This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa File: 2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa (raw, json) Hash identifier: z8D6G5qAyZtOctuyLt0W9PyzjKIioqDo4g6gtUqBJsA= Subject key identifier: D9:61:4E:A9:96:40:DB:22:14:9D:0F:FA:7A:D8:77:8F:1D:8D:3E:75 Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661 Certificate serial: 019B7CED275F306289AAB02DFF42891DCFFC Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa Signing time: Fri 02 Jan 2026 04:17:55 +0000 ROA not before: Fri 02 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.47.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:27:5f:30:62:89:aa:b0:2d:ff:42:89:1d:cf:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661 Validity Not Before: Jan 2 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9614ea99640db22149d0ffa7ad8778f1d8d3e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:23:61:bc:76:45:18:42:ff:50:9c:ee:a0:52: 25:46:58:f2:52:f4:7f:a4:10:86:96:b7:da:69:9a: fc:f2:ff:53:48:9a:a4:df:40:e6:15:0b:48:be:c0: 15:a8:8a:61:bf:0d:e7:c1:67:9f:26:e6:ef:50:6d: 9d:2f:d0:ab:fa:2a:e3:27:36:f7:65:37:94:9b:22: c2:81:75:57:47:c8:14:4b:41:22:7e:58:04:38:23: f0:26:77:6d:3b:9b:a3:f0:68:c4:2d:7b:02:cb:67: 70:2d:e9:31:af:e7:2e:a4:34:55:20:ac:f5:e0:f0: a6:5d:e6:24:7d:36:1e:6c:86:7f:a5:8f:e4:d9:25: 0d:b9:fd:4b:a4:3c:98:4f:d9:85:05:eb:55:d4:0c: 39:96:8b:f6:7c:b2:a3:97:ef:9d:78:7a:c4:1c:96: 69:b4:2a:9a:11:40:6b:bb:8c:44:eb:a9:6f:5f:2a: 99:bf:b8:91:cf:e6:72:c6:5a:16:98:03:ef:8e:74: 6f:8b:33:8d:8e:1a:1d:f1:79:ec:3f:7d:9e:f5:de: 3d:47:5d:ea:1e:05:e3:a0:3c:9c:97:74:ac:9c:d1: 71:b3:88:5d:68:f4:7c:38:ee:99:4e:15:d6:f6:6a: d7:1c:a7:c6:61:c3:80:8a:a9:8d:79:81:a9:c9:af: 23:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:61:4E:A9:96:40:DB:22:14:9D:0F:FA:7A:D8:77:8F:1D:8D:3E:75 X509v3 Authority Key Identifier: keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.47.182.0/24 Signature Algorithm: sha256WithRSAEncryption b1:72:08:97:03:22:48:01:da:1b:30:73:bc:ad:71:9d:09:ba: bf:7c:f8:bb:49:1b:16:b4:19:d4:3f:05:ed:45:30:40:f8:bd: b5:fe:31:1c:0b:9b:41:9c:1e:3e:e7:9b:93:06:f7:23:a7:0a: 70:de:3a:fe:e1:f3:21:33:19:87:f5:25:f2:f5:21:27:82:76: 6f:0c:e0:bc:ad:2a:c7:26:9d:f1:a6:0d:43:d2:78:f7:92:12: b4:1c:e9:a7:4b:b3:26:92:90:38:73:65:0a:60:48:a2:92:e6: 58:53:df:ed:de:60:5a:a0:95:a1:a5:9a:0d:ff:75:5a:14:3b: bb:65:ff:b7:58:5b:0f:eb:6e:1d:f4:40:92:dc:5e:6d:ec:c1: 38:6b:3b:77:55:9b:3e:53:3d:4b:75:62:2f:de:8d:6f:82:1e: e4:76:2d:eb:6a:c3:43:1d:77:d8:09:6e:5b:83:b8:87:07:7e: 4f:a1:83:22:78:3d:3e:3c:96:83:d8:64:2b:8c:cf:bc:d7:06: bb:c8:25:04:2b:cc:20:a9:31:fc:ce:d5:a1:16:09:8f:d2:ee: 91:b1:d3:33:8e:d7:94:9d:70:fd:eb:5c:eb:3b:81:96:f7:f3: c6:ab:0a:c9:3c:71:0c:42:a6:5c:a9:ff:18:ad:7a:6f:94:3c: 1d:53:50:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87SdfMGKJqrAt/0KJHc/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYmQ3NjY4OGI4N2MwMzkxNGFlMmEyZTE0OTBjMmYxZTkx NDE2NjEwHhcNMjYwMTAyMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTYxNGVhOTk2NDBkYjIyMTQ5ZDBmZmE3YWQ4Nzc4ZjFkOGQzZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SNhvHZFGEL/UJzuoFIlRljyUvR/ pBCGlrfaaZr88v9TSJqk30DmFQtIvsAVqIphvw3nwWefJubvUG2dL9Cr+irjJzb3 ZTeUmyLCgXVXR8gUS0EiflgEOCPwJndtO5uj8GjELXsCy2dwLekxr+cupDRVIKz1 4PCmXeYkfTYebIZ/pY/k2SUNuf1LpDyYT9mFBetV1Aw5lov2fLKjl++deHrEHJZp tCqaEUBru4xE66lvXyqZv7iRz+ZyxloWmAPvjnRvizONjhod8XnsP32e9d49R13q HgXjoDycl3SsnNFxs4hdaPR8OO6ZThXW9mrXHKfGYcOAiqmNeYGpya8j0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNlhTqmWQNsiFJ0P+nrYd48djT51MB8GA1UdIwQY MBaAFCy9dmiLh8A5FK4qLhSQwvHpFBZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82NmI5NTktNDcyZi00OTIyLWEyMjYt ZTBmOTMwODA2YmRjLzEvMldGT3FaWkEyeUlVblFfNmV0aDNqeDJOUG5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82NmI5NTktNDcyZi00OTIyLWEyMjYtZTBmOTMwODA2YmRj LzEvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS+2MA0G CSqGSIb3DQEBCwUAA4IBAQCxcgiXAyJIAdobMHO8rXGdCbq/fPi7SRsWtBnUPwXt RTBA+L21/jEcC5tBnB4+55uTBvcjpwpw3jr+4fMhMxmH9SXy9SEngnZvDOC8rSrH Jp3xpg1D0nj3khK0HOmnS7MmkpA4c2UKYEiikuZYU9/t3mBaoJWhpZoN/3VaFDu7 Zf+3WFsP624d9ECS3F5t7ME4azt3VZs+Uz1LdWIv3o1vgh7kdi3rasNDHXfYCW5b g7iHB35PoYMieD0+PJaD2GQrjM+81wa7yCUEK8wgqTH8ztWhFgmP0u6RsdMzjteU nXD961zrO4GW9/PGqwrJPHEMQqZcqf8YrXpvlDwdU1DE -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:51 2026 by rpki-client