This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2hrrp33juThLsFn9KGZugsNIsQg.roa File: 2hrrp33juThLsFn9KGZugsNIsQg.roa (raw, json) Hash identifier: phlE+B+l0P7dgC7tn7jBIGtW6ON8i3idX7sJZpOOTPI= Subject key identifier: DA:1A:EB:A7:7D:E3:B9:38:4B:B0:59:FD:28:66:6E:82:C3:48:B1:08 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAC81FB6AD3D5EDAFE5A9CF3B2CB64 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2hrrp33juThLsFn9KGZugsNIsQg.roa Signing time: Thu 01 Jan 2026 00:17:36 +0000 ROA not before: Thu 01 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152179 IP address blocks: 45.8.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c8:1f:b6:ad:3d:5e:da:fe:5a:9c:f3:b2:cb:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da1aeba77de3b9384bb059fd28666e82c348b108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:37:11:97:7f:97:49:a5:0f:38:af:9d:af: 85:04:54:58:88:f0:b0:c5:b8:1e:77:9e:a9:35:5e: 6b:04:04:54:b7:cf:18:e9:8c:8d:65:e6:5e:86:3e: 10:a9:8e:d4:ab:e5:2d:0f:e1:0b:49:09:b3:a2:d0: 37:b9:8b:2e:61:df:e9:fd:e5:b4:fe:cb:84:84:57: 14:25:e6:db:14:cd:b6:e4:72:f6:fa:dc:bf:0b:ca: 1d:45:9f:08:f3:6f:d1:1c:7e:ef:49:2c:49:98:cd: 22:83:2a:68:37:9d:e1:71:df:22:6d:51:1a:b9:b0: 1a:ce:a4:8f:8e:07:30:e6:4e:43:f0:a3:94:26:e7: 5d:2c:95:33:e4:82:6c:a5:e4:d2:31:21:b8:3a:82: 0a:d6:09:67:fa:d1:f3:73:14:23:01:93:9f:bc:71: ba:0b:55:fe:39:e3:ac:4e:86:e7:fe:51:c6:b4:b1: d1:9c:9f:dd:ea:bb:98:9d:7d:9d:26:a1:a8:de:5b: 4c:05:3a:45:1a:15:63:47:6e:7a:5a:e6:1c:73:b8: 16:62:ed:54:bf:b5:62:a3:a4:87:9c:5a:51:4f:5d: f6:b7:4f:17:fd:db:a7:08:93:c2:83:97:99:8a:e6: d4:c0:8d:21:1e:e9:c8:74:e5:d2:e8:2e:ef:90:6c: 8e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1A:EB:A7:7D:E3:B9:38:4B:B0:59:FD:28:66:6E:82:C3:48:B1:08 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2hrrp33juThLsFn9KGZugsNIsQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.191.0/24 Signature Algorithm: sha256WithRSAEncryption 66:be:57:a7:aa:d7:e4:8e:e6:25:ef:6e:72:98:4f:39:a6:b9: fe:70:37:a2:bc:4f:da:07:83:31:6b:67:d1:54:05:4b:94:6b: cd:e8:c8:5b:8c:e3:03:d4:45:37:74:1b:9b:2c:f9:97:8a:07: a3:89:70:bb:4d:47:ec:c7:45:15:bd:e3:c7:2e:2a:3d:76:70: 8c:7d:ac:2a:a8:12:b9:96:13:bc:37:cc:12:84:44:bd:75:bf: ac:5d:86:24:02:88:d1:e0:3b:74:27:1b:a7:af:69:46:f0:9c: 6b:ff:ba:7d:c6:83:a8:cb:b6:17:e0:01:49:52:11:d0:6e:fd: 3d:15:f2:ad:e1:7d:25:83:43:3e:a7:8f:f0:bd:73:39:e3:fd: a9:0a:e5:0b:fa:c7:41:c7:12:3e:4b:00:c4:65:cb:03:85:e7: 69:9d:c3:ca:d0:09:37:86:21:7e:08:a8:6c:e4:50:8b:f8:55: 73:e9:a2:11:df:97:51:27:af:74:7e:d6:e2:d4:13:e9:c1:8f: 3f:53:14:d2:72:a9:70:f2:26:37:29:bf:a5:5a:52:49:f6:c1: b6:78:8e:8b:08:9a:7b:be:2c:1a:dc:11:0f:24:d7:6e:c4:1f: 17:99:45:bb:3f:1c:de:d7:4b:89:8c:df:03:e5:09:7a:a1:a3: 48:69:c9:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26sgftq09Xtr+WpzzsstkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTFhZWJhNzdkZTNiOTM4NGJiMDU5ZmQyODY2NmU4MmMzNDhiMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth43EZd/l0mlDzivna+FBFRYiPCw xbged56pNV5rBARUt88Y6YyNZeZehj4QqY7Uq+UtD+ELSQmzotA3uYsuYd/p/eW0 /suEhFcUJebbFM225HL2+ty/C8odRZ8I82/RHH7vSSxJmM0igypoN53hcd8ibVEa ubAazqSPjgcw5k5D8KOUJuddLJUz5IJspeTSMSG4OoIK1gln+tHzcxQjAZOfvHG6 C1X+OeOsTobn/lHGtLHRnJ/d6ruYnX2dJqGo3ltMBTpFGhVjR256WuYcc7gWYu1U v7Vio6SHnFpRT132t08X/dunCJPCg5eZiubUwI0hHunIdOXS6C7vkGyOpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNoa66d947k4S7BZ/ShmboLDSLEIMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvMmhycnAzM2p1VGhMc0ZuOUtHWnVnc05Jc1FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQi/MA0G CSqGSIb3DQEBCwUAA4IBAQBmvlenqtfkjuYl725ymE85prn+cDeivE/aB4Mxa2fR VAVLlGvN6MhbjOMD1EU3dBubLPmXigejiXC7TUfsx0UVvePHLio9dnCMfawqqBK5 lhO8N8wShES9db+sXYYkAojR4Dt0Jxunr2lG8Jxr/7p9xoOoy7YX4AFJUhHQbv09 FfKt4X0lg0M+p4/wvXM54/2pCuUL+sdBxxI+SwDEZcsDhedpncPK0Ak3hiF+CKhs 5FCL+FVz6aIR35dRJ690ftbi1BPpwY8/UxTScqlw8iY3Kb+lWlJJ9sG2eI6LCJp7 viwa3BEPJNduxB8XmUW7Pxze10uJjN8D5Ql6oaNIacmg -----END CERTIFICATE-----Generated at Mon Jan 19 11:18:02 2026 by rpki-client