This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/2diwtm0Zbf_bmsdktiMcMcOMQg8.roa File: 2diwtm0Zbf_bmsdktiMcMcOMQg8.roa (raw, json) Hash identifier: eVMbVKsLzh2plyfnoFozWhZn/xVtpLdpwRt+PjQnri4= Subject key identifier: D9:D8:B0:B6:6D:19:6D:FF:DB:9A:C7:64:B6:23:1C:31:C3:8C:42:0F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6CB2120D8D97BDC007105BF2ABE93 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/2diwtm0Zbf_bmsdktiMcMcOMQg8.roa Signing time: Thu 01 Jan 2026 04:17:55 +0000 ROA not before: Thu 01 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201814 IP address blocks: 109.205.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cb:21:20:d8:d9:7b:dc:00:71:05:bf:2a:be:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9d8b0b66d196dffdb9ac764b6231c31c38c420f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d7:8b:c3:01:5e:6c:a4:d4:20:96:29:f7:d2: 27:de:5e:06:58:45:64:bc:23:3b:04:ed:a9:7e:a0: 42:cd:99:01:fc:0b:52:3b:9e:ce:d1:44:9f:30:b2: b6:eb:41:ea:39:3b:e7:78:ef:20:dc:2c:f7:6d:13: fc:af:e8:c1:2b:9d:98:be:eb:89:86:84:06:9d:1a: 44:ec:83:67:e9:77:c7:d8:65:33:6a:a3:68:76:82: 8f:c4:f2:a2:07:68:ef:13:5a:31:7f:b4:02:ec:95: 9d:39:af:e6:72:73:b2:be:6a:a0:32:23:32:2b:81: 1f:d0:46:6a:03:70:a0:e4:d2:6c:5f:57:36:80:df: 81:09:01:20:65:7b:33:6a:e9:c3:35:2c:7d:6e:8c: 6b:32:b9:a2:74:6f:87:a6:b3:6f:35:a8:cc:bc:c1: 62:06:8d:55:25:1c:8d:9c:85:f2:d5:00:05:11:5a: c4:81:cc:b9:33:28:fa:7c:b3:be:f4:5b:3a:b2:8b: eb:cf:3a:7a:2d:af:33:9f:76:10:27:18:b6:74:27: 80:65:38:f4:d2:5e:d8:72:41:bd:b0:d8:bf:e4:75: 96:71:53:98:75:5e:5a:3e:6b:95:b3:a5:d4:73:ec: ca:0f:1a:0e:f2:00:76:8e:29:22:cb:f3:90:fd:84: 17:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D8:B0:B6:6D:19:6D:FF:DB:9A:C7:64:B6:23:1C:31:C3:8C:42:0F X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/2diwtm0Zbf_bmsdktiMcMcOMQg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.211.0/24 Signature Algorithm: sha256WithRSAEncryption 03:04:af:d1:1a:63:1b:93:d9:16:03:19:6a:8d:27:90:8a:6c: b6:90:a7:aa:58:f3:24:20:47:a2:93:c1:f4:32:ab:f2:2c:83: 8c:f1:58:f0:3c:d7:c0:40:d9:dc:0b:4e:cd:ce:57:f3:28:be: 5d:0d:8c:e0:6c:02:1c:70:ff:4e:f5:d1:31:a6:e9:fc:b0:60: 16:59:73:f8:58:dd:93:d7:95:32:4c:3d:dc:ca:0a:b2:85:e5: 8d:cd:61:31:74:ea:bd:01:ad:57:0e:02:36:e7:7c:9c:59:5e: 88:d1:b8:c2:be:eb:5c:31:dc:24:2d:d9:0e:f5:4e:94:f0:34: f2:19:b9:7f:1e:e0:09:2a:60:8d:24:fa:e6:99:73:4d:10:eb: f8:71:07:48:d6:5e:68:2b:44:82:a9:01:3d:45:83:56:2c:a6: bd:7e:bd:11:a3:76:ca:09:01:4a:e7:40:06:17:f6:de:1a:ee: 28:7c:5e:c2:13:76:2c:b0:9d:8b:23:ed:45:95:c8:11:b0:0f: c8:f7:28:78:e6:f2:30:ee:3f:b5:49:18:d0:07:83:e3:66:b9: c2:f8:30:46:21:aa:9f:1a:2e:9b:59:08:ad:b2:f6:be:3c:2e: 47:b4:2b:83:81:f5:a6:22:6c:d5:84:0d:0d:28:73:a4:74:ea: 2b:c2:75:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsshINjZe9wAcQW/Kr6TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWQ4YjBiNjZkMTk2ZGZmZGI5YWM3NjRiNjIzMWMzMWMzOGM0MjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdeLwwFebKTUIJYp99In3l4GWEVk vCM7BO2pfqBCzZkB/AtSO57O0USfMLK260HqOTvneO8g3Cz3bRP8r+jBK52YvuuJ hoQGnRpE7INn6XfH2GUzaqNodoKPxPKiB2jvE1oxf7QC7JWdOa/mcnOyvmqgMiMy K4Ef0EZqA3Cg5NJsX1c2gN+BCQEgZXszaunDNSx9boxrMrmidG+HprNvNajMvMFi Bo1VJRyNnIXy1QAFEVrEgcy5Myj6fLO+9Fs6sovrzzp6La8zn3YQJxi2dCeAZTj0 0l7YckG9sNi/5HWWcVOYdV5aPmuVs6XUc+zKDxoO8gB2jikiy/OQ/YQXMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNnYsLZtGW3/25rHZLYjHDHDjEIPMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvMmRpd3RtMFpiZl9ibXNka3RpTWNNY09NUWc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc3TMA0G CSqGSIb3DQEBCwUAA4IBAQADBK/RGmMbk9kWAxlqjSeQimy2kKeqWPMkIEeik8H0 MqvyLIOM8VjwPNfAQNncC07NzlfzKL5dDYzgbAIccP9O9dExpun8sGAWWXP4WN2T 15UyTD3cygqyheWNzWExdOq9Aa1XDgI253ycWV6I0bjCvutcMdwkLdkO9U6U8DTy Gbl/HuAJKmCNJPrmmXNNEOv4cQdI1l5oK0SCqQE9RYNWLKa9fr0Ro3bKCQFK50AG F/beGu4ofF7CE3YssJ2LI+1FlcgRsA/I9yh45vIw7j+1SRjQB4PjZrnC+DBGIaqf Gi6bWQitsva+PC5HtCuDgfWmImzVhA0NKHOkdOorwnWo -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:50 2026 by rpki-client