This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/R_B2jaSZhjP35wcys5mL5Se3j8Q.roa File: R_B2jaSZhjP35wcys5mL5Se3j8Q.roa (raw, json) Hash identifier: dwMcpw95Em2A9IwZsNozR3xo42Nso6kgZ/pvjcsJhfA= Subject key identifier: 47:F0:76:8D:A4:99:86:33:F7:E7:07:32:B3:99:8B:E5:27:B7:8F:C4 Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730 Certificate serial: 019B78353F106DDE13C3F00615B8620D1169 Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/R_B2jaSZhjP35wcys5mL5Se3j8Q.roa Signing time: Thu 01 Jan 2026 06:18:34 +0000 ROA not before: Thu 01 Jan 2026 06:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2906 IP address blocks: 37.77.184.0/21 maxlen: 24 185.2.220.0/22 maxlen: 24 2a00:86c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3f:10:6d:de:13:c3:f0:06:15:b8:62:0d:11:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730 Validity Not Before: Jan 1 06:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47f0768da4998633f7e70732b3998be527b78fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:1a:d2:48:ef:8d:9e:3f:8b:ca:75:54:d9: 52:8f:59:d5:9e:5e:8a:19:da:b6:d9:51:9c:6c:81: 0b:01:d0:23:7a:30:51:c9:3c:18:f5:d5:53:09:62: 10:8d:49:0c:fa:59:13:c3:4b:d7:21:41:63:a3:45: 61:b7:99:7e:ed:d0:42:97:53:83:b7:63:de:a2:48: fa:83:6f:f6:8c:07:83:8c:7c:38:3a:bb:ac:36:48: 1e:91:41:b8:8b:58:b8:32:93:06:8c:7e:97:0a:c1: ee:7f:77:7c:9b:d6:8e:42:26:1e:d1:ea:e6:e3:7e: ff:1a:99:20:c5:41:6b:71:37:1d:7e:bc:9c:5d:f4: c1:73:78:01:9a:4b:7f:41:59:73:87:32:76:e7:c9: c6:0a:44:a6:cd:65:e4:f6:26:a5:78:d2:93:1b:0a: 7c:29:2f:0a:b3:9b:ff:33:26:7d:c9:81:af:f7:b8: c9:58:f5:1c:22:20:9e:35:05:dd:05:a6:50:b8:8e: 6c:e6:7d:aa:b0:a7:88:75:dd:c9:2a:13:95:46:4e: 46:20:01:d9:b4:6b:93:9c:8c:d0:ad:87:3c:83:6f: f2:8f:3c:0d:4d:a6:53:02:d9:d0:7c:c6:9c:e2:99: b8:49:26:36:f9:d9:45:c8:0e:9b:89:b3:4a:98:b3: d6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F0:76:8D:A4:99:86:33:F7:E7:07:32:B3:99:8B:E5:27:B7:8F:C4 X509v3 Authority Key Identifier: keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/R_B2jaSZhjP35wcys5mL5Se3j8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.184.0/21 185.2.220.0/22 IPv6: 2a00:86c0::/32 Signature Algorithm: sha256WithRSAEncryption 67:59:88:dc:f5:35:42:84:c1:6c:5a:60:51:36:6c:63:60:f9: 3f:15:46:bd:fc:eb:78:f5:31:49:51:a0:27:c0:d9:98:5b:ed: 92:2c:4e:5c:21:9d:ae:bc:cd:4a:e3:20:22:98:04:c3:17:76: 08:0a:f5:29:9d:e3:e7:2b:28:12:95:b0:74:a1:74:d8:f3:fd: 86:13:d7:1d:70:82:12:fb:17:5d:34:50:dc:bc:9b:8c:b4:59: 4b:8d:1e:78:11:65:cd:12:79:3d:b2:a7:14:03:a7:e9:c6:8f: 58:11:9c:be:0a:a1:be:27:fd:1b:37:d2:62:2f:38:f7:c3:58: 0a:08:4a:54:79:bb:05:83:bd:81:97:a2:60:eb:16:76:68:94: b4:5d:fb:2d:80:ee:05:86:eb:1f:cb:71:e8:e4:57:ba:b8:d5: d4:f2:b1:78:3c:69:d0:51:55:32:1b:0f:5a:64:d7:66:04:e7: 6e:89:55:09:24:d7:e1:19:f2:99:7e:96:34:69:c2:4e:69:14: 28:d5:d7:43:93:e7:34:1f:ad:75:dc:0d:8e:72:6b:a6:fc:0e: d1:87:08:36:dc:1b:07:ad:82:2e:2a:c1:4b:05:d8:e4:01:57: a9:56:ea:03:68:c9:42:e3:72:70:5d:16:3c:bf:b6:c9:0f:e0: ff:3d:98:18 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NT8Qbd4Tw/AGFbhiDRFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOTM0YzM2Yjc3MzAwODg2NWI5YzlmYjBmZDQ4NjY5Mzk1 YWM3MzAwHhcNMjYwMTAxMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2YwNzY4ZGE0OTk4NjMzZjdlNzA3MzJiMzk5OGJlNTI3Yjc4ZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVka0kjvjZ4/i8p1VNlSj1nVnl6K Gdq22VGcbIELAdAjejBRyTwY9dVTCWIQjUkM+lkTw0vXIUFjo0Vht5l+7dBCl1OD t2Peokj6g2/2jAeDjHw4OrusNkgekUG4i1i4MpMGjH6XCsHuf3d8m9aOQiYe0erm 437/GpkgxUFrcTcdfrycXfTBc3gBmkt/QVlzhzJ258nGCkSmzWXk9ialeNKTGwp8 KS8Ks5v/MyZ9yYGv97jJWPUcIiCeNQXdBaZQuI5s5n2qsKeIdd3JKhOVRk5GIAHZ tGuTnIzQrYc8g2/yjzwNTaZTAtnQfMac4pm4SSY2+dlFyA6bibNKmLPWjQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEfwdo2kmYYz9+cHMrOZi+Unt4/EMB8GA1UdIwQY MBaAFAuTTDa3cwCIZbnJ+w/Uhmk5WscwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQt YTMwMmY1MWQzODJjLzEvUl9CMmphU1poalAzNXdjeXM1bUw1U2UzajhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQtYTMwMmY1MWQzODJj LzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJU24AwQC uQLcMA0EAgACMAcDBQAqAIbAMA0GCSqGSIb3DQEBCwUAA4IBAQBnWYjc9TVChMFs WmBRNmxjYPk/FUa9/Ot49TFJUaAnwNmYW+2SLE5cIZ2uvM1K4yAimATDF3YICvUp nePnKygSlbB0oXTY8/2GE9cdcIIS+xddNFDcvJuMtFlLjR54EWXNEnk9sqcUA6fp xo9YEZy+CqG+J/0bN9JiLzj3w1gKCEpUebsFg72Bl6Jg6xZ2aJS0XfstgO4Fhusf y3Ho5Fe6uNXU8rF4PGnQUVUyGw9aZNdmBOduiVUJJNfhGfKZfpY0acJOaRQo1ddD k+c0H6113A2Ocmum/A7Rhwg23BsHrYIuKsFLBdjkAVepVuoDaMlC43JwXRY8v7bJ D+D/PZgY -----END CERTIFICATE-----Generated at Fri Jan 2 16:22:46 2026 by rpki-client