This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/t2ZZuk9Jhb77dG7jfBxACPE3v0Y.roa File: t2ZZuk9Jhb77dG7jfBxACPE3v0Y.roa (raw, json) Hash identifier: j8FLow634/sFX5We1fU/Tl5tl/Iw6/b+Vn5Ia8rywE8= Subject key identifier: B7:66:59:BA:4F:49:85:BE:FB:74:6E:E3:7C:1C:40:08:F1:37:BF:46 Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452 Certificate serial: 019B7F84706FCB71AC8C155A03F0360CA2F6 Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/t2ZZuk9Jhb77dG7jfBxACPE3v0Y.roa Signing time: Fri 02 Jan 2026 16:22:24 +0000 ROA not before: Fri 02 Jan 2026 16:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210588 IP address blocks: 37.200.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:70:6f:cb:71:ac:8c:15:5a:03:f0:36:0c:a2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452 Validity Not Before: Jan 2 16:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b76659ba4f4985befb746ee37c1c4008f137bf46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7f:49:be:d8:c9:94:95:6c:12:4e:f4:ba:6d: 79:6c:93:c6:b5:f6:e2:89:81:e7:0b:c0:86:85:b9: b1:7d:12:13:98:af:a4:12:5f:59:4c:55:fb:df:4d: 31:d4:da:3b:61:75:84:61:88:e5:46:d6:3a:be:52: fe:2c:ae:82:fa:66:ab:c4:61:f9:ba:8c:66:7e:65: 1f:a1:87:27:f0:a0:18:8c:dc:f5:74:3d:74:1b:7b: ab:1d:f4:e9:90:3a:16:83:1a:47:e0:5d:eb:69:2c: d0:cd:ff:5b:5c:e9:7c:06:52:ac:34:2d:91:c2:aa: 95:08:68:a0:06:ab:20:d7:42:db:d0:b8:51:f3:0f: 3f:ad:2f:a4:a4:c2:7b:68:fb:db:3d:73:39:cf:1c: 1a:1a:4a:aa:c8:b0:c6:c6:e4:d5:f0:59:70:e9:31: da:45:ae:df:3f:a3:3f:8f:c5:b7:a1:82:a4:e6:3f: d7:4b:01:3b:e8:28:0c:f2:ec:17:b1:77:2a:ac:dd: 19:0a:64:9f:4b:29:b8:27:63:b4:fa:d7:87:b1:f0: 4c:20:b2:dd:4a:9a:59:0b:40:87:b9:39:61:b6:32: 1f:2a:b9:57:ff:38:e6:d7:92:74:fd:91:81:94:43: f9:fb:f0:20:02:20:a3:88:f5:51:68:51:8d:9f:cf: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:66:59:BA:4F:49:85:BE:FB:74:6E:E3:7C:1C:40:08:F1:37:BF:46 X509v3 Authority Key Identifier: keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/t2ZZuk9Jhb77dG7jfBxACPE3v0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.200.87.0/24 Signature Algorithm: sha256WithRSAEncryption a2:92:18:8e:40:b2:45:14:97:f7:e1:77:c3:d8:12:6e:80:c3: 90:5c:76:2c:d5:21:cd:11:30:80:03:cf:a8:dc:1f:f3:1a:8a: 5b:cf:fd:78:47:63:bb:55:c3:41:1d:be:89:75:da:52:bb:3f: 48:61:f1:46:9b:4d:34:4a:ba:5d:6f:c8:b8:2f:29:d7:35:6d: 2f:b5:4b:8f:e7:5d:8d:2b:02:11:3b:d7:f6:f4:5a:26:33:82: 95:00:b6:93:f5:63:97:2e:3f:d2:ec:d8:20:a5:c3:16:f5:e0: 1f:a3:fb:ad:0e:d5:a9:88:d3:aa:ed:17:ea:66:4f:3a:cd:b5: d1:b5:9a:9d:c8:53:f3:0e:d3:c9:95:f2:ee:c6:c5:e5:21:35: 3c:21:2f:1d:06:ec:3a:75:2b:a1:50:1f:3c:35:84:8a:bd:bd: 8b:dd:c7:f2:4b:1f:61:38:16:17:c6:ec:9d:97:9f:e3:88:87: 5d:50:8f:2d:e0:fd:69:83:b1:c4:39:94:2e:70:64:8c:d1:33: 17:95:76:b8:fc:e6:f3:a7:2d:22:66:9f:90:5c:09:2e:e0:2d: bd:4e:bd:43:15:cd:74:69:28:9f:12:07:76:74:5c:fa:f7:29: 0f:93:a4:55:23:6d:40:4c:fa:ca:46:d3:38:05:e8:8c:b9:e6: fd:f8:1c:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHBvy3GsjBVaA/A2DKL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNmM0MjRjZmU5MjcwMzEwMGQ1MGEyODMyMjUzNzQ0ZGQ3 NTY0NTIwHhcNMjYwMTAyMTYyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzY2NTliYTRmNDk4NWJlZmI3NDZlZTM3YzFjNDAwOGYxMzdiZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H9JvtjJlJVsEk70um15bJPGtfbi iYHnC8CGhbmxfRITmK+kEl9ZTFX7300x1No7YXWEYYjlRtY6vlL+LK6C+marxGH5 uoxmfmUfoYcn8KAYjNz1dD10G3urHfTpkDoWgxpH4F3raSzQzf9bXOl8BlKsNC2R wqqVCGigBqsg10Lb0LhR8w8/rS+kpMJ7aPvbPXM5zxwaGkqqyLDGxuTV8Flw6THa Ra7fP6M/j8W3oYKk5j/XSwE76CgM8uwXsXcqrN0ZCmSfSym4J2O0+teHsfBMILLd SppZC0CHuTlhtjIfKrlX/zjm15J0/ZGBlEP5+/AgAiCjiPVRaFGNn89F2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdmWbpPSYW++3Ru43wcQAjxN79GMB8GA1UdIwQY MBaAFI9sQkz+knAxANUKKDIlN0TddWRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWI4NGEtN2U3NS00OGY1LWJhMzgt MGNiMjE4ZTVlNzA3LzEvdDJaWnVrOUpoYjc3ZEc3amZCeEFDUEUzdjBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hZWI4NGEtN2U3NS00OGY1LWJhMzgtMGNiMjE4ZTVlNzA3 LzEvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJchXMA0G CSqGSIb3DQEBCwUAA4IBAQCikhiOQLJFFJf34XfD2BJugMOQXHYs1SHNETCAA8+o 3B/zGopbz/14R2O7VcNBHb6JddpSuz9IYfFGm000Srpdb8i4LynXNW0vtUuP512N KwIRO9f29FomM4KVALaT9WOXLj/S7NggpcMW9eAfo/utDtWpiNOq7RfqZk86zbXR tZqdyFPzDtPJlfLuxsXlITU8IS8dBuw6dSuhUB88NYSKvb2L3cfySx9hOBYXxuyd l5/jiIddUI8t4P1pg7HEOZQucGSM0TMXlXa4/Obzpy0iZp+QXAku4C29Tr1DFc10 aSifEgd2dFz69ykPk6RVI21ATPrKRtM4BeiMueb9+BxP -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:44 2026 by rpki-client