This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2lrFYGZNvXfpPi-VFrPB_g7eOhM.roa File: 2lrFYGZNvXfpPi-VFrPB_g7eOhM.roa (raw, json) Hash identifier: l+Dc+A6gS5KyrmuBCVvRoUT/tVpyBMd0pLguRwROn7Y= Subject key identifier: DA:5A:C5:60:66:4D:BD:77:E9:3E:2F:95:16:B3:C1:FE:0E:DE:3A:13 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA77A54EFB780B50056813CE87C0057 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2lrFYGZNvXfpPi-VFrPB_g7eOhM.roa Signing time: Fri 02 Jan 2026 12:21:03 +0000 ROA not before: Fri 02 Jan 2026 12:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44412 IP address blocks: 212.94.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:7a:54:ef:b7:80:b5:00:56:81:3c:e8:7c:00:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da5ac560664dbd77e93e2f9516b3c1fe0ede3a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:e9:51:16:05:a4:46:48:09:7a:9f:56:4b: 3d:97:5a:e8:de:da:a6:76:a6:d5:cb:ff:42:1b:a0: 3e:1f:12:ac:3e:6d:8e:d4:e2:e0:dc:c1:75:46:c1: 6d:72:89:2e:0b:b5:4b:93:74:b7:f0:eb:26:99:3c: 81:14:c7:37:cd:34:62:1c:40:4e:cc:e8:b2:b7:1f: 23:c2:20:87:a0:32:f8:10:7b:81:6d:5e:ad:46:2f: 73:b5:ac:71:a8:89:0d:aa:4d:a2:dd:64:51:e3:f4: 51:ea:bd:83:6e:19:87:61:15:9b:1d:07:b5:34:e6: d9:3f:1e:1c:07:aa:1a:d5:78:60:6c:b2:06:e9:99: 50:8a:c1:be:a4:37:57:36:77:06:5c:6f:45:de:78: a0:32:ef:9f:51:a8:28:9a:94:88:8b:e9:22:ea:a7: 98:5e:01:72:aa:55:f8:30:a9:cb:11:12:33:e3:68: f3:44:74:da:15:49:5d:8e:ed:39:5b:02:67:fd:6e: 22:39:cc:98:ad:d5:d9:e0:52:f1:40:9e:c9:a8:c7: c0:ce:b4:37:ce:b5:b7:81:03:f2:70:03:af:f7:b6: c8:7f:01:70:0d:cb:cd:f4:07:df:08:34:1a:94:8a: b5:c6:81:ac:e3:c0:64:e6:a2:ed:9d:63:af:64:07: cf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5A:C5:60:66:4D:BD:77:E9:3E:2F:95:16:B3:C1:FE:0E:DE:3A:13 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2lrFYGZNvXfpPi-VFrPB_g7eOhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.94.0.0/20 Signature Algorithm: sha256WithRSAEncryption 06:b4:4b:28:56:f3:7a:eb:9a:87:c4:da:0b:1b:d4:a2:90:11: 04:ff:30:23:de:f8:26:9f:ba:c8:5b:55:79:58:64:6e:02:dd: ff:e9:91:c2:7b:89:fc:36:9b:eb:3c:5f:48:02:aa:8e:13:21: ba:df:64:b2:b5:63:b0:fb:0d:7f:8f:72:2e:8f:77:17:3e:f4: e9:88:ae:07:7d:98:3b:35:76:8f:e3:3d:97:d5:eb:4e:98:9b: 64:5c:50:1b:91:04:6b:63:cf:4e:1c:b4:6e:c4:70:b6:15:f6: 7b:fa:a6:de:6c:01:93:ac:30:16:81:15:b1:16:91:d9:ec:18: 88:85:2f:8a:a1:7e:d2:af:c5:dc:f8:6e:92:9c:8d:9c:eb:06: ad:27:a1:94:7b:00:40:cf:35:8b:0e:a7:c0:dc:c3:1d:f9:4d: 94:e8:90:6b:ac:c6:a6:a3:d9:5f:b6:82:f2:75:b6:08:e8:db: 4f:96:40:ea:c6:2d:94:14:48:7b:0c:ba:13:16:b8:09:f9:ed: 85:5c:26:49:2f:e8:70:14:3f:38:5b:79:ca:ad:16:c2:8d:55: 06:b8:a4:e7:5b:c6:e6:d8:9b:84:f1:f8:01:13:c4:e8:e4:6b: 8b:e6:c4:41:75:79:86:13:58:c2:f2:01:0b:06:b3:50:a9:ed: 4d:a1:1c:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p3pU77eAtQBWgTzofABXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTVhYzU2MDY2NGRiZDc3ZTkzZTJmOTUxNmIzYzFmZTBlZGUzYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv/pURYFpEZICXqfVks9l1ro3tqm dqbVy/9CG6A+HxKsPm2O1OLg3MF1RsFtcokuC7VLk3S38OsmmTyBFMc3zTRiHEBO zOiytx8jwiCHoDL4EHuBbV6tRi9ztaxxqIkNqk2i3WRR4/RR6r2DbhmHYRWbHQe1 NObZPx4cB6oa1XhgbLIG6ZlQisG+pDdXNncGXG9F3nigMu+fUagompSIi+ki6qeY XgFyqlX4MKnLERIz42jzRHTaFUldju05WwJn/W4iOcyYrdXZ4FLxQJ7JqMfAzrQ3 zrW3gQPycAOv97bIfwFwDcvN9AffCDQalIq1xoGs48Bk5qLtnWOvZAfP9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNpaxWBmTb136T4vlRazwf4O3joTMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvMmxyRllHWk52WGZwUGktVkZyUEJfZzdlT2hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1F4AMA0G CSqGSIb3DQEBCwUAA4IBAQAGtEsoVvN665qHxNoLG9SikBEE/zAj3vgmn7rIW1V5 WGRuAt3/6ZHCe4n8NpvrPF9IAqqOEyG632SytWOw+w1/j3Iuj3cXPvTpiK4HfZg7 NXaP4z2X1etOmJtkXFAbkQRrY89OHLRuxHC2FfZ7+qbebAGTrDAWgRWxFpHZ7BiI hS+KoX7Sr8Xc+G6SnI2c6watJ6GUewBAzzWLDqfA3MMd+U2U6JBrrMamo9lftoLy dbYI6NtPlkDqxi2UFEh7DLoTFrgJ+e2FXCZJL+hwFD84W3nKrRbCjVUGuKTnW8bm 2JuE8fgBE8To5GuL5sRBdXmGE1jC8gELBrNQqe1NoRyu -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:44 2026 by rpki-client