This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/2e1cz0qQm98XsgOLRW_MtsZatHo.roa File: 2e1cz0qQm98XsgOLRW_MtsZatHo.roa (raw, json) Hash identifier: s7uLnF7oXLpb3y50Cb2KADpe3RUMwrdqTlQV52zh+8g= Subject key identifier: D9:ED:5C:CF:4A:90:9B:DF:17:B2:03:8B:45:6F:CC:B6:C6:5A:B4:7A Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414 Certificate serial: 019B7FF11AF2612EA6E307FBFEFCB9BF147B Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/2e1cz0qQm98XsgOLRW_MtsZatHo.roa Signing time: Fri 02 Jan 2026 18:21:05 +0000 ROA not before: Fri 02 Jan 2026 18:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 87.121.171.0/24 maxlen: 24 87.121.172.0/24 maxlen: 24 87.121.173.0/24 maxlen: 24 87.121.174.0/24 maxlen: 24 87.121.175.0/24 maxlen: 24 185.64.24.0/24 maxlen: 24 185.64.25.0/24 maxlen: 24 185.64.26.0/24 maxlen: 24 185.64.27.0/24 maxlen: 24 193.203.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:1a:f2:61:2e:a6:e3:07:fb:fe:fc:b9:bf:14:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414 Validity Not Before: Jan 2 18:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9ed5ccf4a909bdf17b2038b456fccb6c65ab47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:99:cd:98:a7:7b:ca:ce:5d:7d:cf:91:39: 46:fe:84:25:f6:8c:73:72:d9:f7:a7:b2:10:a8:af: 1c:de:6f:4b:91:33:83:a1:d3:9d:35:78:b4:32:60: 1f:4c:5b:89:8c:f9:d4:9d:28:67:b5:8c:8b:7a:2a: 3a:d1:e8:e7:be:29:eb:21:c7:da:2a:58:d1:10:17: 81:61:61:40:ca:8a:b3:47:c7:46:b2:43:c9:b2:12: 20:b5:0a:8a:a5:dc:5f:22:5c:34:48:37:cc:f9:ff: 91:7e:ba:ef:13:e7:ea:48:ec:c1:06:2e:32:4b:8d: 55:cb:96:fc:15:a9:8f:10:5d:13:27:59:d3:27:7c: 08:14:b9:6c:78:54:0c:59:2a:f3:3d:90:a1:83:9a: 1f:fc:83:99:ff:80:ad:3f:12:d6:e1:4f:65:d3:c8: 17:50:17:31:4e:53:32:a3:dd:7a:23:de:a2:0d:05: 5c:e7:37:b4:ab:78:df:9a:67:77:4b:a7:5e:23:5b: 76:a3:be:5d:17:57:e8:2b:c1:95:ff:08:68:3f:35: 93:ec:15:f8:1a:29:dc:13:b0:2d:75:5b:68:c3:a1: dc:cb:99:3c:cb:72:28:be:9e:86:c7:64:aa:1c:d7: 72:7b:5c:bb:25:bb:01:41:3b:ac:c5:0f:4c:d4:c3: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:ED:5C:CF:4A:90:9B:DF:17:B2:03:8B:45:6F:CC:B6:C6:5A:B4:7A X509v3 Authority Key Identifier: keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/2e1cz0qQm98XsgOLRW_MtsZatHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.171.0-87.121.175.255 185.64.24.0/22 193.203.254.0/24 Signature Algorithm: sha256WithRSAEncryption 46:78:12:0a:c9:18:5a:39:6f:ac:50:1a:e9:6e:55:71:1b:ea: d8:25:25:2e:9e:77:fe:4f:91:ae:2a:6b:f7:59:c2:1a:b4:c2: c4:1b:43:2b:1f:7b:7e:b4:f4:fe:87:a4:f6:b2:93:25:9d:e8: 88:a7:6b:a8:8a:2c:4b:9a:ed:71:86:05:b9:ff:4e:9d:19:a0: e9:e8:d3:8b:85:ad:c0:0c:d3:9c:bc:5e:6f:0c:31:26:8e:60: eb:ca:d4:b7:31:2e:29:e4:b3:9b:01:68:d3:54:0f:b7:07:04: 18:f4:05:6f:24:e9:15:01:df:d7:ad:6c:61:01:1c:9c:c3:12: 4f:be:ed:b4:48:e8:3e:c6:9c:33:83:c4:c9:68:11:c6:b4:cc: db:48:2c:94:e1:21:0d:87:21:22:e4:63:7e:41:44:3b:3a:50: 00:e3:c9:f7:22:ab:b5:ba:72:80:62:a8:97:0d:e9:75:0f:7f: 50:08:b4:6e:91:8d:8b:da:a7:d4:29:e1:80:1b:29:2f:0e:ca: 43:da:da:d6:cf:5f:59:f5:4a:03:c6:13:e8:6e:51:f3:ab:9a: dc:0c:04:36:4b:e7:0e:4d:cc:9a:f3:08:b1:28:24:a9:96:11: 17:af:9b:7d:3b:ae:62:76:fb:3b:87:e3:1c:e3:c8:e4:12:10: cb:e1:1c:e4 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/8RryYS6m4wf7/vy5vxR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz NTI0MTQwHhcNMjYwMTAyMTgyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWVkNWNjZjRhOTA5YmRmMTdiMjAzOGI0NTZmY2NiNmM2NWFiNDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMeZzZine8rOXX3PkTlG/oQl9oxz ctn3p7IQqK8c3m9LkTODodOdNXi0MmAfTFuJjPnUnShntYyLeio60ejnvinrIcfa KljREBeBYWFAyoqzR8dGskPJshIgtQqKpdxfIlw0SDfM+f+RfrrvE+fqSOzBBi4y S41Vy5b8FamPEF0TJ1nTJ3wIFLlseFQMWSrzPZChg5of/IOZ/4CtPxLW4U9l08gX UBcxTlMyo916I96iDQVc5ze0q3jfmmd3S6deI1t2o75dF1foK8GV/whoPzWT7BX4 GincE7AtdVtow6Hcy5k8y3Iovp6Gx2SqHNdye1y7JbsBQTusxQ9M1MNHbQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNntXM9KkJvfF7IDi0VvzLbGWrR6MB8GA1UdIwQY MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt NjE5YzI2MTk0MTY4LzEvMmUxY3owcVFtOThYc2dPTFJXX010c1phdEhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4 LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABXeasD BARXeaADBAK5QBgDBADBy/4wDQYJKoZIhvcNAQELBQADggEBAEZ4EgrJGFo5b6xQ GuluVXEb6tglJS6ed/5Pka4qa/dZwhq0wsQbQysfe3609P6HpPaykyWd6Iina6iK LEua7XGGBbn/Tp0ZoOno04uFrcAM05y8Xm8MMSaOYOvK1LcxLinks5sBaNNUD7cH BBj0BW8k6RUB39etbGEBHJzDEk++7bRI6D7GnDODxMloEca0zNtILJThIQ2HISLk Y35BRDs6UADjyfciq7W6coBiqJcN6XUPf1AItG6RjYvap9Qp4YAbKS8OykPa2tbP X1n1SgPGE+huUfOrmtwMBDZL5w5NzJrzCLEoJKmWERevm307rmJ2+zuH4xzjyOQS EMvhHOQ= -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:57 2026 by rpki-client