This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/2M7JFeYv6EU7baJDuclymj7aO3Y.roa File: 2M7JFeYv6EU7baJDuclymj7aO3Y.roa (raw, json) Hash identifier: iZc3yZisPC3PtWwp2J1EiFeb+q/jB92CE8gsAYVSbys= Subject key identifier: D8:CE:C9:15:E6:2F:E8:45:3B:6D:A2:43:B9:C9:72:9A:3E:DA:3B:76 Certificate issuer: /CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052 Certificate serial: 019B7EA6E1F2E53125E9E89BE0B895E8B5CC Authority key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/2M7JFeYv6EU7baJDuclymj7aO3Y.roa Signing time: Fri 02 Jan 2026 12:20:24 +0000 ROA not before: Fri 02 Jan 2026 12:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48781 IP address blocks: 91.107.0.0/18 maxlen: 19 95.128.240.0/21 maxlen: 23 185.33.244.0/24 maxlen: 24 185.33.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e1:f2:e5:31:25:e9:e8:9b:e0:b8:95:e8:b5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052 Validity Not Before: Jan 2 12:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8cec915e62fe8453b6da243b9c9729a3eda3b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:c8:97:fc:30:8a:d8:dc:43:0d:da:bd:67: 51:76:7f:2a:7d:32:4f:ef:68:01:ac:35:b7:66:73: aa:6c:16:e8:4e:f9:92:53:c6:44:26:3d:7b:7a:86: b2:31:1e:72:ee:78:1e:78:1f:e7:74:9b:75:f1:5b: c3:1b:26:33:85:34:f9:92:b4:ff:c5:d2:d8:06:b6: 21:f1:76:fd:14:8a:d6:bc:06:2c:fd:91:28:20:cb: 5c:75:c9:23:6e:96:0f:91:11:e1:ec:39:02:42:01: 97:33:e5:12:b4:69:a4:b1:c5:03:f5:3e:89:4f:09: f1:30:a0:4b:69:93:38:cf:c8:9c:64:78:bc:e3:0c: 77:ae:51:03:79:ba:f3:b1:f5:05:15:17:b3:27:7d: 05:e9:f7:be:05:f7:05:72:b0:3b:fc:bb:de:1b:12: 8d:2e:f7:ec:df:99:d4:17:11:4f:b2:6a:e3:72:ee: a9:b3:2c:06:14:cb:64:e1:c0:05:ff:1e:64:0f:71: a1:6a:16:cc:bb:04:17:35:2e:3c:ba:a9:54:47:dc: c8:41:32:6a:12:67:6d:2d:b7:84:5e:0e:fb:4c:79: 3a:4d:25:8b:9f:8a:bb:e3:9d:a1:32:7a:d0:84:46: 6f:4a:94:78:f3:2d:6b:c9:46:d0:a1:a9:66:4f:e1: 50:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CE:C9:15:E6:2F:E8:45:3B:6D:A2:43:B9:C9:72:9A:3E:DA:3B:76 X509v3 Authority Key Identifier: keyid:0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/2M7JFeYv6EU7baJDuclymj7aO3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.107.0.0/18 95.128.240.0/21 185.33.244.0/24 185.33.246.0/24 Signature Algorithm: sha256WithRSAEncryption 47:3d:a5:fd:5c:35:48:51:7d:71:38:08:f8:13:b8:b8:f3:b7: f3:be:44:6c:b7:80:97:91:f2:b4:7e:96:95:d4:66:00:63:8a: ef:b8:34:65:5b:63:c5:52:76:77:b2:35:51:aa:01:59:c1:97: 86:30:ae:18:6f:15:89:19:af:86:c1:ac:3b:9e:2b:5e:9e:94: 6b:3f:85:ba:1a:e7:cd:b4:aa:fb:46:e8:5c:7c:7f:00:f8:5b: de:af:3a:6c:05:f3:00:9f:8b:c4:f4:50:ad:7d:5a:66:8b:a0: 7d:27:ed:cd:6b:f8:fb:c2:98:5a:79:2a:b8:a7:cc:af:6d:2b: 79:a7:24:40:83:23:0b:ec:ca:19:02:a4:9b:e2:4d:d1:39:42: 31:8b:a2:4f:88:6f:94:d5:1a:f0:62:2a:bd:d4:56:9f:8f:a8: 0a:76:48:aa:0c:d1:d1:e4:63:ed:56:80:dc:02:1c:90:c1:7c: 3d:28:ef:8d:e3:85:00:20:89:1f:a4:e4:45:af:44:01:ef:8f: 89:5d:f0:c1:db:66:b2:65:2e:67:d8:85:5f:e0:d4:90:9d:e1: de:42:fd:94:63:c4:91:dd:97:3c:4c:20:73:55:7b:da:e6:3d: e9:76:f0:26:6a:eb:67:c4:7b:67:66:b7:39:e1:8c:1e:01:10: ad:7f:d1:9a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+puHy5TEl6eib4LiV6LXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiY2JmNzQ4ZTlmNDk5ODY4NWQwYzk2NWQyZGZkZjBmMzYy YTUwNTIwHhcNMjYwMTAyMTIyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGNlYzkxNWU2MmZlODQ1M2I2ZGEyNDNiOWM5NzI5YTNlZGEzYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM7Il/wwitjcQw3avWdRdn8qfTJP 72gBrDW3ZnOqbBboTvmSU8ZEJj17eoayMR5y7ngeeB/ndJt18VvDGyYzhTT5krT/ xdLYBrYh8Xb9FIrWvAYs/ZEoIMtcdckjbpYPkRHh7DkCQgGXM+UStGmkscUD9T6J TwnxMKBLaZM4z8icZHi84wx3rlEDebrzsfUFFRezJ30F6fe+BfcFcrA7/LveGxKN Lvfs35nUFxFPsmrjcu6psywGFMtk4cAF/x5kD3GhahbMuwQXNS48uqlUR9zIQTJq EmdtLbeEXg77THk6TSWLn4q7452hMnrQhEZvSpR48y1ryUbQoalmT+FQaQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNjOyRXmL+hFO22iQ7nJcpo+2jt2MB8GA1UdIwQY MBaAFAvL90jp9JmGhdDJZdLf3w82KlBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEt N2Y5NmM5ZjA1ZjU0LzEvMk03SkZlWXY2RVU3YmFKRHVjbHltajdhTzNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEtN2Y5NmM5ZjA1ZjU0 LzEvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQGW2sAAwQD X4DwAwQAuSH0AwQAuSH2MA0GCSqGSIb3DQEBCwUAA4IBAQBHPaX9XDVIUX1xOAj4 E7i487fzvkRst4CXkfK0fpaV1GYAY4rvuDRlW2PFUnZ3sjVRqgFZwZeGMK4YbxWJ Ga+Gwaw7nitenpRrP4W6GufNtKr7RuhcfH8A+FverzpsBfMAn4vE9FCtfVpmi6B9 J+3Na/j7wphaeSq4p8yvbSt5pyRAgyML7MoZAqSb4k3ROUIxi6JPiG+U1RrwYiq9 1Fafj6gKdkiqDNHR5GPtVoDcAhyQwXw9KO+N44UAIIkfpORFr0QB74+JXfDB22ay ZS5n2IVf4NSQneHeQv2UY8SR3Zc8TCBzVXva5j3pdvAmautnxHtnZrc54YweARCt f9Ga -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:35 2026 by rpki-client