This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2rNt1-kCzpI1u_xWmuaa5_GGGyo.roa File: 2rNt1-kCzpI1u_xWmuaa5_GGGyo.roa (raw, json) Hash identifier: TFkBxn9Jb9I9MwcY/y+Xe2o7UKPLlQ3h50YA4Cxo1HI= Subject key identifier: DA:B3:6D:D7:E9:02:CE:92:35:BB:FC:56:9A:E6:9A:E7:F1:86:1B:2A Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7602974371A482C335399D88E2776 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2rNt1-kCzpI1u_xWmuaa5_GGGyo.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16287 IP address blocks: 87.103.216.0/21 maxlen: 21 217.116.128.0/24 maxlen: 24 217.116.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:60:29:74:37:1a:48:2c:33:53:99:d8:8e:27:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dab36dd7e902ce9235bbfc569ae69ae7f1861b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:38:17:e7:4c:9c:21:a2:ab:7e:37:02:89:fa: 59:a8:32:c6:b4:1a:dc:21:13:87:90:3d:e4:8d:4c: 3a:85:f6:9f:36:84:cf:ec:f8:73:67:21:94:5a:6a: 17:82:0a:38:84:ce:8b:89:80:f8:91:59:65:00:c5: 1e:6a:5d:71:00:90:9f:23:de:36:8a:d3:26:f7:2e: 75:ca:68:f1:cb:ea:1e:de:b7:1f:8f:f5:1d:a3:7d: 06:88:7d:74:c9:92:85:28:95:e8:2e:ee:31:0b:ae: 5f:cb:4c:e5:3b:d5:84:08:b1:cd:f2:31:d0:de:74: 9a:01:b2:18:e1:5c:1e:5c:4c:6b:00:a2:c5:19:d2: 0b:82:ec:45:e9:f2:fd:53:fa:f7:ac:bf:5e:08:5f: f3:33:94:28:34:11:8c:a0:f8:be:b6:e7:3a:05:ba: bd:55:09:ac:6f:ed:ca:83:0d:7a:0a:c0:d1:43:b0: 74:78:55:9c:27:d0:e1:7b:86:c2:d0:fe:3e:43:01: 0c:05:a5:8c:92:01:73:9e:25:1c:35:b0:44:03:a7: 60:61:ef:61:ce:bf:e6:5c:d2:9d:8f:23:fb:71:b5: d3:33:73:0e:c0:19:3e:4d:63:6a:0d:95:e4:6c:9d: 14:c5:41:18:1f:fb:3a:fa:bc:f6:2f:55:0d:39:46: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B3:6D:D7:E9:02:CE:92:35:BB:FC:56:9A:E6:9A:E7:F1:86:1B:2A X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2rNt1-kCzpI1u_xWmuaa5_GGGyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.103.216.0/21 217.116.128.0/24 217.116.140.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:c6:d3:33:21:7e:de:96:dc:5a:23:0b:6d:20:b6:5a:9a:44: 19:dc:67:a1:e0:b7:ec:df:8d:06:2a:bb:52:ac:03:db:1e:fb: f4:f8:e5:d5:18:06:d1:d6:79:37:ad:a6:1a:44:87:f8:f3:55: 73:2b:8c:7b:ae:0b:68:36:a5:25:5e:db:a4:e3:8b:91:c5:08: 8b:8c:8c:1b:0e:d5:9e:b4:5e:06:bf:6d:a5:a6:cc:a2:99:60: ac:b5:18:bd:3b:35:a2:6b:09:89:cd:dd:57:60:91:88:8f:97: 79:b1:3c:dc:bf:a5:65:26:5d:01:ac:5e:af:21:07:e1:63:f0: ba:07:e5:97:e7:ba:78:6d:10:96:b4:19:43:dd:a2:7f:73:fd: 61:0c:5e:b2:da:4b:fb:81:33:ce:62:78:97:71:f1:2f:e4:c6: 8e:d4:e7:b0:1a:ce:95:9c:90:94:1e:78:6f:10:c1:ce:4d:82: 60:f2:ad:82:40:1c:f6:94:d8:83:5e:93:c8:cd:31:94:c9:62: 58:13:12:85:98:e9:ba:16:97:e7:49:ec:2c:88:bd:2e:70:d3: df:aa:b7:d3:9e:e9:06:00:c6:52:be:45:bc:01:0c:a5:15:70: 15:05:f3:51:48:64:75:8e:66:97:96:99:52:7a:83:e5:13:a4: 15:ff:5c:b3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+p2ApdDcaSCwzU5nYjid2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWIzNmRkN2U5MDJjZTkyMzViYmZjNTY5YWU2OWFlN2YxODYxYjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zgX50ycIaKrfjcCifpZqDLGtBrc IROHkD3kjUw6hfafNoTP7PhzZyGUWmoXggo4hM6LiYD4kVllAMUeal1xAJCfI942 itMm9y51ymjxy+oe3rcfj/Udo30GiH10yZKFKJXoLu4xC65fy0zlO9WECLHN8jHQ 3nSaAbIY4VweXExrAKLFGdILguxF6fL9U/r3rL9eCF/zM5QoNBGMoPi+tuc6Bbq9 VQmsb+3Kgw16CsDRQ7B0eFWcJ9Dhe4bC0P4+QwEMBaWMkgFzniUcNbBEA6dgYe9h zr/mXNKdjyP7cbXTM3MOwBk+TWNqDZXkbJ0UxUEYH/s6+rz2L1UNOUZ6FQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNqzbdfpAs6SNbv8VprmmufxhhsqMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvMnJOdDEta0N6cEkxdV94V211YWE1X0dHR3lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDV2fYAwQA 2XSAAwQA2XSMMA0GCSqGSIb3DQEBCwUAA4IBAQAbxtMzIX7eltxaIwttILZamkQZ 3Geh4Lfs340GKrtSrAPbHvv0+OXVGAbR1nk3raYaRIf481VzK4x7rgtoNqUlXtuk 44uRxQiLjIwbDtWetF4Gv22lpsyimWCstRi9OzWiawmJzd1XYJGIj5d5sTzcv6Vl Jl0BrF6vIQfhY/C6B+WX57p4bRCWtBlD3aJ/c/1hDF6y2kv7gTPOYniXcfEv5MaO 1OewGs6VnJCUHnhvEMHOTYJg8q2CQBz2lNiDXpPIzTGUyWJYExKFmOm6FpfnSews iL0ucNPfqrfTnukGAMZSvkW8AQylFXAVBfNRSGR1jmaXlplSeoPlE6QV/1yz -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:59 2026 by rpki-client