This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/2vg_kV-IwRmAxn8B26cLW4LkU0w.roa File: 2vg_kV-IwRmAxn8B26cLW4LkU0w.roa (raw, json) Hash identifier: VDT6JmSN6c2xivEG5k5KapTeu18e10k6mZCk7l+NGZg= Subject key identifier: DA:F8:3F:91:5F:88:C1:19:80:C6:7F:01:DB:A7:0B:5B:82:E4:53:4C Certificate issuer: /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1 Certificate serial: 019B7C125EE70A16BC0648D6EF9F0543139F Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/2vg_kV-IwRmAxn8B26cLW4LkU0w.roa Signing time: Fri 02 Jan 2026 00:18:57 +0000 ROA not before: Fri 02 Jan 2026 00:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203649 IP address blocks: 185.128.56.0/24 maxlen: 24 185.128.57.0/24 maxlen: 24 185.128.58.0/24 maxlen: 24 185.128.59.0/24 maxlen: 24 2a06:f480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5e:e7:0a:16:bc:06:48:d6:ef:9f:05:43:13:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1 Validity Not Before: Jan 2 00:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daf83f915f88c11980c67f01dba70b5b82e4534c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c4:71:ab:d6:ab:03:60:28:05:ce:95:63:0c: 18:46:9d:5d:84:41:20:f4:8d:11:89:60:07:d3:99: 4a:fb:56:a4:80:24:fd:bb:44:2a:52:80:f7:9d:d5: 70:5c:de:68:cc:c1:8c:3e:a3:f9:ee:bc:a8:83:6e: 98:c6:85:c6:83:e3:b3:54:a1:48:83:82:b5:df:da: 8a:d9:22:35:ab:3b:c4:ef:41:91:ef:65:0b:0a:a8: 5c:21:3a:5b:1e:96:54:de:59:4e:a1:2a:e0:52:e4: 60:99:85:a2:00:c7:fe:3c:10:9a:1b:40:64:d8:ee: 72:0e:29:27:78:51:6b:5d:fc:b1:f1:da:c6:c7:9f: 73:d7:2c:e4:0c:c0:1d:78:f1:01:49:8a:36:ad:b4: 1c:d0:b7:83:73:c3:9d:fd:a2:0c:7d:e9:05:02:bb: 6b:15:d2:f9:88:22:a2:9d:0b:b6:7e:50:75:54:47: 4f:12:c9:30:97:d0:d2:c0:15:8a:a0:fe:7a:5c:e2: 70:d5:e6:1d:0a:18:b1:db:3d:ef:cd:f3:4b:db:a3: 00:89:7e:b0:79:03:3d:d7:dd:3c:cb:93:7e:1a:d8: 40:0e:5c:56:12:09:c7:40:6f:6a:80:70:f3:b7:98: a1:31:1d:13:3c:ea:3a:48:5b:f2:dd:dd:d6:c9:15: 2d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F8:3F:91:5F:88:C1:19:80:C6:7F:01:DB:A7:0B:5B:82:E4:53:4C X509v3 Authority Key Identifier: keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/2vg_kV-IwRmAxn8B26cLW4LkU0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.56.0/22 IPv6: 2a06:f480::/29 Signature Algorithm: sha256WithRSAEncryption 86:fc:f6:c3:f2:d4:a8:f3:b0:37:83:91:67:ba:cf:a7:8c:f5: ff:40:b7:54:f0:31:35:7d:26:01:93:c4:67:28:08:5e:58:67: