This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/2W_yiasSlHxMzGvCseIvYg5Ozd4.roa File: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (raw, json) Hash identifier: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU= Subject key identifier: D9:6F:F2:89:AB:12:94:7C:4C:CC:6B:C2:B1:E2:2F:62:0E:4E:CD:DE Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92 Certificate serial: 019B7F8312FE6399C3A357E046F198234E15 Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/2W_yiasSlHxMzGvCseIvYg5Ozd4.roa Signing time: Fri 02 Jan 2026 16:20:54 +0000 ROA not before: Fri 02 Jan 2026 16:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 95.128.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:12:fe:63:99:c3:a3:57:e0:46:f1:98:23:4e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92 Validity Not Before: Jan 2 16:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d96ff289ab12947c4ccc6bc2b1e22f620e4ecdde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:42:c5:c0:a1:48:07:76:e6:a5:80:8f:9a:b8: 1d:17:33:e8:11:84:30:d2:60:dd:68:17:6f:da:4b: 49:ae:58:44:48:49:b8:2f:cb:f9:e5:4a:d1:90:d5: 4c:88:1e:65:57:0a:54:a7:ae:db:99:af:8e:3e:72: cc:5a:45:4a:c3:eb:63:1a:7c:ef:f9:37:70:0b:7e: 63:cd:59:9a:1b:67:27:3b:9e:d1:b6:b4:51:3c:d5: 9f:e8:73:43:af:bd:f1:20:9e:06:79:00:94:9a:9c: 6c:d5:ac:65:9f:94:15:8e:be:80:a6:e3:23:7a:a3: e2:18:6c:e3:e5:1d:1c:18:ce:72:c3:c5:11:54:a7: f6:9a:ec:c4:70:0d:c8:f8:8f:3c:63:6c:07:62:9b: 31:40:d6:c3:fa:64:67:16:b2:01:fd:57:f1:cd:c5: ab:f4:38:50:d1:c5:0a:fa:87:a1:e9:d2:ef:b4:e8: c3:31:20:0f:92:10:2c:24:16:0e:75:6c:3f:36:34: 29:50:02:da:37:6c:59:15:91:89:35:f5:e9:49:8f: 92:35:eb:3e:f3:f6:fb:f6:fc:e2:b8:54:ea:e5:ba: cd:16:0f:9b:37:b2:34:59:ef:e7:3a:46:be:81:82: 99:28:ed:91:20:3f:5d:f2:74:2d:fa:fa:3d:df:96: 36:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6F:F2:89:AB:12:94:7C:4C:CC:6B:C2:B1:E2:2F:62:0E:4E:CD:DE X509v3 Authority Key Identifier: keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/2W_yiasSlHxMzGvCseIvYg5Ozd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.193.0/24 Signature Algorithm: sha256WithRSAEncryption 90:ea:28:54:65:28:b9:15:c3:f9:50:d0:aa:b6:6f:15:99:52: 47:0f:4f:31:a5:65:71:dd:42:fd:20:9d:a0:92:ee:cf:f6:2d: 59:8f:41:34:12:bc:21:19:93:dd:3f:f1:48:4d:59:eb:55:29: bf:ef:6e:76:4e:6d:37:72:ee:26:c1:7d:01:29:60:70:5f:73: c5:7a:55:ac:42:da:e7:de:2a:1a:11:23:bd:49:54:c4:af:98: fe:80:7e:e3:0b:a6:4b:ad:cb:3e:16:f7:2a:1b:b1:57:d9:14: f3:11:77:b5:4e:46:90:c4:03:fb:29:c6:a1:b5:83:f7:19:23: 61:f1:63:c5:58:d7:04:5a:74:be:54:4e:21:fe:38:05:d2:48: 0b:9d:c7:66:12:ba:bb:23:e9:e4:d4:6a:e2:1c:5c:c4:20:de: 04:47:cf:f0:a8:1a:22:41:60:13:8a:39:23:68:40:b6:25:4a: 76:75:db:f1:78:53:ed:5c:b1:47:6a:bf:76:82:98:54:cd:88: a6:ff:bc:53:d6:81:0b:9d:76:9d:a9:20:61:de:d8:e5:31:e5: 45:a8:8e:ef:9c:cc:fb:1f:3e:2f:94:d0:67:3d:12:c0:8f:b9: f2:47:2f:73:e8:fa:41:c9:34:fd:91:b7:a3:2b:f8:57:49:2d: 90:33:66:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gxL+Y5nDo1fgRvGYI04VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmFhMzJlYmVjOWNlYTFjOTNjNGJkNTVmODVlZjdlMGE1 ZDRmOTIwHhcNMjYwMTAyMTYyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTZmZjI4OWFiMTI5NDdjNGNjYzZiYzJiMWUyMmY2MjBlNGVjZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ELFwKFIB3bmpYCPmrgdFzPoEYQw 0mDdaBdv2ktJrlhESEm4L8v55UrRkNVMiB5lVwpUp67bma+OPnLMWkVKw+tjGnzv +TdwC35jzVmaG2cnO57RtrRRPNWf6HNDr73xIJ4GeQCUmpxs1axln5QVjr6ApuMj eqPiGGzj5R0cGM5yw8URVKf2muzEcA3I+I88Y2wHYpsxQNbD+mRnFrIB/VfxzcWr 9DhQ0cUK+oeh6dLvtOjDMSAPkhAsJBYOdWw/NjQpUALaN2xZFZGJNfXpSY+SNes+ 8/b79vziuFTq5brNFg+bN7I0We/nOka+gYKZKO2RID9d8nQt+vo935Y29wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNlv8omrEpR8TMxrwrHiL2IOTs3eMB8GA1UdIwQY MBaAFJYqoy6+yc6hyTxL1V+F734KXU+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMt ODU4YzZmODgyOWViLzEvMldfeWlhc1NsSHhNekd2Q3NlSXZZZzVPemQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMtODU4YzZmODgyOWVi LzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DBMA0G CSqGSIb3DQEBCwUAA4IBAQCQ6ihUZSi5FcP5UNCqtm8VmVJHD08xpWVx3UL9IJ2g ku7P9i1Zj0E0ErwhGZPdP/FITVnrVSm/7252Tm03cu4mwX0BKWBwX3PFelWsQtrn 3ioaESO9SVTEr5j+gH7jC6ZLrcs+FvcqG7FX2RTzEXe1TkaQxAP7KcahtYP3GSNh 8WPFWNcEWnS+VE4h/jgF0kgLncdmErq7I+nk1GriHFzEIN4ER8/wqBoiQWATijkj aEC2JUp2ddvxeFPtXLFHar92gphUzYim/7xT1oELnXadqSBh3tjlMeVFqI7vnMz7 Hz4vlNBnPRLAj7nyRy9z6PpByTT9kbejK/hXSS2QM2Z4 -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:45 2026 by rpki-client