This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/ns2_9RvIYkB1i9QUreo7mZCNFB4.roa File: ns2_9RvIYkB1i9QUreo7mZCNFB4.roa (raw, json) Hash identifier: hRy6vBXZocA8W5sz3dmk0IcTUrCvsfp79eJVXqITSXI= Subject key identifier: 9E:CD:BF:F5:1B:C8:62:40:75:8B:D4:14:AD:EA:3B:99:90:8D:14:1E Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5 Certificate serial: 019B7EA621AF827078E0897D44FB493EAEF1 Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/ns2_9RvIYkB1i9QUreo7mZCNFB4.roa Signing time: Fri 02 Jan 2026 12:19:35 +0000 ROA not before: Fri 02 Jan 2026 12:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49326 IP address blocks: 80.244.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:21:af:82:70:78:e0:89:7d:44:fb:49:3e:ae:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5 Validity Not Before: Jan 2 12:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ecdbff51bc86240758bd414adea3b99908d141e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:a7:38:b0:34:ab:d2:fe:40:19:ad:b8:d8: 46:09:49:60:73:c0:57:40:c1:0d:06:21:ae:83:83: 12:ba:4d:8f:d4:d2:cc:d7:ab:55:b4:1d:10:aa:be: 78:7f:e7:2d:47:50:50:26:1e:fb:b4:f8:37:69:f4: 20:16:aa:e6:80:a5:82:d5:ae:eb:d4:00:4c:16:80: ec:3b:9c:d4:a3:29:91:8b:bb:f3:83:86:f4:42:4c: db:e4:2a:fd:8a:47:69:65:c2:85:38:ee:96:f5:bb: 7d:33:ba:81:44:43:23:a3:ac:eb:4a:7e:82:57:ac: 4e:e9:af:d1:9a:3e:86:6b:59:cf:6f:ed:47:f5:b5: 22:ee:9f:f7:13:48:c3:9b:5a:64:79:66:3e:4f:bf: db:93:51:56:96:6c:ab:9a:b1:6d:30:4c:62:0d:9f: 98:04:55:9c:9f:81:87:f2:ad:d0:76:e4:8a:98:f6: dc:1b:d1:35:ec:d6:5f:90:e7:a0:01:24:8a:a2:3a: 83:ba:21:10:a0:a0:a1:48:f6:63:f2:be:f1:98:93: d5:27:e9:98:82:a9:60:46:6f:30:ce:12:c1:52:82: dc:ab:5e:8e:b2:ec:a6:cb:5c:a0:62:65:c2:b4:7b: dc:83:2b:e2:fe:b0:01:27:79:00:ce:73:0e:ce:6f: d4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CD:BF:F5:1B:C8:62:40:75:8B:D4:14:AD:EA:3B:99:90:8D:14:1E X509v3 Authority Key Identifier: keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/ns2_9RvIYkB1i9QUreo7mZCNFB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.0.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:2e:30:b4:13:e7:af:d7:f0:56:ca:4f:45:72:60:07:3a:ab: bf:52:ae:d3:1f:25:26:86:42:f4:b4:c9:20:39:90:0b:e0:38: d6:ae:5a:26:bb:d1:55:cb:b2:0b:ea:3b:bb:fa:e2:4b:bc:cc: 1f:62:2a:cf:ea:1c:05:88:fb:d5:24:11:36:f2:a2:e0:c5:32: 42:66:6d:6a:d3:ad:dc:06:8d:10:d0:1f:6d:8a:33:66:4a:4f: 5b:d8:6b:03:e7:89:27:f5:45:f9:66:75:47:36:ba:fd:b0:6c: f0:b6:22:a1:46:90:2c:aa:8f:44:d0:4c:79:42:38:34:e8:5e: f8:32:2e:e0:17:88:b3:b8:84:08:88:9f:88:e6:9d:fa:07:8a: 6d:9d:fa:ee:cc:d8:e1:b5:7c:33:12:e8:00:5f:99:29:d1:56: 7f:ea:7a:ca:3c:fe:8c:3c:48:52:a6:b1:63:91:a7:3b:5a:ee: 4a:0f:af:a0:78:bc:a0:df:28:55:cd:f6:8d:0c:8c:47:15:91: 6a:07:e6:3b:30:27:61:1c:91:f9:9b:64:e2:a2:73:93:33:8b: 3a:a9:1b:8b:da:3f:d2:dd:c3:9f:ad:ef:9d:d5:68:ed:47:6e: 20:c2:ac:33:f0:71:0c:bb:9e:ec:d9:38:a1:42:3b:70:f0:53: ed:ca:87:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+piGvgnB44Il9RPtJPq7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTY5YTEzY2I3YzM3MThiZDM3MTc3MTI2MjhlN2FiMWIz M2IwYTUwHhcNMjYwMTAyMTIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWNkYmZmNTFiYzg2MjQwNzU4YmQ0MTRhZGVhM2I5OTkwOGQxNDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza+nOLA0q9L+QBmtuNhGCUlgc8BX QMENBiGug4MSuk2P1NLM16tVtB0Qqr54f+ctR1BQJh77tPg3afQgFqrmgKWC1a7r 1ABMFoDsO5zUoymRi7vzg4b0Qkzb5Cr9ikdpZcKFOO6W9bt9M7qBREMjo6zrSn6C V6xO6a/Rmj6Ga1nPb+1H9bUi7p/3E0jDm1pkeWY+T7/bk1FWlmyrmrFtMExiDZ+Y BFWcn4GH8q3QduSKmPbcG9E17NZfkOegASSKojqDuiEQoKChSPZj8r7xmJPVJ+mY gqlgRm8wzhLBUoLcq16Osuymy1ygYmXCtHvcgyvi/rABJ3kAznMOzm/U6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ7Nv/UbyGJAdYvUFK3qO5mQjRQeMB8GA1UdIwQY MBaAFAOWmhPLfDcYvTcXcSYo56sbM7ClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVhYUU4dDhOeGk5TnhkeEppam5xeHN6c0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jMTI5YWItNzlhNy00YmMwLTlhM2It NDFlZmVhY2U3YTcxLzEvbnMyXzlSdklZa0IxaTlRVXJlbzdtWkNORkI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9jMTI5YWItNzlhNy00YmMwLTlhM2ItNDFlZmVhY2U3YTcx LzEvQTVhYUU4dDhOeGk5TnhkeEppam5xeHN6c0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPQAMA0G CSqGSIb3DQEBCwUAA4IBAQCfLjC0E+ev1/BWyk9FcmAHOqu/Uq7THyUmhkL0tMkg OZAL4DjWrlomu9FVy7IL6ju7+uJLvMwfYirP6hwFiPvVJBE28qLgxTJCZm1q063c Bo0Q0B9tijNmSk9b2GsD54kn9UX5ZnVHNrr9sGzwtiKhRpAsqo9E0Ex5Qjg06F74 Mi7gF4izuIQIiJ+I5p36B4ptnfruzNjhtXwzEugAX5kp0VZ/6nrKPP6MPEhSprFj kac7Wu5KD6+geLyg3yhVzfaNDIxHFZFqB+Y7MCdhHJH5m2TionOTM4s6qRuL2j/S 3cOfre+d1WjtR24gwqwz8HEMu57s2TihQjtw8FPtyodu -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:07 2026 by rpki-client