This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/2jS-Ar5-mvzTQqNg923VOZqFfzM.roa File: 2jS-Ar5-mvzTQqNg923VOZqFfzM.roa (raw, json) Hash identifier: q9I2rePyRMxcY/rB8ipLm/a3s22Y2jRaO567Mt+E7dU= Subject key identifier: DA:34:BE:02:BE:7E:9A:FC:D3:42:A3:60:F7:6D:D5:39:9A:85:7F:33 Certificate issuer: /CN=e84d9482ec68d3577d93048c98fa05517380a2a8 Certificate serial: 019B7BA39B71F9E5CE6FD86863E872F49727 Authority key identifier: E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/2jS-Ar5-mvzTQqNg923VOZqFfzM.roa Signing time: Thu 01 Jan 2026 22:17:58 +0000 ROA not before: Thu 01 Jan 2026 22:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212891 IP address blocks: 45.129.248.0/22 maxlen: 24 2001:3c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9b:71:f9:e5:ce:6f:d8:68:63:e8:72:f4:97:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84d9482ec68d3577d93048c98fa05517380a2a8 Validity Not Before: Jan 1 22:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da34be02be7e9afcd342a360f76dd5399a857f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f1:9c:14:34:35:5f:6d:21:70:3f:9a:ff:30: 6d:97:36:35:78:e4:6a:4d:c4:b0:06:83:24:5d:2a: 47:06:34:0f:90:a8:5d:b5:88:a4:a9:15:d5:b9:d8: 1b:ad:26:5f:95:9b:7f:bf:25:fe:dd:fe:fe:57:2d: d8:e0:a0:00:11:53:5f:dd:8e:be:b0:9c:57:f1:eb: 4a:54:1e:64:1a:22:b8:2c:9e:18:a9:6d:84:a2:b6: fd:a4:2e:84:57:0b:77:9b:80:4b:7b:13:d6:81:c8: 9a:93:87:04:b9:49:92:f0:68:e8:ec:03:a7:d1:80: 1b:4a:69:18:f6:67:b8:c7:5d:70:b2:c3:4d:00:c6: 1c:ff:c0:53:8f:ed:53:b6:27:a1:98:81:7e:02:49: 9a:b8:2d:4e:91:86:25:8f:c7:c4:bf:e5:12:97:08: 69:ab:45:94:0c:9a:63:69:2e:91:91:5b:e5:8c:ed: 96:c7:cb:bc:72:11:13:49:c4:aa:6a:99:7d:5b:34: 87:9a:ee:52:fd:d1:49:b6:07:cd:ac:81:9a:b4:13: 3a:bf:63:53:69:f5:10:3f:31:a7:c0:3d:1d:ef:22: 47:f2:fe:4c:a5:ea:4d:32:1d:ae:09:75:36:26:6e: 54:c9:d4:4d:84:a5:3d:45:17:69:68:2b:ea:73:e3: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:34:BE:02:BE:7E:9A:FC:D3:42:A3:60:F7:6D:D5:39:9A:85:7F:33 X509v3 Authority Key Identifier: keyid:E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/2jS-Ar5-mvzTQqNg923VOZqFfzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.248.0/22 IPv6: 2001:3c40::/29 Signature Algorithm: sha256WithRSAEncryption 25:56:26:17:c3:a3:b3:c8:6e:55:fa:2e:e5:6a:ca:d9:59:17: b3:9c:4e:db:d6:46:e7:65:27:91:49:4b:b9:e1:d0:83:d9:14: 8c:b0:a3:28:fb:bc:fe:48:62:4b:26:24:a7:5a:85:28:ea:df: 8b:2d:fd:92:c1:6b:37:e9:87:0f:6e:9d:83:1e:8c:d5:35:ab: 96:88:02:52:03:48:9e:ae:f8:e7:66:64:17:21:4c:d5:1a:17: ad:5b:9e:a4:f2:39:e1:7a:01:43:44:cb:06:68:3c:76:db:79: 4c:9a:e2:f3:36:fb:05:04:a1:aa:38:72:5e:40:92:43:a9:32: 3a:86:6b:4c:6c:88:c0:0d:30:bb:13:4b:e6:e9:23:35:85:61: 2f:2f:a6:06:68:6b:8b:6d:34:42:82:6a:c7:7d:2f:4d:ac:7b: ee:95:54:10:2d:f8:da:38:d1:e1:17:5c:db:48:9e:1b:c9:71: 90:f7:aa:b8:a4:19:22:c2:0a:92:c4:5d:40:08:c3:09:b8:3a: ed:7a:44:0f:bd:dd:5e:64:d8:5b:91:d6:27:12:3a:9b:a3:1f: 83:5f:0b:73:5a:45:f3:c4:45:9d:db:e7:90:d7:9a:21:86:11: 18:33:f1:71:7b:fc:7a:c3:45:6f:88:ef:f1:af:a4:08:4f:be: 1e:57:22:ed -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7o5tx+eXOb9hoY+hy9JcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NGQ5NDgyZWM2OGQzNTc3ZDkzMDQ4Yzk4ZmEwNTUxNzM4 MGEyYTgwHhcNMjYwMTAxMjIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTM0YmUwMmJlN2U5YWZjZDM0MmEzNjBmNzZkZDUzOTlhODU3ZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fGcFDQ1X20hcD+a/zBtlzY1eORq TcSwBoMkXSpHBjQPkKhdtYikqRXVudgbrSZflZt/vyX+3f7+Vy3Y4KAAEVNf3Y6+ sJxX8etKVB5kGiK4LJ4YqW2Eorb9pC6EVwt3m4BLexPWgciak4cEuUmS8Gjo7AOn 0YAbSmkY9me4x11wssNNAMYc/8BTj+1TtiehmIF+AkmauC1OkYYlj8fEv+USlwhp q0WUDJpjaS6RkVvljO2Wx8u8chETScSqapl9WzSHmu5S/dFJtgfNrIGatBM6v2NT afUQPzGnwD0d7yJH8v5MpepNMh2uCXU2Jm5UydRNhKU9RRdpaCvqc+O2VwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNo0vgK+fpr800KjYPdt1TmahX8zMB8GA1UdIwQY MBaAFOhNlILsaNNXfZMEjJj6BVFzgKKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NGJkZWYtNWI1ZC00ZDEzLWFlOGUt MDgzNWU2YjFlMzlhLzEvMmpTLUFyNS1tdnpUUXFOZzkyM1ZPWnFGZnpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82NGJkZWYtNWI1ZC00ZDEzLWFlOGUtMDgzNWU2YjFlMzlh LzEvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYH4MA0E AgACMAcDBQMgATxAMA0GCSqGSIb3DQEBCwUAA4IBAQAlViYXw6OzyG5V+i7lasrZ WReznE7b1kbnZSeRSUu54dCD2RSMsKMo+7z+SGJLJiSnWoUo6t+LLf2SwWs36YcP bp2DHozVNauWiAJSA0iervjnZmQXIUzVGhetW56k8jnhegFDRMsGaDx223lMmuLz NvsFBKGqOHJeQJJDqTI6hmtMbIjADTC7E0vm6SM1hWEvL6YGaGuLbTRCgmrHfS9N rHvulVQQLfjaONHhF1zbSJ4byXGQ96q4pBkiwgqSxF1ACMMJuDrtekQPvd1eZNhb kdYnEjqbox+DXwtzWkXzxEWd2+eQ15ohhhEYM/Fxe/x6w0VviO/xr6QIT74eVyLt -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:15 2026 by rpki-client