This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/2xQqDLCvOuKXU0QWRwmxAiQO60Y.roa File: 2xQqDLCvOuKXU0QWRwmxAiQO60Y.roa (raw, json) Hash identifier: gLXXy/0ag65FQy8diJqfn+SYTmGLvrjLmdVqH/urHFk= Subject key identifier: DB:14:2A:0C:B0:AF:3A:E2:97:53:44:16:47:09:B1:02:24:0E:EB:46 Certificate issuer: /CN=6fa32e6581183f2c4897a7652333901f7f5bee73 Certificate serial: 019B78351B627F4787967555CC2C0CE50879 Authority key identifier: 6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/2xQqDLCvOuKXU0QWRwmxAiQO60Y.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211488 IP address blocks: 185.218.107.0/24 maxlen: 24 2a10:d1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1b:62:7f:47:87:96:75:55:cc:2c:0c:e5:08:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa32e6581183f2c4897a7652333901f7f5bee73 Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db142a0cb0af3ae2975344164709b102240eeb46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:7f:3f:be:a0:30:29:29:07:18:df:bf:d4: b1:70:8d:2f:ff:54:ec:09:5b:d7:b7:1e:62:a0:8f: 37:8b:07:23:b3:7f:c2:46:d4:2f:bf:bf:24:e6:93: c8:c3:b2:8e:3b:d0:47:12:9d:ab:7e:30:b0:4a:c9: db:9b:89:13:d1:55:a2:55:b0:2e:2e:15:1f:49:cf: e5:de:94:b2:9e:e5:6e:6a:9c:0b:d3:d9:d1:75:d5: 9b:13:08:3e:10:e6:e9:2d:d7:81:a8:df:ba:26:64: 42:1d:09:d0:99:7c:7b:2c:f9:c1:d6:1f:3f:41:56: 7c:91:45:00:8f:a1:65:28:28:66:90:4b:0c:db:33: dd:93:6f:4c:38:59:3a:7e:64:f4:a6:3f:57:9b:5b: 1e:68:84:f5:bf:8f:0e:5e:68:c7:f4:a9:3e:d4:d5: 58:5b:71:90:98:44:e1:aa:18:23:90:3b:41:73:55: 36:66:7a:8c:ea:2d:37:87:0e:0e:ea:ec:ff:cf:a8: 4b:68:76:9e:78:bc:12:25:6c:26:d6:da:d8:5d:65: cb:f1:8c:64:0e:27:bd:07:b3:c7:34:d4:07:25:c3: 2d:61:01:29:be:00:d3:67:ef:94:22:f4:83:f9:87: 94:5a:1d:41:9d:ec:44:ad:c0:dc:7c:01:98:af:53: a5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:14:2A:0C:B0:AF:3A:E2:97:53:44:16:47:09:B1:02:24:0E:EB:46 X509v3 Authority Key Identifier: keyid:6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/2xQqDLCvOuKXU0QWRwmxAiQO60Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.107.0/24 IPv6: 2a10:d1c0::/32 Signature Algorithm: sha256WithRSAEncryption 3a:96:6d:f2:4d:77:6a:9c:dd:ef:a6:94:5a:97:30:06:13:62: b3:81:27:81:88:6a:84:d9:b9:06:eb:28:9d:49:70:3b:bc:8e: ef:85:53:ea:95:e1:bd:30:6f:ab:11:7e:04:88:49:b3:f6:64: bc:eb:21:26:14:58:1c:2d:9d:08:0e:b6:ab:d2:34:4c:8c:7e: 6b:9d:2b:b3:52:b3:c7:24:40:5d:f9:35:a4:82:6e:95:29:63: e5:4e:29:49:65:88:6a:54:b3:ea:49:e5:7c:7c:e4:c7:8c:c0: 07:e0:95:3d:0c:50:68:0d:70:96:44:de:c4:80:56:e1:89:4b: 69:06:64:0c:f7:e2:70:43:25:36:a6:bf:b0:94:2e:d6:dd:dd: e9:a6:4e:ff:b8:83:52:e2:0f:4e:72:78:2f:37:b9:65:69:9a: 47:22:18:b3:fe:ff:3b:2d:dd:10:4a:ae:01:5d:db:2f:db:ad: a5:24:c0:66:73:40:97:fe:7a:fa:bc:f2:75:44:d4:c8:47:2c: eb:1f:03:b1:b1:f9:59:ef:f9:27:24:bc:79:3a:1c:96:e9:53: 97:f1:7a:24:e9:bb:64:6c:5a:9e:71:e8:d7:b2:c4:35:f5:0e: 0c:0d:ab:bc:31:51:78:82:30:ce:05:59:c3:6b:62:5f:47:d5: e1:7e:7c:1d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NRtif0eHlnVVzCwM5Qh5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTMyZTY1ODExODNmMmM0ODk3YTc2NTIzMzM5MDFmN2Y1 YmVlNzMwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjE0MmEwY2IwYWYzYWUyOTc1MzQ0MTY0NzA5YjEwMjI0MGVlYjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3F/P76gMCkpBxjfv9SxcI0v/1Ts CVvXtx5ioI83iwcjs3/CRtQvv78k5pPIw7KOO9BHEp2rfjCwSsnbm4kT0VWiVbAu LhUfSc/l3pSynuVuapwL09nRddWbEwg+EObpLdeBqN+6JmRCHQnQmXx7LPnB1h8/ QVZ8kUUAj6FlKChmkEsM2zPdk29MOFk6fmT0pj9Xm1seaIT1v48OXmjH9Kk+1NVY W3GQmEThqhgjkDtBc1U2ZnqM6i03hw4O6uz/z6hLaHaeeLwSJWwm1trYXWXL8Yxk Die9B7PHNNQHJcMtYQEpvgDTZ++UIvSD+YeUWh1BnexErcDcfAGYr1OlGwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNsUKgywrzril1NEFkcJsQIkDutGMB8GA1UdIwQY MBaAFG+jLmWBGD8sSJenZSMzkB9/W+5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZNdVpZRVlQeXhJbDZkbEl6T1FIMzliN25NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84NWNhOGUtZDc0Yi00YzA1LTgxYjYt NzcwZjA1NzJjMGU3LzEvMnhRcURMQ3ZPdUtYVTBRV1J3bXhBaVFPNjBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84NWNhOGUtZDc0Yi00YzA1LTgxYjYtNzcwZjA1NzJjMGU3 LzEvYjZNdVpZRVlQeXhJbDZkbEl6T1FIMzliN25NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudprMA0E AgACMAcDBQAqENHAMA0GCSqGSIb3DQEBCwUAA4IBAQA6lm3yTXdqnN3vppRalzAG E2KzgSeBiGqE2bkG6yidSXA7vI7vhVPqleG9MG+rEX4EiEmz9mS86yEmFFgcLZ0I Drar0jRMjH5rnSuzUrPHJEBd+TWkgm6VKWPlTilJZYhqVLPqSeV8fOTHjMAH4JU9 DFBoDXCWRN7EgFbhiUtpBmQM9+JwQyU2pr+wlC7W3d3ppk7/uINS4g9OcngvN7ll aZpHIhiz/v87Ld0QSq4BXdsv262lJMBmc0CX/nr6vPJ1RNTIRyzrHwOxsflZ7/kn JLx5OhyW6VOX8Xok6btkbFqecejXssQ19Q4MDau8MVF4gjDOBVnDa2JfR9Xhfnwd -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:55 2026 by rpki-client