This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa File: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (raw, json) Hash identifier: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54= Subject key identifier: DA:57:E7:98:DD:7E:74:B6:47:D3:DB:E6:41:62:F4:C7:F2:8B:73:C6 Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61 Certificate serial: 019B791081BA68A2B84ADDC8DB180E7BB6BB Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207398 IP address blocks: 185.16.83.0/24 maxlen: 24 2a10:3500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:81:ba:68:a2:b8:4a:dd:c8:db:18:0e:7b:b6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61 Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da57e798dd7e74b647d3dbe64162f4c7f28b73c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:94:87:05:65:88:0d:96:b9:ab:b1:71:c3: 13:63:36:a8:84:07:89:00:7e:54:bb:0a:9b:c4:25: 90:bf:7f:ba:6a:12:3a:62:b3:79:a8:f6:8d:3d:6e: 46:3a:2d:b7:08:59:23:90:3e:dd:a6:aa:8a:f3:e2: 55:56:e8:e3:1e:1d:7f:a0:0a:e6:6a:d5:4e:ae:e2: 8b:34:ec:8c:24:62:55:bc:81:65:56:ea:74:61:47: ae:ad:10:22:cc:a1:1f:4c:88:6a:63:70:d8:d4:12: 4f:f0:c4:10:c3:43:a3:3b:0f:f7:52:7c:9a:39:e7: 93:72:a1:5f:31:06:f0:24:86:c3:97:ce:59:53:64: 12:b7:e0:6b:44:cf:c0:e0:62:15:80:20:f2:a0:65: 8f:db:af:f6:82:c4:fe:3b:97:ea:5f:69:05:59:59: 84:11:bc:67:e7:f9:6c:68:66:8f:fc:86:f2:82:a9: 57:fe:34:89:f2:91:60:a5:96:db:93:ba:2c:ec:64: bb:32:51:ac:ad:af:59:39:e0:c3:18:0a:53:8f:2e: aa:a7:07:15:7b:d3:4e:50:65:fb:ca:23:4a:cc:9b: 5f:05:99:54:bb:29:8b:4f:77:6f:f2:5b:13:22:86: 42:08:f6:10:bd:1d:bb:e2:45:7c:34:bc:6d:d8:5c: 81:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:57:E7:98:DD:7E:74:B6:47:D3:DB:E6:41:62:F4:C7:F2:8B:73:C6 X509v3 Authority Key Identifier: keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.16.83.0/24 IPv6: 2a10:3500::/32 Signature Algorithm: sha256WithRSAEncryption 1f:19:ac:c0:55:43:d5:ca:c9:dc:f3:cf:62:e8:1d:92:20:7b: 7d:c0:54:88:ff:8e:9d:b3:ac:be:55:bf:9e:71:7f:8c:8e:05: 89:a1:76:65:3c:2c:b7:77:29:01:65:f9:21:d5:54:d6:ce:74: ba:57:2a:5f:07:0d:cb:d1:c5:50:9b:73:f7:b7:11:ee:e3:41: 68:1b:82:57:6f:63:24:f0:e3:6f:71:bf:87:ea:88:b7:37:dc: 7f:31:3f:d8:27:85:ec:41:0c:fe:52:e9:e9:6a:c1:ff:35:0f: 4e:88:b1:56:3e:d4:60:0e:47:fb:19:c1:ed:ff:59:9a:63:15: ec:e1:98:45:a2:3d:ed:f2:4c:df:be:fe:ae:8d:df:d2:21:ec: cb:f3:52:f6:83:a9:0a:ce:f8:49:34:37:64:99:e3:a1:34:06: 03:29:f9:66:4e:da:10:3b:e9:54:26:84:f2:55:79:ce:73:14: 2e:75:c6:ec:d5:6a:fc:04:17:f3:92:88:75:f5:0d:70:c6:96: 27:96:b9:1d:25:91:cf:47:19:e5:9c:59:09:96:d2:bb:0e:87: 1a:67:1b:b1:8b:1d:0d:92:b2:e1:59:73:8f:02:c8:7e:6a:6c: 7d:e1:bf:cb:df:56:93:65:12:bf:44:8c:e4:bc:d2:d7:1a:4c: c4:71:2e:5a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EIG6aKK4St3I2xgOe7a7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzkwMWM0MzBhZTM5ZmNiMDViZWI1YjM0MjY3ZjUyMjRm MDRmNjEwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTU3ZTc5OGRkN2U3NGI2NDdkM2RiZTY0MTYyZjRjN2YyOGI3M2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpWUhwVliA2WuauxccMTYzaohAeJ AH5UuwqbxCWQv3+6ahI6YrN5qPaNPW5GOi23CFkjkD7dpqqK8+JVVujjHh1/oArm atVOruKLNOyMJGJVvIFlVup0YUeurRAizKEfTIhqY3DY1BJP8MQQw0OjOw/3Unya OeeTcqFfMQbwJIbDl85ZU2QSt+BrRM/A4GIVgCDyoGWP26/2gsT+O5fqX2kFWVmE Ebxn5/lsaGaP/IbygqlX/jSJ8pFgpZbbk7os7GS7MlGsra9ZOeDDGApTjy6qpwcV e9NOUGX7yiNKzJtfBZlUuymLT3dv8lsTIoZCCPYQvR274kV8NLxt2FyB7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNpX55jdfnS2R9Pb5kFi9Mfyi3PGMB8GA1UdIwQY MBaAFA15AcQwrjn8sFvrWzQmf1Ik8E9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUt MTcxZDlmMmNjZTNkLzEvMmxmbm1OMS1kTFpIMDl2bVFXTDB4X0tMYzhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUtMTcxZDlmMmNjZTNk LzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRBTMA0E AgACMAcDBQAqEDUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfGazAVUPVysnc889i6B2S IHt9wFSI/46ds6y+Vb+ecX+MjgWJoXZlPCy3dykBZfkh1VTWznS6VypfBw3L0cVQ m3P3txHu40FoG4JXb2Mk8ONvcb+H6oi3N9x/MT/YJ4XsQQz+UunpasH/NQ9OiLFW PtRgDkf7GcHt/1maYxXs4ZhFoj3t8kzfvv6ujd/SIezL81L2g6kKzvhJNDdkmeOh NAYDKflmTtoQO+lUJoTyVXnOcxQudcbs1Wr8BBfzkoh19Q1wxpYnlrkdJZHPRxnl nFkJltK7DocaZxuxix0NkrLhWXOPAsh+amx94b/L31aTZRK/RIzkvNLXGkzEcS5a -----END CERTIFICATE-----Generated at Sat Feb 7 18:57:29 2026 by rpki-client