This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/2hQqsbj_AW_rF6TjCtdE7-hg7CM.roa File: 2hQqsbj_AW_rF6TjCtdE7-hg7CM.roa (raw, json) Hash identifier: F1knTMFUmGxyY6uuD0aAVI5XraJxjK8ZXgbD5x6GIl4= Subject key identifier: DA:14:2A:B1:B8:FF:01:6F:EB:17:A4:E3:0A:D7:44:EF:E8:60:EC:23 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019B7BA3DC859934770B5D1E3BDCEBEB06AF Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/2hQqsbj_AW_rF6TjCtdE7-hg7CM.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207567 IP address blocks: 81.90.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:dc:85:99:34:77:0b:5d:1e:3b:dc:eb:eb:06:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da142ab1b8ff016feb17a4e30ad744efe860ec23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:10:8c:f9:30:a6:69:4c:6d:1e:96:5f:a4: 60:f8:1c:7e:80:a0:47:3d:70:a1:3f:e4:d5:a6:0a: e4:2a:f0:e0:7f:dc:97:e6:0d:36:f0:3f:00:9c:8a: 90:0f:c0:28:58:8a:9f:74:40:1c:cb:55:48:e2:0d: df:73:0a:72:fa:dc:5e:a7:a8:cc:27:20:bd:31:c5: a7:66:0e:79:88:ba:c7:0d:1f:24:eb:52:26:64:c9: 4e:d8:37:0b:ad:db:95:c2:6e:46:ba:c6:44:c5:d7: 20:85:9c:4c:98:08:89:4d:ea:ca:9c:b3:3c:f2:44: 35:a0:37:e6:23:b4:3b:38:2f:5a:16:3b:3a:5d:03: e1:ef:95:8d:e8:49:65:25:45:66:f1:63:2e:01:2e: ac:23:3c:b6:22:a2:0a:ef:12:55:c4:ac:a0:cb:4d: 3f:38:fd:ed:d4:4a:0f:ac:4f:d7:ff:97:d1:bc:a7: 2b:61:f3:81:ad:ca:47:ae:b4:39:53:1b:72:d0:a2: 25:a2:f6:ad:10:4c:39:3f:4b:7d:1d:95:9c:2a:c8: 6f:e0:f3:07:e8:0d:29:7d:4c:99:f0:d1:24:48:2c: 68:8f:01:9a:18:27:50:de:f8:b9:86:c8:70:56:89: c8:b8:60:89:62:52:de:c8:8a:09:38:64:17:67:08: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:14:2A:B1:B8:FF:01:6F:EB:17:A4:E3:0A:D7:44:EF:E8:60:EC:23 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/2hQqsbj_AW_rF6TjCtdE7-hg7CM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.28.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:8c:4f:8a:3b:21:56:6d:a7:38:8b:0a:23:d0:35:48:47:cb: 38:2a:ad:82:fe:d0:43:b2:85:e9:c8:a8:ba:45:4e:93:13:91: d0:c7:f6:f6:80:45:27:3c:08:7c:59:5f:02:b2:0e:4c:f8:e2: 46:f9:46:f3:9a:d9:92:71:01:0e:c1:5e:9d:2f:a5:a6:1b:7d: 59:b1:71:8b:fb:a3:eb:9b:53:1d:ff:e2:3c:ed:d8:7d:76:0d: f3:e2:b4:a8:9a:b2:6d:ec:b7:26:c8:19:f9:88:d1:5b:56:a5: 21:63:99:fb:1e:77:13:5e:b3:26:03:0a:de:12:d4:ea:cd:34: 56:87:54:df:eb:38:92:c1:b4:19:88:11:88:1c:55:74:22:df: c4:c2:2f:51:06:d0:e8:91:ad:d4:06:06:df:bf:6a:51:9a:aa: c9:f6:cb:aa:5b:c8:3a:60:ad:59:45:f4:b4:d8:78:c1:e2:df: 92:d6:78:a8:2f:8b:4d:e3:7b:aa:4c:2c:7c:81:72:c2:2a:c1: d9:c5:5e:70:e6:7b:40:ce:7a:c7:f1:4f:1f:88:1f:8f:c7:f7: fb:e6:80:98:25:a6:83:69:60:d7:c0:ce:f4:0a:3a:05:44:8e: 5d:6f:4f:45:4a:4f:ab:27:3d:85:cc:12:bc:f2:af:05:62:bc: 9a:02:b4:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9yFmTR3C10eO9zr6wavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTE0MmFiMWI4ZmYwMTZmZWIxN2E0ZTMwYWQ3NDRlZmU4NjBlYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wIQjPkwpmlMbR6WX6Rg+Bx+gKBH PXChP+TVpgrkKvDgf9yX5g028D8AnIqQD8AoWIqfdEAcy1VI4g3fcwpy+txep6jM JyC9McWnZg55iLrHDR8k61ImZMlO2DcLrduVwm5GusZExdcghZxMmAiJTerKnLM8 8kQ1oDfmI7Q7OC9aFjs6XQPh75WN6EllJUVm8WMuAS6sIzy2IqIK7xJVxKygy00/ OP3t1EoPrE/X/5fRvKcrYfOBrcpHrrQ5Uxty0KIlovatEEw5P0t9HZWcKshv4PMH 6A0pfUyZ8NEkSCxojwGaGCdQ3vi5hshwVonIuGCJYlLeyIoJOGQXZwiMqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNoUKrG4/wFv6xek4wrXRO/oYOwjMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvMmhRcXNial9BV19yRjZUakN0ZEU3LWhnN0NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUVocMA0G CSqGSIb3DQEBCwUAA4IBAQAbjE+KOyFWbac4iwoj0DVIR8s4Kq2C/tBDsoXpyKi6 RU6TE5HQx/b2gEUnPAh8WV8Csg5M+OJG+UbzmtmScQEOwV6dL6WmG31ZsXGL+6Pr m1Md/+I87dh9dg3z4rSomrJt7LcmyBn5iNFbVqUhY5n7HncTXrMmAwreEtTqzTRW h1Tf6ziSwbQZiBGIHFV0It/Ewi9RBtDoka3UBgbfv2pRmqrJ9suqW8g6YK1ZRfS0 2HjB4t+S1nioL4tN43uqTCx8gXLCKsHZxV5w5ntAznrH8U8fiB+Px/f75oCYJaaD aWDXwM70CjoFRI5db09FSk+rJz2FzBK88q8FYryaArSq -----END CERTIFICATE-----Generated at Wed Jan 21 08:17:23 2026 by rpki-client