This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/2PxDuTNSWd2nVBQOyZp7w-a3G48.roa File: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (raw, json) Hash identifier: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0= Subject key identifier: D8:FC:43:B9:33:52:59:DD:A7:54:14:0E:C9:9A:7B:C3:E6:B7:1B:8F Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824 Certificate serial: 019B76EB2172F79F61E1D9D83DC0C86BDA52 Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/2PxDuTNSWd2nVBQOyZp7w-a3G48.roa Signing time: Thu 01 Jan 2026 00:17:59 +0000 ROA not before: Thu 01 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3225 IP address blocks: 185.62.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:21:72:f7:9f:61:e1:d9:d8:3d:c0:c8:6b:da:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824 Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8fc43b9335259dda754140ec99a7bc3e6b71b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:63:12:bd:ae:d1:1a:d4:7b:ff:6f:16:3d:bb: f0:8b:e1:d2:51:4e:23:cf:5f:44:49:6c:69:47:bf: ed:77:44:c5:8b:2c:5d:3c:65:92:66:2d:fc:5e:20: 96:e5:ac:fa:bd:65:63:67:77:cc:da:3c:2b:68:55: 8f:2b:9c:af:fb:6a:8e:7c:af:17:0d:af:f5:87:17: 0c:17:f2:bc:f5:b4:80:1b:18:a5:f6:4b:0a:2c:a0: e8:d6:85:21:e2:5b:24:ac:3c:44:03:15:fd:ce:d4: fa:21:f9:a7:d3:71:54:ef:d3:8e:1d:64:7f:81:73: fe:bf:3e:8c:e7:7c:3f:f1:a8:13:f6:c4:f1:2e:a8: 88:50:dc:db:17:9e:5f:a8:e7:3e:6e:52:7a:88:dd: 18:68:f9:5d:03:94:47:8e:78:45:a3:f4:85:93:ea: 03:fc:d3:77:0d:cb:47:7e:fe:cc:e9:08:58:b4:25: d1:40:54:5c:8e:e9:2d:69:3f:0a:2a:ac:2a:37:0b: 43:ec:48:7e:f3:54:fd:4a:88:19:52:b6:a2:3d:74: ec:51:af:89:29:7f:4a:64:22:a7:05:86:a9:be:b7: 49:1c:f5:d1:ec:a2:4b:4c:df:67:98:3b:5e:e2:7d: 09:03:4c:6b:88:51:dd:75:70:fb:92:a7:34:93:ba: a4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FC:43:B9:33:52:59:DD:A7:54:14:0E:C9:9A:7B:C3:E6:B7:1B:8F X509v3 Authority Key Identifier: keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/2PxDuTNSWd2nVBQOyZp7w-a3G48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.230.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:a9:06:2e:2a:8c:87:f8:5a:75:29:9d:16:72:ca:e3:be:97: d1:0a:bc:dd:74:e1:93:c2:55:45:01:3e:76:e4:a4:34:44:10: 16:69:63:18:82:27:e6:c3:51:e7:f8:28:fb:4d:51:dd:e1:35: e3:81:ca:83:84:bb:19:68:74:0e:c5:e0:e1:27:49:d5:22:78: b6:c3:e8:2e:60:41:88:13:cd:94:d9:19:58:c0:9b:b9:08:0b: 32:a4:24:d3:f3:9c:ba:f1:9b:9d:4a:41:60:83:bb:f4:b5:c7: 9a:0a:03:98:71:20:0f:4a:5f:06:bf:27:b0:80:e8:f7:2b:71: 26:38:9a:10:94:bf:04:1b:c6:a5:9e:a4:00:4e:f7:f5:7d:04: 8f:05:87:66:5b:87:d6:ce:9d:ae:a4:69:8f:dd:ab:cd:d6:99: 6f:34:e4:47:90:41:57:bd:42:51:10:57:02:c3:94:a9:ba:34: fc:43:62:63:dc:ca:e9:33:2d:6d:41:9a:74:1b:a3:e8:83:27: 72:4a:f4:de:a3:78:f5:78:89:cc:ba:11:8d:15:95:43:f6:fe: be:ec:fe:32:05:6d:a5:cb:67:76:f4:af:6d:ec:73:07:4b:c2: f4:18:cf:8c:d5:73:ac:ed:93:04:85:ee:9d:0c:f9:42:9a:61: ed:7c:cb:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26yFy959h4dnYPcDIa9pSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjgwOTUwNjUzYTdlYzU4YzUzMzg1ZDAwYjM4MWVmYmI0 NjU4MjQwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGZjNDNiOTMzNTI1OWRkYTc1NDE0MGVjOTlhN2JjM2U2YjcxYjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2MSva7RGtR7/28WPbvwi+HSUU4j z19ESWxpR7/td0TFiyxdPGWSZi38XiCW5az6vWVjZ3fM2jwraFWPK5yv+2qOfK8X Da/1hxcMF/K89bSAGxil9ksKLKDo1oUh4lskrDxEAxX9ztT6Ifmn03FU79OOHWR/ gXP+vz6M53w/8agT9sTxLqiIUNzbF55fqOc+blJ6iN0YaPldA5RHjnhFo/SFk+oD /NN3DctHfv7M6QhYtCXRQFRcjuktaT8KKqwqNwtD7Eh+81T9SogZUraiPXTsUa+J KX9KZCKnBYapvrdJHPXR7KJLTN9nmDte4n0JA0xriFHddXD7kqc0k7qkWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNj8Q7kzUlndp1QUDsmae8PmtxuPMB8GA1UdIwQY MBaAFF4oCVBlOn7FjFM4XQCzge+7RlgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEt ZTFiNTM1NTZjMWMzLzEvMlB4RHVUTlNXZDJuVkJRT3lacDd3LWEzRzQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEtZTFiNTM1NTZjMWMz LzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT7mMA0G CSqGSIb3DQEBCwUAA4IBAQBuqQYuKoyH+Fp1KZ0WcsrjvpfRCrzddOGTwlVFAT52 5KQ0RBAWaWMYgifmw1Hn+Cj7TVHd4TXjgcqDhLsZaHQOxeDhJ0nVIni2w+guYEGI E82U2RlYwJu5CAsypCTT85y68ZudSkFgg7v0tceaCgOYcSAPSl8GvyewgOj3K3Em OJoQlL8EG8alnqQATvf1fQSPBYdmW4fWzp2upGmP3avN1plvNORHkEFXvUJREFcC w5SpujT8Q2Jj3MrpMy1tQZp0G6PogydySvTeo3j1eInMuhGNFZVD9v6+7P4yBW2l y2d29K9t7HMHS8L0GM+M1XOs7ZMEhe6dDPlCmmHtfMsn -----END CERTIFICATE-----Generated at Tue Jan 20 09:20:27 2026 by rpki-client