This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/2MDP90gwIl_EWMQjgZlpg454Ip4.roa File: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (raw, json) Hash identifier: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk= Subject key identifier: D8:C0:CF:F7:48:30:22:5F:C4:58:C4:23:81:99:69:83:8E:78:22:9E Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA5369DBEF4845BF47E744E2D08747B Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/2MDP90gwIl_EWMQjgZlpg454Ip4.roa Signing time: Fri 02 Jan 2026 12:18:35 +0000 ROA not before: Fri 02 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204210 IP address blocks: 109.160.11.0/24 maxlen: 24 109.160.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:36:9d:be:f4:84:5b:f4:7e:74:4e:2d:08:74:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8c0cff74830225fc458c423819969838e78229e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:08:9d:fa:f4:73:fc:3c:5c:d5:52:55:3a: b9:83:91:55:61:16:89:d5:a5:f0:05:1a:5d:d9:63: 06:40:af:98:ef:f0:61:f4:c3:a4:04:03:f0:a1:92: 22:d3:4b:6e:d5:d7:b1:f3:b0:a6:d1:7d:aa:87:dd: d9:79:f7:e0:c7:29:48:a1:34:2f:09:20:36:15:69: b7:47:91:19:9a:07:b6:2b:17:14:1f:d5:b4:b1:35: 3a:b9:e0:29:53:52:91:62:9c:6c:43:72:9c:32:52: 93:ee:e3:b2:96:df:85:d1:2a:90:27:26:24:73:62: 02:16:0b:8d:42:bf:04:7e:3d:d7:f1:b1:16:19:39: 89:36:fe:fb:27:fb:74:65:4f:fd:19:e2:40:68:63: 4c:64:37:12:5a:d0:3a:a9:92:d5:a3:c6:2e:54:45: 3b:17:2c:6c:03:61:ed:22:db:89:5f:0e:78:c0:60: df:59:93:25:4b:7c:b6:1e:6b:20:3b:0c:af:64:9e: 60:88:8e:05:f1:ed:c2:bc:4a:45:37:e6:58:78:96: 62:47:94:d7:a3:52:8d:f8:a2:db:45:a8:cc:e4:d7: 5f:b6:a8:2d:7d:0e:7f:42:12:d2:7b:7d:29:b9:5b: 29:5a:99:48:00:75:0f:dd:e4:7d:ea:9c:74:ac:cf: d3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C0:CF:F7:48:30:22:5F:C4:58:C4:23:81:99:69:83:8E:78:22:9E X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/2MDP90gwIl_EWMQjgZlpg454Ip4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.160.11.0-109.160.12.255 Signature Algorithm: sha256WithRSAEncryption 6c:c2:85:91:1e:f7:e5:8d:fe:1c:bf:31:51:e3:be:a7:cb:4f: 4c:7d:73:2e:d6:7f:7d:5a:2e:32:6c:52:c2:ae:f9:1d:f6:a6: 32:59:77:a5:41:06:49:cd:0a:ed:f8:b7:ad:7b:de:42:fe:e9: 03:7f:40:52:08:59:af:50:1a:06:9f:1d:0d:10:83:d1:d4:d7: 71:6d:e0:62:1f:d6:65:66:98:f2:2e:bd:ee:4b:79:4f:90:f4: 70:ea:bd:12:62:b9:69:ce:da:84:c7:65:63:ae:e4:b9:d3:29: 2b:2b:6c:d1:72:46:8d:64:c6:ac:f9:07:db:d7:95:f7:90:71: 7f:16:6d:53:5b:3c:85:77:20:50:d5:31:b5:cc:7e:96:1a:bf: 03:b0:d9:81:25:e4:01:e2:ff:ff:45:a3:87:fe:58:c4:9b:02: 28:6d:29:49:1d:81:ca:bd:01:39:c1:a5:ff:2b:e4:62:5b:d3: 36:3c:cf:5c:7b:cc:1e:d2:74:e1:22:8c:f0:20:f2:ac:63:ff: 9b:d2:5d:13:d1:69:cb:82:28:ae:32:41:a7:3a:93:90:e6:30: 54:46:07:08:ee:00:f4:47:1a:05:92:4d:59:44:bb:b4:42:cf: a8:ce:80:6b:c9:ca:87:14:ba:c1:f4:2e:05:40:37:0a:14:4f: 95:70:a0:7b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+pTadvvSEW/R+dE4tCHR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGMwY2ZmNzQ4MzAyMjVmYzQ1OGM0MjM4MTk5Njk4MzhlNzgyMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra0Infr0c/w8XNVSVTq5g5FVYRaJ 1aXwBRpd2WMGQK+Y7/Bh9MOkBAPwoZIi00tu1dex87Cm0X2qh93ZeffgxylIoTQv CSA2FWm3R5EZmge2KxcUH9W0sTU6ueApU1KRYpxsQ3KcMlKT7uOylt+F0SqQJyYk c2ICFguNQr8Efj3X8bEWGTmJNv77J/t0ZU/9GeJAaGNMZDcSWtA6qZLVo8YuVEU7 FyxsA2HtItuJXw54wGDfWZMlS3y2HmsgOwyvZJ5giI4F8e3CvEpFN+ZYeJZiR5TX o1KN+KLbRajM5NdftqgtfQ5/QhLSe30puVspWplIAHUP3eR96px0rM/T9QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNjAz/dIMCJfxFjEI4GZaYOOeCKeMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvMk1EUDkwZ3dJbF9FV01RamdabHBnNDU0SXA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABtoAsD BABtoAwwDQYJKoZIhvcNAQELBQADggEBAGzChZEe9+WN/hy/MVHjvqfLT0x9cy7W f31aLjJsUsKu+R32pjJZd6VBBknNCu34t6173kL+6QN/QFIIWa9QGgafHQ0Qg9HU 13Ft4GIf1mVmmPIuve5LeU+Q9HDqvRJiuWnO2oTHZWOu5LnTKSsrbNFyRo1kxqz5 B9vXlfeQcX8WbVNbPIV3IFDVMbXMfpYavwOw2YEl5AHi//9Fo4f+WMSbAihtKUkd gcq9ATnBpf8r5GJb0zY8z1x7zB7SdOEijPAg8qxj/5vSXRPRacuCKK4yQac6k5Dm MFRGBwjuAPRHGgWSTVlEu7RCz6jOgGvJyocUusH0LgVANwoUT5VwoHs= -----END CERTIFICATE-----Generated at Tue Jan 20 03:34:15 2026 by rpki-client