This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/2TC861jK8VELUxYLqwLBwJEBDQA.roa File: 2TC861jK8VELUxYLqwLBwJEBDQA.roa (raw, json) Hash identifier: oKo7gej4ajG4+SLdtnyEgBggOZ1BZWPfVe9QrL/7Aj0= Subject key identifier: D9:30:BC:EB:58:CA:F1:51:0B:53:16:0B:AB:02:C1:C0:91:01:0D:00 Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78 Certificate serial: 019B79EC14D8D67B99A12D2F4567507BEB95 Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/2TC861jK8VELUxYLqwLBwJEBDQA.roa Signing time: Thu 01 Jan 2026 14:17:53 +0000 ROA not before: Thu 01 Jan 2026 14:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207982 IP address blocks: 145.66.200.0/24 maxlen: 24 145.66.201.0/24 maxlen: 24 145.66.202.0/24 maxlen: 24 145.66.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:14:d8:d6:7b:99:a1:2d:2f:45:67:50:7b:eb:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78 Validity Not Before: Jan 1 14:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d930bceb58caf1510b53160bab02c1c091010d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:0e:48:cf:83:a0:b1:c7:ab:ee:25:35:6b: c9:e3:c5:a1:dd:d0:33:d1:95:a6:05:5a:c3:4d:68: ef:f4:58:06:d1:f7:60:d2:5e:e0:3f:b8:89:b5:12: b2:0c:ce:6f:d0:8a:c5:28:80:45:8d:58:d7:3e:bc: 14:2a:43:7b:fe:57:be:4c:a2:6d:a1:a4:bf:7b:65: d2:3e:99:95:fd:11:24:98:3a:f6:79:6a:2c:e1:f5: 54:1d:cc:32:e5:c0:69:67:26:48:0c:5a:13:d4:0b: 4e:2c:8a:93:0a:8e:e7:97:03:aa:ea:b4:92:2d:5c: cd:c2:43:e9:d4:ea:f4:ed:36:93:00:bf:5a:85:2c: 0d:8d:fa:5c:49:61:db:ef:12:ad:83:c6:9e:b0:7b: 0c:b4:78:05:ef:21:88:53:df:d2:3e:f4:42:67:e1: db:dc:19:90:d0:8d:15:23:89:de:72:a1:3b:ac:e8: 72:7e:86:95:35:ab:c4:6b:6d:11:23:aa:55:22:d2: 43:77:43:6f:4f:7f:cd:95:75:52:60:e6:7a:c1:23: da:9c:77:c4:ea:42:7c:58:9b:17:8c:0d:16:73:8b: 05:1c:47:07:9f:ea:ae:51:dc:95:9d:6c:b6:70:68: 73:e4:1f:23:78:86:04:dc:c9:76:a9:56:1f:a1:8f: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:30:BC:EB:58:CA:F1:51:0B:53:16:0B:AB:02:C1:C0:91:01:0D:00 X509v3 Authority Key Identifier: keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/2TC861jK8VELUxYLqwLBwJEBDQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.66.200.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:db:57:af:47:70:41:72:38:2d:8d:d3:17:56:68:16:f9:93: 4b:0e:97:ca:5d:96:b4:b6:80:8a:ad:ee:bf:0a:0a:28:df:f1: a5:b3:3c:85:f2:4c:fe:db:31:22:2e:e8:8c:f1:d1:40:79:ff: b3:22:fa:8d:97:0b:8b:9e:57:21:ea:f9:97:99:d9:3d:24:c8: 56:25:80:2b:42:08:4b:9b:0c:1f:82:b0:22:15:6c:1b:5a:43: 95:7c:35:bf:e6:8f:90:c8:c0:59:99:55:07:81:2c:24:90:9c: 13:54:52:47:0c:16:8f:d3:f5:c7:83:60:15:c7:eb:df:d1:1f: 10:dc:81:e3:be:bc:b0:67:96:96:29:cd:8c:15:c4:fb:36:ea: 1d:a9:a4:09:6a:0d:47:7c:38:36:95:5e:4e:98:c1:2e:78:15: a9:01:f4:b4:65:98:51:a0:e5:1e:28:d7:45:57:f2:68:64:c6: b1:fe:65:ea:38:3a:50:99:bf:f2:94:5d:bc:b3:94:8b:9d:9f: 0d:ab:76:98:39:6b:a9:8d:6b:d1:11:5c:25:11:d3:b7:5e:2f: 99:05:86:c7:8a:17:36:d5:dc:f8:46:61:54:36:4f:e6:90:c1: 2f:ad:6e:0d:90:af:69:e4:13:f0:50:9f:a2:83:f8:b4:46:56: 68:59:55:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57BTY1nuZoS0vRWdQe+uVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMWU0YThjZDI4OThjNWRlNmQ2NjI1ZjEwYzRiMmU4NWY0 NjFmNzgwHhcNMjYwMTAxMTQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTMwYmNlYjU4Y2FmMTUxMGI1MzE2MGJhYjAyYzFjMDkxMDEwZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyysOSM+DoLHHq+4lNWvJ48Wh3dAz 0ZWmBVrDTWjv9FgG0fdg0l7gP7iJtRKyDM5v0IrFKIBFjVjXPrwUKkN7/le+TKJt oaS/e2XSPpmV/REkmDr2eWos4fVUHcwy5cBpZyZIDFoT1AtOLIqTCo7nlwOq6rSS LVzNwkPp1Or07TaTAL9ahSwNjfpcSWHb7xKtg8aesHsMtHgF7yGIU9/SPvRCZ+Hb 3BmQ0I0VI4necqE7rOhyfoaVNavEa20RI6pVItJDd0NvT3/NlXVSYOZ6wSPanHfE 6kJ8WJsXjA0Wc4sFHEcHn+quUdyVnWy2cGhz5B8jeIYE3Ml2qVYfoY+t8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNkwvOtYyvFRC1MWC6sCwcCRAQ0AMB8GA1UdIwQY MBaAFNMeSozSiYxd5tZiXxDEsuhfRh94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZmFjYWUtZmQ5MC00YjRjLWEyZWMt OTEyN2U4MTA1Njk5LzEvMlRDODYxaks4VkVMVXhZTHF3TEJ3SkVCRFFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS85ZmFjYWUtZmQ5MC00YjRjLWEyZWMtOTEyN2U4MTA1Njk5 LzEvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkULIMA0G CSqGSIb3DQEBCwUAA4IBAQB821evR3BBcjgtjdMXVmgW+ZNLDpfKXZa0toCKre6/ Cgoo3/GlszyF8kz+2zEiLuiM8dFAef+zIvqNlwuLnlch6vmXmdk9JMhWJYArQghL mwwfgrAiFWwbWkOVfDW/5o+QyMBZmVUHgSwkkJwTVFJHDBaP0/XHg2AVx+vf0R8Q 3IHjvrywZ5aWKc2MFcT7NuodqaQJag1HfDg2lV5OmMEueBWpAfS0ZZhRoOUeKNdF V/JoZMax/mXqODpQmb/ylF28s5SLnZ8Nq3aYOWupjWvREVwlEdO3Xi+ZBYbHihc2 1dz4RmFUNk/mkMEvrW4NkK9p5BPwUJ+ig/i0RlZoWVUh -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:18 2026 by rpki-client