c1:af:ca:4e:47:4f:28:f8:b9:ed:1e:2c:90:7d:6e:8c:28:d2: 3d:60:73:84:18:d0:f3:22:94:74:8c:46:dc:23:76:64:7e:5f: 41:72:a1:cf:94:c5:fe:b8:13:81:a6:1e:07:27:1e:71:3e:00: 17:69:07:1a:35:70:6b:96:91:d8:84:29:7c:be:d5:60:5b:a1: b2:f9:43:73:d8:98:36:ce:0b:4f:e7:10:ff:33:12:55:1c:7a: ef:db:f2:5a:5d:8a:34:2c:3d:ff:2e:83:b0:ff:05:ca:c7:3a: f3:fe:c9:f1:61:b0:cc:1c:3b:de:7d:f7:53:ec:44:2a:77:d2: d1:88:8d:fb:80:cd:b6:02:e7:96:a0:fd:cf:d1:4e:7f:24:4b: a1:0e:b8:6b:b7:c2:07:4c:9b:5d:b4:8c:3f:f7:8d:03:52:90: 61:83:95:b1:24:d3:fd:52:c6:54:93:8a:e6:d0:56:ca:30:07: 9d:cd:04:7f:95:6d:72:ce:a6:82:3b:b4:fb:5c:cf:1c:9a:8e: ea:46:72:46:ce:d7:6c:23:e7:de:c0:2e:b5:9a:87:98:9c:f4: 38:51:74:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8El7nCha8BkjW758FQxOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODM4ZDFmM2IyMzFiZjcyZTQ1M2RkNzhjNGI1MGFjMDA5 ZmY3ZjEwHhcNMjYwMTAyMDAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWY4M2Y5MTVmODhjMTE5ODBjNjdmMDFkYmE3MGI1YjgyZTQ1MzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MRxq9arA2AoBc6VYwwYRp1dhEEg 9I0RiWAH05lK+1akgCT9u0QqUoD3ndVwXN5ozMGMPqP57ryog26YxoXGg+OzVKFI g4K139qK2SI1qzvE70GR72ULCqhcITpbHpZU3llOoSrgUuRgmYWiAMf+PBCaG0Bk 2O5yDikneFFrXfyx8drGx59z1yzkDMAdePEBSYo2rbQc0LeDc8Od/aIMfekFArtr FdL5iCKinQu2flB1VEdPEskwl9DSwBWKoP56XOJw1eYdChix2z3vzfNL26MAiX6w eQM91908y5N+GthADlxWEgnHQG9qgHDzt5ihMR0TPOo6SFvy3d3WyRUtaQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNr4P5FfiMEZgMZ/AdunC1uC5FNMMB8GA1UdIwQY MBaAFMKDjR87Ixv3LkU914xLUKwAn/fxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29PTkh6c2pHX2N1UlQzWGpFdFFyQUNmOV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zNjY3NDYtYzMwNi00MDhhLWJhN2Ut MmIzYzY0ZjlmOWFiLzEvMnZnX2tWLUl3Um1BeG44QjI2Y0xXNExrVTB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zNjY3NDYtYzMwNi00MDhhLWJhN2UtMmIzYzY0ZjlmOWFi LzEvd29PTkh6c2pHX2N1UlQzWGpFdFFyQUNmOV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYA4MA0E AgACMAcDBQMqBvSAMA0GCSqGSIb3DQEBCwUAA4IBAQCG/PbD8tSo87A3g5Fnus+n jPX/QLdU8DE1fSYBk8RnKAheWGfBr8pOR08o+LntHiyQfW6MKNI9YHOEGNDzIpR0 jEbcI3Zkfl9BcqHPlMX+uBOBph4HJx5xPgAXaQcaNXBrlpHYhCl8vtVgW6Gy+UNz 2Jg2zgtP5xD/MxJVHHrv2/JaXYo0LD3/LoOw/wXKxzrz/snxYbDMHDveffdT7EQq d9LRiI37gM22AueWoP3P0U5/JEuhDrhrt8IHTJtdtIw/940DUpBhg5WxJNP9UsZU k4rm0FbKMAedzQR/lW1yzqaCO7T7XM8cmo7qRnJGztdsI+fewC61moeYnPQ4UXSR -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:58 2026 by rpki-client