This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/2Rmmekua5E3Q0QLzEFm3-uCxHB8.roa File: 2Rmmekua5E3Q0QLzEFm3-uCxHB8.roa (raw, json) Hash identifier: 2DEDWpJ7SE3vVfpuMvn1i8m6ipkkzB3x7E0ogUZSs8I= Subject key identifier: D9:19:A6:7A:4B:9A:E4:4D:D0:D1:02:F3:10:59:B7:FA:E0:B1:1C:1F Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5AA6D8AB142210CA328FB65A7FE543 Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/2Rmmekua5E3Q0QLzEFm3-uCxHB8.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215311 IP address blocks: 83.147.18.0/24 maxlen: 24 83.147.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a6:d8:ab:14:22:10:ca:32:8f:b6:5a:7f:e5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d919a67a4b9ae44dd0d102f31059b7fae0b11c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:66:c8:82:0d:66:c8:5b:81:fd:ee:b0:e5: c5:1e:1b:d7:3b:64:2a:ec:1b:d6:50:c5:00:9c:0f: 02:b4:ab:c3:ac:5f:bf:14:0d:30:16:9d:cb:fc:60: f0:86:85:cc:e8:f9:8c:08:80:b0:1b:cc:ab:84:e1: 01:5f:ca:04:08:f7:eb:53:95:73:f0:17:88:5c:66: b3:13:62:ea:89:b9:bb:cf:f6:4e:80:fd:d0:e1:39: 4c:1b:f2:ba:84:79:1f:d6:f9:8b:49:e1:24:87:0f: aa:65:da:50:d3:59:3e:9f:18:6e:46:c2:90:26:9e: f7:50:16:47:e3:cb:b8:bc:6a:38:14:fb:81:fd:05: 0c:2f:aa:3c:a8:5b:2f:6a:d3:37:28:3e:0b:b2:e7: de:18:74:30:14:60:28:e7:59:af:98:a8:d1:04:cb: 1a:95:df:13:c8:4a:9e:19:ca:2a:48:b8:88:9d:e6: ec:65:4b:13:da:1b:61:89:b9:29:71:ed:97:47:0e: bc:19:71:f3:62:d0:aa:10:ec:b5:36:e3:ac:b0:35: ea:53:ef:ee:fc:05:77:3f:cc:95:a1:78:03:e2:53: 27:2a:fa:d8:52:15:53:8f:95:d0:a9:94:b3:7a:85: 66:b7:f7:2a:be:05:d7:94:ab:8b:f7:25:b2:50:68: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:19:A6:7A:4B:9A:E4:4D:D0:D1:02:F3:10:59:B7:FA:E0:B1:1C:1F X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/2Rmmekua5E3Q0QLzEFm3-uCxHB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.18.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:06:dd:fc:e0:5c:c2:77:7f:52:ac:dc:f4:08:d5:50:35:9e: 94:34:5b:73:ce:b5:9c:a2:74:0d:7d:55:64:97:ef:dc:29:0b: 89:55:b6:75:79:5b:5e:c4:f9:a6:6b:fe:8b:74:b4:e1:f3:99: 7a:67:0a:50:fd:3e:23:1e:57:70:a1:f1:70:db:d2:e5:a6:14: 7a:d2:13:51:e7:f7:d8:45:b8:46:30:43:fa:be:30:c0:85:04: e6:28:26:94:9b:fd:2a:74:10:35:43:34:33:9c:0d:c1:2f:6d: 23:bf:79:51:aa:41:0a:bf:92:0c:1f:72:84:09:45:fc:e3:00: ed:5e:be:e1:d2:92:d3:c2:69:a2:43:98:ed:cc:6b:1e:7a:da: ec:b5:ac:c6:db:f2:5c:36:f7:82:2d:ea:49:0a:01:a3:a0:1c: ba:79:f8:f3:93:ad:01:55:e9:4f:40:39:f3:f5:d0:3b:97:08: 26:26:81:dd:02:d2:e5:46:eb:64:07:88:53:ae:14:91:66:05: 01:b5:4a:f6:92:07:e7:70:8d:1b:e2:1c:73:8e:e2:3c:0c:a9: 2b:a9:82:7f:b0:c3:b6:9a:7e:92:83:46:99:e1:4f:f3:f8:7d: db:33:1e:b3:5f:9d:d0:8f:8f:7e:e1:20:48:f5:b2:9e:0f:db: 5d:bb:5a:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqbYqxQiEMoyj7Zaf+VDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTE5YTY3YTRiOWFlNDRkZDBkMTAyZjMxMDU5YjdmYWUwYjExYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjJmyIINZshbgf3usOXFHhvXO2Qq 7BvWUMUAnA8CtKvDrF+/FA0wFp3L/GDwhoXM6PmMCICwG8yrhOEBX8oECPfrU5Vz 8BeIXGazE2Lqibm7z/ZOgP3Q4TlMG/K6hHkf1vmLSeEkhw+qZdpQ01k+nxhuRsKQ Jp73UBZH48u4vGo4FPuB/QUML6o8qFsvatM3KD4LsufeGHQwFGAo51mvmKjRBMsa ld8TyEqeGcoqSLiInebsZUsT2hthibkpce2XRw68GXHzYtCqEOy1NuOssDXqU+/u /AV3P8yVoXgD4lMnKvrYUhVTj5XQqZSzeoVmt/cqvgXXlKuL9yWyUGg5pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNkZpnpLmuRN0NEC8xBZt/rgsRwfMB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvMlJtbWVrdWE1RTNRMFFMekVGbTMtdUN4SEI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU5MSMA0G CSqGSIb3DQEBCwUAA4IBAQB/Bt384FzCd39SrNz0CNVQNZ6UNFtzzrWconQNfVVk l+/cKQuJVbZ1eVtexPmma/6LdLTh85l6ZwpQ/T4jHldwofFw29LlphR60hNR5/fY RbhGMEP6vjDAhQTmKCaUm/0qdBA1QzQznA3BL20jv3lRqkEKv5IMH3KECUX84wDt Xr7h0pLTwmmiQ5jtzGseetrstazG2/JcNveCLepJCgGjoBy6efjzk60BVelPQDnz 9dA7lwgmJoHdAtLlRutkB4hTrhSRZgUBtUr2kgfncI0b4hxzjuI8DKkrqYJ/sMO2 mn6Sg0aZ4U/z+H3bMx6zX53Qj49+4SBI9bKeD9tdu1o4 -----END CERTIFICATE-----Generated at Wed Jan 21 18:20:21 2026 by rpki-client