This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Tv2PtYzP8xt5PfOp_p4SwP3eiTo.roa File: Tv2PtYzP8xt5PfOp_p4SwP3eiTo.roa (raw, json) Hash identifier: fe2daxt0BAPFYHY9jLAuDjCHK9j5QE53wtGO5keCK5k= Subject key identifier: 4E:FD:8F:B5:8C:CF:F3:1B:79:3D:F3:A9:FE:9E:12:C0:FD:DE:89:3A Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138E26DB959477D28307D400D50BDE Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Tv2PtYzP8xt5PfOp_p4SwP3eiTo.roa Signing time: Fri 02 Jan 2026 00:20:14 +0000 ROA not before: Fri 02 Jan 2026 00:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 185.238.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:8e:26:db:95:94:77:d2:83:07:d4:00:d5:0b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4efd8fb58ccff31b793df3a9fe9e12c0fdde893a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:90:d5:84:2c:d3:aa:76:e1:b3:e9:23:df: c9:7b:f7:e3:1e:1c:f1:11:3c:65:4c:8c:23:d0:7e: 76:b7:b2:70:8c:5a:e7:2d:31:85:d2:c6:a6:bd:74: a8:42:1f:93:20:99:c9:a6:5e:8e:9a:51:46:ef:89: 2c:c6:bf:83:b1:d6:9d:45:4e:da:57:5c:59:15:de: 61:8f:69:e1:c1:7e:31:3e:e1:2a:f1:66:20:4d:56: 97:f9:df:fe:a7:07:bd:15:0b:29:99:64:bf:79:2c: 1d:49:df:c4:71:31:5b:5b:19:27:0a:b2:5e:e9:60: 90:04:c3:61:9d:6a:e0:57:9f:bf:b8:3b:9c:87:b8: 18:03:d9:3f:cf:e4:8b:93:54:fa:3b:bc:a6:cd:02: 21:9f:88:e9:ad:b1:d1:d8:65:94:54:2a:d0:a6:aa: 0c:ce:42:2d:05:eb:87:6d:70:93:8a:0a:5b:30:d9: 8e:50:49:d0:14:b0:86:cf:d3:6d:ee:92:39:da:90: eb:01:2c:55:3b:1b:ba:2c:4e:c6:d6:1e:89:69:59: c4:9c:32:63:2d:ac:33:aa:69:bc:93:4e:ed:7a:01: 8d:e3:a0:49:d5:76:9c:96:50:a0:84:d8:bf:02:f0: 0a:77:e1:93:5d:98:e3:8e:a7:81:67:f0:22:41:ac: 6c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FD:8F:B5:8C:CF:F3:1B:79:3D:F3:A9:FE:9E:12:C0:FD:DE:89:3A X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Tv2PtYzP8xt5PfOp_p4SwP3eiTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.228.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:30:08:b2:88:42:57:1f:83:20:43:c8:80:41:41:06:81:57: c5:2b:8a:a0:52:f9:5f:e7:b0:bf:75:b5:5f:27:a4:a1:0a:04: 07:85:99:58:4a:f6:8e:9c:1a:e7:43:13:80:50:67:e9:3f:d9: 8a:cd:8c:e1:5a:cc:98:1f:16:77:32:74:6a:b8:3c:aa:dc:9d: 9f:ac:16:97:39:24:af:bb:c4:80:0c:14:ec:af:ab:c2:2c:2e: a8:b9:3b:c0:c0:ed:e9:2c:c3:69:99:20:1c:09:79:14:87:32: 30:51:4f:63:25:3c:4b:8e:cf:45:25:1e:14:65:f1:51:70:8f: 0b:d5:7a:c5:31:d7:37:e2:d7:6a:32:c3:41:c2:99:85:5d:41: ab:88:3a:ac:94:56:73:12:96:ce:c8:b8:7a:cc:97:6e:32:6b: 2b:47:6a:c8:bd:14:05:c3:5f:fc:5b:09:31:a3:f6:1d:2b:99: 65:76:d1:a7:9a:60:59:f2:b4:49:1c:de:91:db:18:0c:c6:85: 8e:27:b1:5e:c0:91:50:b2:7b:36:83:20:50:be:1a:c2:e0:bc: 11:45:c4:5c:c3:3f:bb:07:35:ca:89:e7:d7:33:30:a6:61:be: 61:fe:ec:67:05:85:89:78:53:e8:a0:17:9a:84:63:ef:22:a7: 72:0e:c2:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E44m25WUd9KDB9QA1QveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWZkOGZiNThjY2ZmMzFiNzkzZGYzYTlmZTllMTJjMGZkZGU4OTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1CQ1YQs06p24bPpI9/Je/fjHhzx ETxlTIwj0H52t7JwjFrnLTGF0samvXSoQh+TIJnJpl6OmlFG74ksxr+DsdadRU7a V1xZFd5hj2nhwX4xPuEq8WYgTVaX+d/+pwe9FQspmWS/eSwdSd/EcTFbWxknCrJe 6WCQBMNhnWrgV5+/uDuch7gYA9k/z+SLk1T6O7ymzQIhn4jprbHR2GWUVCrQpqoM zkItBeuHbXCTigpbMNmOUEnQFLCGz9Nt7pI52pDrASxVOxu6LE7G1h6JaVnEnDJj Lawzqmm8k07tegGN46BJ1XacllCghNi/AvAKd+GTXZjjjqeBZ/AiQaxsUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE79j7WMz/MbeT3zqf6eEsD93ok6MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvVHYyUHRZelA4eHQ1UGZPcF9wNFN3UDNlaVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue7kMA0G CSqGSIb3DQEBCwUAA4IBAQAvMAiyiEJXH4MgQ8iAQUEGgVfFK4qgUvlf57C/dbVf J6ShCgQHhZlYSvaOnBrnQxOAUGfpP9mKzYzhWsyYHxZ3MnRquDyq3J2frBaXOSSv u8SADBTsr6vCLC6ouTvAwO3pLMNpmSAcCXkUhzIwUU9jJTxLjs9FJR4UZfFRcI8L 1XrFMdc34tdqMsNBwpmFXUGriDqslFZzEpbOyLh6zJduMmsrR2rIvRQFw1/8Wwkx o/YdK5lldtGnmmBZ8rRJHN6R2xgMxoWOJ7FewJFQsns2gyBQvhrC4LwRRcRcwz+7 BzXKiefXMzCmYb5h/uxnBYWJeFPooBeahGPvIqdyDsL7 -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:31 2026 by rpki-client