This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/2Ii2CAhksIObnY9cdUDA1cuJZdo.roa File: 2Ii2CAhksIObnY9cdUDA1cuJZdo.roa (raw, json) Hash identifier: ZugaVf2Cp4EBmlxQ0H1edkLbTqWn+CzcKcFRvVcmckM= Subject key identifier: D8:88:B6:08:08:64:B0:83:9B:9D:8F:5C:75:40:C0:D5:CB:89:65:DA Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9 Certificate serial: 019B7C11245F46CE2F306E7B0C89133D1A69 Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/2Ii2CAhksIObnY9cdUDA1cuJZdo.roa Signing time: Fri 02 Jan 2026 00:17:36 +0000 ROA not before: Fri 02 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47217 IP address blocks: 5.11.32.0/21 maxlen: 24 46.21.176.0/20 maxlen: 24 77.244.176.0/20 maxlen: 24 80.244.112.0/20 maxlen: 24 91.212.241.0/24 maxlen: 24 94.102.128.0/20 maxlen: 24 94.185.72.0/21 maxlen: 24 109.233.216.0/21 maxlen: 24 178.251.72.0/21 maxlen: 24 185.4.140.0/22 maxlen: 24 185.200.88.0/22 maxlen: 24 193.41.235.0/24 maxlen: 24 193.169.56.0/23 maxlen: 24 194.69.192.0/24 maxlen: 24 194.69.193.0/24 maxlen: 24 2a02:670::/32 maxlen: 56 2a0a:27c0::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:24:5f:46:ce:2f:30:6e:7b:0c:89:13:3d:1a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9 Validity Not Before: Jan 2 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d888b6080864b0839b9d8f5c7540c0d5cb8965da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:82:3e:df:4b:c1:a5:03:b9:28:54:92:fb: ac:52:b5:0b:94:82:76:f9:f7:c1:00:4d:40:ed:da: 4b:b9:dc:8f:9c:b9:cd:cb:e8:da:81:50:9f:d5:5c: 68:b2:cb:6a:be:ae:26:59:98:e7:a4:05:c8:b7:3a: 7b:e8:c1:e0:7f:84:75:98:0d:4c:a6:08:8f:e5:86: a2:be:e4:85:0f:e5:11:a2:6a:59:19:ee:21:07:e5: b2:ff:d3:3a:f4:1c:31:cb:f8:73:34:51:ed:1a:d3: 7c:66:21:d6:6e:57:4b:b7:5d:96:41:b2:1e:8a:50: 91:2b:54:0c:30:dc:96:ba:a8:41:3d:8e:11:9e:33: a8:0f:e3:6d:04:62:c9:dc:7b:89:bc:4b:ce:27:e4: 11:9f:8e:1e:d2:bf:ef:15:f1:88:e3:f5:6b:1f:52: be:9b:e7:26:81:d9:c0:ca:ca:d1:a4:20:21:e5:21: 2d:59:49:d8:b5:fb:a7:f1:e8:3c:ef:19:1b:29:2c: 1e:5a:f2:82:bc:06:9b:3d:db:95:a1:3f:d1:db:a3: 6c:4e:03:6c:a1:3e:26:d9:0b:50:b8:a0:c5:11:00: d8:ea:70:bf:b5:62:14:e8:52:3e:bd:af:02:a6:7d: 1f:fe:d8:42:e5:c0:39:e9:1f:3a:2b:d2:0c:0e:e1: ce:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:B6:08:08:64:B0:83:9B:9D:8F:5C:75:40:C0:D5:CB:89:65:DA X509v3 Authority Key Identifier: keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/2Ii2CAhksIObnY9cdUDA1cuJZdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.32.0/21 46.21.176.0/20 77.244.176.0/20 80.244.112.0/20 91.212.241.0/24 94.102.128.0/20 94.185.72.0/21 109.233.216.0/21 178.251.72.0/21 185.4.140.0/22 185.200.88.0/22 193.41.235.0/24 