This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/2m0EGmPYAk8UEyoPFCdGZfUXZ58.roa File: 2m0EGmPYAk8UEyoPFCdGZfUXZ58.roa (raw, json) Hash identifier: xM4PqrOFPyrlAEK5Rat9kM0I00fA9ams94dU6W0ME2Q= Subject key identifier: DA:6D:04:1A:63:D8:02:4F:14:13:2A:0F:14:27:46:65:F5:17:67:9F Certificate issuer: /CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b Certificate serial: 019B7E38F3780C3FAEA7D3B2C409ABB99BA9 Authority key identifier: 1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/2m0EGmPYAk8UEyoPFCdGZfUXZ58.roa Signing time: Fri 02 Jan 2026 10:20:20 +0000 ROA not before: Fri 02 Jan 2026 10:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42387 IP address blocks: 94.143.240.0/21 maxlen: 21 185.9.80.0/22 maxlen: 22 212.109.0.0/20 maxlen: 20 212.109.16.0/20 maxlen: 20 212.109.28.0/24 maxlen: 24 212.109.29.0/24 maxlen: 24 212.109.30.0/24 maxlen: 24 217.77.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f3:78:0c:3f:ae:a7:d3:b2:c4:09:ab:b9:9b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b Validity Not Before: Jan 2 10:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da6d041a63d8024f14132a0f14274665f517679f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:67:08:13:7f:db:ba:fb:5b:57:ec:07:ec: 57:4a:de:c0:0f:d7:b9:ba:9c:64:cf:0c:e3:b0:15: f5:1c:c1:fc:fb:7c:a1:d8:c3:4a:cf:92:e7:b4:c7: 5a:d6:d1:f0:e2:75:06:5b:fc:10:3a:77:26:65:f2: e8:8e:ae:73:5c:76:02:78:d2:bd:07:91:17:28:b5: 44:de:1a:2e:ac:a4:a2:3f:a3:1d:ec:8b:9e:d4:0e: 26:77:e0:ad:07:4a:51:45:00:1b:b0:3d:96:b4:5e: 61:af:5d:4f:b3:47:e1:62:f5:19:51:04:fb:15:b8: fc:27:f1:9f:25:da:b1:17:5d:13:2e:a8:02:2a:08: bd:e9:59:d8:bb:11:da:c4:9f:71:ab:47:2d:41:0c: b3:15:ff:f4:87:1d:48:8d:32:e8:46:df:6f:9c:fa: 2b:29:22:47:6a:fc:87:b1:e3:c0:00:2b:8b:9e:01: d8:ae:2e:47:bf:3c:bd:fe:03:1f:38:ad:01:23:8d: 86:7f:c9:0b:75:71:99:a8:73:b1:16:61:7d:96:52: de:5d:a0:4b:02:b7:c7:60:7d:07:eb:26:f3:66:64: 3b:5c:71:b1:cb:ef:e6:5e:a0:31:a8:6e:a5:e5:2b: 81:91:6f:a6:7d:16:06:a0:9e:50:4e:26:e3:e2:75: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6D:04:1A:63:D8:02:4F:14:13:2A:0F:14:27:46:65:F5:17:67:9F X509v3 Authority Key Identifier: keyid:1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/2m0EGmPYAk8UEyoPFCdGZfUXZ58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.143.240.0/21 185.9.80.0/22 212.109.0.0/19 217.77.48.0/20 Signature Algorithm: sha256WithRSAEncryption 7e:a9:fa:86:af:16:28:b7:f9:b6:52:cd:cf:83:3a:82:f5:88: 