This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/2SyshcQ_2gWj_23t_m2U7jgbj_U.roa File: 2SyshcQ_2gWj_23t_m2U7jgbj_U.roa (raw, json) Hash identifier: lRMQZe3R/FYfC5kwvS4qJ8O7HGdmAd7kegNyR4eFVYA= Subject key identifier: D9:2C:AC:85:C4:3F:DA:05:A3:FF:6D:ED:FE:6D:94:EE:38:1B:8F:F5 Certificate issuer: /CN=6f98d1f99e3833ef401d46348eec8b752088c55d Certificate serial: 019B7CED4990926B9DEB4E751435CC218388 Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/2SyshcQ_2gWj_23t_m2U7jgbj_U.roa Signing time: Fri 02 Jan 2026 04:18:04 +0000 ROA not before: Fri 02 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56000 IP address blocks: 176.126.128.0/24 maxlen: 24 176.126.129.0/24 maxlen: 24 176.126.131.0/24 maxlen: 24 176.126.132.0/24 maxlen: 24 176.126.134.0/24 maxlen: 24 176.126.135.0/24 maxlen: 24 192.162.152.0/24 maxlen: 24 192.162.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:49:90:92:6b:9d:eb:4e:75:14:35:cc:21:83:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d Validity Not Before: Jan 2 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d92cac85c43fda05a3ff6dedfe6d94ee381b8ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:52:30:8d:75:7b:7d:d3:8b:85:e8:c2:3e: 0c:64:a9:5c:22:18:d5:15:0b:1f:35:65:37:e9:69: 73:e8:f8:46:e2:76:41:d2:c1:73:46:ce:25:38:44: d5:86:5f:d3:2b:e9:b8:9b:ad:d0:5c:2d:74:29:2d: 8e:10:6f:ef:86:2a:60:00:d9:9b:03:89:6c:e5:01: f4:9d:23:bb:57:e6:ad:1c:70:d3:8b:f0:56:c9:79: 49:d7:4f:95:dd:6b:32:9c:26:bc:66:e5:d4:fa:ad: b4:74:6a:8b:d8:3e:cf:1a:95:a2:c3:b7:b3:f5:5d: 57:ba:e4:69:64:e4:33:73:cb:1f:5b:7f:7e:0b:1a: 21:f9:7e:5d:5d:2a:b5:8a:bf:46:9d:d2:3f:81:ec: 4f:2a:45:80:20:40:0d:0a:a9:d3:27:11:49:44:be: bb:78:8a:dd:b8:95:e7:04:48:e4:3e:af:40:06:1e: 22:4f:af:9b:16:07:d3:aa:9d:39:e6:57:52:93:43: ba:37:d8:57:47:0e:19:5b:08:aa:a5:ec:d4:e8:e8: 62:6c:fd:74:f4:1b:ec:e2:28:ae:11:04:06:7f:32: 43:14:2a:d9:6f:27:9d:77:73:5c:cd:cf:d2:2f:30: f0:b9:86:d2:76:b5:40:64:7a:c3:39:f7:00:40:00: aa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2C:AC:85:C4:3F:DA:05:A3:FF:6D:ED:FE:6D:94:EE:38:1B:8F:F5 X509v3 Authority Key Identifier: keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/2SyshcQ_2gWj_23t_m2U7jgbj_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.128.0/23 176.126.131.0-176.126.132.255 176.126.134.0/23 192.162.152.0/23 Signature Algorithm: sha256WithRSAEncryption 