This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/2aU5N1iJ4Y_3hhGK1FiQFsgsjp0.roa File: 2aU5N1iJ4Y_3hhGK1FiQFsgsjp0.roa (raw, json) Hash identifier: 0ynnTsbdGT6btZmSvRQXujIxUCz5xDxaWRaGVWPCLmc= Subject key identifier: D9:A5:39:37:58:89:E1:8F:F7:86:11:8A:D4:58:90:16:C8:2C:8E:9D Certificate issuer: /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Certificate serial: 019B4FE72F783C8F5CAAE477D885A2916031 Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/2aU5N1iJ4Y_3hhGK1FiQFsgsjp0.roa Signing time: Wed 24 Dec 2025 10:28:29 +0000 ROA not before: Wed 24 Dec 2025 10:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47962 IP address blocks: 37.122.152.0/23 maxlen: 23 37.122.153.0/24 maxlen: 24 37.122.154.0/23 maxlen: 23 37.122.154.0/24 maxlen: 24 37.122.156.0/23 maxlen: 23 176.106.224.0/22 maxlen: 22 176.106.224.0/23 maxlen: 23 176.106.224.0/24 maxlen: 24 176.106.225.0/24 maxlen: 24 176.106.226.0/23 maxlen: 23 176.106.226.0/24 maxlen: 24 176.106.230.0/23 maxlen: 23 176.106.230.0/24 maxlen: 24 176.106.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:e7:2f:78:3c:8f:5c:aa:e4:77:d8:85:a2:91:60:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Validity Not Before: Dec 24 10:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d9a539375889e18ff786118ad4589016c82c8e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a0:f2:69:a9:40:46:04:e7:7f:05:e6:a4:dd: df:fb:86:12:fc:d4:8b:8a:d4:d2:a8:44:83:b4:03: 41:30:69:3c:71:dd:51:21:6b:26:5d:e3:60:a6:13: 17:c0:7e:ce:17:dd:f5:1d:28:a2:36:2f:dd:af:52: 05:c1:a3:16:4e:ca:19:c4:14:70:ea:0a:11:78:a9: 06:60:40:71:65:ba:fe:be:d4:35:92:b4:f4:43:9f: 0c:59:80:a9:8d:0d:50:29:bd:58:2a:be:50:96:c9: 77:82:31:f4:79:d1:3f:ff:96:d1:f1:13:dd:a7:c8: 70:de:8a:44:e3:b2:49:12:0d:3f:d2:05:49:56:81: 78:79:e0:36:f2:00:18:b9:dc:7b:85:28:b2:a0:e3: a3:14:99:f0:c1:7d:53:39:f2:de:81:f7:53:06:2a: ce:17:7d:c7:af:a2:20:f8:c7:e4:6e:ed:2c:9e:0c: af:66:e2:f2:61:eb:b2:a5:a6:bf:61:55:41:c0:f5: 9e:da:6a:cf:0c:ad:14:5f:0a:7f:5b:aa:4a:e6:29: 67:d0:7c:3d:d2:16:c0:2e:6e:cf:23:ab:5c:6f:ca: 6c:69:56:fa:7e:49:c8:d2:ae:12:74:01:7d:44:58: c5:b3:5c:cc:e5:30:f6:92:92:c6:a2:96:37:72:82: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A5:39:37:58:89:E1:8F:F7:86:11:8A:D4:58:90:16:C8:2C:8E:9D X509v3 Authority Key Identifier: keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/2aU5N1iJ4Y_3hhGK1FiQFsgsjp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.122.152.0-37.122.157.255 