This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa File: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (raw, json) Hash identifier: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4= Subject key identifier: DA:78:13:27:0A:13:C9:7D:4D:CF:97:CA:3C:92:AC:56:25:F1:0C:79 Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B7C13183EEC14DEE3214EFEB0DA64DAD7 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213541 IP address blocks: 89.185.76.0/24 maxlen: 24 89.185.79.0/24 maxlen: 24 92.240.196.0/24 maxlen: 24 92.240.198.0/24 maxlen: 24 92.240.199.0/24 maxlen: 24 92.240.204.0/24 maxlen: 24 92.240.206.0/23 maxlen: 24 92.240.215.0/24 maxlen: 24 92.240.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:18:3e:ec:14:de:e3:21:4e:fe:b0:da:64:da:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da7813270a13c97d4dcf97ca3c92ac5625f10c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:d3:54:b2:a5:d4:b7:f9:02:4c:d7:3e:6a: c5:d9:3c:bc:bc:03:e7:c2:d2:a3:eb:18:82:68:74: 3c:f8:05:e8:38:31:96:55:a2:1f:a0:23:b3:36:1d: d6:6a:ae:6b:de:e9:80:4e:fe:c3:8d:59:cd:c4:88: eb:a6:64:31:48:73:fe:84:87:ad:17:10:0b:16:36: be:91:2c:30:93:2b:af:68:1d:6b:79:0c:58:9f:66: c9:45:77:e8:a2:60:07:a2:c2:5a:89:15:1d:8e:c6: c3:7b:1a:f8:43:39:e1:30:64:c1:15:70:a7:ee:3a: ec:f6:c7:c9:6e:68:8c:a5:3c:d3:a9:f9:2b:26:fd: 32:e8:d3:f4:f8:ba:df:71:86:58:cd:3e:6c:81:f5: eb:3e:89:cb:4c:58:a2:78:8b:0d:fe:ef:cf:38:07: a8:af:f1:d1:32:a1:67:e2:10:13:a3:43:30:c4:2f: 7c:de:06:73:4a:52:31:82:22:1d:ac:7e:f2:ef:80: af:2b:bd:06:18:3c:da:9d:67:c5:fc:fb:54:b1:ee: 57:ac:31:7a:c9:78:a6:cf:a4:69:99:03:15:80:af: d6:ca:86:ce:be:bb:61:48:09:c2:7f:61:89:d7:98: 63:a2:48:c2:0a:5f:73:3d:38:fb:61:6c:32:86:72: 33:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:78:13:27:0A:13:C9:7D:4D:CF:97:CA:3C:92:AC:56:25:F1:0C:79 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.76.0/24 89.185.79.0/24 92.240.196.0/24 92.240.198.0/23 92.240.204.0/24 92.240.206.0/23 92.240.215.0/24 92.240.217.0/24 Signature Algorithm: sha256WithRSAEncryption 23:93:b1:a2:74:ce:0a:0b:32:a2:3e:5f:da:3b:db:8f:cc:b5: db:67:e8:a5:94:ff:8e:99:19:57:2e:77:f2:7a:ee:95:21:0c: cd:99:df:0c:94:5a:94:4b:cf:26:6a:12:99:a2:ab:7b:d9:07: 1d:ed:64:95:da:03:ea:c0:f6:8d:ec:c3:5d:17:db:a7:9f:45: bd:0b:58:dc:2c:e1:6a:84:18:8a:a0:52:77:04:c2:2f:70:3e: 9c:71:4a:2f:40:c3:c9:4c:22:b0:e8:90:72:ed:e8:3b:51:96: e2:4d:87:56:89:65:d8:d9:5f:49:97:cb:4d:2e:a8:2c:23:7e: db:d5:b5:55:43:d4:b4:be:36:75:75:53:1a:cd:6e:00:34:db: 23:69:cf:13:2f:f4:43:06:83:78:dc:42:d3:37:63:2a:2a:fb: ca:9f:ff:24:5b:8d:6a:d7:ae:ea:7b:a0:18:ee:32:05:f5:56: eb:df:27:8e:94:97:53:0c:32:1d:37:04:6b:a9:21:6a:8a:1d: 22:3a:39:34:c8:68:b2:89:d3:54:32:c8:04:2b:c3:ef:6a:ae: 5c:d8:dc:39:3f:16:83:26:6d:56:bc:11:4e:f2:0a:a4:46:e2: 9e:91:97:72:3a:65:ae:3d:f1:51:4e:f7:fe:81:d7:d7:fb:7c: 7e:71:df:44 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt8Exg+7BTe4yFO/rDaZNrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTc4MTMyNzBhMTNjOTdkNGRjZjk3Y2EzYzkyYWM1NjI1ZjEwYzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KPTVLKl1Lf5AkzXPmrF2Ty8vAPn wtKj6xiCaHQ8+AXoODGWVaIfoCOzNh3Waq5r3umATv7DjVnNxIjrpmQxSHP+hIet FxALFja+kSwwkyuvaB1reQxYn2bJRXfoomAHosJaiRUdjsbDexr4QznhMGTBFXCn 7jrs9sfJbmiMpTzTqfkrJv0y6NP0+LrfcYZYzT5sgfXrPonLTFiieIsN/u/POAeo r/HRMqFn4hATo0MwxC983gZzSlIxgiIdrH7y74CvK70GGDzanWfF/PtUse5XrDF6 yXimz6RpmQMVgK/WyobOvrthSAnCf2GJ15hjokjCCl9zPTj7YWwyhnIz3QIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFNp4EycKE8l9Tc+XyjySrFYl8Qx5MB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvMm5nVEp3b1R5WDFOejVmS1BKS3NWaVh4REhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAWblMAwQA WblPAwQAXPDEAwQBXPDGAwQAXPDMAwQBXPDOAwQAXPDXAwQAXPDZMA0GCSqGSIb3 DQEBCwUAA4IBAQAjk7GidM4KCzKiPl/aO9uPzLXbZ+illP+OmRlXLnfyeu6VIQzN md8MlFqUS88mahKZoqt72Qcd7WSV2gPqwPaN7MNdF9unn0W9C1jcLOFqhBiKoFJ3 BMIvcD6ccUovQMPJTCKw6JBy7eg7UZbiTYdWiWXY2V9Jl8tNLqgsI37b1bVVQ9S0 vjZ1dVMazW4ANNsjac8TL/RDBoN43ELTN2MqKvvKn/8kW41q167qe6AY7jIF9Vbr 3yeOlJdTDDIdNwRrqSFqih0iOjk0yGiyidNUMsgEK8Pvaq5c2Nw5PxaDJm1WvBFO 8gqkRuKekZdyOmWuPfFRTvf+gdfX+3x+cd9E -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:37 2026 by rpki-client