This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/2AYux49DjTxA_DsUF1wyzKL0fGM.roa File: 2AYux49DjTxA_DsUF1wyzKL0fGM.roa (raw, json) Hash identifier: ocQKGzZeY566sxhr7s6wd2NW9FJp8fCORKMwHIVxLAk= Subject key identifier: D8:06:2E:C7:8F:43:8D:3C:40:FC:3B:14:17:5C:32:CC:A2:F4:7C:63 Certificate issuer: /CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad Certificate serial: 019B7D5C2CC53AE576FBD0BB358CEFA5B740 Authority key identifier: 16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/2AYux49DjTxA_DsUF1wyzKL0fGM.roa Signing time: Fri 02 Jan 2026 06:19:11 +0000 ROA not before: Fri 02 Jan 2026 06:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59766 IP address blocks: 62.69.128.0/21 maxlen: 21 89.148.128.0/18 maxlen: 24 185.51.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:2c:c5:3a:e5:76:fb:d0:bb:35:8c:ef:a5:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad Validity Not Before: Jan 2 06:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8062ec78f438d3c40fc3b14175c32cca2f47c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:39:c8:74:95:da:8a:a8:20:f1:e1:ab:45: 75:63:ac:dd:53:e3:3f:73:96:f1:e2:99:d8:69:09: 51:40:6e:3e:7a:22:8a:c8:c5:69:94:bf:4f:84:b8: 44:ab:1f:a8:38:d2:9c:c1:64:b5:a2:db:aa:3e:e2: 27:c8:30:c9:f2:64:f4:ad:7f:f2:1d:14:1e:a7:b4: ba:b0:f9:42:ce:0b:33:e6:da:28:05:07:b5:f1:fa: 02:8c:18:ac:45:e6:74:6b:a8:de:c9:03:38:28:e3: 8c:f0:90:7f:29:e7:1f:bc:f5:b3:1e:9c:c0:8c:e1: ef:74:65:ed:e9:50:7d:b4:82:15:54:6b:45:0b:a2: 2c:2b:e1:12:33:4b:44:8b:cd:f6:5e:97:65:af:67: 9e:04:dc:f8:5a:80:09:d4:c6:10:4f:f6:ed:17:53: 93:fd:4e:37:7d:5d:57:96:a0:c9:52:d5:da:e8:d6: 48:e8:56:35:54:73:af:6d:28:30:47:44:0b:12:03: 54:4c:ee:9f:a9:cf:cc:48:74:cf:15:41:72:29:bb: e8:7d:05:58:a1:e3:50:b3:a2:6d:d0:56:5d:a5:f6: c0:01:ab:2f:07:3b:4e:96:46:ea:9f:63:5b:0d:22: 9b:ef:8b:14:27:d0:dd:a1:e0:f0:45:d6:46:dc:5c: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:06:2E:C7:8F:43:8D:3C:40:FC:3B:14:17:5C:32:CC:A2:F4:7C:63 X509v3 Authority Key Identifier: keyid:16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/2AYux49DjTxA_DsUF1wyzKL0fGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.69.128.0/21 89.148.128.0/18 185.51.168.0/22 Signature Algorithm: sha256WithRSAEncryption 03:b1:ea:9b:50:64:d2:3e:d3:cd:a1:e8:a5:99:37:8e:3c:20: 31:a8:18:cc:dc:f1:b2:c7:3b:e6:a1:e8:f9:1b:31:9d:6e:48: 