This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2Ijce7koIphf5jpD6dtt4ux1VIs.roa File: 2Ijce7koIphf5jpD6dtt4ux1VIs.roa (raw, json) Hash identifier: xXW3d8652og82PwcjTeZHa3yQuYtriDzUNEHcVL0bY4= Subject key identifier: D8:88:DC:7B:B9:28:22:98:5F:E6:3A:43:E9:DB:6D:E2:EC:75:54:8B Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Certificate serial: 019B7F858D1FE685F7788C591EAF7F41FAAC Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2Ijce7koIphf5jpD6dtt4ux1VIs.roa Signing time: Fri 02 Jan 2026 16:23:37 +0000 ROA not before: Fri 02 Jan 2026 16:23:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12400 IP address blocks: 89.38.28.0/24 maxlen: 24 89.38.29.0/24 maxlen: 24 185.151.196.0/23 maxlen: 23 185.151.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8d:1f:e6:85:f7:78:8c:59:1e:af:7f:41:fa:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Validity Not Before: Jan 2 16:23:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d888dc7bb92822985fe63a43e9db6de2ec75548b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:e8:c7:8d:8c:07:7f:d8:1c:77:16:5d:9b: 23:d9:c7:bf:15:69:01:72:40:4c:52:44:01:dd:6c: a0:96:a4:52:f3:86:b8:8a:ec:a0:9b:e1:c4:06:fe: 58:0d:93:e2:4b:e0:ed:76:0a:b3:03:a1:28:15:e0: c8:19:27:04:8b:db:aa:e1:12:83:4b:df:b4:21:9a: 5e:b7:c8:87:2a:89:09:07:23:76:4a:93:b0:9b:5f: 8d:2a:bf:7d:6e:28:de:0f:46:f2:40:f3:f9:81:47: 8c:d0:b9:c0:ba:ba:ca:3d:9e:61:c8:7f:73:9c:c1: ac:7e:2b:66:49:74:48:07:ed:e9:35:3b:8d:91:31: 04:cd:3a:4b:2d:bd:53:7f:39:ed:3b:52:90:ed:41: 3a:d2:79:23:4c:e5:06:08:44:a5:fa:83:fd:0c:6f: f3:ad:99:8f:5d:e2:e5:de:67:97:73:e8:2d:34:23: d1:57:7b:2a:c2:af:c4:56:46:9d:60:ab:ce:b1:5c: e5:4a:36:58:6b:20:d2:fe:6f:cd:ed:bf:86:9c:c4: 3a:ab:11:d4:e2:15:f4:6d:c9:98:cc:85:6a:ae:ab: 38:3f:c1:c3:ac:29:8b:ee:e4:71:1f:75:f4:91:83: ba:6d:d3:5d:04:e0:2e:83:75:0e:05:fd:84:5a:7c: fa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:DC:7B:B9:28:22:98:5F:E6:3A:43:E9:DB:6D:E2:EC:75:54:8B X509v3 Authority Key Identifier: keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2Ijce7koIphf5jpD6dtt4ux1VIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.38.28.0/23 185.151.196.0-185.151.198.255 Signature Algorithm: sha256WithRSAEncryption 3c:dd:a6:54:bf:b9:30:57:b1:5f:6a:f4:0d:d0:aa:d2:d9:7e: 64:f7:0a:cd:50:50:fa:4a:5b:4c:06:85:ea:ac:5f:9f:e3:e5: 52:ed:55:5e:4f:d7:1c:0c:f7:90:61:3e:88:e0:7f:56:cb:c3: df:82:a8:98:7d:67:9e:85:42:6d:30:d3:05:83:59:7f:5f:3b: f0:33:4a:b6:28:fb:7b:68:1c:00:ed:db:ba:c2:4e:39:28:77: c0:bd:87:4b:3a:c5:90:92:43:87:29:3e:87:f2:73:e2:00:8a: 59:31:eb:3b:90:70:6a:02:8b:3f:53:1c:45:c5:46:fa:37:ae: 69:d4:90:f5:5e:da:0e:0b:f1:13:db:74:be:f4:7c:60:00:d3: a6:46:a1:1a:0a:bc:51:f3:9e:b9:8c:73:42:55:96:f2:7a:14: 19:57:43:ec:09:7d:da:bb:4d:f2:49:d9:bf:de:97:d6:86:e4: ab:a1:6c:0b:ac:55:a2:3b:e0:a2:6d:d4:5e:bb:f2:59:63:b1: 22:e3:01:95:ce:3a:a1:c0:db:d9:d1:86:a8:65:6e:7b:c9:98: 19:ff:7e:d5:f3:03:5f:9b:3a:4f:15:12:d0:3a:ec:6d:56:16: 67:a9:10:e2:c3:66:90:2e:71:8e:16:08:1d:b6:a0:96:91:00: ad:80:bb:d9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/hY0f5oX3eIxZHq9/QfqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkw YWI3NzAwHhcNMjYwMTAyMTYyMzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODg4ZGM3YmI5MjgyMjk4NWZlNjNhNDNlOWRiNmRlMmVjNzU1NDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cHox42MB3/YHHcWXZsj2ce/FWkB ckBMUkQB3WyglqRS84a4iuygm+HEBv5YDZPiS+DtdgqzA6EoFeDIGScEi9uq4RKD S9+0IZpet8iHKokJByN2SpOwm1+NKr99bijeD0byQPP5gUeM0LnAurrKPZ5hyH9z nMGsfitmSXRIB+3pNTuNkTEEzTpLLb1TfzntO1KQ7UE60nkjTOUGCESl+oP9DG/z rZmPXeLl3meXc+gtNCPRV3sqwq/EVkadYKvOsVzlSjZYayDS/m/N7b+GnMQ6qxHU 4hX0bcmYzIVqrqs4P8HDrCmL7uRxH3X0kYO6bdNdBOAug3UOBf2EWnz6jQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNiI3Hu5KCKYX+Y6Q+nbbeLsdVSLMB8GA1UdIwQY MBaAFNnv6dNvX4j98EdCxBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1Yzkt MzlmNmQ2NDI1MzM4LzEvMklqY2U3a29JcGhmNWpwRDZkdHQ0dXgxVklzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4 LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBWSYcMAwD BAK5l8QDBAC5l8YwDQYJKoZIhvcNAQELBQADggEBADzdplS/uTBXsV9q9A3QqtLZ fmT3Cs1QUPpKW0wGheqsX5/j5VLtVV5P1xwM95BhPojgf1bLw9+CqJh9Z56FQm0w 0wWDWX9fO/AzSrYo+3toHADt27rCTjkod8C9h0s6xZCSQ4cpPofyc+IAilkx6zuQ cGoCiz9THEXFRvo3rmnUkPVe2g4L8RPbdL70fGAA06ZGoRoKvFHznrmMc0JVlvJ6 FBlXQ+wJfdq7TfJJ2b/el9aG5KuhbAusVaI74KJt1F678lljsSLjAZXOOqHA29nR hqhlbnvJmBn/ftXzA1+bOk8VEtA67G1WFmepEOLDZpAucY4WCB22oJaRAK2Au9k= -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:43 2026 by rpki-client