This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/2P1GYD166nihkwScz5T2PnxUNBc.roa File: 2P1GYD166nihkwScz5T2PnxUNBc.roa (raw, json) Hash identifier: kpyKepByfDU6eMI6BwB2mHLR2Ws+hOGxFPcFrKdltdw= Subject key identifier: D8:FD:46:60:3D:7A:EA:78:A1:93:04:9C:CF:94:F6:3E:7C:54:34:17 Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb Certificate serial: 019B7B35AB2EA4AE3D904E9F8F765C2945D1 Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/2P1GYD166nihkwScz5T2PnxUNBc.roa Signing time: Thu 01 Jan 2026 20:17:53 +0000 ROA not before: Thu 01 Jan 2026 20:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206114 IP address blocks: 87.255.160.0/19 maxlen: 19 2a04:2800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ab:2e:a4:ae:3d:90:4e:9f:8f:76:5c:29:45:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb Validity Not Before: Jan 1 20:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8fd46603d7aea78a193049ccf94f63e7c543417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b2:d1:fc:dd:0e:4d:5a:6f:6c:47:41:ce:ba: da:f4:78:20:96:16:b0:9e:be:14:a5:7c:90:17:76: 25:0f:57:3a:3f:11:e0:8e:5e:ff:b8:be:92:ab:76: 3f:f6:3b:ea:eb:48:a5:97:03:ac:b6:16:9e:04:6c: 3a:28:ea:05:aa:45:27:b4:77:a9:f3:50:5a:44:0d: 0c:26:a9:79:95:54:ca:2a:6c:ea:33:86:f4:d6:95: 33:31:c7:ca:3c:79:76:ca:5c:02:6f:d8:0b:0e:12: 31:5e:99:9d:e3:06:45:d7:f8:ce:2b:2c:07:96:e8: 67:87:13:4c:d5:af:fe:be:9e:5f:ff:64:d8:9e:50: 54:f1:c2:26:6b:e5:7a:b9:e0:9a:9f:5d:23:50:f7: 31:7c:ec:e5:2e:cb:22:bc:0c:46:64:31:c6:71:ad: 00:ca:fb:7f:d3:1e:db:67:74:4d:30:f9:18:80:86: e5:46:28:f0:b3:e2:03:d7:89:8c:77:4c:4b:09:d2: c4:6c:84:ea:03:a1:b2:26:c0:a8:12:ec:53:b3:75: 91:b3:39:80:8d:46:0a:fd:7e:ac:7a:99:8a:6f:87: 8e:d4:5d:da:ce:22:e7:b2:7c:5f:e7:5c:54:05:9c: 27:35:0d:64:a6:60:45:af:7f:da:5f:9b:67:d1:38: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FD:46:60:3D:7A:EA:78:A1:93:04:9C:CF:94:F6:3E:7C:54:34:17 X509v3 Authority Key Identifier: keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/2P1GYD166nihkwScz5T2PnxUNBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.255.160.0/19 IPv6: 2a04:2800::/29 Signature Algorithm: sha256WithRSAEncryption 1d:25:16:2f:ef:b5:eb:86:66:5e:fc:8d:d4:ea:b2:1f:99:04: 01:80:50:6d:41:22:dc:89:5c:27:bc:a7:49:34:d1:f5:2f:f5: d3:62:80:a9:9b:e9:7e:b1:fb:4a:ff:8b:0f:5b:78:bb:fd:13: b4:ee:c7:2d:d3:74:6d:2f:f0:34:d1:f9:b6:eb:f4:f6:eb:53: 2b:4f:c1:50:9d:21:56:39:b5:d3:29:9a:b7:d9:19:70:2c:d2: f2:07:91:39:ba:26:1b:37:8c:49:bd:62:03:99:10:e8:d6:c1: d1:a0:33:3e:1f:46:f3:78:85:9c:03:16:8d:68:aa:88:3b:2a: 87:41:10:6f:28:71:9a:80:34:5f:c6:da:74:75:c9:96:a3:d3: 84:4d:cb:37:93:7b:2e:43:2a:93:59:3b:76:5a:3c:fc:b6:cf: 7a:36:bf:ee:e7:cb:94:5f:21:0e:85:50:68:f6:d8:1e:63:ac: 69:0a:87:b5:0a:26:80:b2:e6:d9:7b:06:b7:45:43:90:24:81: f0:cb:b9:23:52:d7:03:f5:07:27:0d:f2:b3:c8:c8:3f:02:d5: 6e:72:42:11:d5:db:69:6c:fd:43:a6:f6:5a:79:f3:c2:ba:76: 3d:c1:0b:08:66:d6:e4:f7:8f:1c:db:7a:09:2c:df:11:f6:c0: f7:37:86:f1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NasupK49kE6fj3ZcKUXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MDk3YzJiYjA2MmI1YzI5OTIzOTFhNGVkMWVlNGY0ZmEz Nzc5Y2IwHhcNMjYwMTAxMjAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGZkNDY2MDNkN2FlYTc4YTE5MzA0OWNjZjk0ZjYzZTdjNTQzNDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LLR/N0OTVpvbEdBzrra9Hgglhaw nr4UpXyQF3YlD1c6PxHgjl7/uL6Sq3Y/9jvq60illwOsthaeBGw6KOoFqkUntHep 81BaRA0MJql5lVTKKmzqM4b01pUzMcfKPHl2ylwCb9gLDhIxXpmd4wZF1/jOKywH luhnhxNM1a/+vp5f/2TYnlBU8cIma+V6ueCan10jUPcxfOzlLssivAxGZDHGca0A yvt/0x7bZ3RNMPkYgIblRijws+ID14mMd0xLCdLEbITqA6GyJsCoEuxTs3WRszmA jUYK/X6sepmKb4eO1F3aziLnsnxf51xUBZwnNQ1kpmBFr3/aX5tn0Tj4twIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNj9RmA9eup4oZMEnM+U9j58VDQXMB8GA1UdIwQY MBaAFJgJfCuwYrXCmSORpO0e5PT6N3nLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xN2E2OWQtYjdmNy00YmExLWI3ZWUt OThiYzI1NGMyM2U1LzEvMlAxR1lEMTY2bmloa3dTY3o1VDJQbnhVTkJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xN2E2OWQtYjdmNy00YmExLWI3ZWUtOThiYzI1NGMyM2U1 LzEvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFV/+gMA0E AgACMAcDBQMqBCgAMA0GCSqGSIb3DQEBCwUAA4IBAQAdJRYv77XrhmZe/I3U6rIf mQQBgFBtQSLciVwnvKdJNNH1L/XTYoCpm+l+sftK/4sPW3i7/RO07sct03RtL/A0 0fm26/T261MrT8FQnSFWObXTKZq32RlwLNLyB5E5uiYbN4xJvWIDmRDo1sHRoDM+ H0bzeIWcAxaNaKqIOyqHQRBvKHGagDRfxtp0dcmWo9OETcs3k3suQyqTWTt2Wjz8 ts96Nr/u58uUXyEOhVBo9tgeY6xpCoe1CiaAsubZewa3RUOQJIHwy7kjUtcD9Qcn DfKzyMg/AtVuckIR1dtpbP1DpvZaefPCunY9wQsIZtbk948c23oJLN8R9sD3N4bx -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:04 2026 by rpki-client