This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/g2A1nTWxNrbMC-tqMTYkTbSwLhE.roa File: g2A1nTWxNrbMC-tqMTYkTbSwLhE.roa (raw, json) Hash identifier: x/I2NpciYmuJ2+ZCbrzBxxulkHo2MJfUChPtravpSw8= Subject key identifier: 83:60:35:9D:35:B1:36:B6:CC:0B:EB:6A:31:36:24:4D:B4:B0:2E:11 Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Certificate serial: 019B79EBBF0743951409A8CB9DD373E9E51F Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/g2A1nTWxNrbMC-tqMTYkTbSwLhE.roa Signing time: Thu 01 Jan 2026 14:17:31 +0000 ROA not before: Thu 01 Jan 2026 14:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49964 IP address blocks: 109.69.218.0/24 maxlen: 24 128.127.180.0/24 maxlen: 24 185.99.48.0/24 maxlen: 24 185.192.44.0/24 maxlen: 24 185.192.45.0/24 maxlen: 24 193.105.133.0/24 maxlen: 24 193.138.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:bf:07:43:95:14:09:a8:cb:9d:d3:73:e9:e5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Validity Not Before: Jan 1 14:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8360359d35b136b6cc0beb6a3136244db4b02e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:ad:e5:c6:6d:22:f8:51:67:25:08:32:3f: 93:ff:bf:e7:f7:6a:d9:48:31:58:1b:c4:b4:56:65: 5c:28:57:a6:e2:ea:aa:57:78:d9:90:70:4e:b8:02: 3e:b2:20:bc:a8:c4:91:17:5e:b0:5c:fc:6d:b4:de: f9:3a:de:2f:74:98:4b:62:0d:4e:d3:19:1b:0b:a6: 7a:7f:bb:b2:86:d5:1e:20:12:08:e5:33:53:78:ca: 9e:36:cc:fd:01:d5:c8:b0:8c:a5:50:cf:e4:c6:f8: ea:ce:83:bd:26:a2:f5:53:af:b8:e1:2c:ab:e3:4c: 99:e1:e8:49:f8:f9:0b:90:c8:67:8d:89:c2:dc:a0: f5:1d:7a:e5:00:8d:0e:7a:ed:36:39:2c:68:8e:d9: 8c:8a:09:6a:09:a9:0d:e9:f0:92:57:d4:f7:b8:d7: 09:62:30:0c:c1:23:84:51:3b:f8:8c:56:dd:86:be: f7:d7:33:8e:2e:13:ae:b1:5a:30:90:a8:ef:c6:38: 89:df:f6:8a:a0:0d:01:30:fa:fc:66:66:d6:fb:99: e7:08:2c:32:b1:16:a9:ec:35:af:0a:d1:f2:59:60: f4:2e:47:0a:c1:1c:0d:9d:cc:9f:ec:1e:9c:77:ec: 9f:31:23:31:f3:86:e5:36:66:55:99:76:0a:b2:9f: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:60:35:9D:35:B1:36:B6:CC:0B:EB:6A:31:36:24:4D:B4:B0:2E:11 X509v3 Authority Key Identifier: keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/g2A1nTWxNrbMC-tqMTYkTbSwLhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.69.218.0/24 128.127.180.0/24 185.99.48.0/24 185.192.44.0/23 193.105.133.0/24 193.138.101.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:4b:01:11:ba:33:d9:0e:6e:29:da:1b:7f:f9:2d:00:7b:6b: e8:78:16:99:47:ea:77:90:5f:4c:a1:5a:77:1c:73:c4:e5:ab: 07:66:14:57:ad:ba:42:b9:a2:95:24:7c:95:92:8c:3f:c3:c7: da:f0:76:4e:21:00:1e:ba:48:98:05:40:c6:47:1b:4c:3b:8b: e5:16:e3:c7:b5:54:16:1c:b1:88:f9:76:22:3a:d4:ed:9d:66: 9a:6b:60:3b:e7:69:3b:36:55:7a:12:00:e0:3c:94:54:1a:87: 7f:71:8f:ea:2b:34:9f:55:4f:3b:a2:ae:5c:f1:a4:fb:ee:fe: 38:df:ec:68:e9:6d:bd:0c:8f:90:cc:b8:35:08:3c:08:34:f8: 13:b1:24:4b:ac:a8:b8:d3:25:66:ab:b5:a2:0c:d8:bf:d3:85: 7b:aa:28:fb:68:27:c7:fa:53:16:56:e0:dd:d6:41:36:f4:c0: 33:06:ef:64:36:a5:3d:1d:d0:54:2f:12:c4:37:bf:ed:0a:5e: 8e:0f:99:26:ac:49:da:79:c6:d5:aa:c7:6f:f4:78:df:7c:4c: 42:a9:43:46:76:cc:b3:52:4b:68:27:0c:0e:ce:7a:db:cc:d8: cb:10:c1:e1:9e:0d:b9:b9:d2:a3:74:2d:e1:b4:da:5d:73:55: 58:6b:5d:51 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt5678HQ5UUCajLndNz6eUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNDU2Y2RiNGQxNDAzNDVjM2RjYWViZmM3NjM0ZDRlN2Nk Y2I5MTMwHhcNMjYwMTAxMTQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzYwMzU5ZDM1YjEzNmI2Y2MwYmViNmEzMTM2MjQ0ZGI0YjAyZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7+t5cZtIvhRZyUIMj+T/7/n92rZ SDFYG8S0VmVcKFem4uqqV3jZkHBOuAI+siC8qMSRF16wXPxttN75Ot4vdJhLYg1O 0xkbC6Z6f7uyhtUeIBII5TNTeMqeNsz9AdXIsIylUM/kxvjqzoO9JqL1U6+44Syr 40yZ4ehJ+PkLkMhnjYnC3KD1HXrlAI0Oeu02OSxojtmMiglqCakN6fCSV9T3uNcJ YjAMwSOEUTv4jFbdhr731zOOLhOusVowkKjvxjiJ3/aKoA0BMPr8ZmbW+5nnCCwy sRap7DWvCtHyWWD0LkcKwRwNncyf7B6cd+yfMSMx84blNmZVmXYKsp9OIwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFINgNZ01sTa2zAvrajE2JE20sC4RMB8GA1UdIwQY MBaAFN5FbNtNFANFw9yuv8djTU583LkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEt OTI4ZTdiYzY5NTcwLzEvZzJBMW5UV3hOcmJNQy10cU1UWWtUYlN3TGhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEtOTI4ZTdiYzY5NTcw LzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAbUXaAwQA gH+0AwQAuWMwAwQBucAsAwQAwWmFAwQAwYplMA0GCSqGSIb3DQEBCwUAA4IBAQBu SwERujPZDm4p2ht/+S0Ae2voeBaZR+p3kF9MoVp3HHPE5asHZhRXrbpCuaKVJHyV kow/w8fa8HZOIQAeukiYBUDGRxtMO4vlFuPHtVQWHLGI+XYiOtTtnWaaa2A752k7 NlV6EgDgPJRUGod/cY/qKzSfVU87oq5c8aT77v443+xo6W29DI+QzLg1CDwINPgT sSRLrKi40yVmq7WiDNi/04V7qij7aCfH+lMWVuDd1kE29MAzBu9kNqU9HdBULxLE N7/tCl6OD5kmrEnaecbVqsdv9HjffExCqUNGdsyzUktoJwwOznrbzNjLEMHhng25 udKjdC3htNpdc1VYa11R -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:41 2026 by rpki-client