This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2WJrcCbXtosV5oho1dySsh0zMco.roa File: 2WJrcCbXtosV5oho1dySsh0zMco.roa (raw, json) Hash identifier: 4T0PhbGWrh6O6UzmeXy4msPBbu0nnuc/Rayl8HdAcBc= Subject key identifier: D9:62:6B:70:26:D7:B6:8B:15:E6:88:68:D5:DC:92:B2:1D:33:31:CA Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1399441AE484D49587D370F59C7AC8 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2WJrcCbXtosV5oho1dySsh0zMco.roa Signing time: Fri 02 Jan 2026 00:20:17 +0000 ROA not before: Fri 02 Jan 2026 00:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212861 IP address blocks: 185.105.12.0/22 maxlen: 24 185.163.232.0/22 maxlen: 24 185.197.216.0/22 maxlen: 24 185.222.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:99:44:1a:e4:84:d4:95:87:d3:70:f5:9c:7a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9626b7026d7b68b15e68868d5dc92b21d3331ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:32:3c:66:b6:3e:b3:98:f1:73:f1:1a:41: dd:dc:db:89:9f:c8:47:2c:ef:03:87:be:58:8c:41: 4c:93:e8:c2:c4:9c:29:9a:e6:5d:7c:46:42:c6:d1: ae:92:a2:ad:ec:8f:48:e2:b8:1e:6a:f6:76:98:b5: 2d:1e:61:86:0c:5f:47:3f:40:43:be:0a:08:4a:ca: de:ab:6c:a8:0f:86:9e:22:aa:d7:34:b1:a8:ae:59: 7c:14:ea:fd:0f:59:54:2e:75:cd:63:b7:15:63:59: 22:27:4a:af:96:c7:b5:5a:84:5a:01:3c:b0:73:87: 90:80:9b:2f:48:a7:bc:e2:a4:d9:93:dc:86:f6:37: e8:9f:b5:11:20:97:d0:76:d5:a0:cb:a8:86:15:d3: 5b:02:1b:3e:de:e3:05:00:eb:6b:8a:77:8c:96:58: 83:34:29:af:1b:2e:f6:79:47:88:69:0a:c3:98:ea: cf:4c:36:82:cb:0d:fb:f3:1e:15:64:9a:93:f9:46: 0e:79:44:64:06:f8:9d:45:ad:28:aa:3c:6b:f1:75: 28:63:54:30:89:da:f2:a8:fc:f0:0b:a1:99:c0:83: 8a:28:73:ef:d6:a5:ea:f2:6c:fa:3a:ce:ed:aa:2a: 5e:e2:41:ba:fb:04:a5:4d:fd:e2:96:38:10:37:30: a3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:62:6B:70:26:D7:B6:8B:15:E6:88:68:D5:DC:92:B2:1D:33:31:CA X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2WJrcCbXtosV5oho1dySsh0zMco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.12.0/22 185.163.232.0/22 185.197.216.0/22 185.222.188.0/22 Signature Algorithm: sha256WithRSAEncryption be:48:a1:7d:17:ee:5b:6b:5f:78:2c:a7:69:21:8c:64:68:ca: ad:c4:60:ff:94:ac:52:ee:8d:3e:03:5a:74:05:1a:85:d1:86: 49:fe:ee:ee:ec:82:96:9d:69:ba:2d:44:c2:d6:c5:6d:16:de: 1f:b9:63:f1:e9:2f:5b:28:d0:95:0c:d9:53:93:44:36:09:4c: 98:ba:5d:4c:9d:61:06:d8:d8:24:1f:d5:09:54:b6:7c:51:f6: 90:e9:ab:a3:46:0c:44:47:de:e1:9a:7e:9e:19:19:ae:36:6e: 0d:06:06:5b:72:6f:68:e5:bd:fe:f0:cb:fd:58:0f:c0:d4:7c: 58:1e:c4:f6:20:c4:18:97:83:8e:59:3e:e3:a8:7f:09:6e:8a: e6:3e:bb:a4:56:ba:ed:34:20:f0:6a:a2:24:79:70:c7:4d:b0: cf:70:ac:95:d7:48:20:31:48:ee:67:76:80:2b:a4:f3:83:f8: 93:99:f4:27:40:49:1e:03:53:b3:37:ca:2b:ea:3a:3c:4f:5e: c5:ed:d4:c0:b1:46:62:c7:21:a4:a6:7f:8e:08:a3:4f:a0:72: 9c:ef:64:24:63:9c:07:da:00:d8:98:1f:2d:4d:5d:39:30:5c: 9d:f1:5c:73:8a:f2:ce:d0:80:05:f7:c3:87:46:64:36:8e:7b: 50:5b:5d:3f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8E5lEGuSE1JWH03D1nHrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTYyNmI3MDI2ZDdiNjhiMTVlNjg4NjhkNWRjOTJiMjFkMzMzMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT8yPGa2PrOY8XPxGkHd3NuJn8hH LO8Dh75YjEFMk+jCxJwpmuZdfEZCxtGukqKt7I9I4rgeavZ2mLUtHmGGDF9HP0BD vgoISsreq2yoD4aeIqrXNLGorll8FOr9D1lULnXNY7cVY1kiJ0qvlse1WoRaATyw c4eQgJsvSKe84qTZk9yG9jfon7URIJfQdtWgy6iGFdNbAhs+3uMFAOtrineMlliD NCmvGy72eUeIaQrDmOrPTDaCyw378x4VZJqT+UYOeURkBvidRa0oqjxr8XUoY1Qw idryqPzwC6GZwIOKKHPv1qXq8mz6Os7tqipe4kG6+wSlTf3iljgQNzCjkwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNlia3Am17aLFeaIaNXckrIdMzHKMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvMldKcmNDYlh0b3NWNW9obzFkeVNzaDB6TWNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuWkMAwQC uaPoAwQCucXYAwQCud68MA0GCSqGSIb3DQEBCwUAA4IBAQC+SKF9F+5ba194LKdp IYxkaMqtxGD/lKxS7o0+A1p0BRqF0YZJ/u7u7IKWnWm6LUTC1sVtFt4fuWPx6S9b KNCVDNlTk0Q2CUyYul1MnWEG2NgkH9UJVLZ8UfaQ6aujRgxER97hmn6eGRmuNm4N BgZbcm9o5b3+8Mv9WA/A1HxYHsT2IMQYl4OOWT7jqH8JbormPrukVrrtNCDwaqIk eXDHTbDPcKyV10ggMUjuZ3aAK6Tzg/iTmfQnQEkeA1OzN8or6jo8T17F7dTAsUZi xyGkpn+OCKNPoHKc72QkY5wH2gDYmB8tTV05MFyd8VxzivLO0IAF98OHRmQ2jntQ W10/ -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:17 2026 by rpki-client