This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/RNdr2XfKznxYQv64qQ8r-9v8mi8.roa File: RNdr2XfKznxYQv64qQ8r-9v8mi8.roa (raw, json) Hash identifier: 8EELTXHUCB2Nv32RBO7+0uGvBkgV+cDWxxUoIS6QShs= Subject key identifier: 44:D7:6B:D9:77:CA:CE:7C:58:42:FE:B8:A9:0F:2B:FB:DB:FC:9A:2F Certificate issuer: /CN=6dc85b6788e450c054134ae8c365748b23f74267 Certificate serial: 019B7EA64BF019C32EF8392B877C1FCB6BC7 Authority key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/RNdr2XfKznxYQv64qQ8r-9v8mi8.roa Signing time: Fri 02 Jan 2026 12:19:46 +0000 ROA not before: Fri 02 Jan 2026 12:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199889 IP address blocks: 185.207.20.0/24 maxlen: 24 2a13:ca00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:4b:f0:19:c3:2e:f8:39:2b:87:7c:1f:cb:6b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dc85b6788e450c054134ae8c365748b23f74267 Validity Not Before: Jan 2 12:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44d76bd977cace7c5842feb8a90f2bfbdbfc9a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9d:c0:02:e0:e0:65:96:6c:4a:c1:bd:48:28: 10:de:3d:d7:2b:40:9d:62:c0:a0:3c:92:c7:02:3a: bb:e1:69:fe:3d:f6:a5:18:0b:55:0b:c7:80:09:5c: 62:e6:2b:63:c2:84:65:06:ad:c3:b1:c0:aa:47:d4: 02:5e:22:00:de:a6:e1:c6:19:46:af:95:bb:6b:88: dd:36:47:03:0e:f4:71:45:df:9b:3f:6e:97:84:3c: 38:6e:a8:82:f9:71:72:d2:d2:db:35:8e:51:ee:79: e2:d4:5a:59:fe:cf:e2:37:fd:72:32:8a:aa:48:42: 59:ec:9d:3e:4b:04:b4:06:dd:13:fe:30:bb:36:12: 40:22:95:9a:e3:bc:07:90:8e:c0:b2:4e:d6:9d:99: d8:1c:66:65:2c:34:aa:f5:f4:b0:f8:82:a3:1a:ce: 58:93:40:60:6e:59:ce:85:91:bb:7f:51:71:61:96: 60:cd:0f:b7:ac:7c:c7:b4:d7:cb:e3:5d:9b:20:5f: 20:6a:db:35:b5:3c:da:80:5d:e2:3d:51:26:cd:47: f4:8c:9a:2f:7e:33:25:4c:0b:4f:e3:c9:68:75:69: 33:19:5c:79:fa:1b:f8:c2:ff:4c:05:ad:df:22:7a: dc:32:8d:0c:13:fa:48:e8:96:17:f1:a4:ef:85:34: a9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D7:6B:D9:77:CA:CE:7C:58:42:FE:B8:A9:0F:2B:FB:DB:FC:9A:2F X509v3 Authority Key Identifier: keyid:6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/RNdr2XfKznxYQv64qQ8r-9v8mi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.20.0/24 IPv6: 2a13:ca00::/29 Signature Algorithm: sha256WithRSAEncryption 0a:0d:bb:a9:8d:d8:e0:2f:1a:14:0f:ca:56:a7:66:dc:ce:f8: 24:98:76:83:d5:71:a3:9c:9d:5d:b3:6e:9b:50:65:26:c5:45: cd:ff:c3:c7:a1:18:5f:53:34:cd:29:a0:b3:95:0f:a8:7f:7f: 