This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/a2zWV-wqioLYoSpdWRmVI0voXBg.roa File: a2zWV-wqioLYoSpdWRmVI0voXBg.roa (raw, json) Hash identifier: xY+/aWL/cgttviW08e98/yS6WsezNgpCOEBamyeG6+E= Subject key identifier: 6B:6C:D6:57:EC:2A:8A:82:D8:A1:2A:5D:59:19:95:23:4B:E8:5C:18 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C3F862D1C7E684CD01B02D176AF8 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/a2zWV-wqioLYoSpdWRmVI0voXBg.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a0c:9a40:8a90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c3:f8:62:d1:c7:e6:84:cd:01:b0:2d:17:6a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b6cd657ec2a8a82d8a12a5d591995234be85c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:80:de:ed:c7:75:d1:d0:ce:ae:0a:cd:38: 54:9e:e6:67:dd:c5:4f:61:c4:9a:fa:bd:1d:1f:3f: 7f:bd:5b:9f:9c:f2:d9:44:f3:d1:49:cb:d2:27:b3: 84:c4:9f:38:e9:8a:e4:7e:18:ff:f8:a2:63:81:41: eb:b3:5c:95:b1:3c:dc:87:76:7b:70:33:e8:bc:17: e9:0b:aa:d2:7c:98:51:91:4e:99:2e:c6:c0:df:44: d0:b9:3e:16:37:c4:83:ce:7b:61:34:d1:e4:04:79: 07:c1:e1:74:37:6a:69:3d:32:16:cc:12:ca:e7:7e: 61:9e:3f:e1:f8:f1:ac:ed:8e:a6:c8:72:85:25:35: b1:a9:7d:35:97:c1:b7:5c:b0:86:70:3b:dd:d7:bb: 07:2d:ab:c5:59:95:4a:0b:27:a5:e6:4c:d0:12:a7: 6f:46:71:6a:14:ca:f4:42:e3:f4:c4:df:74:8e:78: 62:91:ed:f5:ca:07:12:6a:53:d6:be:1b:ff:cd:45: a6:db:a6:e1:12:00:72:c3:83:73:37:69:2f:63:ba: 08:d5:8a:a6:a8:6a:8d:f8:14:73:8c:89:df:e8:8b: c0:71:e3:e4:40:fd:8d:2c:db:e6:1d:c2:16:a1:8e: 98:d8:01:fd:97:2d:1b:25:8e:8a:79:e8:74:c7:8c: f4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6C:D6:57:EC:2A:8A:82:D8:A1:2A:5D:59:19:95:23:4B:E8:5C:18 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/a2zWV-wqioLYoSpdWRmVI0voXBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8a90::/48 Signature Algorithm: sha256WithRSAEncryption 63:e5:39:69:70:86:56:b3:0d:d3:84:66:73:58:d3:c2:e3:e8: c4:f3:0d:62:88:86:f3:ff:d9:22:ae:8b:7d:da:53:70:22:6d: ae:7a:f7:1c:b9:fc:4d:55:99:84:d9:25:64:11:d2:db:79:b2: 2a:a4:e3:f9:c0:f9:31:a4:a2:e7:6a:40:9c:70:d8:10:39:6c: 40:27:7b:5f:2f:a4:bb:39:65:d8:ae:b3:e6:ed:9e:2d:9c:fc: cd:2d:46:58:fe:6f:a5:a3:33:86:10:cf:d3:13:c4:6a:6d:74: ce:3f:44:69:78:2c:2f:4b:ea:05:91:04:24:8c:55:f6:e4:6e: c1:22:5e:96:e8:c6:89:c6:44:28:ab:18:0a:82:6e:fe:87:27: 77:f9:4c:a0:2c:07:6d:7f:1e:54:07:2d:22:58:60:44:44:6c: 63:53:16:01:88:77:99:f9:4e:12:91:74:d0:fb:4d:53:58:db: c4:e9:e1:9d:6f:9d:ad:48:f4:c8:82:37:ad:86:c8:1b:27:14: e7:2b:f9:74:3b:76:27:ba:17:80:2a:c7:df:9a:59:e2:5e:c2: 96:07:45:20:52:94:ea:7d:f7:4d:ee:04:f6:20:54:31:5a:af: bf:2b:8d:77:05:4e:99:6a:76:f2:8d:5e:55:60:c1:9b:38:08: 58:8f:3b:53 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+psP4YtHH5oTNAbAtF2r4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjZjZDY1N2VjMmE4YTgyZDhhMTJhNWQ1OTE5OTUyMzRiZTg1YzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVyA3u3HddHQzq4KzThUnuZn3cVP YcSa+r0dHz9/vVufnPLZRPPRScvSJ7OExJ846Yrkfhj/+KJjgUHrs1yVsTzch3Z7 cDPovBfpC6rSfJhRkU6ZLsbA30TQuT4WN8SDznthNNHkBHkHweF0N2ppPTIWzBLK 535hnj/h+PGs7Y6myHKFJTWxqX01l8G3XLCGcDvd17sHLavFWZVKCyel5kzQEqdv RnFqFMr0QuP0xN90jnhike31ygcSalPWvhv/zUWm26bhEgByw4NzN2kvY7oI1Yqm qGqN+BRzjInf6IvAcePkQP2NLNvmHcIWoY6Y2AH9ly0bJY6Keeh0x4z0QwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGts1lfsKoqC2KEqXVkZlSNL6FwYMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvYTJ6V1Ytd3Fpb0xZb1NwZFdSbVZJMHZvWEJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIqQ MA0GCSqGSIb3DQEBCwUAA4IBAQBj5TlpcIZWsw3ThGZzWNPC4+jE8w1iiIbz/9ki rot92lNwIm2uevccufxNVZmE2SVkEdLbebIqpOP5wPkxpKLnakCccNgQOWxAJ3tf L6S7OWXYrrPm7Z4tnPzNLUZY/m+lozOGEM/TE8RqbXTOP0RpeCwvS+oFkQQkjFX2 5G7BIl6W6MaJxkQoqxgKgm7+hyd3+UygLAdtfx5UBy0iWGBERGxjUxYBiHeZ+U4S kXTQ+01TWNvE6eGdb52tSPTIgjethsgbJxTnK/l0O3YnuheAKsffmlniXsKWB0Ug UpTqffdN7gT2IFQxWq+/K413BU6ZanbyjV5VYMGbOAhYjztT -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:35 2026 by rpki-client