9a:95:5a:3f:fe:95:62:30:2d:15:29:8e:0f:74:63:66:00:c4: fa:1b:c9:db:71:0a:90:d2:00:67:60:c7:69:71:c3:02:fc:86: e1:a3:7c:6f:0c:70:24:40:8d:08:f7:cf:f7:7d:fc:60:a0:16: 18:bd:33:fb:4e:64:b2:54:55:8d:a3:e4:28:44:f5:8b:9a:91: 23:92:64:85:ba:6f:8b:32:9e:92:15:a9:92:37:6c:01:28:eb: e8:ae:f6:7c:55:53:dd:cb:37:aa:f4:c2:cc:f3:dd:39:98:74: 42:62:e7:69:87:52:ef:83:85:a6:cf:45:f6:ab:8c:b4:4b:74: 90:11:9e:e2:d7:c5:66:40:f5:62:fa:1b:b6:3b:10:3f:3c:37: 66:f8:c8:70:73:d4:d6:52:18:68:14:4d:69:df:a6:ab:17:67: a7:80:ba:3d:78:2d:e5:d1:ee:68:e1:bb:9d:51:dc:89:bc:f1: ac:07:37:b8:ac:4a:28:f3:85:ee:e8:e5:1a:93:46:f2:dc:51: 7b:7d:37:96:18:5a:72:67:65:00:be:89:c9:f3:2d:1e:34:e3: 5b:19:78:89 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XCzFOuV2+9C7NYzvpbdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YmZjNjU3NmZmNDI4N2E4OGU5ZGUzZTIxMGI5ZWMwZTEx MWI1YWQwHhcNMjYwMTAyMDYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODA2MmVjNzhmNDM4ZDNjNDBmYzNiMTQxNzVjMzJjY2EyZjQ3YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszo5yHSV2oqoIPHhq0V1Y6zdU+M/ c5bx4pnYaQlRQG4+eiKKyMVplL9PhLhEqx+oONKcwWS1otuqPuInyDDJ8mT0rX/y HRQep7S6sPlCzgsz5tooBQe18foCjBisReZ0a6jeyQM4KOOM8JB/KecfvPWzHpzA jOHvdGXt6VB9tIIVVGtFC6IsK+ESM0tEi832Xpdlr2eeBNz4WoAJ1MYQT/btF1OT /U43fV1XlqDJUtXa6NZI6FY1VHOvbSgwR0QLEgNUTO6fqc/MSHTPFUFyKbvofQVY oeNQs6Jt0FZdpfbAAasvBztOlkbqn2NbDSKb74sUJ9DdoeDwRdZG3FyOJwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNgGLsePQ408QPw7FBdcMsyi9HxjMB8GA1UdIwQY MBaAFBa/xldv9Ch6iOnePiELnsDhEbWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnJfR1YyXzBLSHFJNmQ0LUlRdWV3T0VSdGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MjkzY2YtMjkzOS00ODZlLWI4Zjgt YzU4YTlkNWM3NTM0LzEvMkFZdXg0OURqVHhBX0RzVUYxd3l6S0wwZkdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85MjkzY2YtMjkzOS00ODZlLWI4ZjgtYzU4YTlkNWM3NTM0 LzEvRnJfR1YyXzBLSHFJNmQ0LUlRdWV3T0VSdGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDPkWAAwQG WZSAAwQCuTOoMA0GCSqGSIb3DQEBCwUAA4IBAQADseqbUGTSPtPNoeilmTeOPCAx qBjM3PGyxzvmoej5GzGdbkialVo//pViMC0VKY4PdGNmAMT6G8nbcQqQ0gBnYMdp ccMC/Ibho3xvDHAkQI0I98/3ffxgoBYYvTP7TmSyVFWNo+QoRPWLmpEjkmSFum+L Mp6SFamSN2wBKOvorvZ8VVPdyzeq9MLM8905mHRCYudph1Lvg4Wmz0X2q4y0S3SQ EZ7i18VmQPVi+hu2OxA/PDdm+Mhwc9TWUhhoFE1p36arF2engLo9eC3l0e5o4bud UdyJvPGsBze4rEoo84Xu6OUak0by3FF7fTeWGFpyZ2UAvonJ8y0eNONbGXiJ -----END CERTIFICATE-----Generated at Tue Feb 10 06:08:18 2026 by rpki-client