28:59:ac:8d:11:bd:d3:aa:d6:eb:1d:b6:a4:86:57:93:e9:40: b9:48:c0:7e:27:14:d0:77:de:c1:d2:a4:fc:64:8f:0b:d6:da: 7b:c3:fb:09:4a:99:94:6f:0c:7e:a3:59:24:70:7f:44:e6:9f: 8b:fe:dc:5f:e3:b0:a7:00:62:97:f5:d4:65:6a:bd:b9:e9:35: 0d:f8:24:a5:c1:1b:f1:52:f5:ef:32:9c:0a:52:a1:a5:05:7d: 3b:3f:e2:6d:2b:dd:6c:ad:9a:80:b3:94:fe:68:bc:05:5d:9a: e6:ea:9a:c1:97:52:8e:c4:df:5d:1a:d2:82:ba:5c:1a:20:ad: 88:2b:30:f5:4b:a5:c9:f5:1d:7c:f8:fb:81:a7:1c:ba:35:b6: 63:1c:f5:a0:ab:43:73:a4:28:66:24:eb:c3:42:73:84:0b:af: 64:ab:0f:7b:95:23:28:7f:5b:ed:92:ae:65:8d:28:0f:39:68: 5c:fd:0a:47:e7:8c:e8:8c:be:69:0d:44:96:94:6d:36:67:4b: 52:37:ff:a0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pkvwGcMu+Dkrh3wfy2vHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYzg1YjY3ODhlNDUwYzA1NDEzNGFlOGMzNjU3NDhiMjNm NzQyNjcwHhcNMjYwMTAyMTIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGQ3NmJkOTc3Y2FjZTdjNTg0MmZlYjhhOTBmMmJmYmRiZmM5YTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn53AAuDgZZZsSsG9SCgQ3j3XK0Cd YsCgPJLHAjq74Wn+PfalGAtVC8eACVxi5itjwoRlBq3DscCqR9QCXiIA3qbhxhlG r5W7a4jdNkcDDvRxRd+bP26XhDw4bqiC+XFy0tLbNY5R7nni1FpZ/s/iN/1yMoqq SEJZ7J0+SwS0Bt0T/jC7NhJAIpWa47wHkI7Ask7WnZnYHGZlLDSq9fSw+IKjGs5Y k0BgblnOhZG7f1FxYZZgzQ+3rHzHtNfL412bIF8gats1tTzagF3iPVEmzUf0jJov fjMlTAtP48lodWkzGVx5+hv4wv9MBa3fInrcMo0ME/pI6JYX8aTvhTSpwQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFETXa9l3ys58WEL+uKkPK/vb/JovMB8GA1UdIwQY MBaAFG3IW2eI5FDAVBNK6MNldIsj90JnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmNoYlo0amtVTUJVRTByb3cyVjBpeVAzUW1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lYmYxNjktYmUxNy00Y2U5LTkyNzUt MDgxNzg2YWIwNzQ4LzEvUk5kcjJYZkt6bnhZUXY2NHFROHItOXY4bWk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lYmYxNjktYmUxNy00Y2U5LTkyNzUtMDgxNzg2YWIwNzQ4 LzEvYmNoYlo0amtVTUJVRTByb3cyVjBpeVAzUW1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuc8UMA0E AgACMAcDBQMqE8oAMA0GCSqGSIb3DQEBCwUAA4IBAQAKDbupjdjgLxoUD8pWp2bc zvgkmHaD1XGjnJ1ds26bUGUmxUXN/8PHoRhfUzTNKaCzlQ+of38oWayNEb3Tqtbr HbakhleT6UC5SMB+JxTQd97B0qT8ZI8L1tp7w/sJSpmUbwx+o1kkcH9E5p+L/txf 47CnAGKX9dRlar256TUN+CSlwRvxUvXvMpwKUqGlBX07P+JtK91srZqAs5T+aLwF XZrm6prBl1KOxN9dGtKCulwaIK2IKzD1S6XJ9R18+PuBpxy6NbZjHPWgq0NzpChm JOvDQnOEC69kqw97lSMof1vtkq5ljSgPOWhc/QpH54zojL5pDUSWlG02Z0tSN/+g -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:16 2026 by rpki-client