This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2xetmnyIJbfatR1ajSWG2iZUOII.roa File: 2xetmnyIJbfatR1ajSWG2iZUOII.roa (raw, json) Hash identifier: AYACyyAcfjog0rGdHAAX1NkGs450m6h+GEKw3ChcG6c= Subject key identifier: DB:17:AD:9A:7C:88:25:B7:DA:B5:1D:5A:8D:25:86:DA:26:54:38:82 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138572FF5A79AD4BC4DD554BD6DCBF Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2xetmnyIJbfatR1ajSWG2iZUOII.roa Signing time: Fri 02 Jan 2026 00:20:12 +0000 ROA not before: Fri 02 Jan 2026 00:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202636 IP address blocks: 37.32.96.0/23 maxlen: 23 45.90.238.0/24 maxlen: 24 45.134.87.0/24 maxlen: 24 93.92.228.0/22 maxlen: 24 93.189.121.0/24 maxlen: 24 93.189.122.0/24 maxlen: 24 95.214.144.0/22 maxlen: 24 185.150.77.0/24 maxlen: 24 185.150.78.0/23 maxlen: 23 185.179.233.0/24 maxlen: 24 185.179.235.0/24 maxlen: 24 185.191.44.0/22 maxlen: 22 185.199.55.0/24 maxlen: 24 185.218.18.0/24 maxlen: 24 185.224.36.0/22 maxlen: 24 185.227.205.0/24 maxlen: 24 185.239.254.0/24 maxlen: 24 185.248.200.0/22 maxlen: 24 185.252.44.0/22 maxlen: 22 194.35.41.0/24 maxlen: 24 194.41.116.0/23 maxlen: 23 194.41.118.0/23 maxlen: 23 212.80.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:85:72:ff:5a:79:ad:4b:c4:dd:55:4b:d6:dc:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db17ad9a7c8825b7dab51d5a8d2586da26543882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:eb:d5:e5:ca:28:1d:ee:ce:d1:3e:2d:7b: 8f:9d:b4:86:8c:d3:86:46:dd:66:64:49:fd:73:f2: 3b:bc:68:2a:69:ad:8c:fa:3f:79:67:59:d4:45:cd: e1:ad:8d:83:86:f6:8f:21:b1:ea:ae:ac:ff:f7:8f: 53:9f:79:c9:83:e5:d5:58:0b:cd:69:85:50:26:ea: ca:bf:ea:be:af:fc:8f:16:23:89:7c:7f:21:88:81: 96:76:0c:04:42:82:5b:8b:6f:b4:1b:5c:97:98:96: 56:e2:b1:6d:87:f5:87:b5:95:8c:09:75:69:ef:9d: ce:f1:e9:71:d3:93:04:98:fb:aa:33:69:df:ac:77: 23:9e:7e:f1:4a:2c:08:1d:c5:09:78:dc:8f:38:94: 6d:cf:94:af:52:cb:c2:97:b9:df:a5:a2:c9:d1:0c: b4:6f:19:e5:c7:de:87:75:36:cf:0e:84:c0:8d:86: 96:47:69:28:4e:cb:48:1b:a3:dd:35:79:f7:82:7c: 3e:58:bb:68:ee:75:90:66:4d:c2:aa:0d:86:92:f6: 15:a5:c6:a5:61:d8:6a:bf:a7:41:d6:eb:77:c9:90: ac:2b:d7:ee:52:6a:87:40:5d:d2:02:ef:6a:17:a6: 92:83:ff:8c:f1:9b:3d:8b:e6:d5:9e:fb:58:de:83: 97:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:17:AD:9A:7C:88:25:B7:DA:B5:1D:5A:8D:25:86:DA:26:54:38:82 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2xetmnyIJbfatR1ajSWG2iZUOII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.96.0/23 45.90.238.0/24 45.134.87.0/24 93.92.228.0/22 