193.169.56.0/23 194.69.192.0/23 IPv6: 2a02:670::/32 2a0a:27c0::/32 Signature Algorithm: sha256WithRSAEncryption 05:b3:4a:03:2a:95:76:81:b2:86:90:22:b7:ac:04:2d:47:fa: 81:f1:6a:aa:1f:c2:46:27:ff:24:88:41:9f:38:ce:e9:a4:1c: 2e:29:e7:4d:62:0b:d5:37:50:39:70:3e:65:9d:30:f5:c6:26: e8:f9:b6:85:c4:d4:8e:0b:6d:0f:4f:a5:7c:de:f5:12:89:a0: 81:c8:9a:9e:65:0a:f6:d2:38:fd:33:10:95:22:90:2f:56:21: 86:0f:7f:a9:41:54:43:fd:d0:99:e0:8d:5f:e3:89:6a:d1:2e: f0:5b:2b:24:fa:b9:3b:3a:ff:f9:64:c5:48:3c:85:67:6c:24: cf:b9:28:63:4c:75:f0:ed:7b:6a:c3:ad:99:cc:14:35:d9:21: de:b6:ae:15:ae:25:ea:90:e4:4d:fc:42:ae:30:77:de:d4:1c: 71:0d:b8:9d:83:49:f9:91:d3:13:c9:da:02:04:15:13:ea:b4: e3:a5:f1:c6:75:23:cf:26:cc:3d:fc:3c:aa:8a:e1:b4:50:c6: c7:87:1e:1c:12:e3:70:91:42:e3:f9:2b:a4:34:56:f3:25:a3: 25:c0:06:90:30:27:35:05:b8:81:3b:a1:36:20:41:a8:13:44: 53:0b:34:a3:73:e2:f3:0a:d1:60:bb:71:26:a9:57:7e:f8:09: 54:d8:ff:fc -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZt8ESRfRs4vMG57DIkTPRppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NmNhYjU5NGJiZGE5YjQ0MGZkYTdkMzk3NGNiZDQ0MWM5 OGU1YzkwHhcNMjYwMTAyMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODg4YjYwODA4NjRiMDgzOWI5ZDhmNWM3NTQwYzBkNWNiODk2NWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVuCPt9LwaUDuShUkvusUrULlIJ2 +ffBAE1A7dpLudyPnLnNy+jagVCf1Vxosstqvq4mWZjnpAXItzp76MHgf4R1mA1M pgiP5YaivuSFD+URompZGe4hB+Wy/9M69Bwxy/hzNFHtGtN8ZiHWbldLt12WQbIe ilCRK1QMMNyWuqhBPY4RnjOoD+NtBGLJ3HuJvEvOJ+QRn44e0r/vFfGI4/VrH1K+ m+cmgdnAysrRpCAh5SEtWUnYtfun8eg87xkbKSweWvKCvAabPduVoT/R26NsTgNs oT4m2QtQuKDFEQDY6nC/tWIU6FI+va8Cpn0f/thC5cA56R86K9IMDuHOJwIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFNiItggIZLCDm52PXHVAwNXLiWXaMB8GA1UdIwQY MBaAFDRsq1lLvam0QP2n05dMvUQcmOXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZWY2NmQtMmQ1Zi00OWQ4LTkwNGMt N2ExM2E1ZWZhZjVlLzEvMklpMkNBaGtzSU9iblk5Y2RVREExY3VKWmRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy85ZWY2NmQtMmQ1Zi00OWQ4LTkwNGMtN2ExM2E1ZWZhZjVl LzEvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwWgQCAAEwVAMEAwULIAME BC4VsAMEBE30sAMEBFD0cAMEAFvU8QMEBF5mgAMEA165SAMEA23p2AMEA7L7SAME ArkEjAMEArnIWAMEAMEp6wMEAcGpOAMEAcJFwDAUBAIAAjAOAwUAKgIGcAMFACoK J8AwDQYJKoZIhvcNAQELBQADggEBAAWzSgMqlXaBsoaQIresBC1H+oHxaqofwkYn /ySIQZ84zumkHC4p501iC9U3UDlwPmWdMPXGJuj5toXE1I4LbQ9PpXze9RKJoIHI mp5lCvbSOP0zEJUikC9WIYYPf6lBVEP90JngjV/jiWrRLvBbKyT6uTs6//lkxUg8 hWdsJM+5KGNMdfDte2rDrZnMFDXZId62rhWuJeqQ5E38Qq4wd97UHHENuJ2DSfmR 0xPJ2gIEFRPqtOOl8cZ1I88mzD38PKqK4bRQxseHHhwS43CRQuP5K6Q0VvMloyXA BpAwJzUFuIE7oTYgQagTRFMLNKNz4vMK0WC7cSapV374CVTY//w= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:42 2026 by rpki-client