This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/2hKU1NYjNBDhpco5HEAK3um-kbE.roa File: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (raw, json) Hash identifier: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo= Subject key identifier: DA:12:94:D4:D6:23:34:10:E1:A5:CA:39:1C:40:0A:DE:E9:BE:91:B1 Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16 Certificate serial: 019B77C759E19121DEC807E46362E9E3A3A3 Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/2hKU1NYjNBDhpco5HEAK3um-kbE.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208596 IP address blocks: 185.191.248.0/22 maxlen: 22 185.191.248.0/23 maxlen: 23 185.191.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:59:e1:91:21:de:c8:07:e4:63:62:e9:e3:a3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da1294d4d6233410e1a5ca391c400adee9be91b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:a2:9f:b3:73:0e:fe:68:a6:29:c5:1a:53: 7d:89:e3:de:d0:79:ee:b1:4f:92:71:64:59:02:82: 3d:ef:6e:48:3f:2b:91:c0:06:4d:59:e5:e1:84:92: 50:93:d2:7a:08:6d:ac:74:ef:e8:08:a3:c6:a6:f5: f5:7a:ec:76:46:7c:b6:2a:42:9f:4e:85:4c:df:14: da:7e:fd:5e:98:ed:31:85:71:7e:d9:07:7f:46:b6: 19:f6:5b:5d:ff:ec:8f:90:7b:62:92:18:88:8a:c7: 44:d1:6e:cc:87:14:9f:c2:1b:ae:73:40:21:b6:7a: 7e:93:b6:81:fd:6f:63:00:8a:96:a5:e0:21:d1:fd: 98:48:a8:13:1f:24:f1:b8:36:c6:8d:45:c0:01:d7: f0:7a:9b:1d:c2:05:59:bf:e2:fa:d5:a4:00:26:83: 13:e5:d3:06:2b:49:71:d2:d6:8d:2d:11:31:04:f0: e4:9f:fb:15:15:4a:75:61:5d:d0:0d:a7:a6:ac:34: a7:2a:08:94:80:f1:07:ef:e3:5d:82:be:79:09:9f: 4c:be:a2:eb:6c:e8:c5:13:d1:dc:fa:1f:74:ea:5f: b3:63:c9:ce:17:88:53:6f:f8:37:a8:ea:30:9f:54: 2c:23:1d:11:ee:c8:11:64:64:84:4a:9c:af:52:03: 4c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:12:94:D4:D6:23:34:10:E1:A5:CA:39:1C:40:0A:DE:E9:BE:91:B1 X509v3 Authority Key Identifier: keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/2hKU1NYjNBDhpco5HEAK3um-kbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.248.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:88:c6:aa:ba:ac:52:6a:c9:b6:f6:4f:5c:21:52:77:7a:37: f3:72:1f:99:82:c6:08:7b:a3:76:6b:09:b3:cf:84:28:b4:c2: 14:66:99:73:2e:25:29:09:2c:d4:23:82:ae:56:36:25:b8:d9: 8a:0a:79:18:17:bb:dd:a8:b2:c7:40:ef:d2:59:c8:05:e3:5d: ed:50:8a:58:5d:67:f6:6c:e5:12:0d:9a:5f:72:9e:cd:6f:5b: f1:7e:1d:57:bb:23:b7:62:a8:5a:27:bc:22:fd:ee:f5:82:56: 11:8e:f2:e9:cb:c5:d1:b6:e2:0d:4c:39:35:f1:01:19:57:c6: 77:a4:b1:74:67:2a:fe:b9:c4:3d:b2:22:09:bf:0c:bb:f4:25: 64:67:c6:ff:d0:0b:dd:be:6e:52:01:70:5b:77:84:8f:74:99: 62:af:13:f7:0c:d5:db:d5:73:c3:f0:e0:dd:c5:58:bc:8d:fb: fd:a6:4b:47:6a:87:14:bf:91:63:30:f8:7c:9a:8d:45:06:99: bf:13:df:bc:b7:89:a8:84:4b:7d:ba:c2:4e:48:6b:98:f6:ec: 9b:cd:5e:6e:cd:3e:c8:c2:cb:b0:c4:33:53:e5:b5:d1:e4:b1: 45:1d:ea:3f:04:86:f7:cd:d7:17:3d:a0:94:72:d8:73:5d:fd: 74:22:b8:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1nhkSHeyAfkY2Lp46OjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNzhhY2JjYzQ2ZjEzM2VmZDM5M2Y1MTE2MGZkYmI3NjA3 ZTFlMTYwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTEyOTRkNGQ2MjMzNDEwZTFhNWNhMzkxYzQwMGFkZWU5YmU5MWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAmin7NzDv5opinFGlN9iePe0Hnu sU+ScWRZAoI9725IPyuRwAZNWeXhhJJQk9J6CG2sdO/oCKPGpvX1eux2Rny2KkKf ToVM3xTafv1emO0xhXF+2Qd/RrYZ9ltd/+yPkHtikhiIisdE0W7MhxSfwhuuc0Ah tnp+k7aB/W9jAIqWpeAh0f2YSKgTHyTxuDbGjUXAAdfwepsdwgVZv+L61aQAJoMT 5dMGK0lx0taNLRExBPDkn/sVFUp1YV3QDaemrDSnKgiUgPEH7+Ndgr55CZ9MvqLr bOjFE9Hc+h906l+zY8nOF4hTb/g3qOown1QsIx0R7sgRZGSESpyvUgNMXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNoSlNTWIzQQ4aXKORxACt7pvpGxMB8GA1UdIwQY MBaAFPJ4rLzEbxM+/Tk/URYP27dgfh4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYt OTRiNTE0NDMzYzExLzEvMmhLVTFOWWpOQkRocGNvNUhFQUszdW0ta2JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYtOTRiNTE0NDMzYzEx LzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCub/4MA0G CSqGSIb3DQEBCwUAA4IBAQA+iMaquqxSasm29k9cIVJ3ejfzch+ZgsYIe6N2awmz z4QotMIUZplzLiUpCSzUI4KuVjYluNmKCnkYF7vdqLLHQO/SWcgF413tUIpYXWf2 bOUSDZpfcp7Nb1vxfh1XuyO3YqhaJ7wi/e71glYRjvLpy8XRtuINTDk18QEZV8Z3 pLF0Zyr+ucQ9siIJvwy79CVkZ8b/0Avdvm5SAXBbd4SPdJlirxP3DNXb1XPD8ODd xVi8jfv9pktHaocUv5FjMPh8mo1FBpm/E9+8t4mohEt9usJOSGuY9uybzV5uzT7I wsuwxDNT5bXR5LFFHeo/BIb3zdcXPaCUcthzXf10IriC -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:18 2026 by rpki-client