This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/2gOdZT77SlZQ7SMis2YKPnVu3ew.roa File: 2gOdZT77SlZQ7SMis2YKPnVu3ew.roa (raw, json) Hash identifier: vi5xO2zmTTExWg1kG+TvdmGj6rlu4A+rOB43H/1OzD4= Subject key identifier: DA:03:9D:65:3E:FB:4A:56:50:ED:23:22:B3:66:0A:3E:75:6E:DD:EC Certificate issuer: /CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777 Certificate serial: 019B7CEE4FB4FD106F524938B707254A547F Authority key identifier: 83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/2gOdZT77SlZQ7SMis2YKPnVu3ew.roa Signing time: Fri 02 Jan 2026 04:19:11 +0000 ROA not before: Fri 02 Jan 2026 04:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203673 IP address blocks: 84.38.8.0/21 maxlen: 21 185.127.168.0/22 maxlen: 22 2a03:97e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4f:b4:fd:10:6f:52:49:38:b7:07:25:4a:54:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777 Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da039d653efb4a5650ed2322b3660a3e756eddec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:32:fa:1e:e8:e7:f6:07:4e:4b:07:17:04: e5:21:b1:d7:18:c6:67:3d:9c:69:a2:e9:0d:5e:ee: 77:21:79:72:49:ef:56:7a:05:fd:96:2c:80:db:d9: 1f:86:9f:32:ad:a0:80:5b:3f:e9:56:fe:08:73:9f: 59:47:4e:dd:d1:26:94:d6:49:65:71:f8:ae:74:4f: 09:22:75:37:6f:af:f5:c8:15:d0:4f:44:74:6f:27: 38:69:cb:53:a3:60:51:07:fd:34:3e:df:44:3e:19: 9e:48:47:48:ac:8a:52:a0:67:17:fb:b3:24:db:d7: 6b:68:20:1a:64:7c:96:50:fe:9b:88:02:95:50:a8: 32:8e:af:f0:e7:59:1d:69:6c:a5:db:05:c8:65:83: 0f:07:83:4a:ec:6b:0e:9c:59:81:b5:6e:d7:12:75: 1a:ba:99:6d:ab:da:12:74:23:42:77:3a:f5:8b:7a: 35:9d:91:b9:48:b2:46:75:c3:74:23:21:19:e7:95: 60:3a:61:d2:97:8a:4d:f6:20:5c:2d:49:9e:c2:9c: 11:fd:67:e5:3a:06:bb:fb:1c:da:1d:09:fe:f4:d9: 0c:8c:00:0f:95:5a:d0:b2:4c:2f:51:fe:39:29:29: ac:0a:95:92:c3:9b:62:4d:4e:a6:57:b6:36:84:68: 60:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:03:9D:65:3E:FB:4A:56:50:ED:23:22:B3:66:0A:3E:75:6E:DD:EC X509v3 Authority Key Identifier: keyid:83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/2gOdZT77SlZQ7SMis2YKPnVu3ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.8.0/21 185.127.168.0/22 IPv6: 2a03:97e0::/32 Signature Algorithm: sha256WithRSAEncryption aa:65:38:a4:1b:f4:15:a1:6a:ae:82:1a:05:ec:74:61:32:68: dd:9b:e6:b2:4f:bf:52:56:08:e5:45:2d:35:39:e0:29:48:db: 6c:f8:7b:df:27:fd:63:db:a3:ff:9c:68:12:bd:2a:04:16:7b: 5c:7c:4c:69:65:e6:45:ed:30:43:7f:be:52:f5:dc:24:3e:ee: f8:14:5f:d6:57:d3:8b:35:c2:98:6a:7d:17:a4:a1:c3:0b:73: cb:a0:1e:d6:31:bc:92:59:6f:c6:ef:68:22:6b:49:b7:0a:4f: cf:85:58:62:aa:91:6a:b8:38:91:3f:52:7c:9a:ff:42:7b:6f: 7f:3d:0c:01:5c:74:b3:30:ba:36:1a:68:dc:08:25:17:54:8a: 68:ad:9e:c2:2d:a0:19:04:9b:d3:47:a6:f2:6f:70:7a:41:8d: fc:08:50:66:18:80:1a:6b:90:e5:e2:aa:65:0e:18:bf:8c:41: 6b:22:5a:01:02:d3:50:a3:9e:5e:46:53:96:b2:a5:cc:93:4f: 84:8a:1c:0a:7b:3b:dd:10:cb:1f:8b:49:4d:f9:e6:74:36:c5: 5e:d7:9c:7d:3a:1d:ed:ad:ed:e0:15:23:c9:02:79:05:8f:60: f5:2f:6d:4b:c5:ef:08:26:87:03:bb:df:c2:33:c6:5a:23:dd: 3d:82:a7:e4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87k+0/RBvUkk4twclSlR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDc2ZjNhYjNlZmFhNjMyOGYwYTM4ZmNmNGE3Zjk2MzAw NGI3NzcwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTAzOWQ2NTNlZmI0YTU2NTBlZDIzMjJiMzY2MGEzZTc1NmVkZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4My+h7o5/YHTksHFwTlIbHXGMZn PZxpoukNXu53IXlySe9WegX9liyA29kfhp8yraCAWz/pVv4Ic59ZR07d0SaU1kll cfiudE8JInU3b6/1yBXQT0R0byc4actTo2BRB/00Pt9EPhmeSEdIrIpSoGcX+7Mk 29draCAaZHyWUP6biAKVUKgyjq/w51kdaWyl2wXIZYMPB4NK7GsOnFmBtW7XEnUa upltq9oSdCNCdzr1i3o1nZG5SLJGdcN0IyEZ55VgOmHSl4pN9iBcLUmewpwR/Wfl Oga7+xzaHQn+9NkMjAAPlVrQskwvUf45KSmsCpWSw5tiTU6mV7Y2hGhg0QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNoDnWU++0pWUO0jIrNmCj51bt3sMB8GA1UdIwQY MBaAFIMHbzqz76pjKPCjj89Kf5YwBLd3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iODhlMGMtMjRjZi00ZmVjLWIxMTgt OWE2ZGYzOTU5MmM3LzEvMmdPZFpUNzdTbFpRN1NNaXMyWUtQblZ1M2V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iODhlMGMtMjRjZi00ZmVjLWIxMTgtOWE2ZGYzOTU5MmM3 LzEvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDVCYIAwQC uX+oMA0EAgACMAcDBQAqA5fgMA0GCSqGSIb3DQEBCwUAA4IBAQCqZTikG/QVoWqu ghoF7HRhMmjdm+ayT79SVgjlRS01OeApSNts+HvfJ/1j26P/nGgSvSoEFntcfExp ZeZF7TBDf75S9dwkPu74FF/WV9OLNcKYan0XpKHDC3PLoB7WMbySWW/G72gia0m3 Ck/PhVhiqpFquDiRP1J8mv9Ce29/PQwBXHSzMLo2GmjcCCUXVIporZ7CLaAZBJvT R6byb3B6QY38CFBmGIAaa5Dl4qplDhi/jEFrIloBAtNQo55eRlOWsqXMk0+EihwK ezvdEMsfi0lN+eZ0NsVe15x9Oh3tre3gFSPJAnkFj2D1L21Lxe8IJocDu9/CM8Za I909gqfk -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:39 2026 by rpki-client