This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/2BwDzZ1-4qodQHGn7IRXAaLWAn8.roa File: 2BwDzZ1-4qodQHGn7IRXAaLWAn8.roa (raw, json) Hash identifier: KLT4hK24Sh8oeO2o5C+Q82TS186W3R8CPounbGac6TY= Subject key identifier: D8:1C:03:CD:9D:7E:E2:AA:1D:40:71:A7:EC:84:57:01:A2:D6:02:7F Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c Certificate serial: 019B7C8043266A78A744E9C564CC959F816E Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/2BwDzZ1-4qodQHGn7IRXAaLWAn8.roa Signing time: Fri 02 Jan 2026 02:18:59 +0000 ROA not before: Fri 02 Jan 2026 02:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44684 IP address blocks: 185.33.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:43:26:6a:78:a7:44:e9:c5:64:cc:95:9f:81:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d81c03cd9d7ee2aa1d4071a7ec845701a2d6027f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:a9:12:1a:cf:25:47:61:10:82:f4:de:5a: 77:3a:83:86:26:dc:79:be:7f:34:fa:08:07:fd:95: 3b:49:89:97:df:a5:54:18:cb:28:36:98:05:9c:93: 42:ec:f8:69:4b:d1:23:11:bd:16:68:83:5c:79:4e: 11:43:88:02:14:59:56:30:a3:88:d3:32:4d:d1:fe: 1e:50:47:08:19:8a:73:0a:be:19:f0:5c:1e:34:24: f1:93:e4:9a:4a:01:53:1e:4b:a5:2c:de:fb:74:bf: f1:7c:b9:c0:41:eb:33:bf:49:56:14:14:e1:57:ff: 02:fa:85:ef:10:24:e3:f1:dc:f2:db:95:3b:29:f6: c5:a3:b6:fd:75:39:a6:14:84:03:86:ad:37:be:15: 9b:13:fd:29:99:34:eb:69:ef:c7:e0:60:d2:57:be: ad:58:da:e8:5e:48:39:78:0b:c6:71:00:c2:57:97: cf:13:48:c4:2c:3c:0a:95:2c:3d:a5:99:48:d8:1e: be:51:a0:17:3b:6b:3c:ee:22:0b:1a:08:27:d3:6b: 32:75:45:04:48:ab:ee:51:c7:fb:85:91:75:93:ba: 5b:5b:45:d2:e0:16:2d:f3:e8:2c:e2:12:35:38:8f: ce:42:7a:6c:7e:0a:10:0e:4f:fb:3d:65:8a:ba:53: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1C:03:CD:9D:7E:E2:AA:1D:40:71:A7:EC:84:57:01:A2:D6:02:7F X509v3 Authority Key Identifier: keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/2BwDzZ1-4qodQHGn7IRXAaLWAn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.33.27.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:dc:df:78:94:85:6f:1a:99:40:c1:7f:cc:07:16:2a:94:2d: 6c:8a:c3:5e:d7:1c:1a:b5:3f:9e:92:75:77:51:13:d2:2d:36: b2:ab:29:84:8d:3c:15:8a:21:a0:cb:10:ee:c0:f4:fd:1f:82: de:12:5f:82:e5:17:3a:12:c2:3c:53:11:20:24:2a:41:3d:b8: d5:ab:30:0b:bc:ee:02:50:fa:d6:0d:fe:e9:9b:82:e3:2e:81: ca:ce:d1:4b:04:ff:a8:66:b3:c0:0c:71:3b:8f:35:6b:09:00: ff:38:d9:c0:9f:e5:ce:ff:ba:be:0a:32:6f:b1:1a:68:41:fb: ab:4c:bc:67:c5:e1:d0:99:76:0c:b4:95:7b:e6:67:f5:0b:4b: f1:b0:10:ac:9e:81:ec:2e:0f:60:b6:3e:bb:59:b0:75:f9:f5: f3:19:a8:12:97:f9:4b:da:c7:9c:05:15:a8:5e:21:5e:f0:20: 27:3c:9b:b7:20:cf:95:31:a2:59:b5:53:ed:7d:36:44:14:a1: dd:6a:16:59:69:a1:17:64:3a:84:71:52:06:a3:84:77:1c:c0: ea:9f:18:6d:21:e6:8a:9e:a8:02:08:ca:33:a6:91:04:5c:2c: 9d:8a:77:5b:51:1e:14:95:d5:c9:1e:e9:9b:e9:80:d8:35:1c: 74:37:1c:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEMmaninROnFZMyVn4FuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZTNkNjNiNGE1YjQwNGI1ZmY4M2NiZjJiMTUyNWEzMDQ3 N2Y2NWMwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODFjMDNjZDlkN2VlMmFhMWQ0MDcxYTdlYzg0NTcwMWEyZDYwMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAOpEhrPJUdhEIL03lp3OoOGJtx5 vn80+ggH/ZU7SYmX36VUGMsoNpgFnJNC7PhpS9EjEb0WaINceU4RQ4gCFFlWMKOI 0zJN0f4eUEcIGYpzCr4Z8FweNCTxk+SaSgFTHkulLN77dL/xfLnAQeszv0lWFBTh V/8C+oXvECTj8dzy25U7KfbFo7b9dTmmFIQDhq03vhWbE/0pmTTrae/H4GDSV76t WNroXkg5eAvGcQDCV5fPE0jELDwKlSw9pZlI2B6+UaAXO2s87iILGggn02sydUUE SKvuUcf7hZF1k7pbW0XS4BYt8+gs4hI1OI/OQnpsfgoQDk/7PWWKulMpEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNgcA82dfuKqHUBxp+yEVwGi1gJ/MB8GA1UdIwQY MBaAFH/j1jtKW0BLX/g8vysVJaMEd/ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMt MmNiN2EzYjZlNDJmLzEvMkJ3RHpaMS00cW9kUUhHbjdJUlhBYUxXQW44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMtMmNiN2EzYjZlNDJm LzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSEbMA0G CSqGSIb3DQEBCwUAA4IBAQAc3N94lIVvGplAwX/MBxYqlC1sisNe1xwatT+eknV3 URPSLTayqymEjTwViiGgyxDuwPT9H4LeEl+C5Rc6EsI8UxEgJCpBPbjVqzALvO4C UPrWDf7pm4LjLoHKztFLBP+oZrPADHE7jzVrCQD/ONnAn+XO/7q+CjJvsRpoQfur TLxnxeHQmXYMtJV75mf1C0vxsBCsnoHsLg9gtj67WbB1+fXzGagSl/lL2secBRWo XiFe8CAnPJu3IM+VMaJZtVPtfTZEFKHdahZZaaEXZDqEcVIGo4R3HMDqnxhtIeaK nqgCCMozppEEXCydindbUR4UldXJHumb6YDYNRx0NxxW -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:28 2026 by rpki-client