This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/2LL-SMyK5f7q3LRn9g7HW9K5dfk.roa File: 2LL-SMyK5f7q3LRn9g7HW9K5dfk.roa (raw, json) Hash identifier: LGVpZE2M2ikl4CHpfTf8y//4tD5Af7b520ROLqKh/18= Subject key identifier: D8:B2:FE:48:CC:8A:E5:FE:EA:DC:B4:67:F6:0E:C7:5B:D2:B9:75:F9 Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c Certificate serial: 019B7F808CADDD5A64A972E9F99B81DFCE89 Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/2LL-SMyK5f7q3LRn9g7HW9K5dfk.roa Signing time: Fri 02 Jan 2026 16:18:09 +0000 ROA not before: Fri 02 Jan 2026 16:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202720 IP address blocks: 185.1.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:8c:ad:dd:5a:64:a9:72:e9:f9:9b:81:df:ce:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c Validity Not Before: Jan 2 16:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8b2fe48cc8ae5feeadcb467f60ec75bd2b975f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:cd:be:64:b5:96:4d:e5:6e:3e:94:0d:37: 75:5b:eb:83:1f:df:b6:69:63:70:08:5c:cd:c7:5d: d3:e3:3d:4c:1c:c1:29:dd:93:1e:cc:ae:11:83:3b: e2:6b:e0:9d:11:8a:db:df:42:e0:16:8e:eb:fe:c5: 83:1e:ba:5f:d7:7a:a2:d3:4a:cd:b8:e7:d8:82:95: da:4f:f6:af:48:b3:ee:c3:e9:d6:dd:5b:63:10:85: a8:0b:e2:32:d8:ef:53:66:60:fa:b9:7e:00:21:c5: 93:a3:64:ee:ca:a5:0c:e8:b7:e4:8e:cf:7c:9f:f0: 7a:00:fb:22:9a:31:5c:41:be:21:87:ed:73:fe:35: a1:54:f4:4d:6f:fd:a5:90:18:be:35:9d:a3:7c:15: d6:a3:99:c4:c0:ea:82:f6:7b:c8:20:5d:ce:7d:29: 3a:38:4e:bf:fc:71:4d:34:b1:9f:af:d6:83:a4:c6: dc:31:57:01:a4:b9:f1:ac:ab:2b:c2:db:c3:66:00: 59:f3:09:23:46:fa:43:1d:27:c7:b2:a0:22:ff:6d: 85:56:81:5c:fb:c8:e3:73:28:24:07:c6:d2:5b:eb: c9:92:85:52:e8:7d:30:1c:cc:bb:90:2e:d6:87:f5: 91:4b:52:a0:2e:8b:1e:eb:37:a3:b6:cb:ce:11:e5: 7f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B2:FE:48:CC:8A:E5:FE:EA:DC:B4:67:F6:0E:C7:5B:D2:B9:75:F9 X509v3 Authority Key Identifier: keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/2LL-SMyK5f7q3LRn9g7HW9K5dfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.70.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:3e:8e:72:bf:82:e6:c1:0d:04:de:3d:3c:95:f4:13:a1:cf: 8f:2c:f2:fa:26:c0:3c:ec:7a:0c:26:c4:ff:da:d4:bf:eb:f8: 02:e6:62:af:ff:7c:55:dd:f5:a3:5a:57:0d:7b:05:ca:0a:b8: c6:d6:d5:80:7e:74:b8:73:06:a7:9a:41:f8:ee:bf:4a:af:50: 5a:d4:06:e6:68:87:7f:01:6d:8b:c1:a3:ea:f0:1b:49:9c:74: d5:c2:5b:34:8d:0a:2e:ad:af:64:e3:7c:4b:0c:2b:65:b1:90: c8:5c:64:73:99:01:70:13:b0:9b:c2:ea:f2:8f:d8:74:7e:f2: a1:92:b2:7a:a0:86:07:77:1b:9f:70:92:b1:3c:20:6e:f6:d9: 2e:98:09:82:c3:c7:90:6c:6b:f4:1f:3f:11:7c:6a:5e:80:6f: 1a:d9:8a:64:18:e5:62:e2:af:8c:0d:71:75:39:1a:24:39:46: 6a:e2:a8:4f:43:ce:ef:3f:f0:06:96:ca:9c:30:0f:6d:57:08: 2f:40:e1:06:46:f5:be:e1:ed:87:4f:bc:65:8c:7b:dc:22:f9: 41:71:cf:17:3b:d2:80:4f:fe:9c:db:23:4f:02:ed:57:c2:cc: b8:e0:e8:bd:dc:d8:fd:3e:af:d9:b7:95:12:11:18:78:ce:bf: 40:9f:d4:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gIyt3VpkqXLp+ZuB386JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmODkxZmYzNDc3ZWQ3ZmRhYWNmYWUyZTNmMGRmYTY0ZmQ5 MmFjMGMwHhcNMjYwMTAyMTYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGIyZmU0OGNjOGFlNWZlZWFkY2I0NjdmNjBlYzc1YmQyYjk3NWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrLNvmS1lk3lbj6UDTd1W+uDH9+2 aWNwCFzNx13T4z1MHMEp3ZMezK4Rgzvia+CdEYrb30LgFo7r/sWDHrpf13qi00rN uOfYgpXaT/avSLPuw+nW3VtjEIWoC+Iy2O9TZmD6uX4AIcWTo2TuyqUM6Lfkjs98 n/B6APsimjFcQb4hh+1z/jWhVPRNb/2lkBi+NZ2jfBXWo5nEwOqC9nvIIF3OfSk6 OE6//HFNNLGfr9aDpMbcMVcBpLnxrKsrwtvDZgBZ8wkjRvpDHSfHsqAi/22FVoFc +8jjcygkB8bSW+vJkoVS6H0wHMy7kC7Wh/WRS1KgLose6zejtsvOEeV/7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNiy/kjMiuX+6ty0Z/YOx1vSuXX5MB8GA1UdIwQY MBaAFJ+JH/NHftf9qs+uLj8N+mT9kqwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jNzc4MzMtMzFhZS00NDEyLWIwNDkt NzBhNGE4ZDdjNDNmLzEvMkxMLVNNeUs1ZjdxM0xSbjlnN0hXOUs1ZGZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jNzc4MzMtMzFhZS00NDEyLWIwNDktNzBhNGE4ZDdjNDNm LzEvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQFGMA0G CSqGSIb3DQEBCwUAA4IBAQAvPo5yv4LmwQ0E3j08lfQToc+PLPL6JsA87HoMJsT/ 2tS/6/gC5mKv/3xV3fWjWlcNewXKCrjG1tWAfnS4cwanmkH47r9Kr1Ba1AbmaId/ AW2LwaPq8BtJnHTVwls0jQoura9k43xLDCtlsZDIXGRzmQFwE7Cbwuryj9h0fvKh krJ6oIYHdxufcJKxPCBu9tkumAmCw8eQbGv0Hz8RfGpegG8a2YpkGOVi4q+MDXF1 ORokOUZq4qhPQ87vP/AGlsqcMA9tVwgvQOEGRvW+4e2HT7xljHvcIvlBcc8XO9KA T/6c2yNPAu1Xwsy44Oi93Nj9Pq/Zt5USERh4zr9An9TA -----END CERTIFICATE-----Generated at Tue Feb 10 01:02:04 2026 by rpki-client