This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa File: Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa (raw, json) Hash identifier: dD5+5+i7pHxfaDCaP1GC9Pk/dDoxKx8XSPEPjuWP/AY= Subject key identifier: 0A:9D:A0:EB:23:FC:01:9C:4D:7E:80:3D:5A:E8:2E:E0:90:A0:1E:D5 Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249 Certificate serial: 019B7E385319D8FD16480DCC4DB1E09AAA82 Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa Signing time: Fri 02 Jan 2026 10:19:39 +0000 ROA not before: Fri 02 Jan 2026 10:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213333 IP address blocks: 167.150.81.0/24 maxlen: 24 2001:67c:1520::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:53:19:d8:fd:16:48:0d:cc:4d:b1:e0:9a:aa:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249 Validity Not Before: Jan 2 10:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a9da0eb23fc019c4d7e803d5ae82ee090a01ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:03:1f:91:95:19:27:0a:fb:40:73:45:0f: 78:24:44:db:df:02:ee:d8:90:0f:bb:80:8b:36:b9: 76:dc:93:07:85:84:0e:85:2f:01:a8:d3:6c:08:a0: 91:27:88:2e:49:a7:41:4a:c0:eb:ff:80:9c:a0:e8: ca:fd:1f:db:9f:76:cc:72:55:1f:a7:63:66:45:30: 98:9a:92:e8:20:ff:30:c3:e0:db:ee:91:6d:17:00: ed:a6:19:60:e5:99:9b:e7:82:99:c2:3b:7c:1d:21: 1f:57:8e:22:84:3f:c0:11:c9:30:19:1b:60:93:45: 8d:23:74:96:1d:e0:d5:76:83:b6:7b:64:f6:37:6e: fc:ec:85:a8:cf:e0:fb:2a:2e:53:48:f4:3a:d6:a4: 1b:c4:04:bc:26:94:c2:29:d9:45:9f:40:14:83:5c: 0b:6f:fc:0f:ad:ee:6b:22:58:2f:13:e2:e8:bc:3a: a7:12:b0:82:3b:04:7c:e1:22:d6:57:d4:64:ed:87: 77:e5:ef:ea:47:ea:5d:7b:b0:2d:24:47:0c:f6:f2: 04:e7:00:ae:5e:3f:c6:d6:3d:24:8f:91:c2:cb:23: f9:6b:9b:be:b8:96:a8:fb:04:89:b5:90:07:d7:68: 26:a4:1b:e1:7b:7c:ee:2c:87:0b:2e:73:07:de:d0: 9f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9D:A0:EB:23:FC:01:9C:4D:7E:80:3D:5A:E8:2E:E0:90:A0:1E:D5 X509v3 Authority Key Identifier: keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.150.81.0/24 IPv6: 2001:67c:1520::/48 Signature Algorithm: sha256WithRSAEncryption ab:55:b2:f1:76:79:26:87:ec:6e:9a:2f:76:1c:cd:70:9b:44: 9c:06:19:cf:dd:e1:cc:28:43:25:97:77:bd:58:53:4b:b2:98: 09:6f:f8:f7:1a:3c:0c:00:de:d7:8b:bb:8a:55:40:80:17:2d: b7:13:33:46:6c:e7:2f:e2:04:72:30:00:c4:22:99:e5:82:ad: b1:a8:69:9b:16:95:f3:3f:91:ad:a2:ac:5a:ad:c9:d9:80:bf: 13:4f:d9:17:dc:0a:16:c8:fe:91:b2:a0:62:f1:c3:4a:fe:84: 23:37:98:3c:71:84:1f:09:77:a3:54:e3:8c:90:03:84:01:39: 69:77:e4:25:63:c2:dc:ee:0f:44:f0:61:9e:9f:51:5b:0a:77: b2:fd:93:5f:ad:24:82:d7:1d:99:c1:86:6c:23:ed:1a:db:e8: b6:9f:94:18:62:f2:ee:1a:13:df:3e:e8:f6:19:40:fe:8b:20: eb:25:6f:f5:52:d6:34:c3:ba:5e:da:56:ff:3d:f4:aa:93:e0: 4e:4a:83:3d:09:59:75:15:cb:32:34:b7:02:38:d1:94:8d:d6: 6e:7a:30:c7:31:46:48:80:7e:76:8d:52:a9:3d:9e:12:ec:2c: 1e:1a:bd:db:d5:63:cb:e7:a5:3a:d4:cf:6d:d4:01:30:89:ce: 17:a5:3f:e2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OFMZ2P0WSA3MTbHgmqqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDIxMWM5MWU5ZTBkMzVjYjUxMzM0NTkxM2UwYTFhNjFi ZmQyNDkwHhcNMjYwMTAyMTAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTlkYTBlYjIzZmMwMTljNGQ3ZTgwM2Q1YWU4MmVlMDkwYTAxZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCADH5GVGScK+0BzRQ94JETb3wLu 2JAPu4CLNrl23JMHhYQOhS8BqNNsCKCRJ4guSadBSsDr/4CcoOjK/R/bn3bMclUf p2NmRTCYmpLoIP8ww+Db7pFtFwDtphlg5Zmb54KZwjt8HSEfV44ihD/AEckwGRtg k0WNI3SWHeDVdoO2e2T2N2787IWoz+D7Ki5TSPQ61qQbxAS8JpTCKdlFn0AUg1wL b/wPre5rIlgvE+LovDqnErCCOwR84SLWV9Rk7Yd35e/qR+pde7AtJEcM9vIE5wCu Xj/G1j0kj5HCyyP5a5u+uJao+wSJtZAH12gmpBvhe3zuLIcLLnMH3tCfEQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAqdoOsj/AGcTX6APVroLuCQoB7VMB8GA1UdIwQY MBaAFF8CEckeng01y1EzRZE+Chphv9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEt MjFmZDM1Y2Y0YmI5LzEvQ3AyZzZ5UDhBWnhOZm9BOVd1Z3U0SkNnSHRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEtMjFmZDM1Y2Y0YmI5 LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAp5ZRMA8E AgACMAkDBwAgAQZ8FSAwDQYJKoZIhvcNAQELBQADggEBAKtVsvF2eSaH7G6aL3Yc zXCbRJwGGc/d4cwoQyWXd71YU0uymAlv+PcaPAwA3teLu4pVQIAXLbcTM0Zs5y/i BHIwAMQimeWCrbGoaZsWlfM/ka2irFqtydmAvxNP2RfcChbI/pGyoGLxw0r+hCM3 mDxxhB8Jd6NU44yQA4QBOWl35CVjwtzuD0TwYZ6fUVsKd7L9k1+tJILXHZnBhmwj 7Rrb6LaflBhi8u4aE98+6PYZQP6LIOslb/VS1jTDul7aVv899KqT4E5Kgz0JWXUV yzI0twI40ZSN1m56MMcxRkiAfnaNUqk9nhLsLB4avdvVY8vnpTrUz23UATCJzhel P+I= -----END CERTIFICATE-----Generated at Mon Feb 2 09:59:42 2026 by rpki-client