This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/R-TR2lMlqd-ajoqANh8z83K14Gg.roa File: R-TR2lMlqd-ajoqANh8z83K14Gg.roa (raw, json) Hash identifier: LL4D//R1+/zSqsNzLuVii4RDHBXLV7iA5YOQo+LHbz4= Subject key identifier: 47:E4:D1:DA:53:25:A9:DF:9A:8E:8A:80:36:1F:33:F3:72:B5:E0:68 Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a Certificate serial: 019B7C7EFAF440A8B3890005D2697116F2B8 Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/R-TR2lMlqd-ajoqANh8z83K14Gg.roa Signing time: Fri 02 Jan 2026 02:17:35 +0000 ROA not before: Fri 02 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200322 IP address blocks: 185.245.248.0/22 maxlen: 24 185.245.250.0/24 maxlen: 24 2a0d:7080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:fa:f4:40:a8:b3:89:00:05:d2:69:71:16:f2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a Validity Not Before: Jan 2 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47e4d1da5325a9df9a8e8a80361f33f372b5e068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ec:07:2b:32:be:01:fc:93:e3:99:66:35:26: 6c:eb:c0:ab:15:e7:3c:64:34:39:f0:ce:3f:36:76: b0:06:d0:09:f2:56:68:c8:3a:b4:1d:c4:12:ce:6f: 34:f6:14:21:30:39:bd:b5:4c:05:bb:81:be:c3:29: b0:73:a4:1f:d1:63:64:48:16:cc:4e:df:a5:0e:ca: b6:90:a6:66:1c:81:91:1c:81:8d:1d:e4:41:7c:7d: 06:30:ca:7e:e9:25:b4:48:22:d6:e4:c5:d4:7d:7f: e4:ae:be:96:0b:cf:27:41:1b:ce:fa:7b:09:ae:2b: 22:a2:73:df:be:f4:80:56:4e:7b:75:e3:1a:a7:38: 62:82:07:5b:a9:c1:9f:cc:a6:3f:0b:58:a5:13:2d: 04:38:7b:65:f6:c2:ed:84:58:57:d8:d1:7d:2e:29: 62:b2:91:f3:bc:9f:fb:60:6e:34:a5:d9:9e:42:c9: b7:b1:eb:c7:d7:7b:a6:08:ea:fb:80:13:50:ad:f8: 66:34:86:a8:fd:88:21:72:47:b4:59:6b:62:0b:95: 7a:b9:4f:f2:56:16:17:ea:35:c9:8d:15:98:b1:c2: f4:14:69:71:0a:52:18:fa:b6:96:55:27:dd:9d:b2: 5e:6b:00:46:17:a4:70:bf:a2:53:ed:c1:db:ab:04: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E4:D1:DA:53:25:A9:DF:9A:8E:8A:80:36:1F:33:F3:72:B5:E0:68 X509v3 Authority Key Identifier: keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/R-TR2lMlqd-ajoqANh8z83K14Gg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.248.0/22 IPv6: 2a0d:7080::/29 Signature Algorithm: sha256WithRSAEncryption 43:53:44:2c:3e:e9:e2:e8:f1:2c:f3:92:c3:f9:35:ee:f2:59: b2:7e:42:0a:99:ef:7b:87:97:41:29:f5:25:c4:6d:5c:6d:d2: 0b:cf:eb:09:f1:ba:9d:30:f0:62:07:37:f4:55:87:f9:d3:ee: b6:2e:48:26:2c:e9:90:be:2d:fb:84:f4:10:af:fc:86:ad:78: 17:fb:fa:1d:ad:16:8b:fc:d0:32:f1:f1:24:87:3a:6b:e5:7d: 04:00:c7:c7:02:71:0f:a8:bd:6c:eb:7a:1a:01:eb:4e:66:8e: bd:a4:b6:70:a4:c5:08:b2:5d:d5:7a:e5:9f:8f:af:be:37:a3: c0:86:2f:d8:ac:52:dd:67:ca:7b:5c:0e:db:2b:46:59:6e:f7: 12:62:8a:56:29:90:84:1f:2e:cb:6d:03:51:53:fc:93:79:4c: bb:0c:4e:da:89:1d:e2:fb:de:dc:ab:38:53:87:5b:b4:20:95: 67:65:46:47:1f:42:82:a7:cb:dd:ad:6c:18:95:e9:ff:62:95: 32:0b:27:b4:9f:f5:b0:db:a8:40:fc:11:e3:07:8a:08:dc:65: fb:cf:4c:dc:2e:9f:de:3e:2d:34:0f:21:34:0f:0f:4f:df:0c: 53:a0:8f:e3:10:7c:1d:51:ed:82:b1:a3:dc:15:fb:15:12:76: c2:4d:ee:81 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8fvr0QKiziQAF0mlxFvK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYjMyMGJlODk3MjY4MzFmM2ZkOTAwNzQwZjFmOTA2Zjli MTljNmEwHhcNMjYwMTAyMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2U0ZDFkYTUzMjVhOWRmOWE4ZThhODAzNjFmMzNmMzcyYjVlMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+wHKzK+AfyT45lmNSZs68CrFec8 ZDQ58M4/NnawBtAJ8lZoyDq0HcQSzm809hQhMDm9tUwFu4G+wymwc6Qf0WNkSBbM Tt+lDsq2kKZmHIGRHIGNHeRBfH0GMMp+6SW0SCLW5MXUfX/krr6WC88nQRvO+nsJ risionPfvvSAVk57deMapzhiggdbqcGfzKY/C1ilEy0EOHtl9sLthFhX2NF9Lili spHzvJ/7YG40pdmeQsm3sevH13umCOr7gBNQrfhmNIao/Yghcke0WWtiC5V6uU/y VhYX6jXJjRWYscL0FGlxClIY+raWVSfdnbJeawBGF6Rwv6JT7cHbqwQFkQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEfk0dpTJanfmo6KgDYfM/NyteBoMB8GA1UdIwQY MBaAFO6zIL6Jcmgx8/2QB0Dx+Qb5sZxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3JNZ3ZvbHlhREh6X1pBSFFQSDVCdm14bkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kOTBiZTgtZjYwNS00ZmM4LThmMDkt MDIxMDQwYWEzYzhhLzEvUi1UUjJsTWxxZC1ham9xQU5oOHo4M0sxNEdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9kOTBiZTgtZjYwNS00ZmM4LThmMDktMDIxMDQwYWEzYzhh LzEvN3JNZ3ZvbHlhREh6X1pBSFFQSDVCdm14bkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufX4MA0E AgACMAcDBQMqDXCAMA0GCSqGSIb3DQEBCwUAA4IBAQBDU0QsPuni6PEs85LD+TXu 8lmyfkIKme97h5dBKfUlxG1cbdILz+sJ8bqdMPBiBzf0VYf50+62LkgmLOmQvi37 hPQQr/yGrXgX+/odrRaL/NAy8fEkhzpr5X0EAMfHAnEPqL1s63oaAetOZo69pLZw pMUIsl3VeuWfj6++N6PAhi/YrFLdZ8p7XA7bK0ZZbvcSYopWKZCEHy7LbQNRU/yT eUy7DE7aiR3i+97cqzhTh1u0IJVnZUZHH0KCp8vdrWwYlen/YpUyCye0n/Ww26hA /BHjB4oI3GX7z0zcLp/ePi00DyE0Dw9P3wxToI/jEHwdUe2CsaPcFfsVEnbCTe6B -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:18 2026 by rpki-client