This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/2RbeqdMiyrwCVLR5chpWY1wVXBs.roa File: 2RbeqdMiyrwCVLR5chpWY1wVXBs.roa (raw, json) Hash identifier: FV2Q/IEBTvjzgG5NIpgTYEVedEVCT2bxukDMuyGlG3g= Subject key identifier: D9:16:DE:A9:D3:22:CA:BC:02:54:B4:79:72:1A:56:63:5C:15:5C:1B Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4 Certificate serial: 019B7CEDF70FECBAB13E7AB730713E2AD7CF Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/2RbeqdMiyrwCVLR5chpWY1wVXBs.roa Signing time: Fri 02 Jan 2026 04:18:48 +0000 ROA not before: Fri 02 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206641 IP address blocks: 185.180.60.0/22 maxlen: 22 185.180.60.0/24 maxlen: 24 185.180.61.0/24 maxlen: 24 185.180.62.0/24 maxlen: 24 185.180.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f7:0f:ec:ba:b1:3e:7a:b7:30:71:3e:2a:d7:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4 Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d916dea9d322cabc0254b479721a56635c155c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:6c:4b:dd:47:25:71:39:62:41:f0:d6:4d: 59:17:98:7a:e0:27:51:19:27:50:af:7c:73:9a:c5: 68:7d:4a:0b:6e:b9:aa:e3:b8:b5:d2:71:66:f3:a7: db:56:74:c8:04:4a:36:93:55:37:bf:3d:bc:f7:86: ad:90:60:4f:a2:88:96:90:b7:bc:c9:6e:18:cd:49: 52:ec:78:5e:d8:57:5e:da:94:2c:82:69:56:b4:25: 48:b1:fb:64:c9:66:44:22:79:7d:38:17:69:ed:4b: 18:38:3c:d9:30:42:f1:13:53:9c:c3:bb:58:d5:7a: c8:e0:cf:88:14:da:c2:41:28:4c:ef:3d:5c:19:28: 3f:00:5e:0e:d6:00:ba:c3:a2:95:50:62:de:a2:e5: c4:da:08:6f:06:6a:0d:5c:81:6b:d2:ff:85:60:7e: 32:7c:43:6b:99:16:aa:a6:23:e4:25:da:38:35:55: 5a:f1:80:61:9c:dc:e8:9e:74:a5:8b:a0:85:1d:90: ce:83:94:06:8a:83:de:33:91:dc:31:db:17:00:ed: e3:b2:5f:65:ef:4a:98:53:b4:9d:75:23:51:11:58: 19:59:40:78:17:a1:c8:26:85:12:55:a8:ac:29:1f: af:33:c2:d3:76:95:c4:97:0d:89:fa:1b:71:38:93: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:16:DE:A9:D3:22:CA:BC:02:54:B4:79:72:1A:56:63:5C:15:5C:1B X509v3 Authority Key Identifier: keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/2RbeqdMiyrwCVLR5chpWY1wVXBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.60.0/22 Signature Algorithm: sha256WithRSAEncryption 62:f8:1f:86:5b:2a:28:41:06:14:bc:18:45:e1:75:b1:ce:9b: cd:af:f6:4f:54:03:be:ec:29:cd:35:5e:cb:6a:53:41:7d:12: 44:71:ab:01:c7:b9:63:e0:b0:df:91:b0:19:e5:48:f1:68:1b: cd:19:4a:86:b7:02:f1:be:3c:4d:84:f4:97:57:9f:47:08:47: dd:f1:fc:04:b2:7d:05:80:3d:91:54:59:e9:81:5a:e3:2e:86: a8:82:bd:a4:70:7b:48:96:7f:19:67:bc:c0:47:51:67:5e:5e: a5:c9:48:6b:70:62:aa:f4:b0:3a:70:c9:91:f3:fe:60:5d:1a: 3e:ba:ed:60:ca:12:69:95:b2:b9:e4:0a:b4:35:8a:fe:ce:d1: a7:ea:ac:d5:aa:f1:02:70:8f:43:82:0b:f4:09:08:3a:94:ae: 3d:27:11:90:5d:29:3d:61:89:83:5d:21:1b:c5:a2:85:e7:be: 9b:36:86:e7:80:9b:e9:a3:3e:0d:2b:3b:8f:fc:71:9d:c8:8e: c3:b0:a0:ca:51:34:78:7f:ec:fd:0a:24:0b:d4:e9:88:03:86: 37:ff:d6:56:cb:b2:3f:be:0f:98:95:e8:11:80:3e:5f:20:4c: db:f9:11:01:8c:78:2f:cd:0b:f6:10:2d:a8:ce:85:2b:ae:ee: ae:af:bd:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87fcP7LqxPnq3MHE+KtfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiODRmNGEyOTZiY2UxNGQ2ZGVlZDI1MTE2YWE3MGI2MGJj Y2U0YTQwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTE2ZGVhOWQzMjJjYWJjMDI1NGI0Nzk3MjFhNTY2MzVjMTU1YzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XxsS91HJXE5YkHw1k1ZF5h64CdR GSdQr3xzmsVofUoLbrmq47i10nFm86fbVnTIBEo2k1U3vz2894atkGBPooiWkLe8 yW4YzUlS7Hhe2Fde2pQsgmlWtCVIsftkyWZEInl9OBdp7UsYODzZMELxE1Ocw7tY 1XrI4M+IFNrCQShM7z1cGSg/AF4O1gC6w6KVUGLeouXE2ghvBmoNXIFr0v+FYH4y fENrmRaqpiPkJdo4NVVa8YBhnNzonnSli6CFHZDOg5QGioPeM5HcMdsXAO3jsl9l 70qYU7SddSNREVgZWUB4F6HIJoUSVaisKR+vM8LTdpXElw2J+htxOJOVFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNkW3qnTIsq8AlS0eXIaVmNcFVwbMB8GA1UdIwQY MBaAFGuE9KKWvOFNbe7SURaqcLYLzOSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2Yzkt MTRmYWIwMjQ0OTQ4LzEvMlJiZXFkTWl5cndDVkxSNWNocFdZMXdWWEJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2YzktMTRmYWIwMjQ0OTQ4 LzEvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubQ8MA0G CSqGSIb3DQEBCwUAA4IBAQBi+B+GWyooQQYUvBhF4XWxzpvNr/ZPVAO+7CnNNV7L alNBfRJEcasBx7lj4LDfkbAZ5UjxaBvNGUqGtwLxvjxNhPSXV59HCEfd8fwEsn0F gD2RVFnpgVrjLoaogr2kcHtIln8ZZ7zAR1FnXl6lyUhrcGKq9LA6cMmR8/5gXRo+ uu1gyhJplbK55Aq0NYr+ztGn6qzVqvECcI9Dggv0CQg6lK49JxGQXSk9YYmDXSEb xaKF576bNobngJvpoz4NKzuP/HGdyI7DsKDKUTR4f+z9CiQL1OmIA4Y3/9ZWy7I/ vg+YlegRgD5fIEzb+REBjHgvzQv2EC2ozoUrru6ur70k -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:37 2026 by rpki-client