28:05:78:7e:36:51:36:b9:be:d7:cd:64:12:3d:b9:51:45:6a: 3a:1e:8a:06:7e:0f:5f:b3:28:c6:7d:92:6c:8e:72:3a:72:ca: 5b:ee:61:e1:96:d8:e5:53:00:6d:0e:5b:e2:df:da:c9:79:29: f0:85:5c:1c:0d:f7:31:6d:3f:fc:30:30:c9:25:3c:d3:fd:60: 17:0a:60:9c:d5:0f:f9:b1:76:3b:82:57:e4:24:69:73:a1:ba: 07:bb:9f:08:08:d9:f9:49:1d:c1:26:e2:53:03:8f:ca:20:af: c8:68:f4:e1:c3:00:eb:f6:21:a3:55:41:56:d8:f2:14:e0:39: 91:37:7e:5b:96:6a:e9:7b:ab:35:2e:82:ba:3b:92:96:8f:2f: 4f:a8:fc:a3:ea:1c:88:27:84:b5:7b:bc:e5:86:a7:fe:be:7b: 36:f3:1e:1c:4b:e9:e9:9c:9e:7e:c1:8e:7f:70:2e:a9:33:ae: 69:bc:8f:98:8a:de:f9:72:09:a2:ff:06:f9:4f:6b:fa:06:39: b7:55:24:19:1a:7d:4b:76:d3:5a:38:9c:9e:08:57:67:92:12: 12:34:10:89:85:84:f6:db:95:b9:49:07:5e:ff:3c:ea:e6:06: 08:9a:c9:ed:48:d0:0d:1e:6a:c6:2e:a3:6a:4e:36:1c:ec:c4: f9:54:04:36 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt87UmQkmud6051FDXMIYOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOThkMWY5OWUzODMzZWY0MDFkNDYzNDhlZWM4Yjc1MjA4 OGM1NWQwHhcNMjYwMTAyMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTJjYWM4NWM0M2ZkYTA1YTNmZjZkZWRmZTZkOTRlZTM4MWI4ZmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+NSMI11e33Ti4Xowj4MZKlcIhjV FQsfNWU36Wlz6PhG4nZB0sFzRs4lOETVhl/TK+m4m63QXC10KS2OEG/vhipgANmb A4ls5QH0nSO7V+atHHDTi/BWyXlJ10+V3WsynCa8ZuXU+q20dGqL2D7PGpWiw7ez 9V1XuuRpZOQzc8sfW39+Cxoh+X5dXSq1ir9GndI/gexPKkWAIEANCqnTJxFJRL67 eIrduJXnBEjkPq9ABh4iT6+bFgfTqp055ldSk0O6N9hXRw4ZWwiqpezU6OhibP10 9Bvs4iiuEQQGfzJDFCrZbyedd3Nczc/SLzDwuYbSdrVAZHrDOfcAQACqswIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNksrIXEP9oFo/9t7f5tlO44G4/1MB8GA1UdIwQY MBaAFG+Y0fmeODPvQB1GNI7si3UgiMVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYzA4ZjEtOTZlMC00YzU0LWE0NjYt MDdkNGIxMTVjYzgyLzEvMlN5c2hjUV8yZ1dqXzIzdF9tMlU3amdial9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zYzA4ZjEtOTZlMC00YzU0LWE0NjYtMDdkNGIxMTVjYzgy LzEvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBsH6AMAwD BACwfoMDBACwfoQDBAGwfoYDBAHAopgwDQYJKoZIhvcNAQELBQADggEBACgFeH42 UTa5vtfNZBI9uVFFajoeigZ+D1+zKMZ9kmyOcjpyylvuYeGW2OVTAG0OW+Lf2sl5 KfCFXBwN9zFtP/wwMMklPNP9YBcKYJzVD/mxdjuCV+QkaXOhuge7nwgI2flJHcEm 4lMDj8ogr8ho9OHDAOv2IaNVQVbY8hTgOZE3fluWaul7qzUugro7kpaPL0+o/KPq HIgnhLV7vOWGp/6+ezbzHhxL6emcnn7Bjn9wLqkzrmm8j5iK3vlyCaL/BvlPa/oG ObdVJBkafUt201o4nJ4IV2eSEhI0EImFhPbblblJB17/POrmBgiaye1I0A0easYu o2pONhzsxPlUBDY= -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:41 2026 by rpki-client