This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/2qExfB805-R2i4AdQ2Nza5P_ogA.roa File: 2qExfB805-R2i4AdQ2Nza5P_ogA.roa (raw, json) Hash identifier: I7bRoDVEoiwuKeHZcRlXKBPzc5ivPBkAnRRWojlZ0Wc= Subject key identifier: DA:A1:31:7C:1F:34:E7:E4:76:8B:80:1D:43:63:73:6B:93:FF:A2:00 Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec Certificate serial: 019B7EA449BBAE3108114FCB865B04B806DA Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/2qExfB805-R2i4AdQ2Nza5P_ogA.roa Signing time: Fri 02 Jan 2026 12:17:34 +0000 ROA not before: Fri 02 Jan 2026 12:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197870 IP address blocks: 176.57.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:49:bb:ae:31:08:11:4f:cb:86:5b:04:b8:06:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec Validity Not Before: Jan 2 12:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daa1317c1f34e7e4768b801d4363736b93ffa200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:be:ed:b5:81:d5:29:1b:38:43:85:c1:47:f1: 05:5c:b7:f8:fc:c6:7d:26:ee:aa:9a:81:49:14:7b: b5:1c:44:25:12:71:17:6d:6a:8e:63:76:41:a7:aa: a8:de:0d:9d:32:e4:45:f5:e3:8a:8b:94:6c:4e:0d: 0f:93:9d:96:d1:7c:dc:a2:12:b3:96:00:33:02:b6: fc:d5:90:7a:cc:2a:9d:db:44:7b:53:b4:50:d2:e3: 93:e4:47:fb:cb:d1:91:e5:e3:5b:8b:00:b0:7b:ed: 47:25:a6:b6:15:0a:3c:11:7f:85:66:d8:64:2a:51: b0:62:26:f7:fd:35:cb:f8:9c:0e:2e:41:7b:3f:5c: 31:22:44:20:f3:0d:09:5d:11:41:44:12:f8:13:86: 58:ae:12:21:78:24:ee:03:48:19:46:35:d4:28:0d: f8:c4:8a:2a:03:a2:dc:03:27:48:49:a5:15:96:50: 9c:53:1c:50:76:9e:45:44:f7:e1:bb:84:d8:fa:dc: bc:82:9b:c5:2d:2c:c8:79:de:47:bc:6a:db:74:4c: 57:ea:9d:5b:3e:e8:22:a7:f7:4a:9c:ac:70:c4:c3: d2:ce:45:bc:a8:ab:63:89:d0:74:73:0a:d4:c9:5a: c1:7a:8e:17:52:40:16:a6:97:4b:45:d6:39:15:0f: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A1:31:7C:1F:34:E7:E4:76:8B:80:1D:43:63:73:6B:93:FF:A2:00 X509v3 Authority Key Identifier: keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/2qExfB805-R2i4AdQ2Nza5P_ogA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.40.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:f9:0c:36:1b:51:8a:89:cd:88:12:66:08:d6:08:bf:1a:1c: 0d:7c:7e:54:ff:7d:53:ce:88:b2:27:13:5e:9c:30:a0:7e:2c: b0:77:6c:f8:99:31:a4:f3:53:45:ca:12:b7:e1:af:38:d5:e1: 12:b8:14:c3:01:0f:19:3b:ef:c8:17:3d:7e:3b:a2:f8:22:8b: c3:01:06:79:eb:12:d2:fb:8d:39:f3:3f:2a:37:2a:6b:07:7d: f8:54:53:88:2a:cb:32:8b:eb:e6:83:d1:db:84:f1:dc:9d:67: 97:49:ef:53:be:cd:c6:b4:ba:2f:5c:64:44:45:d4:cf:4d:51: 10:1d:de:bc:db:98:0c:a3:54:01:33:63:bb:25:a3:86:09:3a: 92:51:a2:99:2a:81:8c:69:51:47:53:6c:da:3a:7b:55:5b:f0: 92:a0:38:0f:43:b1:e6:a2:1a:1b:06:f4:61:0e:73:db:5d:1e: 56:38:0b:e7:a0:85:1e:44:f0:38:88:a3:75:75:f0:e3:3c:b6: fb:c8:8a:ce:75:8d:7b:23:cb:59:9a:85:b1:6e:0d:a0:8a:56: 38:55:d0:11:a8:51:89:9c:7f:bc:74:fa:e4:6e:58:17:16:72: 62:99:f7:c6:1f:f3:b1:1f:99:55:94:ba:53:d8:01:c0:fa:3e: 37:b6:01:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pEm7rjEIEU/LhlsEuAbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YjhkNWY5MTM4NTY4YjUyY2IwOTM2ZTJiNGM5NGY3N2Nl NTdhZWMwHhcNMjYwMTAyMTIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWExMzE3YzFmMzRlN2U0NzY4YjgwMWQ0MzYzNzM2YjkzZmZhMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL7ttYHVKRs4Q4XBR/EFXLf4/MZ9 Ju6qmoFJFHu1HEQlEnEXbWqOY3ZBp6qo3g2dMuRF9eOKi5RsTg0Pk52W0XzcohKz lgAzArb81ZB6zCqd20R7U7RQ0uOT5Ef7y9GR5eNbiwCwe+1HJaa2FQo8EX+FZthk KlGwYib3/TXL+JwOLkF7P1wxIkQg8w0JXRFBRBL4E4ZYrhIheCTuA0gZRjXUKA34 xIoqA6LcAydISaUVllCcUxxQdp5FRPfhu4TY+ty8gpvFLSzIed5HvGrbdExX6p1b Pugip/dKnKxwxMPSzkW8qKtjidB0cwrUyVrBeo4XUkAWppdLRdY5FQ+N3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNqhMXwfNOfkdouAHUNjc2uT/6IAMB8GA1UdIwQY MBaAFDS41fkThWi1LLCTbitMlPd85XrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxqVi1ST0ZhTFVzc0pOdUsweVU5M3psZXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mYzU4MjAtODE5Ny00ZjNkLWI2MjUt ZTIwZWJiZDA4NWUxLzEvMnFFeGZCODA1LVIyaTRBZFEyTnphNVBfb2dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9mYzU4MjAtODE5Ny00ZjNkLWI2MjUtZTIwZWJiZDA4NWUx LzEvTkxqVi1ST0ZhTFVzc0pOdUsweVU5M3psZXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsDkoMA0G CSqGSIb3DQEBCwUAA4IBAQAL+Qw2G1GKic2IEmYI1gi/GhwNfH5U/31TzoiyJxNe nDCgfiywd2z4mTGk81NFyhK34a841eESuBTDAQ8ZO+/IFz1+O6L4IovDAQZ56xLS +4058z8qNyprB334VFOIKssyi+vmg9HbhPHcnWeXSe9Tvs3GtLovXGRERdTPTVEQ Hd6825gMo1QBM2O7JaOGCTqSUaKZKoGMaVFHU2zaOntVW/CSoDgPQ7HmohobBvRh DnPbXR5WOAvnoIUeRPA4iKN1dfDjPLb7yIrOdY17I8tZmoWxbg2gilY4VdARqFGJ nH+8dPrkblgXFnJimffGH/OxH5lVlLpT2AHA+j43tgHX -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:08 2026 by rpki-client