This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2WDRTRevv9-ox1rCwwOijTgm38Y.roa File: 2WDRTRevv9-ox1rCwwOijTgm38Y.roa (raw, json) Hash identifier: sBwwjQ4mnAUEOPtAO/AFlM1FAiCnDmaJW98VIqoVkfU= Subject key identifier: D9:60:D1:4D:17:AF:BF:DF:A8:C7:5A:C2:C3:03:A2:8D:38:26:DF:C6 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84DF0BD1E8F58B28EF376FB66F219F Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2WDRTRevv9-ox1rCwwOijTgm38Y.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29657 IP address blocks: 5.180.123.0/24 maxlen: 24 92.52.221.0/24 maxlen: 24 194.41.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:df:0b:d1:e8:f5:8b:28:ef:37:6f:b6:6f:21:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d960d14d17afbfdfa8c75ac2c303a28d3826dfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:15:86:55:8e:ed:11:b6:68:79:0c:ce:f6: 6b:f5:ad:96:63:7c:ee:be:c5:62:25:5f:2d:54:a1: b9:e4:ab:51:f0:d3:3e:3c:10:4f:fc:fa:cd:8e:4a: a2:48:1f:e1:37:09:bc:4b:a6:e9:9b:a6:b3:ac:14: 5c:8a:89:bf:4e:f4:11:32:fe:d6:b6:2e:33:35:e9: a8:50:b5:7e:83:4e:13:bf:d2:a5:3a:f4:98:e1:46: b5:94:51:09:9a:bc:59:d2:f4:c9:d9:ea:4b:94:ad: de:57:62:52:a5:f6:08:9b:64:5c:bf:7f:80:79:09: 84:3c:41:70:18:18:59:96:3b:5c:3d:f2:86:6d:01: 1e:eb:2e:55:d5:c8:2c:a6:d9:ad:5f:4e:92:2b:f0: dd:bb:51:6b:ac:21:6d:49:93:ac:73:21:46:ed:a7: 32:67:1d:ad:2e:b8:37:0e:c1:5c:f9:67:69:6f:a5: 47:15:15:8b:e0:0a:34:7b:69:8d:f0:0f:d0:83:c9: 22:7d:99:66:78:97:1a:f2:5a:8f:67:38:42:8d:f0: 46:fb:15:cf:d3:2d:c2:82:80:87:02:56:e1:ef:ef: a0:5d:d1:62:56:39:88:81:d6:f2:61:cb:52:74:1b: 5d:2b:6f:93:2e:a3:08:f2:74:7e:4d:ce:fe:78:26: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:60:D1:4D:17:AF:BF:DF:A8:C7:5A:C2:C3:03:A2:8D:38:26:DF:C6 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2WDRTRevv9-ox1rCwwOijTgm38Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.123.0/24 92.52.221.0/24 194.41.46.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:98:b4:de:dd:ba:bd:28:7a:d5:5a:37:6a:f8:58:ba:89:16: 53:e6:f6:ab:4d:72:48:c0:d7:d4:9c:2a:e7:b5:25:2d:e0:c5: 4d:41:dc:b2:1a:bf:66:cc:d5:09:17:84:55:65:18:ec:04:d2: 1d:d3:26:97:86:e5:fa:bd:1b:82:17:04:7d:8b:25:71:0b:07: 6b:c7:91:60:f2:ed:78:92:aa:da:2b:35:1b:0c:b5:72:44:61: b3:d0:ab:ca:37:8d:a7:3e:6a:0d:f8:18:4e:10:d5:24:7a:a0: 09:fb:90:dd:e3:0b:1c:13:dc:9c:ac:f6:69:64:35:28:79:69: 8f:4a:c0:c6:27:46:a3:ea:12:92:38:28:35:e2:f2:0a:8f:e1: 7a:ec:18:65:40:1d:6a:59:83:e5:2d:55:16:62:5e:dc:25:e8: b4:5d:ef:ef:74:0e:77:71:5f:c2:26:f5:e5:8d:80:b7:77:d7: 02:9b:c3:76:d6:88:92:f9:14:e1:77:f1:9f:e2:8d:e1:7b:be: 56:90:83:45:45:29:71:cf:57:f0:87:53:44:40:05:25:fd:1f: 26:21:f0:a1:a4:fb:fe:99:39:b8:57:b5:85:47:85:da:9d:66: f5:0b:23:80:a9:b3:03:e4:64:c3:eb:f7:54:74:99:b8:01:31: fb:6e:2d:3b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hN8L0ej1iyjvN2+2byGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTYwZDE0ZDE3YWZiZmRmYThjNzVhYzJjMzAzYTI4ZDM4MjZkZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfkVhlWO7RG2aHkMzvZr9a2WY3zu vsViJV8tVKG55KtR8NM+PBBP/PrNjkqiSB/hNwm8S6bpm6azrBRciom/TvQRMv7W ti4zNemoULV+g04Tv9KlOvSY4Ua1lFEJmrxZ0vTJ2epLlK3eV2JSpfYIm2Rcv3+A eQmEPEFwGBhZljtcPfKGbQEe6y5V1cgsptmtX06SK/Ddu1FrrCFtSZOscyFG7acy Zx2tLrg3DsFc+Wdpb6VHFRWL4Ao0e2mN8A/Qg8kifZlmeJca8lqPZzhCjfBG+xXP 0y3CgoCHAlbh7++gXdFiVjmIgdbyYctSdBtdK2+TLqMI8nR+Tc7+eCYS4QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNlg0U0Xr7/fqMdawsMDoo04Jt/GMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvMldEUlRSZXZ2OS1veDFyQ3d3T2lqVGdtMzhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbR7AwQA XDTdAwQAwikuMA0GCSqGSIb3DQEBCwUAA4IBAQCNmLTe3bq9KHrVWjdq+Fi6iRZT 5varTXJIwNfUnCrntSUt4MVNQdyyGr9mzNUJF4RVZRjsBNId0yaXhuX6vRuCFwR9 iyVxCwdrx5Fg8u14kqraKzUbDLVyRGGz0KvKN42nPmoN+BhOENUkeqAJ+5Dd4wsc E9ycrPZpZDUoeWmPSsDGJ0aj6hKSOCg14vIKj+F67BhlQB1qWYPlLVUWYl7cJei0 Xe/vdA53cV/CJvXljYC3d9cCm8N21oiS+RThd/Gf4o3he75WkINFRSlxz1fwh1NE QAUl/R8mIfChpPv+mTm4V7WFR4XanWb1CyOAqbMD5GTD6/dUdJm4ATH7bi07 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:43 2026 by rpki-client