This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/2Wyxez9lwJjrigvZyDwF8uAZSJc.roa File: 2Wyxez9lwJjrigvZyDwF8uAZSJc.roa (raw, json) Hash identifier: WXXGeEGJ4mJ3r+j3BB1vcRuu9R5jmSbFBlSKzGyw5vo= Subject key identifier: D9:6C:B1:7B:3F:65:C0:98:EB:8A:0B:D9:C8:3C:05:F2:E0:19:48:97 Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54 Certificate serial: 019B77C6F7CA163D85EB849434D42D08F133 Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/2Wyxez9lwJjrigvZyDwF8uAZSJc.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57473 IP address blocks: 185.115.136.0/22 maxlen: 22 185.115.136.0/24 maxlen: 24 194.60.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f7:ca:16:3d:85:eb:84:94:34:d4:2d:08:f1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d96cb17b3f65c098eb8a0bd9c83c05f2e0194897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:81:c0:93:87:f8:ea:65:47:39:18:2d:54: f3:c8:a7:5c:8f:e9:f8:7f:40:b7:32:a6:3f:63:01: c9:ef:10:d2:28:ac:4a:2e:d4:0c:84:d8:ef:3e:5e: bf:cd:0f:d0:32:e1:1e:89:31:16:0b:08:38:5a:e3: 1b:b7:c0:f9:ab:bc:34:bc:e7:0d:cf:1b:8c:27:12: 5f:72:91:c1:eb:a6:db:2d:91:af:2d:09:9c:59:1e: 42:e0:21:df:48:14:78:65:3d:9d:fb:81:73:08:ee: cf:f0:7c:fd:f2:47:6f:f3:24:c3:ad:8b:bb:13:81: 36:cf:8c:75:8f:20:96:28:3b:2d:d0:06:64:1f:3d: 27:4e:28:4e:b5:19:67:70:e3:5a:dc:9f:43:e5:45: 20:d9:a1:7f:fe:48:a5:24:8b:c8:45:ea:4b:fa:16: c5:2d:67:91:38:07:c7:e7:b0:7b:38:28:86:a3:0d: d0:54:d3:84:d5:a3:51:62:1e:ff:db:47:3a:a3:39: 96:b0:a5:b1:16:92:ef:21:46:3f:4e:ad:55:b1:09: 03:c5:1d:8a:a6:17:00:5c:b0:c6:8c:14:ac:99:55: dc:a1:8c:5d:b7:f0:fd:06:c6:58:2b:8f:07:7b:7f: f7:d3:02:46:50:f0:ca:b6:ea:d1:b9:1b:42:a7:93: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6C:B1:7B:3F:65:C0:98:EB:8A:0B:D9:C8:3C:05:F2:E0:19:48:97 X509v3 Authority Key Identifier: keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/2Wyxez9lwJjrigvZyDwF8uAZSJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.136.0/22 194.60.250.0/24 Signature Algorithm: sha256WithRSAEncryption c4:28:31:9b:2c:c6:34:01:56:f4:28:70:49:f5:88:41:ab:b8: 23:ad:81:97:7e:69:58:ec:9c:1c:71:a2:20:63:0a:3e:f9:be: 30:f6:ca:9b:de:3f:8d:0f:99:6d:75:87:29:23:76:12:37:bc: 4a:e5:06:2e:bd:10:1c:9b:56:79:e7:84:f8:38:0d:4e:d5:bd: 9c:8c:8e:a4:4b:97:b5:25:eb:89:ba:4c:be:42:d6:65:64:29: 36:c0:1e:dd:8d:96:d4:f0:c6:a6:dd:cc:2f:bb:88:99:73:7d: 78:7b:41:07:b8:a9:b8:0a:a7:2e:b9:78:2b:e2:c0:9a:dd:68: 19:52:6b:0e:c5:db:9f:be:6a:c6:7b:f3:44:c7:26:67:75:23: 13:1e:2e:8a:f6:57:dd:0f:5c:6a:84:8b:2c:bd:a4:0b:f5:ca: a3:b0:7c:08:bf:27:b4:4d:8b:bf:1d:c8:3c:8c:8d:1f:ac:51: 00:e3:2b:08:49:da:be:32:7d:72:ad:6f:70:1f:08:bf:b1:86: 4e:57:3a:31:99:cb:ad:ed:36:2e:b4:a6:7a:33:1e:a4:bf:56: 54:70:11:97:9a:dd:8f:4c:81:aa:ba:9b:c5:4b:ea:72:7f:ee: c9:d6:07:b9:e8:fd:3a:6c:4b:c2:53:5e:57:cf:85:30:9a:32: 3a:02:56:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xvfKFj2F64SUNNQtCPEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmM3YTRlOWYwMmIyZjRlNjY0ZDdkMGQ3MmE1MmU1MTI2 MWRlNTQwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTZjYjE3YjNmNjVjMDk4ZWI4YTBiZDljODNjMDVmMmUwMTk0ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN+BwJOH+OplRzkYLVTzyKdcj+n4 f0C3MqY/YwHJ7xDSKKxKLtQMhNjvPl6/zQ/QMuEeiTEWCwg4WuMbt8D5q7w0vOcN zxuMJxJfcpHB66bbLZGvLQmcWR5C4CHfSBR4ZT2d+4FzCO7P8Hz98kdv8yTDrYu7 E4E2z4x1jyCWKDst0AZkHz0nTihOtRlncONa3J9D5UUg2aF//kilJIvIRepL+hbF LWeROAfH57B7OCiGow3QVNOE1aNRYh7/20c6ozmWsKWxFpLvIUY/Tq1VsQkDxR2K phcAXLDGjBSsmVXcoYxdt/D9BsZYK48He3/30wJGUPDKturRuRtCp5M7JQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNlssXs/ZcCY64oL2cg8BfLgGUiXMB8GA1UdIwQY MBaAFGQsek6fArL05mTX0NcqUuUSYd5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYt NWUwMmM0NjUzZTUwLzEvMld5eGV6OWx3SmpyaWd2WnlEd0Y4dUFaU0pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYtNWUwMmM0NjUzZTUw LzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuXOIAwQA wjz6MA0GCSqGSIb3DQEBCwUAA4IBAQDEKDGbLMY0AVb0KHBJ9YhBq7gjrYGXfmlY 7JwccaIgYwo++b4w9sqb3j+ND5ltdYcpI3YSN7xK5QYuvRAcm1Z554T4OA1O1b2c jI6kS5e1JeuJuky+QtZlZCk2wB7djZbU8Mam3cwvu4iZc314e0EHuKm4CqcuuXgr 4sCa3WgZUmsOxdufvmrGe/NExyZndSMTHi6K9lfdD1xqhIssvaQL9cqjsHwIvye0 TYu/Hcg8jI0frFEA4ysISdq+Mn1yrW9wHwi/sYZOVzoxmcut7TYutKZ6Mx6kv1ZU cBGXmt2PTIGqupvFS+pyf+7J1ge56P06bEvCU15Xz4UwmjI6AlbQ -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:08 2026 by rpki-client