This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/2ersDEYbQtg4l5m9V8r0SieR8Vo.roa File: 2ersDEYbQtg4l5m9V8r0SieR8Vo.roa (raw, json) Hash identifier: aUuOBsE01fiLcyj9TfP/Qu1NPe+7XiHnxfWsVnOH0VI= Subject key identifier: D9:EA:EC:0C:46:1B:42:D8:38:97:99:BD:57:CA:F4:4A:27:91:F1:5A Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB15CF890EAC2E067C366D43CB9A26 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/2ersDEYbQtg4l5m9V8r0SieR8Vo.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 91.108.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:15:cf:89:0e:ac:2e:06:7c:36:6d:43:cb:9a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9eaec0c461b42d8389799bd57caf44a2791f15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6a:57:fe:26:ae:1d:35:87:1d:31:d6:38:da: 44:e3:86:12:95:47:e2:a1:33:2a:fc:78:44:55:6a: a7:90:50:f7:8b:db:4a:4b:c6:a9:af:6f:84:44:6c: 66:5a:d6:8c:69:24:6c:ea:a3:6b:09:4f:d7:73:1c: f2:a0:04:70:64:aa:4f:22:a4:67:dc:be:b2:a5:c5: 16:d6:56:1e:90:b8:83:d6:fd:ab:e7:43:ac:3f:53: d8:38:e6:b7:7d:99:88:98:90:04:40:0b:ff:11:7a: 8c:84:d1:6a:f4:0a:4a:52:4d:85:bd:e5:bd:7a:42: 9c:04:96:bd:f5:fb:39:a8:ba:a0:a1:cc:30:3b:f6: 48:87:39:b1:61:1b:d2:52:ca:37:e3:8d:c7:7c:23: 3e:af:9b:a3:dc:06:43:31:e4:01:a4:13:84:38:f7: c0:bf:12:09:02:87:8f:c8:a0:a3:0e:98:1f:07:a3: 74:7d:94:c0:1b:bd:86:2d:09:a7:b1:db:60:60:ff: 0b:46:d9:35:c4:ed:4f:4f:3f:c4:be:bc:0e:75:17: 01:42:8b:42:8c:48:be:a6:1e:8b:b4:85:b2:d9:ab: bc:a6:b5:aa:15:6f:47:89:56:fe:a0:85:7f:4c:72: a7:58:3a:d0:6c:ea:58:53:90:0c:cf:86:fc:52:66: 82:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EA:EC:0C:46:1B:42:D8:38:97:99:BD:57:CA:F4:4A:27:91:F1:5A X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/2ersDEYbQtg4l5m9V8r0SieR8Vo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.254.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:ca:50:ef:87:b5:61:e1:7c:13:9b:4b:ae:24:3f:3f:8e:ce: 27:6f:ba:63:f7:ba:cc:9b:14:bf:2f:9f:1a:31:b5:54:e8:23: ad:f8:da:60:9b:b6:09:d7:01:46:48:1f:93:dc:6e:9b:81:08: d7:b0:43:81:3c:bb:a5:0b:fd:77:0c:ad:39:12:8e:d2:a4:a3: 79:fa:e4:63:29:56:f5:42:df:d4:35:d5:bb:4e:6d:e5:df:75: f8:8c:e8:50:4f:69:ae:a1:83:aa:32:84:29:7f:b0:42:6d:4a: 35:ba:97:1e:e4:a2:12:56:0b:99:b1:4c:87:f8:3d:9f:e4:53: 25:71:6d:83:fd:89:54:1e:9e:2a:bd:41:57:4c:72:65:26:f6: 4e:af:14:b7:33:8c:3f:db:ca:cc:a4:2a:da:4b:c9:72:0d:2d: 58:e9:26:82:5f:04:a3:26:d9:b5:02:61:6c:4d:6b:7a:4c:63: 8d:b1:88:2d:b0:db:4a:50:64:67:f6:ff:7e:4c:57:1c:45:57: 98:0d:50:33:b3:36:b8:a2:5f:a3:23:11:ae:34:24:96:76:2f: d1:2b:db:6d:41:f8:60:e8:1d:6d:66:56:a5:42:d8:ba:49:81: ca:b1:ac:3a:2b:5b:8b:2f:7a:35:a8:7c:98:f2:f7:b7:88:10: ad:6f:2b:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xXPiQ6sLgZ8Nm1Dy5omMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWVhZWMwYzQ2MWI0MmQ4Mzg5Nzk5YmQ1N2NhZjQ0YTI3OTFmMTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GpX/iauHTWHHTHWONpE44YSlUfi oTMq/HhEVWqnkFD3i9tKS8apr2+ERGxmWtaMaSRs6qNrCU/XcxzyoARwZKpPIqRn 3L6ypcUW1lYekLiD1v2r50OsP1PYOOa3fZmImJAEQAv/EXqMhNFq9ApKUk2FveW9 ekKcBJa99fs5qLqgocwwO/ZIhzmxYRvSUso3443HfCM+r5uj3AZDMeQBpBOEOPfA vxIJAoePyKCjDpgfB6N0fZTAG72GLQmnsdtgYP8LRtk1xO1PTz/EvrwOdRcBQotC jEi+ph6LtIWy2au8prWqFW9HiVb+oIV/THKnWDrQbOpYU5AMz4b8UmaCEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNnq7AxGG0LYOJeZvVfK9EonkfFaMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvMmVyc0RFWWJRdGc0bDVtOVY4cjBTaWVSOFZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2z+MA0G CSqGSIb3DQEBCwUAA4IBAQCcylDvh7Vh4XwTm0uuJD8/js4nb7pj97rMmxS/L58a MbVU6COt+Npgm7YJ1wFGSB+T3G6bgQjXsEOBPLulC/13DK05Eo7SpKN5+uRjKVb1 Qt/UNdW7Tm3l33X4jOhQT2muoYOqMoQpf7BCbUo1upce5KISVguZsUyH+D2f5FMl cW2D/YlUHp4qvUFXTHJlJvZOrxS3M4w/28rMpCraS8lyDS1Y6SaCXwSjJtm1AmFs TWt6TGONsYgtsNtKUGRn9v9+TFccRVeYDVAzsza4ol+jIxGuNCSWdi/RK9ttQfhg 6B1tZlalQti6SYHKsaw6K1uLL3o1qHyY8ve3iBCtbyvs -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:19 2026 by rpki-client