176.106.224.0/22 176.106.230.0/23 Signature Algorithm: sha256WithRSAEncryption 14:ae:e6:e0:61:4f:e9:1a:1a:fc:e0:aa:75:8d:dc:28:e5:25: 99:c0:5a:22:ac:3e:51:6d:2e:21:0d:2c:34:7e:ed:8d:0d:09: 60:e8:7c:c9:52:99:a0:8c:5b:cc:20:ce:f2:34:9a:87:8c:61: e3:08:a4:4e:1f:b7:f6:6d:46:b1:be:3e:69:7c:91:4e:93:d7: f9:e2:d3:77:d5:b6:9e:49:d6:11:f8:0e:ca:ef:88:7a:06:f5: 2c:75:39:eb:33:45:8b:1d:e9:d4:e8:0c:3f:98:3f:5a:c2:26: ad:ed:93:37:77:c7:1d:db:34:e5:dd:1a:9a:e7:5f:c6:dc:d4: 24:4f:9c:07:0f:07:e2:80:b7:9f:66:a3:0d:e8:a7:6b:a2:1f: c7:b2:c7:69:6e:84:c2:f2:68:fc:5f:a1:4c:7d:78:56:da:6d: ac:1b:70:80:c2:94:96:73:34:d2:df:2b:a1:b5:f1:db:5a:34: 5d:6a:14:15:5e:31:17:5e:22:84:b7:e9:06:52:41:eb:8f:d9: 5d:86:a2:df:56:71:c6:0d:f7:a8:36:81:99:f0:1b:b7:f9:23: ba:be:5a:bd:5a:04:39:27:31:39:77:5b:d9:e4:c7:0a:19:ee: 5d:74:74:e3:3f:21:a9:f0:1a:94:47:2d:2c:40:ab:f2:5e:6e: f4:9c:8d:f2 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZtP5y94PI9cquR32IWikWAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYjMwYTQxYTZhNmYyMWE5YjJkZDdlNTg1NmEyMGQ1YjVl ZmZlMWMwHhcNMjUxMjI0MTAyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWE1MzkzNzU4ODllMThmZjc4NjExOGFkNDU4OTAxNmM4MmM4ZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKDyaalARgTnfwXmpN3f+4YS/NSL itTSqESDtANBMGk8cd1RIWsmXeNgphMXwH7OF931HSiiNi/dr1IFwaMWTsoZxBRw 6goReKkGYEBxZbr+vtQ1krT0Q58MWYCpjQ1QKb1YKr5Qlsl3gjH0edE//5bR8RPd p8hw3opE47JJEg0/0gVJVoF4eeA28gAYudx7hSiyoOOjFJnwwX1TOfLegfdTBirO F33Hr6Ig+Mfkbu0sngyvZuLyYeuypaa/YVVBwPWe2mrPDK0UXwp/W6pK5iln0Hw9 0hbALm7PI6tcb8psaVb6fknI0q4SdAF9RFjFs1zM5TD2kpLGopY3coLMywIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNmlOTdYieGP94YRitRYkBbILI6dMB8GA1UdIwQY MBaAFG2zCkGmpvIamy3X5YVqINW17/4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAt ZDg5MzIxMWU2NzE5LzEvMmFVNU4xaUo0WV8zaGhHSzFGaVFGc2dzanAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAtZDg5MzIxMWU2NzE5 LzEvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAMlepgD BAElepwDBAKwauADBAGwauYwDQYJKoZIhvcNAQELBQADggEBABSu5uBhT+kaGvzg qnWN3CjlJZnAWiKsPlFtLiENLDR+7Y0NCWDofMlSmaCMW8wgzvI0moeMYeMIpE4f t/ZtRrG+Pml8kU6T1/ni03fVtp5J1hH4DsrviHoG9Sx1OeszRYsd6dToDD+YP1rC Jq3tkzd3xx3bNOXdGprnX8bc1CRPnAcPB+KAt59mow3op2uiH8eyx2luhMLyaPxf oUx9eFbabawbcIDClJZzNNLfK6G18dtaNF1qFBVeMRdeIoS36QZSQeuP2V2Got9W ccYN96g2gZnwG7f5I7q+Wr1aBDknMTl3W9nkxwoZ7l10dOM/IanwGpRHLSxAq/Je bvScjfI= -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:32 2025 by rpki-client