This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/2l0GtVQPrSMldc422HjTQSRdXVk.roa File: 2l0GtVQPrSMldc422HjTQSRdXVk.roa (raw, json) Hash identifier: I2BTLtTZzbsnuRGEuGg3P61ep2ZFLBTas3um/pZvHuU= Subject key identifier: DA:5D:06:B5:54:0F:AD:23:25:75:CE:36:D8:78:D3:41:24:5D:5D:59 Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730 Certificate serial: 019B9D49BE2FE6B364ED1B3D9A5067C53B6A Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/2l0GtVQPrSMldc422HjTQSRdXVk.roa Signing time: Thu 08 Jan 2026 11:06:54 +0000 ROA not before: Thu 08 Jan 2026 11:06:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209543 IP address blocks: 45.92.204.0/22 maxlen: 24 185.150.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:49:be:2f:e6:b3:64:ed:1b:3d:9a:50:67:c5:3b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730 Validity Not Before: Jan 8 11:06:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da5d06b5540fad232575ce36d878d341245d5d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:d2:74:67:57:1c:8d:d2:ab:22:b8:7d:78: 4b:bf:02:3e:6f:b2:62:c2:53:c0:f6:7a:1e:17:8e: 29:5d:f2:7f:af:33:a9:fb:38:6a:c3:90:2c:f7:08: f2:de:1d:dd:3f:23:7d:f0:bb:6f:5d:b7:78:6b:98: a1:d2:89:25:b6:9b:88:05:a1:80:6b:5e:2e:42:1f: 1d:0a:41:5d:dd:25:0a:db:06:e6:8b:12:fe:2f:9d: f6:4e:66:40:65:dc:68:88:96:ac:8f:a8:87:dd:44: 42:8f:49:f4:04:fd:ae:f8:2a:15:97:aa:fd:16:d9: 74:43:3c:98:0a:b3:88:07:50:6f:96:9b:bc:01:a5: e6:1d:4b:1c:b6:dc:52:81:cd:aa:db:56:50:93:c5: a3:8b:48:e8:e0:ae:4b:d8:b7:67:30:2e:43:c3:56: 57:d8:97:55:98:87:75:fc:b9:6b:db:40:6f:38:36: 05:36:2e:55:3a:64:e2:c7:19:3c:63:09:9a:af:e2: 9c:94:03:be:93:36:1f:37:23:d1:c3:66:ad:eb:f8: 48:30:b4:d0:b9:01:4f:1b:d3:cb:6b:0a:d0:20:2f: ab:fd:dc:d0:a5:fc:22:96:76:41:8c:8f:dc:5c:04: 9e:9a:17:3f:13:ab:a1:90:74:6d:ba:9e:cc:f0:6b: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5D:06:B5:54:0F:AD:23:25:75:CE:36:D8:78:D3:41:24:5D:5D:59 X509v3 Authority Key Identifier: keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/2l0GtVQPrSMldc422HjTQSRdXVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.204.0/22 185.150.36.0/22 Signature Algorithm: sha256WithRSAEncryption c8:e2:0b:d6:96:67:75:42:6c:57:54:90:77:c3:e0:a4:4b:68: 43:de:8f:76:85:62:75:65:4b:cf:4f:56:99:3f:3c:0e:4f:13: e5:fc:86:aa:9d:d5:f0:7a:14:63:6c:df:ec:ea:01:76:0e:61: de:fb:da:7e:8f:f3:78:27:9d:b9:ab:60:e1:9d:a7:b3:d0:06: 25:a3:f3:8c:23:a5:1c:71:6e:49:42:7b:0c:2a:56:04:64:5e: 3e:91:80:d1:90:22:77:7c:21:3e:cc:e9:45:08:01:8e:c7:06: 7b:89:bc:89:4a:4f:74:15:96:ec:2f:9e:23:c5:e9:f4:7e:20: df:a9:9e:eb:c8:51:1c:bb:00:7a:66:74:cb:b3:d7:81:94:4d: 35:99:c3:16:e5:52:47:43:78:6a:c0:cb:e8:aa:58:e8:30:e6: 72:e5:c0:e9:ee:c3:0a:fc:d7:10:5d:0a:c8:b8:4a:b4:63:d9: d3:b6:9c:fd:fd:3d:90:b9:3e:e8:5b:2a:26:e9:b0:6e:81:88: bf:5f:4b:38:7d:17:96:cf:4e:58:51:0f:97:ab:63:25:43:59: 29:89:f5:74:97:07:40:60:5f:92:f5:d7:ec:40:e9:7c:27:ec: 52:cf:ab:b4:9f:d5:a5:79:0d:2a:d4:b2:b3:f8:e4:20:2f:c4: 07:56:74:82 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZudSb4v5rNk7Rs9mlBnxTtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTUyZTljOTY0ZGU2ZmY1NGUwOTljNzExNTVjMWExZGVj OGE3MzAwHhcNMjYwMTA4MTEwNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTVkMDZiNTU0MGZhZDIzMjU3NWNlMzZkODc4ZDM0MTI0NWQ1ZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZPSdGdXHI3SqyK4fXhLvwI+b7Ji wlPA9noeF44pXfJ/rzOp+zhqw5As9wjy3h3dPyN98LtvXbd4a5ih0okltpuIBaGA a14uQh8dCkFd3SUK2wbmixL+L532TmZAZdxoiJasj6iH3URCj0n0BP2u+CoVl6r9 Ftl0QzyYCrOIB1Bvlpu8AaXmHUscttxSgc2q21ZQk8Wji0jo4K5L2LdnMC5Dw1ZX 2JdVmId1/Llr20BvODYFNi5VOmTixxk8Ywmar+KclAO+kzYfNyPRw2at6/hIMLTQ uQFPG9PLawrQIC+r/dzQpfwilnZBjI/cXASemhc/E6uhkHRtup7M8Gu51wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNpdBrVUD60jJXXONth400EkXV1ZMB8GA1UdIwQY MBaAFDdVLpyWTeb/VOCZxxFVwaHeyKcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDIt ZWUyOGE2NWM4YTIyLzEvMmwwR3RWUVByU01sZGM0MjJIalRRU1JkWFZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDItZWUyOGE2NWM4YTIy LzEvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVzMAwQC uZYkMA0GCSqGSIb3DQEBCwUAA4IBAQDI4gvWlmd1QmxXVJB3w+CkS2hD3o92hWJ1 ZUvPT1aZPzwOTxPl/IaqndXwehRjbN/s6gF2DmHe+9p+j/N4J525q2Dhnaez0AYl o/OMI6UccW5JQnsMKlYEZF4+kYDRkCJ3fCE+zOlFCAGOxwZ7ibyJSk90FZbsL54j xen0fiDfqZ7ryFEcuwB6ZnTLs9eBlE01mcMW5VJHQ3hqwMvoqljoMOZy5cDp7sMK /NcQXQrIuEq0Y9nTtpz9/T2QuT7oWyom6bBugYi/X0s4fReWz05YUQ+Xq2MlQ1kp ifV0lwdAYF+S9dfsQOl8J+xSz6u0n9WleQ0q1LKz+OQgL8QHVnSC -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:36 2026 by rpki-client