This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/2fpSa4233U1cTwSeAJBsZ5bsfJI.roa File: 2fpSa4233U1cTwSeAJBsZ5bsfJI.roa (raw, json) Hash identifier: 08ef8z2l4vSO/c3zBvr23FpWqELsf8QmmodRXtNR2zc= Subject key identifier: D9:FA:52:6B:8D:B7:DD:4D:5C:4F:04:9E:00:90:6C:67:96:EC:7C:92 Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d Certificate serial: 019B7C7F1ABF383B4F37693A193F8F76FFA3 Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/2fpSa4233U1cTwSeAJBsZ5bsfJI.roa Signing time: Fri 02 Jan 2026 02:17:43 +0000 ROA not before: Fri 02 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215004 IP address blocks: 176.118.177.0/24 maxlen: 24 2a14:3244:beee::/48 maxlen: 48 2a14:3244:beef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:1a:bf:38:3b:4f:37:69:3a:19:3f:8f:76:ff:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d Validity Not Before: Jan 2 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9fa526b8db7dd4d5c4f049e00906c6796ec7c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:57:e1:9c:d6:b4:ec:93:44:e8:aa:63:f2: 07:2a:4b:5f:60:68:b6:ae:0c:b9:30:d7:d5:6a:a5: a5:3a:6e:67:5a:d3:0c:17:4c:e0:31:c9:db:dd:7e: 1e:0f:0f:de:58:5c:5c:3b:35:a0:25:2f:83:c7:e2: 2f:2f:b1:5f:d1:22:f6:fd:a2:fb:d3:a9:83:e8:c3: 99:e5:77:2d:8a:9b:96:00:3a:43:8c:2c:f9:e7:49: 95:5e:15:8e:0d:52:fa:be:94:04:48:f2:e0:1f:2a: 89:1e:75:ac:30:56:ec:d9:e4:df:9a:88:48:12:b2: 32:4b:e0:7b:16:ed:f2:94:0c:7b:e5:af:da:f2:85: 22:3c:a6:0b:7d:b3:cc:f7:6b:0d:55:c1:49:05:d2: d3:18:29:0b:01:24:b3:76:a1:47:24:db:97:79:7e: a5:85:b7:6b:b9:42:14:62:41:8a:b1:f1:7d:32:09: 1b:3f:41:36:3e:c6:c3:d5:42:90:db:d2:f9:f0:65: 14:20:c2:07:83:67:d8:f0:d6:54:4e:7b:29:57:df: c0:79:33:39:bf:1d:75:36:e0:90:03:6f:d7:3e:03: d9:0f:4a:67:8d:3a:ee:d0:e6:3f:eb:cb:62:23:c0: 09:92:23:00:f8:c2:15:30:a6:4a:f6:35:b3:94:c7: 89:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FA:52:6B:8D:B7:DD:4D:5C:4F:04:9E:00:90:6C:67:96:EC:7C:92 X509v3 Authority Key Identifier: keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/2fpSa4233U1cTwSeAJBsZ5bsfJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.118.177.0/24 IPv6: 2a14:3244:beee::/47 Signature Algorithm: sha256WithRSAEncryption 4a:94:76:8f:07:5c:af:19:04:ef:d5:f8:ea:dd:60:20:b7:e1: 79:b5:2e:47:31:9e:93:4a:6e:5c:d3:cd:78:88:34:42:82:e7: f1:b8:76:3f:2e:93:a0:a5:88:92:f8:16:a7:51:a5:1e:dc:ee: f0:34:ff:ee:50:bc:7d:f9:8d:9e:cc:61:40:74:ab:d3:2e:12: 4d:cc:ab:48:5a:0e:78:3d:a6:7d:0b:4e:15:67:81:81:9f:67: 31:05:2e:a8:58:3f:02:e0:24:fe:8a:f3:ae:a0:e1:80:07:4c: 72:6b:df:01:0e:e3:34:81:71:ed:a6:04:a4:c9:79:df:9a:69: 74:7c:80:62:87:2a:c5:27:58:6e:58:09:e2:47:4e:e4:ce:2c: 42:7f:21:92:d0:b5:d6:4b:66:5d:ea:e9:e5:4a:e1:a8:a3:fe: 5d:ba:83:11:61:60:78:1d:ec:7b:4c:ee:de:66:14:31:0c:68: 62:a9:5b:31:bd:d9:55:3c:d2:7e:1b:75:12:14:37:6e:8f:06: fa:86:9d:f2:3e:75:68:c3:92:67:46:38:6a:96:15:51:7d:7f: 6c:2a:0e:09:e4:83:5a:b0:fc:bb:39:39:22:d2:fe:a1:5f:27: 96:b7:d2:ea:0c:46:87:44:06:86:a6:c3:e6:c6:20:1b:2c:19: 9b:b4:d7:69 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8fxq/ODtPN2k6GT+Pdv+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTI5N2IxZDM2YTQyZGUzOGU4NDgwYmI5MjliNDViYzkw MzBjOWQwHhcNMjYwMTAyMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWZhNTI2YjhkYjdkZDRkNWM0ZjA0OWUwMDkwNmM2Nzk2ZWM3YzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy45X4ZzWtOyTROiqY/IHKktfYGi2 rgy5MNfVaqWlOm5nWtMMF0zgMcnb3X4eDw/eWFxcOzWgJS+Dx+IvL7Ff0SL2/aL7 06mD6MOZ5XctipuWADpDjCz550mVXhWODVL6vpQESPLgHyqJHnWsMFbs2eTfmohI ErIyS+B7Fu3ylAx75a/a8oUiPKYLfbPM92sNVcFJBdLTGCkLASSzdqFHJNuXeX6l hbdruUIUYkGKsfF9MgkbP0E2PsbD1UKQ29L58GUUIMIHg2fY8NZUTnspV9/AeTM5 vx11NuCQA2/XPgPZD0pnjTru0OY/68tiI8AJkiMA+MIVMKZK9jWzlMeJqQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNn6UmuNt91NXE8EngCQbGeW7HySMB8GA1UdIwQY MBaAFKgSl7HTakLeOOhIC7kptFvJAwydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUt MjJkZDBmMzkyOGQ1LzEvMmZwU2E0MjMzVTFjVHdTZUFKQnNaNWJzZkpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUtMjJkZDBmMzkyOGQ1 LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAsHaxMA8E AgACMAkDBwEqFDJEvu4wDQYJKoZIhvcNAQELBQADggEBAEqUdo8HXK8ZBO/V+Ord YCC34Xm1LkcxnpNKblzTzXiINEKC5/G4dj8uk6CliJL4FqdRpR7c7vA0/+5QvH35 jZ7MYUB0q9MuEk3Mq0haDng9pn0LThVngYGfZzEFLqhYPwLgJP6K866g4YAHTHJr 3wEO4zSBce2mBKTJed+aaXR8gGKHKsUnWG5YCeJHTuTOLEJ/IZLQtdZLZl3q6eVK 4aij/l26gxFhYHgd7HtM7t5mFDEMaGKpWzG92VU80n4bdRIUN26PBvqGnfI+dWjD kmdGOGqWFVF9f2wqDgnkg1qw/Ls5OSLS/qFfJ5a30uoMRodEBoamw+bGIBssGZu0 12k= -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:38 2026 by rpki-client