84:96:4f:11:0c:de:c9:bc:cd:9c:94:21:76:4b:6b:02:f0:b0: 56:42:54:8d:09:78:d6:13:13:c2:4b:5d:8c:d8:09:bb:9b:29: d3:2c:ba:6b:af:08:cb:96:99:63:58:ec:ec:47:9a:8f:0f:a4: f5:f0:42:c5:61:6f:fc:18:fb:94:42:0d:82:4b:db:aa:6c:b6: 69:8b:59:62:12:34:8e:bf:9e:2c:53:64:08:fa:4b:1c:66:33: 5b:e2:8a:f2:43:cc:fe:f8:b2:c9:b7:10:6e:79:ec:46:5f:dc: 9a:a7:28:90:b3:3b:18:c2:59:66:c9:75:e2:55:05:6e:d8:75: b0:c9:fe:50:88:fa:1e:a5:04:e3:72:24:e5:28:5e:ad:23:6a: f6:a5:de:df:a5:ea:f6:15:c5:06:94:e8:4c:8c:6c:d5:13:ae: 79:51:bc:75:56:40:cb:cd:46:2e:91:62:c6:f0:ab:e7:d5:20: e3:50:89:ab:55:18:06:b6:05:5e:6a:5f:5f:f1:56:df:7e:c3: c5:cc:79:81:5a:9c:fb:5c:cc:07:d6:80:10:f2:40:87:07:7d: 74:75:e9:87:41:6e:53:4a:9b:1e:c1:99:db:b1:d9:c8:ad:b1: f8:35:ae:ab -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OPN4DD+up9OyxAmruZupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNWJlMTU1MDM3ZWI3ZTY1YzEyYWM5YWEyYTJjMzI1MDM4 YzNhOWIwHhcNMjYwMTAyMTAyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTZkMDQxYTYzZDgwMjRmMTQxMzJhMGYxNDI3NDY2NWY1MTc2NzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+JnCBN/27r7W1fsB+xXSt7AD9e5 upxkzwzjsBX1HMH8+3yh2MNKz5LntMda1tHw4nUGW/wQOncmZfLojq5zXHYCeNK9 B5EXKLVE3hourKSiP6Md7Iue1A4md+CtB0pRRQAbsD2WtF5hr11Ps0fhYvUZUQT7 Fbj8J/GfJdqxF10TLqgCKgi96VnYuxHaxJ9xq0ctQQyzFf/0hx1IjTLoRt9vnPor KSJHavyHsePAACuLngHYri5Hvzy9/gMfOK0BI42Gf8kLdXGZqHOxFmF9llLeXaBL ArfHYH0H6ybzZmQ7XHGxy+/mXqAxqG6l5SuBkW+mfRYGoJ5QTibj4nVJGwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNptBBpj2AJPFBMqDxQnRmX1F2efMB8GA1UdIwQY MBaAFBpb4VUDfrfmXBKsmqKiwyUDjDqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2x2aFZRTi10LVpjRXF5YW9xTERKUU9NT3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xNTFlMDUtNzk0Mi00OTBkLWFkMTkt MmVjODcxN2VlMzBhLzEvMm0wRUdtUFlBazhVRXlvUEZDZEdaZlVYWjU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xNTFlMDUtNzk0Mi00OTBkLWFkMTktMmVjODcxN2VlMzBh LzEvR2x2aFZRTi10LVpjRXF5YW9xTERKUU9NT3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDXo/wAwQC uQlQAwQF1G0AAwQE2U0wMA0GCSqGSIb3DQEBCwUAA4IBAQB+qfqGrxYot/m2Us3P gzqC9YiElk8RDN7JvM2clCF2S2sC8LBWQlSNCXjWExPCS12M2Am7mynTLLprrwjL lpljWOzsR5qPD6T18ELFYW/8GPuUQg2CS9uqbLZpi1liEjSOv54sU2QI+kscZjNb 4oryQ8z++LLJtxBueexGX9yapyiQszsYwllmyXXiVQVu2HWwyf5QiPoepQTjciTl KF6tI2r2pd7fper2FcUGlOhMjGzVE655Ubx1VkDLzUYukWLG8Kvn1SDjUImrVRgG tgVeal9f8VbffsPFzHmBWpz7XMwH1oAQ8kCHB310demHQW5TSpsewZnbsdnIrbH4 Na6r -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:48 2026 by rpki-client