This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/2Cd7_Y9JBpZoa_5cCK6NMBLb1uc.roa File: 2Cd7_Y9JBpZoa_5cCK6NMBLb1uc.roa (raw, json) Hash identifier: nq2n+snmfGHiiSL2lqh3SMvb2kqEkJl1Fz24+E4x7/E= Subject key identifier: D8:27:7B:FD:8F:49:06:96:68:6B:FE:5C:08:AE:8D:30:12:DB:D6:E7 Certificate issuer: /CN=7a30a5a2e3324d5e412667f9f296f52af297bb4d Certificate serial: 019B7F84935B87569810BEE73841CCCC6BD3 Authority key identifier: 7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/2Cd7_Y9JBpZoa_5cCK6NMBLb1uc.roa Signing time: Fri 02 Jan 2026 16:22:33 +0000 ROA not before: Fri 02 Jan 2026 16:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201042 IP address blocks: 194.13.142.0/24 maxlen: 24 2a13:4840::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:93:5b:87:56:98:10:be:e7:38:41:cc:cc:6b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a30a5a2e3324d5e412667f9f296f52af297bb4d Validity Not Before: Jan 2 16:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8277bfd8f490696686bfe5c08ae8d3012dbd6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:42:b5:95:f0:ac:3d:e9:c8:2d:40:ca:5a: 5e:9c:01:05:cb:7f:33:85:cf:d8:f1:36:aa:0c:39: 03:8d:13:40:fe:b0:97:d8:84:c1:9b:9f:35:8a:21: e9:59:62:fa:29:4a:16:8a:af:1a:ac:87:4f:9b:2c: b6:52:dd:cc:0b:43:85:59:71:97:28:31:0f:ca:f3: c6:27:e0:ac:8c:9e:f6:7f:42:85:f5:20:9e:af:16: 72:d6:17:47:59:26:73:18:65:18:69:7c:d1:4b:e1: be:95:71:1d:84:fc:2f:42:72:63:55:a8:95:2a:f3: 71:b4:d1:13:c4:f8:d8:c6:8c:43:8d:b2:e3:a2:3b: d4:3b:64:ba:6e:3a:e5:90:19:cf:9e:67:e8:42:c8: 33:4a:69:02:de:53:42:ec:98:87:aa:7d:8e:04:28: 4c:bc:9c:bf:f9:e0:dd:b7:46:34:d8:e1:5b:d0:1c: 96:77:12:b4:b3:d7:af:52:23:21:c8:29:2f:72:98: 8e:51:62:68:92:46:81:32:e1:c6:e3:46:61:81:2b: a4:7e:48:0a:71:93:d2:08:c4:c9:8c:97:54:7a:e4: 91:42:c8:0c:d3:9a:86:d5:26:a4:78:f7:a5:d7:9f: df:89:b5:d6:33:87:5b:e1:97:9b:8e:52:f7:c3:3c: c8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:27:7B:FD:8F:49:06:96:68:6B:FE:5C:08:AE:8D:30:12:DB:D6:E7 X509v3 Authority Key Identifier: keyid:7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/2Cd7_Y9JBpZoa_5cCK6NMBLb1uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.13.142.0/24 IPv6: 2a13:4840::/29 Signature Algorithm: sha256WithRSAEncryption df:12:c5:06:4c:04:2d:de:bb:03:ee:97:e6:c5:be:cf:d6:70: f7:ce:e5:48:77:34:18:08:53:79:59:1b:39:e3:96:34:73:31: