This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/21G_KsrdlZYwSUTry3H2nmsZNvQ.roa File: 21G_KsrdlZYwSUTry3H2nmsZNvQ.roa (raw, json) Hash identifier: kzpsG4zldeD99jTc10NS/HfFkAyJyRY52icDRGiSkXU= Subject key identifier: DB:51:BF:2A:CA:DD:95:96:30:49:44:EB:CB:71:F6:9E:6B:19:36:F4 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA710519D399DD426523BCF157E02D1 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/21G_KsrdlZYwSUTry3H2nmsZNvQ.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215259 IP address blocks: 2a0c:9a40:8530::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:10:51:9d:39:9d:d4:26:52:3b:cf:15:7e:02:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db51bf2acadd9596304944ebcb71f69e6b1936f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:44:1f:c0:04:31:30:41:90:bb:89:25:1c: 1e:9d:3d:73:a1:07:06:16:a2:85:c2:67:27:e2:19: 98:c5:62:e8:2c:83:c6:27:5d:93:e3:70:29:9b:1e: 6f:49:0a:76:98:03:7a:08:15:51:bc:1e:9c:57:59: 19:de:a9:6e:5f:8d:04:45:83:d7:70:35:db:d4:01: 53:65:80:8a:7b:91:e3:0c:d0:ca:9b:0f:90:22:ad: 48:69:42:86:ad:68:c0:b3:ba:fb:d0:d8:80:81:a7: b8:8e:2c:f9:4e:02:e6:99:7b:85:75:7d:ae:86:ec: ea:94:dd:4d:c7:e8:4b:38:e5:d8:aa:20:8b:db:86: 9a:cf:74:48:5f:6c:7c:df:94:6b:9a:b3:81:e8:7b: 62:69:aa:fe:9d:a6:d6:c0:40:8f:47:3a:86:a7:9f: 7f:ec:e0:37:33:25:6f:34:3f:13:49:ae:55:75:c6: 88:e0:e5:3e:1b:9f:06:2f:0d:2f:53:68:45:35:61: 67:21:32:a5:e5:58:b5:57:a0:7e:d1:b5:72:88:4b: 87:05:c2:2e:8a:b8:7e:56:d6:d8:ac:3a:f4:19:f9: e9:11:8c:63:74:f7:b6:a2:c0:48:dc:a6:4e:eb:41: 74:8c:4c:71:74:1e:14:ac:26:db:39:10:7d:60:e0: 05:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:51:BF:2A:CA:DD:95:96:30:49:44:EB:CB:71:F6:9E:6B:19:36:F4 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/21G_KsrdlZYwSUTry3H2nmsZNvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8530::/48 Signature Algorithm: sha256WithRSAEncryption 9e:e8:31:49:b3:29:b8:42:7d:d3:30:37:9d:1f:d5:4c:22:54: d7:ef:58:39:df:33:b9:1e:f7:a9:ca:ef:69:22:b8:8d:b6:fb: 13:1d:5c:fe:87:fc:e0:f0:ec:24:f0:f6:f1:3f:f2:2b:47:6a: fb:35:4f:48:79:b4:3a:d5:ff:26:fe:1f:32:e2:63:f6:da:b8: 69:b1:85:a6:e2:42:3f:db:f0:65:12:7d:78:4e:7b:e6:bf:f3: cc:b4:3a:bb:3b:18:4c:0d:7c:05:da:69:c4:99:86:1b:31:44: a1:17:3e:e6:24:24:f3:28:88:49:44:59:c4:d1:8e:8f:6b:17: 35:3c:5d:6e:8b:eb:45:19:c6:1d:a6:49:73:d0:51:b3:43:f9: b8:e4:95:58:e7:c6:dd:7b:ba:e3:0f:38:69:5a:38:7d:78:4f: 72:99:f0:87:72:f8:34:0f:2b:72:86:4a:54:72:e8:82:6f:36: 45:53:02:38:a8:1e:a7:48:68:0f:9b:cb:d4:59:c9:f3:75:c3: ad:0f:98:c7:1d:d8:36:a1:0c:d5:01:55:2c:59:fb:55:2b:23: 47:13:23:38:5c:7c:78:97:1e:fa:64:74:5b:9a:66:61:9f:51: ba:51:e5:68:33:f2:43:4e:51:3f:61:c4:62:49:47:d5:07:7d: 94:fc:6d:71 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxBRnTmd1CZSO88VfgLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjUxYmYyYWNhZGQ5NTk2MzA0OTQ0ZWJjYjcxZjY5ZTZiMTkzNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8NEH8AEMTBBkLuJJRwenT1zoQcG FqKFwmcn4hmYxWLoLIPGJ12T43Apmx5vSQp2mAN6CBVRvB6cV1kZ3qluX40ERYPX cDXb1AFTZYCKe5HjDNDKmw+QIq1IaUKGrWjAs7r70NiAgae4jiz5TgLmmXuFdX2u huzqlN1Nx+hLOOXYqiCL24aaz3RIX2x835RrmrOB6Htiaar+nabWwECPRzqGp59/ 7OA3MyVvND8TSa5VdcaI4OU+G58GLw0vU2hFNWFnITKl5Vi1V6B+0bVyiEuHBcIu irh+VtbYrDr0GfnpEYxjdPe2osBI3KZO60F0jExxdB4UrCbbORB9YOAFkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNtRvyrK3ZWWMElE68tx9p5rGTb0MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvMjFHX0tzcmRsWll3U1VUcnkzSDJubXNaTnZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIUw MA0GCSqGSIb3DQEBCwUAA4IBAQCe6DFJsym4Qn3TMDedH9VMIlTX71g53zO5Hvep yu9pIriNtvsTHVz+h/zg8Owk8PbxP/IrR2r7NU9IebQ61f8m/h8y4mP22rhpsYWm 4kI/2/BlEn14Tnvmv/PMtDq7OxhMDXwF2mnEmYYbMUShFz7mJCTzKIhJRFnE0Y6P axc1PF1ui+tFGcYdpklz0FGzQ/m45JVY58bde7rjDzhpWjh9eE9ymfCHcvg0Dyty hkpUcuiCbzZFUwI4qB6nSGgPm8vUWcnzdcOtD5jHHdg2oQzVAVUsWftVKyNHEyM4 XHx4lx76ZHRbmmZhn1G6UeVoM/JDTlE/YcRiSUfVB32U/G1x -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:34 2026 by rpki-client