This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2IPGArCnupAxkW131hY733xnS-M.roa File: 2IPGArCnupAxkW131hY733xnS-M.roa (raw, json) Hash identifier: Wuvjk7+eU5XjLKp2q/UYFStH7mjR5Gt3JY2BysroA74= Subject key identifier: D8:83:C6:02:B0:A7:BA:90:31:91:6D:77:D6:16:3B:DF:7C:67:4B:E3 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D5CDDB095DB428FD22F88E48E48BF Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2IPGArCnupAxkW131hY733xnS-M.roa Signing time: Fri 02 Jan 2026 06:20:29 +0000 ROA not before: Fri 02 Jan 2026 06:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211389 IP address blocks: 220.158.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:5c:dd:b0:95:db:42:8f:d2:2f:88:e4:8e:48:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d883c602b0a7ba9031916d77d6163bdf7c674be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:81:33:0f:3c:94:46:86:7d:89:0b:e0:35:11: c8:90:85:67:8f:81:bb:5f:31:91:a6:1d:68:e2:c5: 53:ad:77:36:d9:6e:28:7a:f3:51:f2:a5:a3:cc:85: c9:7a:ae:43:e4:d9:9b:5d:ce:7f:58:91:45:43:a0: a6:fc:66:31:24:3d:62:f2:b9:d5:c1:e2:57:ec:b8: f4:75:23:a4:ed:4a:b6:3d:c5:49:7d:72:5d:c9:b3: 59:38:f5:7a:a7:68:da:71:b4:2c:37:a5:b3:e6:bc: 3f:82:ce:70:ee:f3:47:86:42:cf:0e:36:fb:f7:0f: 5f:b8:e8:b0:1a:cb:30:9d:c4:00:41:c5:0b:cf:77: 32:5e:cd:ef:36:6e:81:70:89:da:32:ad:eb:c4:90: 8b:0a:2a:49:ab:1d:97:e6:ff:39:e5:03:b6:4f:17: bd:7f:e9:e1:75:7c:6d:7a:39:d6:0e:91:1c:bf:67: c8:e7:1e:de:18:80:41:6d:cb:ce:2d:d5:b3:1c:ae: aa:c1:c6:c6:f4:ce:cd:87:03:c5:d3:88:b5:e0:42: d0:81:08:ab:41:88:ea:2b:8e:8b:9b:d9:97:8f:29: 5b:37:94:d9:71:a1:b8:da:54:9d:28:01:ec:54:6e: 26:3e:c7:65:e6:62:8b:59:e5:06:35:dc:20:06:ad: 54:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:83:C6:02:B0:A7:BA:90:31:91:6D:77:D6:16:3B:DF:7C:67:4B:E3 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2IPGArCnupAxkW131hY733xnS-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.158.196.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:49:53:f8:f7:49:03:41:90:b1:23:e2:0d:ea:6e:c6:48:b9: 7b:fc:d4:81:f7:22:e5:2e:fc:c4:35:c1:d3:60:fd:ab:23:db: 33:e1:87:a2:5e:8f:d9:2d:2d:d2:34:56:77:37:86:aa:2b:48: c4:03:c5:6d:14:e6:3a:4f:f0:7e:49:10:f8:2c:42:d9:7b:52: 58:81:bb:1f:f3:9e:62:62:c2:e4:72:42:9b:9a:84:a5:53:05: 64:46:44:6f:57:0e:ac:13:07:e0:87:75:f1:cc:bb:00:9f:de: f4:92:ff:64:57:7f:a0:be:f5:83:30:5e:e6:a6:7b:af:0d:36: c3:9d:b9:da:c1:9a:19:44:49:e1:c5:0d:98:ce:7c:d5:08:8a: 16:1d:d5:72:1b:9f:e3:98:08:ce:44:f7:fd:f9:d2:77:6b:a8: 67:e2:37:b3:07:53:48:b7:b3:5a:9e:43:d7:a7:49:f7:c5:bf: ee:57:01:bf:30:fd:42:f5:39:56:bb:b7:60:1c:a3:fb:8f:dd: 88:81:66:bf:5d:44:32:f6:ae:cc:cb:4c:22:47:50:fe:43:8b: 2a:10:5f:25:26:fe:5b:12:ee:05:ca:19:2e:a4:d2:3c:41:54: 83:26:37:39:1d:47:2c:75:fc:bd:ee:58:56:f2:5f:a9:43:90: 14:e5:eb:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XVzdsJXbQo/SL4jkjki/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODgzYzYwMmIwYTdiYTkwMzE5MTZkNzdkNjE2M2JkZjdjNjc0YmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IEzDzyURoZ9iQvgNRHIkIVnj4G7 XzGRph1o4sVTrXc22W4oevNR8qWjzIXJeq5D5NmbXc5/WJFFQ6Cm/GYxJD1i8rnV weJX7Lj0dSOk7Uq2PcVJfXJdybNZOPV6p2jacbQsN6Wz5rw/gs5w7vNHhkLPDjb7 9w9fuOiwGsswncQAQcULz3cyXs3vNm6BcInaMq3rxJCLCipJqx2X5v855QO2Txe9 f+nhdXxtejnWDpEcv2fI5x7eGIBBbcvOLdWzHK6qwcbG9M7NhwPF04i14ELQgQir QYjqK46Lm9mXjylbN5TZcaG42lSdKAHsVG4mPsdl5mKLWeUGNdwgBq1U8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNiDxgKwp7qQMZFtd9YWO998Z0vjMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvMklQR0FyQ251cEF4a1cxMzFoWTczM3huUy1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB3J7EMA0G CSqGSIb3DQEBCwUAA4IBAQAdSVP490kDQZCxI+IN6m7GSLl7/NSB9yLlLvzENcHT YP2rI9sz4YeiXo/ZLS3SNFZ3N4aqK0jEA8VtFOY6T/B+SRD4LELZe1JYgbsf855i YsLkckKbmoSlUwVkRkRvVw6sEwfgh3XxzLsAn970kv9kV3+gvvWDMF7mpnuvDTbD nbnawZoZREnhxQ2YznzVCIoWHdVyG5/jmAjORPf9+dJ3a6hn4jezB1NIt7NankPX p0n3xb/uVwG/MP1C9TlWu7dgHKP7j92IgWa/XUQy9q7My0wiR1D+Q4sqEF8lJv5b Eu4FyhkupNI8QVSDJjc5HUcsdfy97lhW8l+pQ5AU5euq -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:35 2026 by rpki-client