This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2FLaASHMSpHvqYvIhRJYyPbvxOc.roa File: 2FLaASHMSpHvqYvIhRJYyPbvxOc.roa (raw, json) Hash identifier: tI9VRDRi/cDZ3B4CvFceIQtEP8yk3owl0okrshvOKqc= Subject key identifier: D8:52:DA:01:21:CC:4A:91:EF:A9:8B:C8:85:12:58:C8:F6:EF:C4:E7 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D285C224F2131AB5F4091FBF5E08A Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2FLaASHMSpHvqYvIhRJYyPbvxOc.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 62.197.136.0/21 maxlen: 24 89.33.85.0/24 maxlen: 24 89.39.163.0/24 maxlen: 24 89.39.164.0/24 maxlen: 24 93.114.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:28:5c:22:4f:21:31:ab:5f:40:91:fb:f5:e0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d852da0121cc4a91efa98bc8851258c8f6efc4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:2a:f6:88:ee:6d:22:8a:1a:42:af:79:5e: 7e:29:23:b7:2a:03:a3:b5:6d:31:8a:39:d9:ff:5a: ba:44:e9:4d:45:42:f6:8f:a7:11:b6:75:b4:d0:2f: 74:56:ec:79:15:36:40:1c:fe:92:7b:10:cd:7c:f9: ee:77:ac:8a:c8:c0:ce:64:aa:19:0e:51:fa:80:e0: 26:e8:ee:27:dc:f0:3a:ba:42:4c:a4:5d:04:78:cc: 70:88:7f:40:80:58:ae:90:9e:89:85:f0:d3:cc:3f: 83:b7:64:f9:20:f9:92:bb:15:3f:45:3a:b6:15:d3: 38:1a:1b:16:7e:ed:78:ab:2d:3a:88:41:55:53:e5: 29:4e:12:ea:e1:a6:46:df:e9:e4:d2:47:71:6d:87: 27:7d:f5:96:ea:b7:5c:ce:e7:87:81:aa:8a:6b:c5: 17:77:0d:80:ca:be:fc:f8:1d:52:d7:4e:37:39:23: 5f:da:1a:41:d2:d2:b4:04:46:dd:a6:70:f5:ce:c3: 09:e9:11:1a:10:8b:4e:b9:66:0c:00:b2:8b:3a:36: 53:44:8e:5d:58:85:0f:ca:8b:d0:09:fb:3b:37:ab: 70:5e:5f:48:d8:44:b5:c8:19:72:b2:99:49:3e:64: 8e:9c:4c:98:bf:5e:a9:67:0b:09:21:b9:b4:db:51: ec:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:52:DA:01:21:CC:4A:91:EF:A9:8B:C8:85:12:58:C8:F6:EF:C4:E7 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2FLaASHMSpHvqYvIhRJYyPbvxOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.197.136.0/21 89.33.85.0/24 89.39.163.0-89.39.164.255 93.114.195.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:5b:be:4c:b7:18:14:c2:e6:f5:f1:e9:1f:f7:88:b5:f2:66: 4f:95:dd:f8:6d:06:0f:cc:23:9e:c9:63:47:78:38:9b:2d:03: 1b:ec:4f:39:fb:f7:97:01:bf:2b:9b:56:3a:c3:21:1f:48:33: c7:43:62:f6:b2:1c:7f:82:0f:29:68:52:aa:82:58:85:24:f6: bb:72:8a:40:5b:b3:35:ba:74:5d:78:28:39:87:dd:2e:17:d0: b3:ad:d6:6a:9e:b5:1f:37:c3:51:73:78:77:12:06:09:a6:ce: a5:cb:7c:9c:29:c2:2c:a6:49:6c:80:f5:00:a6:c3:6c:d8:79: 86:dd:92:a7:1b:c1:ec:2c:0c:e1:93:8d:e8:87:e0:97:1c:e1: 4e:06:63:58:3d:94:98:bf:ac:9d:77:20:7f:5d:14:f1:0c:a4: 5d:50:ec:6c:fe:29:f8:97:08:47:06:a2:69:8b:b3:15:80:b6: f7:ed:d9:bf:ce:cd:07:0d:7b:71:aa:a8:bd:b9:69:0f:e8:a9: 2e:2f:28:01:aa:24:64:8e:ee:ee:40:31:54:49:f8:dc:8c:e1: b7:c0:ab:e4:3a:1e:2d:7e:b1:07:5b:74:7d:40:4d:d3:89:45: d7:6f:96:b5:9f:78:e4:a4:f7:5e:55:7b:47:b0:af:98:07:d0: 22:4e:1c:9d -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9XShcIk8hMatfQJH79eCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODUyZGEwMTIxY2M0YTkxZWZhOThiYzg4NTEyNThjOGY2ZWZjNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs4q9ojubSKKGkKveV5+KSO3KgOj tW0xijnZ/1q6ROlNRUL2j6cRtnW00C90Vux5FTZAHP6SexDNfPnud6yKyMDOZKoZ DlH6gOAm6O4n3PA6ukJMpF0EeMxwiH9AgFiukJ6JhfDTzD+Dt2T5IPmSuxU/RTq2 FdM4GhsWfu14qy06iEFVU+UpThLq4aZG3+nk0kdxbYcnffWW6rdczueHgaqKa8UX dw2Ayr78+B1S1043OSNf2hpB0tK0BEbdpnD1zsMJ6REaEItOuWYMALKLOjZTRI5d WIUPyovQCfs7N6twXl9I2ES1yBlysplJPmSOnEyYv16pZwsJIbm021HsWQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNhS2gEhzEqR76mLyIUSWMj278TnMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvMkZMYUFTSE1TcEh2cVl2SWhSSll5UGJ2eE9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDPsWIAwQA WSFVMAwDBABZJ6MDBABZJ6QDBABdcsMwDQYJKoZIhvcNAQELBQADggEBAEpbvky3 GBTC5vXx6R/3iLXyZk+V3fhtBg/MI57JY0d4OJstAxvsTzn795cBvyubVjrDIR9I M8dDYvayHH+CDyloUqqCWIUk9rtyikBbszW6dF14KDmH3S4X0LOt1mqetR83w1Fz eHcSBgmmzqXLfJwpwiymSWyA9QCmw2zYeYbdkqcbwewsDOGTjeiH4Jcc4U4GY1g9 lJi/rJ13IH9dFPEMpF1Q7Gz+KfiXCEcGommLsxWAtvft2b/OzQcNe3GqqL25aQ/o qS4vKAGqJGSO7u5AMVRJ+NyM4bfAq+Q6Hi1+sQdbdH1ATdOJRddvlrWfeOSk915V e0ewr5gH0CJOHJ0= -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:23 2026 by rpki-client