This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/2tOQcNqia9FY_EgjlzJvmLqEZvk.roa File: 2tOQcNqia9FY_EgjlzJvmLqEZvk.roa (raw, json) Hash identifier: vCVW24gm0Il+L7GD5QhbLKqrNdBKimfTZajv5G9G6e0= Subject key identifier: DA:D3:90:70:DA:A2:6B:D1:58:FC:48:23:97:32:6F:98:BA:84:66:F9 Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b Certificate serial: 019B7CEE237DCBA2BB35297C9EE27A4F958A Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/2tOQcNqia9FY_EgjlzJvmLqEZvk.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209059 IP address blocks: 93.177.126.0/24 maxlen: 24 176.124.196.0/24 maxlen: 24 176.124.197.0/24 maxlen: 24 2a10:880::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:23:7d:cb:a2:bb:35:29:7c:9e:e2:7a:4f:95:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dad39070daa26bd158fc482397326f98ba8466f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d5:2d:6f:5e:bb:b3:7e:6a:e3:75:32:b7:21: 22:00:51:ae:2c:f8:ea:eb:6f:9a:38:c3:53:0b:f4: 26:91:21:f0:d5:d2:ad:a1:10:65:f6:bd:91:91:a8: 31:24:6e:22:a6:c3:1a:69:57:1e:2c:52:45:d1:11: 42:d2:18:31:35:7c:cd:62:09:7c:f7:69:50:79:0d: ad:0e:0c:66:53:5d:a3:4d:2b:12:fe:8b:71:96:08: ac:28:a4:a2:32:d9:09:e3:1f:c8:6c:1c:da:27:43: 93:d0:59:82:8c:b6:0e:7a:57:4b:19:c0:fd:1e:5a: 3d:5d:f1:60:1d:c8:08:20:e4:ee:4c:91:04:53:14: f2:55:34:cc:3e:1d:4f:ae:59:d5:ba:5e:35:aa:69: 60:56:ac:b8:67:22:15:d4:f9:49:9c:53:6f:d7:24: 3d:b5:c3:07:59:98:a9:1a:f5:58:9f:2f:5a:a7:ba: dc:39:6f:79:e5:0f:56:83:f6:fd:6e:ae:02:a4:4f: ec:eb:84:7c:0f:af:01:81:1c:b3:ac:64:74:8b:28: 97:2d:01:df:79:ef:52:52:63:d4:d9:09:41:bb:3f: 12:4a:44:05:61:c2:f4:f1:5f:10:94:90:98:af:f3: 21:6c:4a:a8:87:a6:f3:9d:ce:35:3a:34:71:25:d0: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D3:90:70:DA:A2:6B:D1:58:FC:48:23:97:32:6F:98:BA:84:66:F9 X509v3 Authority Key Identifier: keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/2tOQcNqia9FY_EgjlzJvmLqEZvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.177.126.0/24 176.124.196.0/23 IPv6: 2a10:880::/64 Signature Algorithm: sha256WithRSAEncryption 6b:c2:a8:65:61:e0:d9:3f:cf:8f:1a:43:7c:b5:5a:0d:8b:91: 5f:34:20:f8:59:49:8c:c5:18:d2:ed:29:7d:48:bf:b8:18:9d: 42:86:66:16:9e:88:33:72:07:5e:93:7e:a1:60:26:74:56:49: 65:28:00:17:06:ec:8c:c3:13:3b:08:ed:cb:bd:31:4d:10:68: d9:27:5b:fa:50:ee:77:b4:6a:a9:2b:e8:a6:3f:bb:f2:34:04: 8b:36:43:73:2a:e5:d5:ad:07:d8:0a:b4:24:d8:38:6c:03:32: f1:bd:ba:34:13:15:e3:36:9a:f2:b4:68:ac:7a:95:89:24:55: ce:e4:fd:f5:d1:dd:3b:a0:ec:99:2a:ff:20:99:92:d1:5e:72: 48:c5:9c:0b:c7:6f:0e:bb:3f:41:27:ab:6c:33:70:da:f7:08: 90:de:88:55:ef:eb:54:de:e8:33:74:da:bc:0b:08:61:75:98: 18:4f:ba:8c:0e:83:ed:9f:ae:54:98:b1:a6:e5:fb:1e:8c:99: df:95:f6:a6:b0:7b:66:02:ee:c1:25:6e:1c:5c:93:da:86:29: 34:d4:dd:ce:b5:d2:fe:fd:03:ef:d5:23:97:c5:5a:fd:b5:d8: 65:76:c4:52:e9:3e:a3:f6:04:1e:0b:22:ea:a5:86:0e:a3:56: 55:5f:06:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt87iN9y6K7NSl8nuJ6T5WKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjY2Q1ODNjOGQ3MWEyNDI3ZTAwNjBlM2NjOTI0ZjMyZGMx YTgyMGIwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWQzOTA3MGRhYTI2YmQxNThmYzQ4MjM5NzMyNmY5OGJhODQ2NmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49Utb167s35q43UytyEiAFGuLPjq 62+aOMNTC/QmkSHw1dKtoRBl9r2RkagxJG4ipsMaaVceLFJF0RFC0hgxNXzNYgl8 92lQeQ2tDgxmU12jTSsS/otxlgisKKSiMtkJ4x/IbBzaJ0OT0FmCjLYOeldLGcD9 Hlo9XfFgHcgIIOTuTJEEUxTyVTTMPh1PrlnVul41qmlgVqy4ZyIV1PlJnFNv1yQ9 tcMHWZipGvVYny9ap7rcOW955Q9Wg/b9bq4CpE/s64R8D68BgRyzrGR0iyiXLQHf ee9SUmPU2QlBuz8SSkQFYcL08V8QlJCYr/MhbEqoh6bznc41OjRxJdAs4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrTkHDaomvRWPxII5cyb5i6hGb5MB8GA1UdIwQY MBaAFMzNWDyNcaJCfgBg48ySTzLcGoILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYt ZjQ4NTAyZDEzOTQ4LzEvMnRPUWNOcWlhOUZZX0Vnamx6SnZtTHFFWnZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYtZjQ4NTAyZDEzOTQ4 LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzASBAIAATAMAwQAXbF+AwQB sHzEMBEEAgACMAsDCQAqEAiAAAAAADANBgkqhkiG9w0BAQsFAAOCAQEAa8KoZWHg 2T/PjxpDfLVaDYuRXzQg+FlJjMUY0u0pfUi/uBidQoZmFp6IM3IHXpN+oWAmdFZJ ZSgAFwbsjMMTOwjty70xTRBo2Sdb+lDud7RqqSvopj+78jQEizZDcyrl1a0H2Aq0 JNg4bAMy8b26NBMV4zaa8rRorHqViSRVzuT99dHdO6DsmSr/IJmS0V5ySMWcC8dv Drs/QSerbDNw2vcIkN6IVe/rVN7oM3TavAsIYXWYGE+6jA6D7Z+uVJixpuX7HoyZ 35X2prB7ZgLuwSVuHFyT2oYpNNTdzrXS/v0D79Ujl8Va/bXYZXbEUuk+o/YEHgsi 6qWGDqNWVV8G4Q== -----END CERTIFICATE-----Generated at Wed Jan 21 14:14:49 2026 by rpki-client