This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/2U0mDkF6k188FlI68TZ1uJWmy1k.roa File: 2U0mDkF6k188FlI68TZ1uJWmy1k.roa (raw, json) Hash identifier: 7JEOUa3UIN+/J9E0Zd5VhYU2fI+uSkBnOTYRU58DUPc= Subject key identifier: D9:4D:26:0E:41:7A:93:5F:3C:16:52:3A:F1:36:75:B8:95:A6:CB:59 Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f Certificate serial: 019B7F83DC4004D95519CE1AFB43DF28CA83 Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/2U0mDkF6k188FlI68TZ1uJWmy1k.roa Signing time: Fri 02 Jan 2026 16:21:46 +0000 ROA not before: Fri 02 Jan 2026 16:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61272 IP address blocks: 185.177.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:dc:40:04:d9:55:19:ce:1a:fb:43:df:28:ca:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f Validity Not Before: Jan 2 16:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d94d260e417a935f3c16523af13675b895a6cb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b5:44:f3:e7:e9:07:a1:d4:c8:68:fe:7b:16: 0e:2f:5b:7b:3c:20:83:6e:3f:08:6c:07:cc:43:75: 60:c4:df:bf:f7:d1:70:91:44:d3:fa:af:88:f3:b2: eb:71:ab:5a:f8:1c:b6:e3:45:79:c4:9e:5f:96:0a: b9:ad:a4:4e:00:93:69:a2:2b:23:e6:6b:0b:46:95: e9:d3:99:ee:28:69:d1:26:ce:db:1a:d1:bb:3b:79: 0b:5e:91:1e:54:e8:c2:77:be:38:20:16:d4:bf:e4: 59:fd:26:f7:7b:bd:7d:b0:f4:df:61:a3:89:9b:90: 6a:9b:c6:6c:3a:0e:78:5b:c3:0e:2e:92:ea:19:80: e6:98:c4:d9:82:a5:65:07:cd:40:45:5e:9a:e9:1d: 95:f0:fc:7a:ff:1f:08:c2:25:f6:71:a6:10:b0:44: 90:44:40:76:65:3d:c6:ac:8d:12:ad:c8:4b:76:d5: 48:7d:6c:b4:7e:92:ed:72:b1:f0:6a:6d:01:d2:65: d9:3c:1b:62:89:c1:8d:6d:49:79:d2:a4:ae:89:99: 51:b6:a9:48:e2:b7:2a:f1:26:64:4f:5f:58:39:fc: 04:c2:04:ed:4c:28:de:9a:ec:40:dc:59:ed:29:f2: f0:f1:ff:16:93:bb:2a:90:ff:4b:0d:4c:43:f1:5a: 01:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4D:26:0E:41:7A:93:5F:3C:16:52:3A:F1:36:75:B8:95:A6:CB:59 X509v3 Authority Key Identifier: keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/2U0mDkF6k188FlI68TZ1uJWmy1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.150.0/24 Signature Algorithm: sha256WithRSAEncryption 83:a8:3d:20:e9:f2:56:59:27:cb:1d:77:25:1a:ff:3e:38:72: 66:d5:7f:f8:e9:77:b1:ce:a1:94:37:48:70:2a:b5:e4:3e:9d: 55:91:31:f2:64:ee:73:60:34:9c:21:72:f9:56:82:50:c8:8c: 5a:07:5e:30:2f:c6:1a:e8:50:ef:37:37:28:ac:ee:58:28:23: 98:9b:47:66:96:5f:1c:9b:02:dd:05:f8:c2:b0:e5:d0:22:32: 7f:ef:17:6d:9d:9b:2c:9b:bc:6b:a8:ec:9a:07:0f:c0:e1:3b: fa:3e:77:87:7e:26:04:50:63:36:01:c4:d3:11:cb:d9:0b:1f: 45:bc:47:7c:42:51:52:d1:7f:60:e5:b6:15:dc:0e:84:27:91: 3b:98:8f:79:82:83:4f:4e:3d:d3:8c:85:fc:8e:17:fd:84:01: 5d:fc:e3:26:e6:67:4b:03:5e:e4:16:c9:fd:ce:15:94:4c:9a: 10:16:a1:5c:05:a0:76:4d:40:18:77:0f:16:52:ef:80:aa:c0: 65:f7:75:fe:ff:a3:15:a6:99:86:07:4c:20:01:ab:16:d6:8d: bf:e3:94:ad:82:94:cc:b2:c6:db:53:88:9d:ed:df:7a:10:36: fb:a4:58:5e:64:fa:1c:7e:53:c6:2e:11:0e:da:02:3e:5e:76: 4a:e4:45:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g9xABNlVGc4a+0PfKMqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWVkYTY1ZGNkNDM4N2Q3MjI3MDA1YzFlMTNhMDZkNDQ4 NzdiNmYwHhcNMjYwMTAyMTYyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTRkMjYwZTQxN2E5MzVmM2MxNjUyM2FmMTM2NzViODk1YTZjYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbVE8+fpB6HUyGj+exYOL1t7PCCD bj8IbAfMQ3VgxN+/99FwkUTT+q+I87Lrcata+By240V5xJ5flgq5raROAJNpoisj 5msLRpXp05nuKGnRJs7bGtG7O3kLXpEeVOjCd744IBbUv+RZ/Sb3e719sPTfYaOJ m5Bqm8ZsOg54W8MOLpLqGYDmmMTZgqVlB81ARV6a6R2V8Px6/x8IwiX2caYQsESQ REB2ZT3GrI0SrchLdtVIfWy0fpLtcrHwam0B0mXZPBtiicGNbUl50qSuiZlRtqlI 4rcq8SZkT19YOfwEwgTtTCjemuxA3FntKfLw8f8Wk7sqkP9LDUxD8VoBOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNlNJg5BepNfPBZSOvE2dbiVpstZMB8GA1UdIwQY MBaAFKfu2mXc1Dh9cicAXB4ToG1Eh3tvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgt YzE1NWY5NTQzNmUxLzEvMlUwbURrRjZrMTg4RmxJNjhUWjF1SldteTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgtYzE1NWY5NTQzNmUx LzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubGWMA0G CSqGSIb3DQEBCwUAA4IBAQCDqD0g6fJWWSfLHXclGv8+OHJm1X/46XexzqGUN0hw KrXkPp1VkTHyZO5zYDScIXL5VoJQyIxaB14wL8Ya6FDvNzcorO5YKCOYm0dmll8c mwLdBfjCsOXQIjJ/7xdtnZssm7xrqOyaBw/A4Tv6PneHfiYEUGM2AcTTEcvZCx9F vEd8QlFS0X9g5bYV3A6EJ5E7mI95goNPTj3TjIX8jhf9hAFd/OMm5mdLA17kFsn9 zhWUTJoQFqFcBaB2TUAYdw8WUu+AqsBl93X+/6MVppmGB0wgAasW1o2/45StgpTM ssbbU4id7d96EDb7pFheZPocflPGLhEO2gI+XnZK5EVi -----END CERTIFICATE-----Generated at Tue Jan 27 09:56:27 2026 by rpki-client