93.189.121.0-93.189.122.255 95.214.144.0/22 185.150.77.0-185.150.79.255 185.179.233.0/24 185.179.235.0/24 185.191.44.0/22 185.199.55.0/24 185.218.18.0/24 185.224.36.0/22 185.227.205.0/24 185.239.254.0/24 185.248.200.0/22 185.252.44.0/22 194.35.41.0/24 194.41.116.0/22 212.80.208.0/22 Signature Algorithm: sha256WithRSAEncryption 22:e9:bb:31:e6:9e:11:e2:76:e4:f7:6b:ed:30:38:4e:e2:9f: 23:bf:3d:81:33:0b:23:a4:4a:07:c9:a9:fa:96:88:c6:f2:f9: 6a:75:67:e6:3c:04:ae:0e:61:fb:6c:de:64:46:cc:32:e1:ac: 72:3c:52:d1:39:ce:ad:79:32:f7:e3:bf:22:4c:0b:20:16:80: f2:a9:9c:69:3f:8f:0f:c9:a0:0c:d4:42:6e:36:cc:66:98:04: 6a:71:35:57:ee:2e:48:46:11:31:46:3e:e0:fe:90:b4:d9:b2: 7a:93:20:38:b0:4b:ce:ec:0e:07:24:e0:44:96:b4:0d:3b:0b: d7:b5:5d:e8:0c:1e:39:bb:7f:90:7b:3d:6a:73:f3:53:04:5b: 9c:83:36:b8:e1:70:4b:f3:77:4d:76:5b:5e:3d:c9:dc:9e:5a: 79:27:27:d3:9d:6a:e9:b5:9d:b5:d8:d5:ec:0a:f9:a5:6c:3e: 67:9b:a9:20:2f:e6:22:c6:60:88:19:b3:ee:06:b6:7b:db:98: e4:34:b3:b6:d5:d5:55:8d:df:f2:b3:2d:a5:74:59:cc:26:e7: 5f:af:ed:6e:ca:4e:55:e0:1e:9d:6e:cf:df:ed:36:5d:c7:93: e6:f2:62:61:5f:3d:34:31:ba:9b:3f:34:66:03:83:84:54:0a: 52:ef:ee:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt8E4Vy/1p5rUvE3VVL1ty/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjE3YWQ5YTdjODgyNWI3ZGFiNTFkNWE4ZDI1ODZkYTI2NTQzODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfLr1eXKKB3uztE+LXuPnbSGjNOG Rt1mZEn9c/I7vGgqaa2M+j95Z1nURc3hrY2DhvaPIbHqrqz/949Tn3nJg+XVWAvN aYVQJurKv+q+r/yPFiOJfH8hiIGWdgwEQoJbi2+0G1yXmJZW4rFth/WHtZWMCXVp 753O8elx05MEmPuqM2nfrHcjnn7xSiwIHcUJeNyPOJRtz5SvUsvCl7nfpaLJ0Qy0 bxnlx96HdTbPDoTAjYaWR2koTstIG6PdNXn3gnw+WLto7nWQZk3Cqg2GkvYVpcal Ydhqv6dB1ut3yZCsK9fuUmqHQF3SAu9qF6aSg/+M8Zs9i+bVnvtY3oOXnwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFNsXrZp8iCW32rUdWo0lhtomVDiCMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvMnhldG1ueUlKYmZhdFIxYWpTV0cyaVpVT0lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBAEl IGADBAAtWu4DBAAthlcDBAJdXOQwDAMEAF29eQMEAF29egMEAl/WkDAMAwQAuZZN AwQEuZZAAwQAubPpAwQAubPrAwQCub8sAwQAucc3AwQAudoSAwQCueAkAwQAuePN AwQAue/+AwQCufjIAwQCufwsAwQAwiMpAwQCwil0AwQC1FDQMA0GCSqGSIb3DQEB CwUAA4IBAQAi6bsx5p4R4nbk92vtMDhO4p8jvz2BMwsjpEoHyan6lojG8vlqdWfm PASuDmH7bN5kRswy4axyPFLROc6teTL3478iTAsgFoDyqZxpP48PyaAM1EJuNsxm mARqcTVX7i5IRhExRj7g/pC02bJ6kyA4sEvO7A4HJOBElrQNOwvXtV3oDB45u3+Q ez1qc/NTBFucgza44XBL83dNdltePcncnlp5JyfTnWrptZ212NXsCvmlbD5nm6kg L+YixmCIGbPuBrZ725jkNLO21dVVjd/ysy2ldFnMJudfr+1uyk5V4B6dbs/f7TZd x5Pm8mJhXz00MbqbPzRmA4OEVApS7+5d -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:28 2026 by rpki-client