This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa File: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (raw, json) Hash identifier: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4= Subject key identifier: D8:CC:3F:46:C2:FB:4E:ED:6B:69:93:BB:37:F3:66:58:1B:7F:E0:BC Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019B7C12B6B81BF7AFEEC6DD7A0459877A65 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39841 IP address blocks: 84.17.75.0/24 maxlen: 24 84.17.83.0/24 maxlen: 24 84.17.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b6:b8:1b:f7:af:ee:c6:dd:7a:04:59:87:7a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8cc3f46c2fb4eed6b6993bb37f366581b7fe0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:02:dc:c8:c4:28:2f:6a:81:f0:85:d7:b5: ea:49:47:d1:f9:79:4d:35:bb:ff:c6:18:6b:56:43: cb:0f:75:1c:5d:76:35:32:5d:c3:96:d4:f0:f9:e7: 4c:ad:e3:05:85:6b:2d:73:10:01:21:65:3b:3d:21: 44:05:86:a7:24:58:be:9a:5f:80:4e:62:86:ae:c9: b7:a0:2a:af:ca:26:4c:d1:1b:7a:e2:45:3c:d0:dc: 71:be:a8:c2:e3:7b:5e:c1:b8:30:84:31:d4:56:60: dc:25:21:64:27:79:9d:f1:57:50:5c:77:0c:08:57: ac:68:95:53:ed:fb:72:4d:f0:78:98:99:84:8b:f6: 1a:df:5f:7d:79:20:af:bb:02:5a:2c:18:53:22:6d: f5:c8:7b:e0:b2:c3:97:35:97:a2:7b:2c:70:f6:f4: 19:ee:4d:36:03:29:8d:76:b7:f9:6d:63:7d:86:a7: ae:e1:fa:e0:38:0a:2e:5b:d3:57:c3:46:80:c3:ee: 37:7a:c3:3f:4b:56:e7:cc:95:61:c9:df:7a:48:fc: 7c:42:58:50:8f:7c:51:f0:67:78:4c:89:d7:1a:18: 08:21:cd:aa:32:c8:34:c2:36:ae:3b:3e:44:92:5f: 7b:b9:55:07:1c:05:1c:c0:c3:03:f9:1b:fc:70:21: 1c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CC:3F:46:C2:FB:4E:ED:6B:69:93:BB:37:F3:66:58:1B:7F:E0:BC X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.17.75.0/24 84.17.83.0-84.17.84.255 Signature Algorithm: sha256WithRSAEncryption 76:d6:29:57:f3:58:90:51:ce:20:4d:c9:ee:00:42:e9:fe:21: f0:b5:9c:55:3b:8b:f1:70:52:2d:ad:a6:f5:ff:a5:dd:4f:04: ed:ff:84:0f:bb:16:89:da:6d:60:8e:8f:c8:8a:dc:87:35:eb: 45:73:96:a9:00:c7:13:7f:60:7a:48:33:60:5c:b7:04:cb:6a: 09:a0:58:fe:46:5a:8c:b7:50:43:7e:17:ab:ca:69:c1:f7:fe: 8d:de:7b:7c:9e:93:03:09:5f:25:0b:09:6a:16:a1:80:e9:48: 3e:90:53:42:13:13:a4:0e:51:d6:a6:ca:51:6b:ad:bc:ce:c3: 07:32:e0:86:be:23:bd:41:7e:c9:96:38:7a:a2:88:87:07:85: 37:c4:3a:21:ea:de:57:f3:19:8c:5d:51:4b:48:7a:ad:a6:44: 84:08:fb:00:0b:51:14:ed:e7:ca:89:e4:61:5b:2d:59:b4:2b: bf:57:2d:1d:cb:6f:72:43:98:00:07:aa:42:6d:ef:80:e9:9a: 3d:db:68:b9:0e:39:45:44:ae:08:08:11:38:33:32:52:df:9a: 35:95:4c:db:1d:1d:4e:de:72:5d:34:63:8b:59:a8:b2:b5:7e: d7:45:3d:66:99:5a:cb:56:2a:05:95:17:17:f2:39:70:3f:44: cf:4e:51:f3 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8Era4G/ev7sbdegRZh3plMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGNjM2Y0NmMyZmI0ZWVkNmI2OTkzYmIzN2YzNjY1ODFiN2ZlMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/cC3MjEKC9qgfCF17XqSUfR+XlN Nbv/xhhrVkPLD3UcXXY1Ml3DltTw+edMreMFhWstcxABIWU7PSFEBYanJFi+ml+A TmKGrsm3oCqvyiZM0Rt64kU80NxxvqjC43tewbgwhDHUVmDcJSFkJ3md8VdQXHcM CFesaJVT7ftyTfB4mJmEi/Ya3199eSCvuwJaLBhTIm31yHvgssOXNZeieyxw9vQZ 7k02AymNdrf5bWN9hqeu4frgOAouW9NXw0aAw+43esM/S1bnzJVhyd96SPx8QlhQ j3xR8Gd4TInXGhgIIc2qMsg0wjauOz5Ekl97uVUHHAUcwMMD+Rv8cCEcIQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNjMP0bC+07ta2mTuzfzZlgbf+C8MB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvMk13X1JzTDdUdTFyYVpPN05fTm1XQnRfNEx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAVBFLMAwD BABUEVMDBABUEVQwDQYJKoZIhvcNAQELBQADggEBAHbWKVfzWJBRziBNye4AQun+ IfC1nFU7i/FwUi2tpvX/pd1PBO3/hA+7FonabWCOj8iK3Ic160VzlqkAxxN/YHpI M2BctwTLagmgWP5GWoy3UEN+F6vKacH3/o3ee3yekwMJXyULCWoWoYDpSD6QU0IT E6QOUdamylFrrbzOwwcy4Ia+I71BfsmWOHqiiIcHhTfEOiHq3lfzGYxdUUtIeq2m RIQI+wALURTt58qJ5GFbLVm0K79XLR3Lb3JDmAAHqkJt74Dpmj3baLkOOUVErggI ETgzMlLfmjWVTNsdHU7ecl00Y4tZqLK1ftdFPWaZWstWKgWVFxfyOXA/RM9OUfM= -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:29 2026 by rpki-client