fb:e4:5d:34:af:fe:a9:45:af:5a:63:f5:c4:57:58:8d:f2:3c: f6:fb:b1:f6:7f:87:5b:4c:f7:0d:a0:30:b5:87:a4:75:44:ab: 7a:f4:7f:c5:1e:dd:d3:f6:07:ed:ca:a2:f4:ff:3e:94:9d:aa: c4:4d:46:e9:94:47:6c:dd:5d:d7:24:9c:10:25:65:d3:e5:c4: 86:e7:e2:44:1b:50:61:ed:56:39:3f:bc:ec:bc:b7:c3:32:8d: dc:0f:c7:b7:a3:48:22:22:cd:8c:50:e3:2b:a7:a6:11:93:5a: f5:b1:4c:ad:67:cf:1c:2c:bf:c1:5d:d9:44:60:40:2e:4f:13: 89:c9:d5:c8:7c:a9:59:9c:1a:f9:a1:dc:d5:07:b3:ac:a8:c5: 95:5f:1d:d5:7c:12:d0:d2:2b:72:57:5f:26:14:62:2b:38:ae: 1f:2f:01:6a:6e:84:51:7b:84:bc:19:00:b0:3a:85:4a:89:80: 74:c8:e3:d5:75:3c:c2:85:91:2d:f1:2e:90:a0:48:0e:8c:da: b8:77:f3:80:82:c2:85:20:ed:b9:40:a3:ae:51:c2:5a:ac:5c: c2:ce:e2:8a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hJNbh1aYEL7nOEHMzGvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzBhNWEyZTMzMjRkNWU0MTI2NjdmOWYyOTZmNTJhZjI5 N2JiNGQwHhcNMjYwMTAyMTYyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODI3N2JmZDhmNDkwNjk2Njg2YmZlNWMwOGFlOGQzMDEyZGJkNmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9JCtZXwrD3pyC1AylpenAEFy38z hc/Y8TaqDDkDjRNA/rCX2ITBm581iiHpWWL6KUoWiq8arIdPmyy2Ut3MC0OFWXGX KDEPyvPGJ+CsjJ72f0KF9SCerxZy1hdHWSZzGGUYaXzRS+G+lXEdhPwvQnJjVaiV KvNxtNETxPjYxoxDjbLjojvUO2S6bjrlkBnPnmfoQsgzSmkC3lNC7JiHqn2OBChM vJy/+eDdt0Y02OFb0ByWdxK0s9evUiMhyCkvcpiOUWJokkaBMuHG40ZhgSukfkgK cZPSCMTJjJdUeuSRQsgM05qG1SakePel15/fibXWM4db4ZebjlL3wzzIrwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNgne/2PSQaWaGv+XAiujTAS29bnMB8GA1UdIwQY MBaAFHowpaLjMk1eQSZn+fKW9Sryl7tNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpDbG91TXlUVjVCSm1mNThwYjFLdktYdTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jZDliN2YtN2U1Ny00Zjk1LWFiMzkt ZjRkMWJjYjVjOTAxLzEvMkNkN19ZOUpCcFpvYV81Y0NLNk5NQkxiMXVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jZDliN2YtN2U1Ny00Zjk1LWFiMzktZjRkMWJjYjVjOTAx LzEvZWpDbG91TXlUVjVCSm1mNThwYjFLdktYdTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwg2OMA0E AgACMAcDBQMqE0hAMA0GCSqGSIb3DQEBCwUAA4IBAQDfEsUGTAQt3rsD7pfmxb7P 1nD3zuVIdzQYCFN5WRs545Y0czH75F00r/6pRa9aY/XEV1iN8jz2+7H2f4dbTPcN oDC1h6R1RKt69H/FHt3T9gftyqL0/z6UnarETUbplEds3V3XJJwQJWXT5cSG5+JE G1Bh7VY5P7zsvLfDMo3cD8e3o0giIs2MUOMrp6YRk1r1sUytZ88cLL/BXdlEYEAu TxOJydXIfKlZnBr5odzVB7OsqMWVXx3VfBLQ0ityV18mFGIrOK4fLwFqboRRe4S8 GQCwOoVKiYB0yOPVdTzChZEt8S6QoEgOjNq4d/OAgsKFIO25QKOuUcJarFzCzuKK -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:30 2026 by rpki-client