This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa File: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (raw, json) Hash identifier: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I= Subject key identifier: D9:47:4B:BC:F5:F7:60:0A:B5:71:B8:EF:6D:A1:43:27:DE:10:E3:BA Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 019B7CECC165869266DA4EF987B87DE790D0 Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa Signing time: Fri 02 Jan 2026 04:17:29 +0000 ROA not before: Fri 02 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 146.247.105.0/24 maxlen: 24 146.247.110.0/24 maxlen: 24 146.247.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c1:65:86:92:66:da:4e:f9:87:b8:7d:e7:90:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Jan 2 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9474bbcf5f7600ab571b8ef6da14327de10e3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d0:39:d3:3a:6c:f2:33:55:c8:24:95:c6:0d: 6c:e6:82:d7:02:09:34:f6:9c:4d:14:c9:3b:8d:59: 2b:07:54:e6:53:29:b0:ca:2e:ac:f1:c5:e6:24:5a: 4a:82:b2:50:09:d7:5a:c5:b7:e2:eb:01:db:5a:4f: 28:0a:c7:25:56:95:21:c4:3a:c2:f8:57:98:c3:a9: 24:d5:14:58:7d:19:1d:b8:c3:12:51:e9:65:1e:aa: 7c:77:f1:09:ff:d6:9a:7b:91:a2:50:8c:ec:a7:70: 2b:46:be:81:1d:61:b8:0d:cc:02:cd:7c:92:73:37: a2:bf:34:5b:70:6d:f5:9f:22:0c:a2:04:3c:df:02: dd:38:ef:19:0e:cb:c2:56:67:b8:e7:17:bc:a6:8b: 36:f4:f1:73:0a:69:cb:5e:c3:cd:31:bd:e8:9b:5b: b2:ef:96:b8:3e:d1:43:58:63:84:9a:52:6f:c1:f5: 85:83:74:a8:02:ee:88:6d:07:ed:ae:42:75:7f:e0: 2f:91:5b:66:a4:7c:bf:ad:4e:1f:66:b0:1f:1f:87: 91:f5:34:2b:a4:05:09:47:a7:68:85:fd:0f:50:d3: 76:72:5c:d6:3d:c9:1d:fa:a4:e2:94:0b:fe:24:23: 28:e5:20:9b:c4:4f:04:24:2d:50:7d:e0:5b:1e:f0: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:47:4B:BC:F5:F7:60:0A:B5:71:B8:EF:6D:A1:43:27:DE:10:E3:BA X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.247.105.0/24 146.247.110.0/24 146.247.124.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:ee:26:a9:43:b5:b6:8a:63:7f:36:2d:f8:bb:48:65:af:b9: c3:84:58:26:45:f7:a3:98:4f:90:de:be:83:ba:d1:66:bd:42: de:f8:1c:cb:c9:1a:ed:83:7c:67:21:c1:f1:af:3b:ce:fc:8e: b8:ac:15:da:f5:48:23:3b:7d:5f:d9:08:04:14:dc:98:95:54: 18:74:8f:85:a7:52:05:47:1b:37:8d:8e:b3:06:3f:f7:c7:15: 6d:57:b2:c0:00:19:1b:7b:b7:e2:5e:5f:b5:b4:32:00:f2:28: 3d:7e:6f:b3:13:47:1d:49:45:8a:88:8c:24:ae:9c:45:dc:3b: 1b:6b:f8:5a:36:39:81:be:02:f1:f2:04:45:f7:41:e0:82:da: 55:68:2e:5c:6e:1a:7d:a3:e8:a8:f7:8e:49:a4:e2:03:3b:6a: f8:1b:22:59:24:96:55:32:ea:52:17:4a:05:1d:67:01:19:9f: ba:80:90:41:07:a1:86:bc:69:7a:70:f3:e6:59:fa:86:9b:43: 22:ac:68:49:51:8a:dd:df:bf:4c:b9:a5:6f:e6:a5:cc:74:93: 7c:71:fe:d2:91:d6:49:63:2a:85:59:8f:8e:01:d5:fc:13:61: a8:2c:8f:44:d1:c5:81:44:aa:ba:a6:8d:c0:30:b3:67:e0:89: 9d:b7:13:e2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87MFlhpJm2k75h7h955DQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjYwMTAyMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTQ3NGJiY2Y1Zjc2MDBhYjU3MWI4ZWY2ZGExNDMyN2RlMTBlM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tA50zps8jNVyCSVxg1s5oLXAgk0 9pxNFMk7jVkrB1TmUymwyi6s8cXmJFpKgrJQCddaxbfi6wHbWk8oCsclVpUhxDrC +FeYw6kk1RRYfRkduMMSUellHqp8d/EJ/9aae5GiUIzsp3ArRr6BHWG4DcwCzXyS czeivzRbcG31nyIMogQ83wLdOO8ZDsvCVme45xe8pos29PFzCmnLXsPNMb3om1uy 75a4PtFDWGOEmlJvwfWFg3SoAu6IbQftrkJ1f+AvkVtmpHy/rU4fZrAfH4eR9TQr pAUJR6dohf0PUNN2clzWPckd+qTilAv+JCMo5SCbxE8EJC1QfeBbHvBCLwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNlHS7z192AKtXG4722hQyfeEOO6MB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvMlVkTHZQWDNZQXExY2JqdmJhRkRKOTRRNDdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAkvdpAwQA kvduAwQBkvd8MA0GCSqGSIb3DQEBCwUAA4IBAQCe7iapQ7W2imN/Ni34u0hlr7nD hFgmRfejmE+Q3r6DutFmvULe+BzLyRrtg3xnIcHxrzvO/I64rBXa9UgjO31f2QgE FNyYlVQYdI+Fp1IFRxs3jY6zBj/3xxVtV7LAABkbe7fiXl+1tDIA8ig9fm+zE0cd SUWKiIwkrpxF3Dsba/haNjmBvgLx8gRF90HggtpVaC5cbhp9o+io945JpOIDO2r4 GyJZJJZVMupSF0oFHWcBGZ+6gJBBB6GGvGl6cPPmWfqGm0MirGhJUYrd379MuaVv 5qXMdJN8cf7SkdZJYyqFWY+OAdX8E2GoLI9E0cWBRKq6po3AMLNn4ImdtxPi -----END CERTIFICATE-----Generated at Thu Jan 22 21:35:09 2026 by rpki-client