This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/2Cu6dvBxemd0MAgRXWXahlAOiHM.roa File: 2Cu6dvBxemd0MAgRXWXahlAOiHM.roa (raw, json) Hash identifier: AGtl9g6fx3U6cxJbavBLuAqrDvhpYhU3RRl+7MViqSI= Subject key identifier: D8:2B:BA:76:F0:71:7A:67:74:30:08:11:5D:65:DA:86:50:0E:88:73 Certificate issuer: /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb Certificate serial: 019B7AC7A286E0AD212CC30F377719384274 Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/2Cu6dvBxemd0MAgRXWXahlAOiHM.roa Signing time: Thu 01 Jan 2026 18:17:42 +0000 ROA not before: Thu 01 Jan 2026 18:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41311 IP address blocks: 89.249.128.0/21 maxlen: 24 89.249.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a2:86:e0:ad:21:2c:c3:0f:37:77:19:38:42:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb Validity Not Before: Jan 1 18:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d82bba76f0717a67743008115d65da86500e8873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e1:61:0b:a3:8f:6d:50:16:32:82:db:bd:85: 29:43:c7:2c:23:0f:32:7f:f9:5e:0e:e9:97:cd:43: d7:dc:c9:2f:8f:14:46:3d:39:1e:72:9c:c5:ca:0d: c7:2d:c5:0c:a4:76:3b:35:3a:30:b5:a9:f1:44:18: 4a:b7:23:f2:c4:65:1e:94:17:3c:00:8c:ca:2d:9c: b6:fa:20:a5:da:7d:83:e6:4f:e7:9c:74:28:1f:b4: ce:ff:07:6a:48:ed:9b:0c:16:fe:e7:ff:c8:de:f1: 5a:1b:8b:66:65:dd:9c:5c:94:52:8a:dd:08:83:1c: 4e:ab:80:49:55:e1:82:ee:8b:44:d6:94:8b:bb:3b: 8d:02:d2:42:72:c7:57:23:8a:00:85:89:3e:d9:da: 57:e2:6b:7d:75:57:4d:0f:cc:c3:aa:3e:9c:25:c8: 84:e9:98:5c:6c:53:ae:41:19:80:e4:4a:25:04:df: 50:e8:76:8c:8c:0c:62:94:37:a3:de:a6:8e:0d:3a: 7d:d7:b9:89:ce:f2:54:3f:52:82:e6:c3:85:67:70: 22:5f:80:8f:0f:8f:75:40:d1:ac:77:96:1f:d8:2b: eb:4a:07:e5:3e:12:4a:a5:6f:e8:5e:9a:53:a9:23: 51:76:d7:a0:66:87:8b:96:89:c9:1d:53:cf:23:e1: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2B:BA:76:F0:71:7A:67:74:30:08:11:5D:65:DA:86:50:0E:88:73 X509v3 Authority Key Identifier: keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/2Cu6dvBxemd0MAgRXWXahlAOiHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.128.0-89.249.137.255 Signature Algorithm: sha256WithRSAEncryption 94:55:4b:93:cd:6b:0a:81:46:c8:1a:f5:b2:f3:ed:ee:7e:ad: d4:07:b9:fc:30:aa:fe:3f:f9:5f:6c:7a:5e:a6:e5:2a:01:67: 68:94:07:8f:0b:5a:d6:4c:2b:e6:c7:fe:41:64:22:e1:bc:b4: 38:3e:e0:04:17:26:fe:5b:1b:9d:9a:94:c1:09:30:a7:0f:96: da:58:1d:81:e5:b5:2b:f1:ab:c0:f9:8b:cb:6c:ea:d9:c1:de: ef:66:a4:99:4c:a0:69:1b:be:92:67:0f:2e:8b:10:d4:59:f0: fb:ef:fe:17:22:46:cb:27:38:89:93:dc:55:05:00:f4:6d:fb: 6a:9e:f1:fa:82:46:1a:52:75:0c:38:d1:d5:cd:af:1c:82:88: ed:a1:3b:9e:36:ad:70:08:b4:20:bc:7a:91:f2:d3:b0:39:35: e6:ad:d7:30:ac:e0:53:35:0e:be:3c:a6:e6:55:c1:3d:ef:45: 9c:b0:4f:d8:80:7a:a7:1b:aa:4d:e5:e2:8b:e0:df:9c:46:ae: c9:eb:1d:74:0f:91:12:64:0b:a7:cd:fe:ba:05:06:a3:dd:86: 42:24:70:eb:f8:79:74:b3:89:b9:e9:4e:60:57:f1:12:d5:b4: 4c:50:d9:6b:7c:52:31:69:fc:06:58:45:63:94:8d:9d:ff:99: 9d:9f:eb:2f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6x6KG4K0hLMMPN3cZOEJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYzkyYzg5ODY5NWU0MDE5OGI5ZDkyYjY4MWI5Yjk1NGVi ZmFlYmIwHhcNMjYwMTAxMTgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODJiYmE3NmYwNzE3YTY3NzQzMDA4MTE1ZDY1ZGE4NjUwMGU4ODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuFhC6OPbVAWMoLbvYUpQ8csIw8y f/leDumXzUPX3MkvjxRGPTkecpzFyg3HLcUMpHY7NTowtanxRBhKtyPyxGUelBc8 AIzKLZy2+iCl2n2D5k/nnHQoH7TO/wdqSO2bDBb+5//I3vFaG4tmZd2cXJRSit0I gxxOq4BJVeGC7otE1pSLuzuNAtJCcsdXI4oAhYk+2dpX4mt9dVdND8zDqj6cJciE 6ZhcbFOuQRmA5EolBN9Q6HaMjAxilDej3qaODTp917mJzvJUP1KC5sOFZ3AiX4CP D491QNGsd5Yf2CvrSgflPhJKpW/oXppTqSNRdtegZoeLlonJHVPPI+HNIQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNgrunbwcXpndDAIEV1l2oZQDohzMB8GA1UdIwQY MBaAFG7JLImGleQBmLnZK2gbm5VOv667MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mNmRjNTctODI2OC00NjYxLTk5MWMt ODRjM2QzMDJjZjA0LzEvMkN1NmR2QnhlbWQwTUFnUlhXWGFobEFPaUhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9mNmRjNTctODI2OC00NjYxLTk5MWMtODRjM2QzMDJjZjA0 LzEvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAdZ+YAD BAFZ+YgwDQYJKoZIhvcNAQELBQADggEBAJRVS5PNawqBRsga9bLz7e5+rdQHufww qv4/+V9sel6m5SoBZ2iUB48LWtZMK+bH/kFkIuG8tDg+4AQXJv5bG52alMEJMKcP ltpYHYHltSvxq8D5i8ts6tnB3u9mpJlMoGkbvpJnDy6LENRZ8Pvv/hciRssnOImT 3FUFAPRt+2qe8fqCRhpSdQw40dXNrxyCiO2hO542rXAItCC8epHy07A5Neat1zCs 4FM1Dr48puZVwT3vRZywT9iAeqcbqk3l4ovg35xGrsnrHXQPkRJkC6fN/roFBqPd hkIkcOv4eXSzibnpTmBX8RLVtExQ2Wt8UjFp/AZYRWOUjZ3/mZ2f6y8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:03 2026 by rpki-client