This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/t2IZILmIlkrYmXptt2wUGw2uQwM.roa File: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (raw, json) Hash identifier: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw= Subject key identifier: B7:62:19:20:B9:88:96:4A:D8:99:7A:6D:B7:6C:14:1B:0D:AE:43:03 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B79ED69826D4A1D54587DB8190B3A9EC1 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/t2IZILmIlkrYmXptt2wUGw2uQwM.roa Signing time: Thu 01 Jan 2026 14:19:20 +0000 ROA not before: Thu 01 Jan 2026 14:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 87.248.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:69:82:6d:4a:1d:54:58:7d:b8:19:0b:3a:9e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 1 14:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7621920b988964ad8997a6db76c141b0dae4303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:7a:34:da:0f:dd:51:de:bb:93:7b:5a:e3: 42:3e:2d:f8:57:e0:1f:c7:5c:9e:67:df:b1:7a:d8: 2a:64:89:e2:cd:da:86:df:57:37:07:cf:84:48:01: 3a:c8:b6:5c:63:73:d6:1b:50:93:5e:89:ff:8f:7d: e2:c9:d5:a2:2e:0a:6b:06:9d:54:45:d1:d3:5a:ea: a3:81:a0:ac:be:9a:6e:5c:5d:03:87:24:24:f3:80: 13:a4:47:17:39:dd:6c:d2:b2:14:f6:9f:7e:58:04: fe:ea:b1:d0:d4:6d:b4:a8:75:f7:4c:bf:53:28:b6: 21:89:c6:a2:0f:73:3d:24:28:af:53:fd:16:27:17: 7c:cc:1d:17:89:ad:63:f9:db:20:85:5d:5b:87:02: 59:53:9b:03:ca:30:f0:57:7b:f2:84:4d:df:a8:2a: 5f:29:18:61:44:60:ef:69:b7:78:fb:a2:33:60:29: 27:7a:c8:a7:3e:f1:9d:1b:a2:6c:c0:37:11:5c:84: e0:0e:ee:d1:de:b9:7d:d9:f7:ec:a1:f3:be:76:e4: a1:24:55:2e:4a:b9:5e:8a:58:d4:49:aa:65:51:d3: 4c:5c:24:83:6d:22:49:24:c6:f5:1f:18:85:a2:e1: b1:dd:6a:c8:b9:fc:45:9d:b6:e0:de:b1:03:16:02: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:62:19:20:B9:88:96:4A:D8:99:7A:6D:B7:6C:14:1B:0D:AE:43:03 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/t2IZILmIlkrYmXptt2wUGw2uQwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.158.0/24 Signature Algorithm: sha256WithRSAEncryption 68:6e:8e:45:fe:82:5e:75:a3:b7:a9:30:7f:89:ea:2b:5c:dc: 78:b0:9c:d7:05:9f:83:50:d2:28:37:96:b6:2e:70:b3:0d:3d: 73:f6:bf:4d:9c:88:5c:70:20:1b:6d:31:8b:bd:4c:d2:8e:6c: 95:04:0f:a2:bb:4a:30:81:87:ba:7d:c0:68:17:09:32:5d:7a: 42:a3:b3:92:9c:2f:c3:cd:60:b8:bb:d6:b1:c4:cd:db:e3:71: 78:fb:41:50:8f:a4:b7:08:d7:ac:1b:fb:19:f4:9a:6d:4d:5a: 72:66:eb:51:e5:e1:a0:98:d3:c8:87:e7:61:15:c8:df:d6:01: ca:f7:9a:69:1e:05:09:9e:a3:c9:36:5c:66:7c:f3:ce:9b:63: 87:a2:50:52:8e:84:37:7e:1f:45:8e:87:93:9f:db:25:0b:cf: 3a:bf:d2:8f:1a:d1:57:7a:14:bb:55:99:a3:f4:e5:8e:a1:b4: 69:42:56:ff:6c:70:8e:06:5d:39:5f:1c:e8:af:b5:00:0d:5a: f4:db:80:27:24:f3:90:9f:c9:2c:a8:3d:11:fa:ca:14:00:15: 81:b3:b9:73:3e:1c:f7:46:fb:80:7d:a9:a3:1d:6d:ea:37:75: 57:43:61:f9:84:46:41:b3:c2:26:ba:ac:f5:ea:8a:97:76:1d: 48:3b:c2:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WmCbUodVFh9uBkLOp7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTAxMTQxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzYyMTkyMGI5ODg5NjRhZDg5OTdhNmRiNzZjMTQxYjBkYWU0MzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA16NNoP3VHeu5N7WuNCPi34V+Af x1yeZ9+xetgqZInizdqG31c3B8+ESAE6yLZcY3PWG1CTXon/j33iydWiLgprBp1U RdHTWuqjgaCsvppuXF0DhyQk84ATpEcXOd1s0rIU9p9+WAT+6rHQ1G20qHX3TL9T KLYhicaiD3M9JCivU/0WJxd8zB0Xia1j+dsghV1bhwJZU5sDyjDwV3vyhE3fqCpf KRhhRGDvabd4+6IzYCknesinPvGdG6JswDcRXITgDu7R3rl92ffsofO+duShJFUu SrleiljUSaplUdNMXCSDbSJJJMb1HxiFouGx3WrIufxFnbbg3rEDFgKtywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdiGSC5iJZK2Jl6bbdsFBsNrkMDMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvdDJJWklMbUlsa3JZbVhwdHQyd1VHdzJ1UXdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/ieMA0G CSqGSIb3DQEBCwUAA4IBAQBobo5F/oJedaO3qTB/ieorXNx4sJzXBZ+DUNIoN5a2 LnCzDT1z9r9NnIhccCAbbTGLvUzSjmyVBA+iu0owgYe6fcBoFwkyXXpCo7OSnC/D zWC4u9axxM3b43F4+0FQj6S3CNesG/sZ9JptTVpyZutR5eGgmNPIh+dhFcjf1gHK 95ppHgUJnqPJNlxmfPPOm2OHolBSjoQ3fh9FjoeTn9slC886v9KPGtFXehS7VZmj 9OWOobRpQlb/bHCOBl05Xxzor7UADVr024AnJPOQn8ksqD0R+soUABWBs7lzPhz3 RvuAfamjHW3qN3VXQ2H5hEZBs8Imuqz16oqXdh1IO8KF -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:33 2026 by rpki-client