This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/2lMPUfwDH8K0NAdIPI92MZeaRNo.roa File: 2lMPUfwDH8K0NAdIPI92MZeaRNo.roa (raw, json) Hash identifier: U4mWJbeH1svHCI4n71GUu9jQHQ+p0m5kueQEDHnX2hA= Subject key identifier: DA:53:0F:51:FC:03:1F:C2:B4:34:07:48:3C:8F:76:31:97:9A:44:DA Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019B7B36DEE53B82B4E55F26A9FBE05975C3 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/2lMPUfwDH8K0NAdIPI92MZeaRNo.roa Signing time: Thu 01 Jan 2026 20:19:11 +0000 ROA not before: Thu 01 Jan 2026 20:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 213.145.72.0/23 maxlen: 23 213.145.76.0/23 maxlen: 23 213.145.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:de:e5:3b:82:b4:e5:5f:26:a9:fb:e0:59:75:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Jan 1 20:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da530f51fc031fc2b43407483c8f7631979a44da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:02:64:54:35:27:34:d1:f4:04:e5:7f:0b: c2:56:42:81:21:8d:75:b3:9f:d3:1d:15:ea:c0:06: 1a:9f:3c:93:93:55:0e:b4:d0:e3:e6:4f:f9:c6:97: 1d:eb:5f:da:d1:cb:3a:e8:37:c9:4c:c7:4b:e1:af: 8e:8c:1b:15:43:d8:80:05:9d:7f:5f:ec:2d:82:98: e2:da:9f:ac:f7:b6:1f:7a:57:4f:fc:9b:90:b7:69: 67:aa:be:47:e3:5a:61:0e:a1:e7:56:b0:11:5d:85: 13:27:89:a8:bf:d1:0a:13:92:9a:fe:ec:07:0a:5f: a8:8c:6d:7f:86:7e:b3:3e:6f:91:16:69:37:53:13: 4c:19:13:69:fe:75:12:a4:bc:35:ce:60:1f:df:0c: 37:a0:25:29:e1:18:72:e1:a1:b6:1c:69:b4:db:a3: 05:41:c9:97:fc:4a:00:98:15:7a:92:27:f8:8b:75: 77:3f:64:f4:7e:a9:49:ee:3a:c9:61:1e:24:63:5e: d2:96:65:5a:42:f0:a5:e9:dc:97:52:41:ee:2c:05: e1:41:16:16:97:05:df:78:ea:62:10:05:8f:de:56: 09:59:9b:7c:8a:9b:c3:64:c2:56:b6:98:ee:28:65: a4:52:ea:a1:5e:92:79:e6:a0:9e:bf:c0:f0:21:b8: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:53:0F:51:FC:03:1F:C2:B4:34:07:48:3C:8F:76:31:97:9A:44:DA X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/2lMPUfwDH8K0NAdIPI92MZeaRNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.72.0/23 213.145.76.0/22 Signature Algorithm: sha256WithRSAEncryption 68:c0:4d:a9:72:72:9a:4e:4a:6b:c3:15:48:25:48:e4:9d:e8: 70:64:86:2e:e6:b1:c4:26:23:a4:54:16:fb:68:0a:dc:ca:c5: 98:9d:79:41:91:52:d5:e7:0d:f3:5f:d2:89:20:7e:66:4c:ab: ff:cf:e3:57:ac:c4:10:23:f6:72:be:c5:0f:ed:4d:48:46:ea: 91:b9:3a:10:8a:d2:1b:b1:34:7d:7b:8a:3a:b7:77:4d:98:26: 7b:69:80:b8:4e:85:3c:6f:d7:e1:de:6f:b4:a9:8e:2d:ad:44: 7a:91:0c:1d:b9:f3:40:71:73:c4:3c:dd:c1:ad:ba:6d:e2:76: 6c:fc:86:2c:a0:ae:bd:d8:b2:5b:9e:c0:e2:00:0a:a2:fd:e2: f7:c3:be:b3:fb:41:64:ff:30:78:96:fe:11:13:c0:e6:bb:94: 13:54:34:75:f0:eb:8b:84:f7:14:60:74:f6:c1:99:c3:45:3a: f5:8b:6b:dc:fc:ff:39:73:21:d7:2f:1f:99:5b:8f:93:d9:b1: 83:69:fd:bf:63:f0:af:67:8a:31:e0:8b:38:ab:08:55:02:fe: f4:c5:65:ce:68:cc:1c:e0:62:f9:74:37:fb:1e:2b:3a:90:ad: a0:51:7f:29:37:dd:a4:ec:bc:d9:c7:49:d0:c2:ea:9b:da:e8: e8:66:ca:44 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nt7lO4K05V8mqfvgWXXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjYwMTAxMjAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTUzMGY1MWZjMDMxZmMyYjQzNDA3NDgzYzhmNzYzMTk3OWE0NGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1oCZFQ1JzTR9ATlfwvCVkKBIY11 s5/THRXqwAYanzyTk1UOtNDj5k/5xpcd61/a0cs66DfJTMdL4a+OjBsVQ9iABZ1/ X+wtgpji2p+s97YfeldP/JuQt2lnqr5H41phDqHnVrARXYUTJ4mov9EKE5Ka/uwH Cl+ojG1/hn6zPm+RFmk3UxNMGRNp/nUSpLw1zmAf3ww3oCUp4Rhy4aG2HGm026MF QcmX/EoAmBV6kif4i3V3P2T0fqlJ7jrJYR4kY17SlmVaQvCl6dyXUkHuLAXhQRYW lwXfeOpiEAWP3lYJWZt8ipvDZMJWtpjuKGWkUuqhXpJ55qCev8DwIbhfNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNpTD1H8Ax/CtDQHSDyPdjGXmkTaMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvMmxNUFVmd0RIOEswTkFkSVBJOTJNWmVhUk5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1ZFIAwQC 1ZFMMA0GCSqGSIb3DQEBCwUAA4IBAQBowE2pcnKaTkprwxVIJUjknehwZIYu5rHE JiOkVBb7aArcysWYnXlBkVLV5w3zX9KJIH5mTKv/z+NXrMQQI/ZyvsUP7U1IRuqR uToQitIbsTR9e4o6t3dNmCZ7aYC4ToU8b9fh3m+0qY4trUR6kQwdufNAcXPEPN3B rbpt4nZs/IYsoK692LJbnsDiAAqi/eL3w76z+0Fk/zB4lv4RE8Dmu5QTVDR18OuL hPcUYHT2wZnDRTr1i2vc/P85cyHXLx+ZW4+T2bGDaf2/Y/CvZ4ox4Is4qwhVAv70 xWXOaMwc4GL5dDf7His6kK2gUX8pN92k7LzZx0nQwuqb2ujoZspE -----END CERTIFICATE-----Generated at Mon Jan 19 20:14:54 2026 by rpki-client