This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/2TuFVb4q4iH1BTsSUPjnSeD29pc.roa File: 2TuFVb4q4iH1BTsSUPjnSeD29pc.roa (raw, json) Hash identifier: v7kaWU+42XGto4PM2/gidzpseNZZSa+WuikWviLH7ls= Subject key identifier: D9:3B:85:55:BE:2A:E2:21:F5:05:3B:12:50:F8:E7:49:E0:F6:F6:97 Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7 Certificate serial: 019B7834946F80E092BC4F420D32B0E29D1A Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/2TuFVb4q4iH1BTsSUPjnSeD29pc.roa Signing time: Thu 01 Jan 2026 06:17:50 +0000 ROA not before: Thu 01 Jan 2026 06:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 91.211.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:94:6f:80:e0:92:bc:4f:42:0d:32:b0:e2:9d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7 Validity Not Before: Jan 1 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d93b8555be2ae221f5053b1250f8e749e0f6f697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:24:3b:9f:fe:db:a8:0c:dd:a4:e1:5b:a2: cd:aa:12:01:52:37:f6:e6:be:f5:ad:30:1e:8d:9e: ff:a7:93:58:73:b8:4b:06:05:84:a5:28:8b:0a:62: 95:4c:88:e9:26:29:46:40:e9:32:02:60:51:60:48: da:f6:b6:63:9f:02:a5:49:3f:d9:e6:6e:7f:f2:07: 49:ce:de:ca:d7:96:47:0b:5f:cf:16:cf:74:25:fa: 02:ef:bb:d9:a3:41:58:a0:35:09:c4:47:24:0d:47: 58:f2:e2:59:a5:c9:24:06:e7:0c:76:62:c9:83:e7: ec:2f:f6:fc:e9:e2:f6:af:b2:61:a8:da:0a:6c:d1: 03:b9:12:55:cb:1f:5a:f0:9e:ea:a6:6a:ce:c7:45: 64:27:ca:09:b5:cd:9e:6e:76:92:32:05:76:cb:7e: a3:e2:49:1f:ff:f6:6f:2f:f2:61:9f:51:ad:4b:7a: 59:51:59:35:c3:c6:bb:2a:26:39:42:ab:0c:cc:01: b7:96:ff:bc:5b:41:6c:32:8b:59:32:a5:58:4c:83: 2f:a3:e5:dc:ae:19:9a:3a:31:9e:f8:df:83:4b:f2: 6e:5f:46:ef:fe:15:b8:3c:0f:46:69:86:11:dd:e4: b7:81:bc:06:51:46:fe:80:50:9b:45:91:a0:a9:ff: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3B:85:55:BE:2A:E2:21:F5:05:3B:12:50:F8:E7:49:E0:F6:F6:97 X509v3 Authority Key Identifier: keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/2TuFVb4q4iH1BTsSUPjnSeD29pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.12.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:c2:b2:85:b2:a2:07:b9:36:92:88:3c:de:65:cd:b1:27:90: 46:70:a9:58:ef:95:a5:a3:09:e2:5a:ad:20:98:65:e5:05:41: 8b:33:23:c2:47:1e:fb:f3:d1:57:0c:28:7f:75:84:bb:0d:1f: a9:5f:6f:de:eb:93:c1:43:86:79:db:b6:74:4a:7b:64:b9:7a: 2d:19:0f:61:7d:35:fd:5e:ba:bf:2c:2a:3a:dd:4e:a6:b5:2e: dc:ea:d6:aa:6c:f8:97:b3:9a:5d:bd:fa:c5:94:6c:a2:79:dc: e7:2c:9f:93:b0:fd:3a:cb:c0:51:17:2b:a5:4b:83:3b:42:1f: 90:25:36:8e:35:b9:80:97:1e:1e:99:47:16:8b:b1:9c:f9:f1: 39:da:6e:0b:0a:9a:87:7c:9d:85:11:a3:12:4d:34:26:e8:b0: b6:ae:3f:97:ca:0c:ee:c3:da:ec:2d:67:a9:9c:fa:2d:3f:42: f3:04:e0:30:cd:6b:6e:6c:81:a8:95:16:6e:fe:65:e3:06:08: 78:6c:37:3c:4d:1a:e3:fa:c3:dd:e2:84:8e:82:a7:92:7a:1a: dd:9f:2b:c0:9a:88:23:13:10:4f:be:b1:9d:88:4a:4d:b9:7e: 1b:6b:c8:b1:57:e0:a9:16:72:c3:5f:9c:dd:34:00:5c:a5:c4: 12:d7:56:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJRvgOCSvE9CDTKw4p0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzQxYzA1ZDRhZDdlZDY5MGU1NzFlZjVlZDBmODc1MjJk YTQ3ZDcwHhcNMjYwMTAxMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTNiODU1NWJlMmFlMjIxZjUwNTNiMTI1MGY4ZTc0OWUwZjZmNjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorUkO5/+26gM3aThW6LNqhIBUjf2 5r71rTAejZ7/p5NYc7hLBgWEpSiLCmKVTIjpJilGQOkyAmBRYEja9rZjnwKlST/Z 5m5/8gdJzt7K15ZHC1/PFs90JfoC77vZo0FYoDUJxEckDUdY8uJZpckkBucMdmLJ g+fsL/b86eL2r7JhqNoKbNEDuRJVyx9a8J7qpmrOx0VkJ8oJtc2ebnaSMgV2y36j 4kkf//ZvL/Jhn1GtS3pZUVk1w8a7KiY5QqsMzAG3lv+8W0FsMotZMqVYTIMvo+Xc rhmaOjGe+N+DS/JuX0bv/hW4PA9GaYYR3eS3gbwGUUb+gFCbRZGgqf97fwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNk7hVW+KuIh9QU7ElD450ng9vaXMB8GA1UdIwQY MBaAFEF0HAXUrX7WkOVx717Q+HUi2kfXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMt NDEwMzIyYzcwMmZmLzEvMlR1RlZiNHE0aUgxQlRzU1VQam5TZUQyOXBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMtNDEwMzIyYzcwMmZm LzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9MMMA0G CSqGSIb3DQEBCwUAA4IBAQA8wrKFsqIHuTaSiDzeZc2xJ5BGcKlY75WlowniWq0g mGXlBUGLMyPCRx7789FXDCh/dYS7DR+pX2/e65PBQ4Z527Z0SntkuXotGQ9hfTX9 Xrq/LCo63U6mtS7c6taqbPiXs5pdvfrFlGyiedznLJ+TsP06y8BRFyulS4M7Qh+Q JTaONbmAlx4emUcWi7Gc+fE52m4LCpqHfJ2FEaMSTTQm6LC2rj+Xygzuw9rsLWep nPotP0LzBOAwzWtubIGolRZu/mXjBgh4bDc8TRrj+sPd4oSOgqeSehrdnyvAmogj ExBPvrGdiEpNuX4ba8ixV+CpFnLDX5zdNABcpcQS11Ze -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:53 2026 by rpki-client