This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/2ZL9ViEsr8QMIZvelC4iDgLGql0.roa File: 2ZL9ViEsr8QMIZvelC4iDgLGql0.roa (raw, json) Hash identifier: +ijG+2oIG2hi1ZdzyKyp4RMX7VE/mqFdu/vuON3zmuU= Subject key identifier: D9:92:FD:56:21:2C:AF:C4:0C:21:9B:DE:94:2E:22:0E:02:C6:AA:5D Certificate issuer: /CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea Certificate serial: 019B7C7FCD9B2CDFA9BD0C7580991DFA5BF7 Authority key identifier: 2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/2ZL9ViEsr8QMIZvelC4iDgLGql0.roa Signing time: Fri 02 Jan 2026 02:18:29 +0000 ROA not before: Fri 02 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62022 IP address blocks: 185.50.244.0/22 maxlen: 22 2a04:c0c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:cd:9b:2c:df:a9:bd:0c:75:80:99:1d:fa:5b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea Validity Not Before: Jan 2 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d992fd56212cafc40c219bde942e220e02c6aa5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:23:b3:51:66:76:6e:c4:44:06:5b:a3:d4: ed:67:be:79:90:db:d7:16:c7:0f:eb:14:73:0b:1d: 94:07:75:14:b0:69:5c:c8:96:b1:6a:f4:b6:fc:a6: 9d:0b:7f:2f:64:f5:65:f3:c8:c6:93:5e:71:22:6b: 3b:40:f6:35:78:a6:a0:f4:5c:80:a8:55:39:ef:ca: dd:8c:9f:5d:15:4b:bc:3b:95:2f:ea:b0:e0:71:61: 87:d2:cf:57:ab:45:56:3f:70:b9:b3:eb:54:51:28: cc:d0:cd:d5:3f:f3:80:32:53:87:66:cc:4d:a5:9e: fc:5a:b6:d2:64:d5:5e:c1:e1:b5:7a:ee:2c:7f:82: 49:8a:1c:c6:fb:bd:56:31:57:4d:8d:33:2d:8c:fe: cd:ea:00:04:70:ad:be:a1:d7:34:a5:3b:22:0d:33: 7d:17:b9:0b:43:20:0d:0a:d2:ac:b4:a3:ed:f7:06: ed:18:5d:f9:d0:9d:45:43:f5:c6:cf:67:38:96:22: b3:c1:86:6f:6c:89:5f:49:ab:c4:56:ce:e7:34:b9: 52:11:93:21:60:a6:9d:80:99:42:2d:e1:8f:04:33: 19:dd:68:ea:c5:1d:9e:eb:de:22:9f:36:c4:03:05: fa:df:a3:73:ad:92:3b:c5:8a:27:59:1e:48:a2:9d: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:92:FD:56:21:2C:AF:C4:0C:21:9B:DE:94:2E:22:0E:02:C6:AA:5D X509v3 Authority Key Identifier: keyid:2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/2ZL9ViEsr8QMIZvelC4iDgLGql0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.244.0/22 IPv6: 2a04:c0c0::/29 Signature Algorithm: sha256WithRSAEncryption 52:66:35:03:98:15:25:99:46:2c:a2:50:d2:cb:96:21:9e:22: 58:3b:47:4e:21:6b:fd:81:5b:01:87:45:7b:19:2b:5e:bc:33: 33:b6:40:61:49:88:3e:dc:3e:06:65:ee:52:ae:eb:b1:9e:b8: f5:ab:37:c7:f8:00:47:3b:71:4e:9c:ea:3c:55:56:62:3f:61: 47:e3:cd:86:c7:8f:71:be:c4:a8:1a:55:72:c0:26:ce:71:b5: 3d:88:2e:b2:13:67:50:37:e6:04:b8:c9:f4:db:c1:bf:2c:e7: 38:00:38:d6:bd:71:ac:37:d3:08:49:81:ba:27:be:82:e2:a9: ac:fb:57:6a:37:c4:4e:fc:64:88:21:aa:3d:57:07:d7:d3:36: 8c:f6:7d:2b:fc:f9:09:ee:19:28:75:e4:2e:d6:aa:86:ca:2f: eb:c0:76:73:1a:f3:0a:e7:fe:e5:ff:02:f0:77:e2:be:d5:84: 13:05:6e:3b:4c:4d:fa:57:cb:32:b9:19:0f:69:7f:ce:73:59: 3c:ad:66:65:c9:88:0e:3d:4b:7e:78:87:9c:23:f0:88:0c:b9: 75:10:89:ec:9b:c8:4a:52:19:73:9b:84:5d:2f:9b:4f:e8:82: df:c1:40:df:12:cc:92:eb:89:e4:1c:bd:b1:40:a1:6b:3d:ca: 10:6c:cc:bc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f82bLN+pvQx1gJkd+lv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTY5MjUwNGM3NzBiYTRmODQwYjhhYmVlYzQ4NWI2ZDEw ZmE0ZWEwHhcNMjYwMTAyMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTkyZmQ1NjIxMmNhZmM0MGMyMTliZGU5NDJlMjIwZTAyYzZhYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OEjs1Fmdm7ERAZbo9TtZ755kNvX FscP6xRzCx2UB3UUsGlcyJaxavS2/KadC38vZPVl88jGk15xIms7QPY1eKag9FyA qFU578rdjJ9dFUu8O5Uv6rDgcWGH0s9Xq0VWP3C5s+tUUSjM0M3VP/OAMlOHZsxN pZ78WrbSZNVeweG1eu4sf4JJihzG+71WMVdNjTMtjP7N6gAEcK2+odc0pTsiDTN9 F7kLQyANCtKstKPt9wbtGF350J1FQ/XGz2c4liKzwYZvbIlfSavEVs7nNLlSEZMh YKadgJlCLeGPBDMZ3WjqxR2e694inzbEAwX636NzrZI7xYonWR5Iop1ATwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNmS/VYhLK/EDCGb3pQuIg4CxqpdMB8GA1UdIwQY MBaAFC+mklBMdwuk+EC4q+7EhbbRD6TqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZhU1VFeDNDNlQ0UUxpcjdzU0Z0dEVQcE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82MWQ4NmItNjA5NS00OGYyLWFiMWUt OWI5NTNmMjMzM2YxLzEvMlpMOVZpRXNyOFFNSVp2ZWxDNGlEZ0xHcWwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC82MWQ4NmItNjA5NS00OGYyLWFiMWUtOWI5NTNmMjMzM2Yx LzEvTDZhU1VFeDNDNlQ0UUxpcjdzU0Z0dEVQcE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTL0MA0E AgACMAcDBQMqBMDAMA0GCSqGSIb3DQEBCwUAA4IBAQBSZjUDmBUlmUYsolDSy5Yh niJYO0dOIWv9gVsBh0V7GStevDMztkBhSYg+3D4GZe5Sruuxnrj1qzfH+ABHO3FO nOo8VVZiP2FH482Gx49xvsSoGlVywCbOcbU9iC6yE2dQN+YEuMn028G/LOc4ADjW vXGsN9MISYG6J76C4qms+1dqN8RO/GSIIao9VwfX0zaM9n0r/PkJ7hkodeQu1qqG yi/rwHZzGvMK5/7l/wLwd+K+1YQTBW47TE36V8syuRkPaX/Oc1k8rWZlyYgOPUt+ eIecI/CIDLl1EInsm8hKUhlzm4RdL5tP6ILfwUDfEsyS64nkHL2xQKFrPcoQbMy8 -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:47 2026 by rpki-client