This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/38e1debnGbuUF3x2YWLVTadnl34.roa File: 38e1debnGbuUF3x2YWLVTadnl34.roa (raw, json) Hash identifier: o46Cv8Q4FIZO6x9+lAsM0sqzeRD81h3lSOBcRfeJ5CE= Subject key identifier: DF:C7:B5:75:E6:E7:19:BB:94:17:7C:76:61:62:D5:4D:A7:67:97:7E Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6 Certificate serial: 019B7EA7161BA01F3E49DF1561C9D963146B Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/38e1debnGbuUF3x2YWLVTadnl34.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59573 IP address blocks: 91.243.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:16:1b:a0:1f:3e:49:df:15:61:c9:d9:63:14:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6 Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfc7b575e6e719bb94177c766162d54da767977e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:95:82:a2:0e:28:22:c4:5a:b8:56:aa:c3:02: 6b:90:14:00:4d:65:fa:e9:83:95:2e:a3:2c:4b:0e: 49:9d:d5:84:14:a3:db:7c:47:20:14:ca:71:b8:48: a7:2e:49:e9:56:83:80:6b:3b:a8:41:db:63:19:a6: 0b:71:d7:23:f7:b8:9f:68:46:25:c2:fa:8f:58:73: 50:47:c6:39:6f:79:73:6d:3d:ec:21:e5:11:e1:b1: 80:e3:bc:e3:08:8e:f8:25:a2:e6:04:ad:ff:4e:2b: 12:40:17:2c:e3:0e:56:0e:20:1a:eb:53:27:c0:65: 44:66:0c:4b:21:84:52:3a:19:de:71:01:04:1e:6f: e0:65:5f:e8:63:fc:f5:b3:70:ad:32:4a:23:47:69: 71:4e:1d:0f:cc:0b:a8:d3:90:5a:82:24:8f:92:50: cc:a7:93:4d:91:cd:2d:7f:47:04:29:06:c3:bb:60: 83:5d:59:d1:26:07:8e:6b:9f:f6:44:51:bc:5e:7a: 00:01:dc:94:48:2d:85:0e:9d:ff:51:6b:0b:1b:02: 84:9d:4b:29:eb:05:df:6c:93:60:14:d9:5d:16:e2: a0:7b:2f:0c:d2:46:3d:ea:3e:91:9f:39:aa:b8:56: c8:fa:44:f2:cf:c3:52:bc:29:88:15:b4:b2:73:db: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C7:B5:75:E6:E7:19:BB:94:17:7C:76:61:62:D5:4D:A7:67:97:7E X509v3 Authority Key Identifier: keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/38e1debnGbuUF3x2YWLVTadnl34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.243.160.0/20 Signature Algorithm: sha256WithRSAEncryption bb:6b:eb:ea:17:4c:86:6d:4c:94:86:ab:5f:e7:30:12:2b:ac: 58:bf:f1:37:e5:03:1d:15:21:34:81:dc:ac:a0:6d:2a:5f:d6: 3f:04:ab:1c:b7:8a:74:2f:85:20:f8:98:a8:2b:ab:ec:77:9f: 24:df:22:8b:0c:f7:b9:df:0b:db:fd:7a:63:02:4a:ef:4c:54: 9a:97:92:b1:53:e0:10:67:30:3b:2c:48:0a:c9:0f:16:57:0d: dd:9a:54:ab:7c:40:ce:41:ab:4b:43:b7:3d:1b:b3:ef:a6:ba: cb:4c:59:34:8d:83:07:9b:c5:7f:50:d9:53:c2:a8:f8:ba:fb: 6d:39:94:af:e5:17:c2:3d:a6:3f:4a:37:48:4e:7f:b6:aa:8d: 6c:e0:70:cf:7c:8e:86:95:55:77:b2:7a:ff:45:19:89:65:18: 75:bc:09:c1:40:43:ba:16:e5:25:10:43:98:c5:eb:d6:5c:30: 97:2e:5e:11:31:c4:d2:8e:a1:0e:0d:21:2c:9c:26:61:76:ca: 69:ea:bf:1f:0e:35:ab:b8:6a:47:2f:36:9a:cb:65:92:84:ae: 42:c5:1a:80:21:fc:d1:84:49:59:b2:6d:bf:76:35:2a:0e:52: df:1a:3e:17:cf:3a:a6:5a:77:5e:78:90:e4:4d:b5:ab:59:86: 93:69:9e:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pxYboB8+Sd8VYcnZYxRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNjAwZDI5MWQ0ODIzODM1YWYxMDNhYWQzOWVkZTA1YmQx MmM5YjYwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmM3YjU3NWU2ZTcxOWJiOTQxNzdjNzY2MTYyZDU0ZGE3Njc5NzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pWCog4oIsRauFaqwwJrkBQATWX6 6YOVLqMsSw5JndWEFKPbfEcgFMpxuEinLknpVoOAazuoQdtjGaYLcdcj97ifaEYl wvqPWHNQR8Y5b3lzbT3sIeUR4bGA47zjCI74JaLmBK3/TisSQBcs4w5WDiAa61Mn wGVEZgxLIYRSOhnecQEEHm/gZV/oY/z1s3CtMkojR2lxTh0PzAuo05BagiSPklDM p5NNkc0tf0cEKQbDu2CDXVnRJgeOa5/2RFG8XnoAAdyUSC2FDp3/UWsLGwKEnUsp 6wXfbJNgFNldFuKgey8M0kY96j6RnzmquFbI+kTyz8NSvCmIFbSyc9tJpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/HtXXm5xm7lBd8dmFi1U2nZ5d+MB8GA1UdIwQY MBaAFC9gDSkdSCODWvEDqtOe3gW9Esm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJBTktSMUlJNE5hOFFPcTA1N2VCYjBTeWJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wNTRhNzEtODI1My00MDg5LWI5NjIt Y2JiZjc2ZjM1MzNhLzEvMzhlMWRlYm5HYnVVRjN4MllXTFZUYWRubDM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wNTRhNzEtODI1My00MDg5LWI5NjItY2JiZjc2ZjM1MzNh LzEvTDJBTktSMUlJNE5hOFFPcTA1N2VCYjBTeWJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEW/OgMA0G CSqGSIb3DQEBCwUAA4IBAQC7a+vqF0yGbUyUhqtf5zASK6xYv/E35QMdFSE0gdys oG0qX9Y/BKsct4p0L4Ug+JioK6vsd58k3yKLDPe53wvb/XpjAkrvTFSal5KxU+AQ ZzA7LEgKyQ8WVw3dmlSrfEDOQatLQ7c9G7PvprrLTFk0jYMHm8V/UNlTwqj4uvtt OZSv5RfCPaY/SjdITn+2qo1s4HDPfI6GlVV3snr/RRmJZRh1vAnBQEO6FuUlEEOY xevWXDCXLl4RMcTSjqEODSEsnCZhdspp6r8fDjWruGpHLzaay2WShK5CxRqAIfzR hElZsm2/djUqDlLfGj4XzzqmWndeeJDkTbWrWYaTaZ5q -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:26 2026 by rpki-client