F:15:3D:BB:0D:90:0C:0C:D7:F2:97 X509v3 Authority Key Identifier: keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/2lJfQEwlH-6kTxU9uw2QDAzX8pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.185.0/24 Signature Algorithm: sha256WithRSAEncryption 36:07:73:e1:78:dd:c9:c1:51:b7:05:4c:65:f5:ac:58:9a:3e: 48:0b:f2:0c:f0:d1:f5:f5:8c:b5:e3:45:fb:04:0d:b0:c0:6d: c5:89:12:53:43:7d:e3:ba:00:f2:56:cd:0d:fa:2f:1f:a5:2d: 4d:03:04:95:95:0c:a0:c2:e6:4b:43:fe:bd:e4:c5:f6:f1:d6: 9a:62:76:20:bf:7b:83:ed:a8:29:22:26:dc:45:61:0f:5e:5b: 3b:19:9a:ad:23:8b:5a:31:c5:8e:f3:fb:85:25:06:72:f7:70: b1:d1:3c:69:79:89:6b:33:fd:14:ac:25:3f:5f:84:c9:e1:c0: b4:4f:ef:1d:c9:04:c7:68:56:7a:e2:ff:05:a3:2d:9a:85:3f: 63:9d:7d:a2:9c:0d:60:b7:ec:c9:fb:c6:8f:de:74:a1:41:88: 03:2a:76:2d:37:ff:db:11:de:d7:df:f1:ea:7b:64:fc:9c:a2: de:82:62:7d:96:b6:b5:f8:67:ac:5a:5b:82:a5:44:cf:71:50: 17:ae:d2:ce:08:6a:c5:71:e3:e6:3b:a0:a7:6d:da:60:17:3d: 72:e5:0a:d9:c3:bf:28:4b:f9:8e:fe:30:10:d6:d8:18:55:ff: e8:18:51:72:a5:8d:7c:be:14:4f:fd:4a:d7:19:f3:f7:b9:f6: 8c:d2:12:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmr0sOR0EAvXLxuvoqbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YTRjZTUwZDBjZGU0MTU0NzMzMTNiMTFiODU3MTk0MDhm YWJhMjQwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTUyNWY0MDRjMjUxZmVlYTQ0ZjE1M2RiYjBkOTAwYzBjZDdmMjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AKHihnmei/ZSNyGDsfA13XAcu6j 22F9oWLJNozzgvr3oblKhAT/OT8Jmm1nDbvtrMfQbIQsW78il/aOsKAWfYosMkgP s1TPG0AzcViBXBF2V8/dGSqgvCdM2jkOgsdp5e+i7mGaMk1wm7o2fPKDG8bJ3znU Gk/yrSgWV8lDJGm34Zaw+h4LLWg1ihSQh69wjDCDw/Gt15diBDHsGBJQtv+MQBiB t+lxuHUuQB4XAW4WMSYLLwoS5+jvi5JZxbteoIp+aCSJFBv+fMcanzAEr3Tk2/V6 HJISBYgM1V/8f8tZ+NmQuUInEGygx3/ZwnEEhgcxuqM4qMwyJzqKX9yIhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNpSX0BMJR/upE8VPbsNkAwM1/KXMB8GA1UdIwQY MBaAFDWkzlDQzeQVRzMTsRuFcZQI+rokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2It MDNiNjRjMTkxZDRhLzEvMmxKZlFFd2xILTZrVHhVOXV3MlFEQXpYOHBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2ItMDNiNjRjMTkxZDRh LzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg+5MA0G CSqGSIb3DQEBCwUAA4IBAQA2B3PheN3JwVG3BUxl9axYmj5IC/IM8NH19Yy140X7 BA2wwG3FiRJTQ33jugDyVs0N+i8fpS1NAwSVlQygwuZLQ/695MX28daaYnYgv3uD 7agpIibcRWEPXls7GZqtI4taMcWO8/uFJQZy93Cx0TxpeYlrM/0UrCU/X4TJ4cC0 T+8dyQTHaFZ64v8Foy2ahT9jnX2inA1gt+zJ+8aP3nShQYgDKnYtN//bEd7X3/Hq e2T8nKLegmJ9lra1+GesWluCpUTPcVAXrtLOCGrFcePmO6CnbdpgFz1y5QrZw78o S/mO/jAQ1tgYVf/oGFFypY18vhRP/UrXGfP3ufaM0hLN -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:39 2026 by rpki-client