This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/2tLIQgXliqh4O_vff1RXqlIeEX4.roa File: 2tLIQgXliqh4O_vff1RXqlIeEX4.roa (raw, json) Hash identifier: YrnY+CRyc45VEgvZ+B6sFRtEy6DTKUR1pY9HXUeaBcE= Subject key identifier: DA:D2:C8:42:05:E5:8A:A8:78:3B:FB:DF:7F:54:57:AA:52:1E:11:7E Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057 Certificate serial: 019B7A5B9223EFF7C8F031D91C966574EE1A Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/2tLIQgXliqh4O_vff1RXqlIeEX4.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 87.237.216.0/21 maxlen: 21 185.55.220.0/22 maxlen: 22 206.195.32.0/19 maxlen: 19 2a04:5780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:92:23:ef:f7:c8:f0:31:d9:1c:96:65:74:ee:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dad2c84205e58aa8783bfbdf7f5457aa521e117e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:ea:07:5c:c1:5c:96:f3:87:9d:9e:44:91: 8c:dc:1a:76:ac:fa:32:cc:40:5d:48:63:56:7a:54: 4e:bf:54:0d:46:d6:79:20:53:76:af:f8:b6:93:33: 7d:e0:fb:b3:2e:24:41:fd:6d:e8:c6:1c:67:3f:3f: f2:6c:23:1e:75:52:1b:5d:d5:02:a1:e7:31:48:7c: 26:9d:72:30:e5:1c:62:66:3b:cb:3a:71:c0:41:01: 26:20:22:0e:05:ab:c3:0e:f7:5a:e4:b4:c1:60:3c: 0d:10:64:11:45:5c:46:b2:bc:1f:c2:99:6e:0e:ce: 55:d9:8a:4c:67:16:bd:9b:75:79:45:97:93:63:42: 4d:36:fc:9c:c5:a3:57:2d:6b:60:96:b6:f4:8f:3f: ea:2c:62:0b:63:3b:9d:5a:a5:a1:8e:fc:e9:d4:c8: be:88:49:dc:62:b9:7e:a4:b4:fd:d7:48:0a:7d:38: dc:fb:ff:73:77:a3:1d:7c:77:52:c6:d6:63:e4:67: 24:ab:27:20:d8:4f:1f:1b:c7:9c:1f:d9:d1:5b:19: 26:81:fb:e6:11:1b:8e:1d:92:88:6f:02:f8:de:55: 1b:b7:5e:81:bf:68:18:df:94:c5:3a:da:45:3a:67: 16:27:86:2a:aa:e0:de:9b:ba:ef:a2:08:ce:9e:c7: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D2:C8:42:05:E5:8A:A8:78:3B:FB:DF:7F:54:57:AA:52:1E:11:7E X509v3 Authority Key Identifier: keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/2tLIQgXliqh4O_vff1RXqlIeEX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.216.0/21 185.55.220.0/22 206.195.32.0/19 IPv6: 2a04:5780::/29 Signature Algorithm: sha256WithRSAEncryption b1:2c:e1:1a:85:ef:67:f7:ff:e0:65:99:32:d7:e6:c6:92:14: d8:1f:3a:70:fd:b3:82:a7:ca:c4:a9:2f:32:3d:57:ce:9c:aa: b1:db:0f:e2:86:bf:3b:f2:58:5c:3a:6e:8b:ae:f5:83:04:1b: 54:44:83:07:d8:68:00:96:1e:8a:8b:64:74:f0:35:64:b8:0d: 08:b3:8f:74:81:eb:c4:7d:59:6b:63:47:7c:fc:c5:c2:5c:8a: ce:3e:c2:45:d8:9f:0c:b2:35:c2:97:22:d5:b5:3a:08:bf:83: ec:87:35:c7:45:1d:d6:c0:f2:69:d5:24:87:a8:2f:d7:2a:b6: 7e:fe:95:d7:b9:04:ec:7b:89:95:4d:7d:84:9d:5c:ff:e1:b4: 36:f7:cc:79:bd:42:61:ed:40:4d:99:9c:7e:ba:b1:2a:da:c7: d9:7f:b5:6f:2c:75:10:98:25:83:7d:b7:b3:ae:73:46:ae:15: c6:cf:6f:83:45:16:27:6f:31:96:06:78:e4:f9:a5:d7:ef:60: a1:e5:6a:72:b9:b8:a8:c0:1b:3e:7d:80:63:20:24:d8:b3:4d: 4a:c1:e3:11:0f:a9:9e:18:18:d6:63:a0:28:04:5a:df:06:ce: 8c:a8:9f:5e:e8:e6:e3:e0:13:0b:9b:de:39:82:03:75:24:ee: 24:c3:48:b1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6W5Ij7/fI8DHZHJZldO4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli NTMwNTcwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWQyYzg0MjA1ZTU4YWE4NzgzYmZiZGY3ZjU0NTdhYTUyMWUxMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybPqB1zBXJbzh52eRJGM3Bp2rPoy zEBdSGNWelROv1QNRtZ5IFN2r/i2kzN94PuzLiRB/W3oxhxnPz/ybCMedVIbXdUC oecxSHwmnXIw5RxiZjvLOnHAQQEmICIOBavDDvda5LTBYDwNEGQRRVxGsrwfwplu Ds5V2YpMZxa9m3V5RZeTY0JNNvycxaNXLWtglrb0jz/qLGILYzudWqWhjvzp1Mi+ iEncYrl+pLT910gKfTjc+/9zd6MdfHdSxtZj5Gckqycg2E8fG8ecH9nRWxkmgfvm ERuOHZKIbwL43lUbt16Bv2gY35TFOtpFOmcWJ4YqquDem7rvogjOnsfbLQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNrSyEIF5YqoeDv7339UV6pSHhF+MB8GA1UdIwQY MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt YzQzYWM0MjllNTNmLzEvMnRMSVFnWGxpcWg0T192ZmYxUlhxbEllRVg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMtYzQzYWM0MjllNTNm LzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDV+3YAwQC uTfcAwQFzsMgMA0EAgACMAcDBQMqBFeAMA0GCSqGSIb3DQEBCwUAA4IBAQCxLOEa he9n9//gZZky1+bGkhTYHzpw/bOCp8rEqS8yPVfOnKqx2w/ihr878lhcOm6LrvWD BBtURIMH2GgAlh6Ki2R08DVkuA0Is490gevEfVlrY0d8/MXCXIrOPsJF2J8MsjXC lyLVtToIv4PshzXHRR3WwPJp1SSHqC/XKrZ+/pXXuQTse4mVTX2EnVz/4bQ298x5 vUJh7UBNmZx+urEq2sfZf7VvLHUQmCWDfbezrnNGrhXGz2+DRRYnbzGWBnjk+aXX 72Ch5WpyubiowBs+fYBjICTYs01KweMRD6meGBjWY6AoBFrfBs6MqJ9e6Obj4BML m945ggN1JO4kw0ix -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:59 2026 by rpki-client