This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/2tKSrvE8w4OPUMtHHmn4NBgdIN0.roa File: 2tKSrvE8w4OPUMtHHmn4NBgdIN0.roa (raw, json) Hash identifier: xtQTDappKS+L7HJWwmh8B32VXucrBAKNvYHP3fwsAXE= Subject key identifier: DA:D2:92:AE:F1:3C:C3:83:8F:50:CB:47:1E:69:F8:34:18:1D:20:DD Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920 Certificate serial: 019B7CEE1A3DAFB43E03973CAB1A40774FEE Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/2tKSrvE8w4OPUMtHHmn4NBgdIN0.roa Signing time: Fri 02 Jan 2026 04:18:57 +0000 ROA not before: Fri 02 Jan 2026 04:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199354 IP address blocks: 185.19.228.0/22 maxlen: 22 2a03:ffc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1a:3d:af:b4:3e:03:97:3c:ab:1a:40:77:4f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920 Validity Not Before: Jan 2 04:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dad292aef13cc3838f50cb471e69f834181d20dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cb:fe:a7:15:8f:5a:1a:e4:02:4a:89:a6:f5: c2:e5:3f:e4:67:4c:db:52:33:6f:78:12:5f:66:23: 3d:3e:3b:f8:4b:64:17:1f:4a:56:28:07:5f:2a:90: c6:67:2a:a4:34:ae:0a:df:af:66:a0:b0:c1:4d:fa: e4:67:2f:e6:7f:23:a0:fa:38:77:c8:a6:1c:ad:ce: 92:84:e8:1c:a4:e6:a4:df:e7:a7:e5:14:97:bb:26: e8:28:c0:f3:6a:8e:2c:b7:eb:ab:16:a5:7e:2d:e7: 8c:fd:11:a9:c2:90:54:c0:53:be:45:56:fe:ee:67: 97:26:dc:4d:b3:2d:95:b4:a3:13:95:ee:f8:09:de: 21:db:58:a1:fe:fb:2c:7b:95:37:ab:29:c2:ad:dc: fb:d9:35:54:cb:4e:1d:2a:8a:f9:43:20:32:50:ed: 76:23:1c:bf:54:ec:9b:2e:7b:7f:65:b9:54:19:59: e8:46:da:1e:9a:cb:98:7a:4d:89:1a:c9:4f:fe:ac: be:55:a5:43:7d:b1:9f:0d:fe:3c:dc:cc:af:bd:12: ee:79:f6:99:37:20:a9:e8:8e:76:7d:8a:18:2a:ce: b4:85:e4:c3:47:69:e5:fc:cb:5c:1c:8a:1a:79:6b: 6f:24:dc:17:71:76:67:c1:7e:52:b3:f4:04:f5:57: 5a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D2:92:AE:F1:3C:C3:83:8F:50:CB:47:1E:69:F8:34:18:1D:20:DD X509v3 Authority Key Identifier: keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/2tKSrvE8w4OPUMtHHmn4NBgdIN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.228.0/22 IPv6: 2a03:ffc0::/32 Signature Algorithm: sha256WithRSAEncryption 16:2e:4f:99:a0:05:bc:bc:98:f3:9d:37:2e:dd:aa:cb:80:18: 51:65:69:99:7d:bf:58:fa:42:dd:96:ae:9a:ea:fc:83:6c:3a: 39:c6:4a:51:5e:ad:04:93:57:bc:d4:69:12:7e:7c:fe:8d:75: 37:59:bd:f8:c0:81:25:ec:d5:08:5c:26:9e:c6:b9:65:68:79: 45:34:09:c6:e1:da:e4:71:5b:82:30:ef:1d:aa:1e:28:ae:f6: e8:3c:9e:da:a6:f4:19:0d:d8:85:de:db:3c:22:3f:be:48:2b: c2:f4:36:48:fe:49:6f:63:fd:2f:4b:f1:3f:10:e0:cf:46:23: d4:95:10:ab:40:c7:90:62:fd:50:44:43:39:7f:43:ca:1b:11: 51:06:13:ac:80:94:e0:b9:42:c2:0d:32:74:4d:23:b1:c0:a0: 3d:ef:2e:ac:be:b5:2d:45:56:26:d4:0f:3a:8f:22:1b:a5:20: 00:6b:aa:8f:36:df:27:d6:d8:ca:bf:43:de:64:28:c9:cd:38: 5a:fe:9d:f3:8d:3a:f4:5d:29:c2:10:a3:fd:29:da:2f:1d:c5: be:62:55:0e:23:7c:4a:a7:d4:de:6f:1a:e0:93:05:d2:e5:43: 52:06:01:2f:18:00:ec:76:41:fc:eb:33:cf:6f:e5:91:0f:c3: f9:76:29:ac -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87ho9r7Q+A5c8qxpAd0/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOGE5NTMyNzE4N2MzMDg4MGY1YmJmM2MzNzI4OWVlMzEx YzU5MjAwHhcNMjYwMTAyMDQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWQyOTJhZWYxM2NjMzgzOGY1MGNiNDcxZTY5ZjgzNDE4MWQyMGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8v+pxWPWhrkAkqJpvXC5T/kZ0zb UjNveBJfZiM9Pjv4S2QXH0pWKAdfKpDGZyqkNK4K369moLDBTfrkZy/mfyOg+jh3 yKYcrc6ShOgcpOak3+en5RSXuyboKMDzao4st+urFqV+LeeM/RGpwpBUwFO+RVb+ 7meXJtxNsy2VtKMTle74Cd4h21ih/vsse5U3qynCrdz72TVUy04dKor5QyAyUO12 Ixy/VOybLnt/ZblUGVnoRtoemsuYek2JGslP/qy+VaVDfbGfDf483MyvvRLuefaZ NyCp6I52fYoYKs60heTDR2nl/MtcHIoaeWtvJNwXcXZnwX5Ss/QE9VdanQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNrSkq7xPMODj1DLRx5p+DQYHSDdMB8GA1UdIwQY MBaAFO6KlTJxh8MIgPW788Nyie4xHFkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29xVk1uR0h3d2lBOWJ2enczS0o3akVjV1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iZjA5YjctNzFjNC00OTljLTlmZDYt NTQ3NTEzNWYxOTA1LzEvMnRLU3J2RTh3NE9QVU10SEhtbjROQmdkSU4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iZjA5YjctNzFjNC00OTljLTlmZDYtNTQ3NTEzNWYxOTA1 LzEvN29xVk1uR0h3d2lBOWJ2enczS0o3akVjV1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRPkMA0E AgACMAcDBQAqA//AMA0GCSqGSIb3DQEBCwUAA4IBAQAWLk+ZoAW8vJjznTcu3arL gBhRZWmZfb9Y+kLdlq6a6vyDbDo5xkpRXq0Ek1e81GkSfnz+jXU3Wb34wIEl7NUI XCaexrllaHlFNAnG4drkcVuCMO8dqh4orvboPJ7apvQZDdiF3ts8Ij++SCvC9DZI /klvY/0vS/E/EODPRiPUlRCrQMeQYv1QREM5f0PKGxFRBhOsgJTguULCDTJ0TSOx wKA97y6svrUtRVYm1A86jyIbpSAAa6qPNt8n1tjKv0PeZCjJzTha/p3zjTr0XSnC EKP9KdovHcW+YlUOI3xKp9TebxrgkwXS5UNSBgEvGADsdkH86zPPb+WRD8P5dims -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:05 2026 by rpki-client