This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/Ib2uqCIrQSh2ts48ce02RX5CMhU.roa File: Ib2uqCIrQSh2ts48ce02RX5CMhU.roa (raw, json) Hash identifier: NgpeuR8zzzmtvoK82Zgr0BVcCMWZazX1o9VXxJ6Tpcc= Subject key identifier: 21:BD:AE:A8:22:2B:41:28:76:B6:CE:3C:71:ED:36:45:7E:42:32:15 Certificate issuer: /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde Certificate serial: 019B775899D29479054DD9C1A3F7E4B461F9 Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/Ib2uqCIrQSh2ts48ce02RX5CMhU.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197522 IP address blocks: 2.57.204.0/22 maxlen: 22 2.57.204.0/24 maxlen: 24 2.57.205.0/24 maxlen: 24 2.57.206.0/24 maxlen: 24 2.57.207.0/24 maxlen: 24 46.149.176.0/20 maxlen: 20 46.149.176.0/24 maxlen: 24 46.149.177.0/24 maxlen: 24 46.149.178.0/24 maxlen: 24 46.149.179.0/24 maxlen: 24 46.149.180.0/24 maxlen: 24 46.149.181.0/24 maxlen: 24 46.149.182.0/24 maxlen: 24 46.149.183.0/24 maxlen: 24 46.149.184.0/24 maxlen: 24 46.149.185.0/24 maxlen: 24 46.149.186.0/24 maxlen: 24 46.149.187.0/24 maxlen: 24 46.149.188.0/24 maxlen: 24 46.149.189.0/24 maxlen: 24 46.149.190.0/24 maxlen: 24 46.149.191.0/24 maxlen: 24 2a09:dc40::/32 maxlen: 32 2a09:dc41::/32 maxlen: 32 2a09:dc42::/32 maxlen: 32 2a09:dc43::/32 maxlen: 32 2a09:dc44::/32 maxlen: 32 2a09:dc45::/32 maxlen: 32 2a09:dc46::/32 maxlen: 32 2a09:dc47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:99:d2:94:79:05:4d:d9:c1:a3:f7:e4:b4:61:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21bdaea8222b412876b6ce3c71ed36457e423215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:02:45:ee:71:c9:a2:da:f8:8d:33:d7:18: f3:f8:8c:27:b5:9a:6f:0e:e9:fa:cb:41:b7:3e:94: fd:2a:77:4b:b5:9f:ee:20:5a:ec:ee:94:d5:c0:f9: 28:e4:d0:cb:ce:d8:88:42:a2:4a:ea:dd:ed:19:ce: aa:56:39:45:b4:de:c1:53:86:ee:5e:64:7d:92:0b: 9d:68:a8:9d:9d:6c:c8:89:84:c8:4f:c8:d2:69:c8: 59:2d:01:7f:33:bb:38:7d:4b:ab:21:b0:6a:3e:03: e0:16:e0:27:f6:bf:d0:1c:e8:62:e0:d2:ff:95:3a: 18:ed:25:8e:8c:8f:be:ca:19:a7:cf:91:20:da:97: 61:4d:7d:42:5f:ac:0f:05:ed:3b:8c:4b:b0:f3:f0: c8:24:08:c5:60:16:2e:78:b1:64:d1:9d:84:d4:f0: 1e:3e:0a:ce:df:c8:87:19:33:23:3e:15:d8:eb:d2: 31:37:11:da:6e:6b:79:56:89:9e:83:be:cb:c0:22: 12:9d:81:28:21:ff:9c:58:05:b8:75:01:eb:b1:bf: cb:32:02:fb:28:1d:ff:a9:a4:e4:0e:86:7c:7b:06: 31:eb:fb:8e:f4:a2:9a:8b:e7:4f:f4:21:18:88:24: 02:81:1b:33:70:1f:05:ca:f2:72:5c:44:11:87:7f: 0f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BD:AE:A8:22:2B:41:28:76:B6:CE:3C:71:ED:36:45:7E:42:32:15 X509v3 Authority Key Identifier: keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/Ib2uqCIrQSh2ts48ce02RX5CMhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.204.0/22 46.149.176.0/20 IPv6: 2a09:dc40::/29 Signature Algorithm: sha256WithRSAEncryption df:8e:d3:6e:0b:f2:e9:0b:d9:ad:b4:1d:01:68:4e:fc:ef:0f: 68:b2:e2:67:ad:3f:59:17:6d:ba:55:df:5c:bd:f1:6b:20:62: fa:8a:08:bb:82:88:c4:d7:c0:21:bb:60:e8:5d:60:3b:13:d8: 3a:64:92:0a:c9:d9:ec:8e:34:44:9b:98:52:e9:7e:de:09:1c: ab:21:b6:92:ca:3f:3d:8e:c1:a6:fc:ae:d8:c7:65:8c:40:55: 3c:4f:0c:9d:33:dc:c4:a3:44:5b:ff:7d:e4:fb:51:b7:27:08: 67:7f:97:95:d5:ba:65:86:ec:e0:77:fe:a4:c6:ba:a9:73:9b: 5c:03:f1:f3:91:ee:7d:01:80:dd:25:d8:99:e9:84:bd:80:7b: e0:2b:e8:77:b7:42:51:bf:01:62:6c:d0:c2:95:ca:ca:75:45: 29:ce:b2:5c:5d:42:dc:94:66:31:0c:55:3c:bd:43:c7:be:d2: 2c:b6:cb:34:3c:88:e9:c0:b1:db:e5:ea:1a:07:b1:48:35:a3: 44:51:00:76:e7:aa:f0:e9:21:31:6c:52:13:41:05:f4:0d:15: e4:96:dd:1e:7a:5e:52:2d:2f:d7:94:99:ad:01:48:ed:e4:2c: 10:54:85:dc:cf:e5:4e:99:43:fe:b4:da:97:82:41:72:ab:b8: c4:54:76:ac -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WJnSlHkFTdnBo/fktGH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTYyZWM3NzY0NjJiNzZlNjNhZTgxNTViYjI3YjlkOGM3 ZTdmZGUwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWJkYWVhODIyMmI0MTI4NzZiNmNlM2M3MWVkMzY0NTdlNDIzMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni0CRe5xyaLa+I0z1xjz+IwntZpv Dun6y0G3PpT9KndLtZ/uIFrs7pTVwPko5NDLztiIQqJK6t3tGc6qVjlFtN7BU4bu XmR9kgudaKidnWzIiYTIT8jSachZLQF/M7s4fUurIbBqPgPgFuAn9r/QHOhi4NL/ lToY7SWOjI++yhmnz5Eg2pdhTX1CX6wPBe07jEuw8/DIJAjFYBYueLFk0Z2E1PAe PgrO38iHGTMjPhXY69IxNxHabmt5Vomeg77LwCISnYEoIf+cWAW4dQHrsb/LMgL7 KB3/qaTkDoZ8ewYx6/uO9KKai+dP9CEYiCQCgRszcB8FyvJyXEQRh38PKQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCG9rqgiK0EodrbOPHHtNkV+QjIVMB8GA1UdIwQY MBaAFDSWLsd2Rit25jroFVuye52Mfn/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84MmFmN2MtODYwNi00ZjliLWEwNTIt NGYzYmVhOWZiOTVjLzEvSWIydXFDSXJRU2gydHM0OGNlMDJSWDVDTWhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC84MmFmN2MtODYwNi00ZjliLWEwNTItNGYzYmVhOWZiOTVj LzEvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCAjnMAwQE LpWwMA0EAgACMAcDBQMqCdxAMA0GCSqGSIb3DQEBCwUAA4IBAQDfjtNuC/LpC9mt tB0BaE787w9osuJnrT9ZF226Vd9cvfFrIGL6igi7gojE18Ahu2DoXWA7E9g6ZJIK ydnsjjREm5hS6X7eCRyrIbaSyj89jsGm/K7Yx2WMQFU8TwydM9zEo0Rb/33k+1G3 Jwhnf5eV1bplhuzgd/6kxrqpc5tcA/Hzke59AYDdJdiZ6YS9gHvgK+h3t0JRvwFi bNDClcrKdUUpzrJcXULclGYxDFU8vUPHvtIstss0PIjpwLHb5eoaB7FINaNEUQB2 56rw6SExbFITQQX0DRXklt0eel5SLS/XlJmtAUjt5CwQVIXcz+VOmUP+tNqXgkFy q7jEVHas -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:31 2026 by rpki-client