This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/02DR5VqiImR1ELzoMhmN2MgdJEw.roa File: 02DR5VqiImR1ELzoMhmN2MgdJEw.roa (raw, json) Hash identifier: A46KCkLXFpYgdMenUrWnd1pDGxM359G65Rk9wVjYrCI= Subject key identifier: D3:60:D1:E5:5A:A2:22:64:75:10:BC:E8:32:19:8D:D8:C8:1D:24:4C Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019B7910317BAA9CD7B6F76C340786FFD801 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/02DR5VqiImR1ELzoMhmN2MgdJEw.roa Signing time: Thu 01 Jan 2026 10:17:42 +0000 ROA not before: Thu 01 Jan 2026 10:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 80.246.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:31:7b:aa:9c:d7:b6:f7:6c:34:07:86:ff:d8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Jan 1 10:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d360d1e55aa222647510bce832198dd8c81d244c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:38:4b:27:1e:f7:f0:6e:2f:b6:51:ac:d1:c4: 76:10:bf:8f:fc:82:b9:d9:e1:74:eb:f3:56:b9:2c: a2:05:c1:04:e8:41:86:27:f7:a7:4b:ce:d9:2e:ca: 0b:77:b8:55:eb:98:f0:96:16:e8:33:71:50:fc:99: f7:b4:7e:67:28:0e:63:a4:c1:06:dc:a0:77:93:4a: 0c:5d:2c:47:8d:f5:93:47:05:c4:ad:cc:9b:b1:c0: 11:e6:f7:d3:d6:38:3b:94:08:a1:31:d8:a7:4d:04: 02:f2:f3:d7:d2:25:cd:c9:e9:68:5b:32:29:64:f4: 24:8d:70:39:21:a3:2a:ef:04:78:f1:cd:b3:77:93: 71:b9:3a:88:56:c5:7c:a8:15:21:09:e0:a1:9f:36: f2:46:e9:30:fa:16:47:4b:a9:46:c5:70:3d:a9:73: d3:98:f0:af:86:e0:51:a3:1a:40:7d:bc:3e:04:38: bf:56:0e:bc:a3:00:37:4b:e7:41:09:0c:73:54:29: cc:ba:51:0c:61:f1:88:ac:d0:13:22:96:8f:6f:03: cc:30:87:7a:aa:b1:d9:e3:57:33:cf:eb:48:0d:44: b5:25:cf:a1:00:e0:ce:35:b1:e8:51:3a:71:0f:bf: 4e:a4:af:c6:46:7d:12:2b:d4:bd:d4:7e:7c:9e:1d: eb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:60:D1:E5:5A:A2:22:64:75:10:BC:E8:32:19:8D:D8:C8:1D:24:4C X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/02DR5VqiImR1ELzoMhmN2MgdJEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.246.230.0/24 Signature Algorithm: sha256WithRSAEncryption 95:64:3f:b7:d5:71:a6:5c:4a:b0:cb:9b:3a:d0:89:5d:43:76: cb:2b:79:8d:f4:78:82:0d:eb:49:b0:ac:eb:94:8d:63:c3:82: 27:8b:34:25:b3:e4:69:39:c7:73:8a:f4:0b:48:61:a5:ab:ad: 0c:cd:9a:10:6f:2a:66:60:d9:89:5c:65:14:53:84:d0:65:04: 7e:98:1d:37:c6:6a:e0:ba:0c:62:53:7d:1a:e9:8d:5d:53:07: 09:8e:4c:ac:7c:f5:77:ba:13:d3:48:05:32:da:c9:61:a6:02: a4:5a:a2:5c:05:58:a7:33:59:26:ac:80:27:93:78:9e:9c:43: 38:09:0c:3b:e6:0d:ed:ad:87:79:68:94:71:a6:e7:9f:45:ba: f8:cb:d9:90:09:ea:d4:5d:54:60:a1:db:05:88:b9:6e:bc:d8: 6b:50:10:54:f9:c9:ec:09:1c:f0:75:b5:f6:db:37:73:d4:41: 35:06:5a:f4:4f:5a:8e:8a:bc:c6:fb:e6:11:ce:3f:0b:3f:7a: ed:78:7a:93:50:bb:11:d8:5b:9c:59:10:d4:6c:e1:6e:8d:08: d2:d0:0c:6c:25:81:a6:c1:3b:57:13:b4:1a:ec:7f:0c:e7:14: 2b:4d:f5:fc:2e:14:f2:7b:76:61:56:82:26:35:2b:86:c0:3a: a4:b2:96:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDF7qpzXtvdsNAeG/9gBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjYwMTAxMTAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzYwZDFlNTVhYTIyMjY0NzUxMGJjZTgzMjE5OGRkOGM4MWQyNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApThLJx738G4vtlGs0cR2EL+P/IK5 2eF06/NWuSyiBcEE6EGGJ/enS87ZLsoLd7hV65jwlhboM3FQ/Jn3tH5nKA5jpMEG 3KB3k0oMXSxHjfWTRwXErcybscAR5vfT1jg7lAihMdinTQQC8vPX0iXNyeloWzIp ZPQkjXA5IaMq7wR48c2zd5NxuTqIVsV8qBUhCeChnzbyRukw+hZHS6lGxXA9qXPT mPCvhuBRoxpAfbw+BDi/Vg68owA3S+dBCQxzVCnMulEMYfGIrNATIpaPbwPMMId6 qrHZ41czz+tIDUS1Jc+hAODONbHoUTpxD79OpK/GRn0SK9S91H58nh3rkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNNg0eVaoiJkdRC86DIZjdjIHSRMMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMDJEUjVWcWlJbVIxRUx6b01obU4yTWdkSkV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPbmMA0G CSqGSIb3DQEBCwUAA4IBAQCVZD+31XGmXEqwy5s60IldQ3bLK3mN9HiCDetJsKzr lI1jw4InizQls+RpOcdzivQLSGGlq60MzZoQbypmYNmJXGUUU4TQZQR+mB03xmrg ugxiU30a6Y1dUwcJjkysfPV3uhPTSAUy2slhpgKkWqJcBVinM1kmrIAnk3ienEM4 CQw75g3trYd5aJRxpuefRbr4y9mQCerUXVRgodsFiLluvNhrUBBU+cnsCRzwdbX2 2zdz1EE1Blr0T1qOirzG++YRzj8LP3rteHqTULsR2FucWRDUbOFujQjS0AxsJYGm wTtXE7Qa7H8M5xQrTfX8LhTye3ZhVoImNSuGwDqkspax -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:49 2026 by rpki-client