This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pf2IckDFqeAaGGfiSwPCNp8mmQc.roa File: pf2IckDFqeAaGGfiSwPCNp8mmQc.roa (raw, json) Hash identifier: tTsvsXawsP8LXfMd/n2CNWktI7T6XwxMdSnfBy2ycCE= Subject key identifier: A5:FD:88:72:40:C5:A9:E0:1A:18:67:E2:4B:03:C2:36:9F:26:99:07 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6EAC69520629C62E491DC4D4A9679 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pf2IckDFqeAaGGfiSwPCNp8mmQc.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205280 IP address blocks: 2a0c:9a40:88d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ea:c6:95:20:62:9c:62:e4:91:dc:4d:4a:96:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5fd887240c5a9e01a1867e24b03c2369f269907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a2:d3:58:20:b3:ec:ca:5a:db:d3:68:a8:89: f3:9d:18:22:09:f1:77:99:0c:1c:20:5e:c5:64:a0: fc:27:8c:bc:c3:fe:59:9f:e6:7e:49:6f:77:a9:64: 51:f4:2e:79:b0:92:df:f0:2b:e6:1a:4a:c2:5e:74: f0:34:6e:54:43:cc:79:72:f1:f3:f4:cf:3c:f9:1c: d6:ff:c6:c6:be:b2:e1:6b:de:ea:53:9a:9e:f9:33: bd:0a:ae:4d:60:e1:f0:da:10:d9:34:3d:70:87:e3: 34:32:95:4b:9f:3c:21:4b:c7:ac:4f:2f:93:59:16: 67:08:6a:f0:70:e2:a1:b7:14:48:25:ad:cd:c6:91: 13:9c:e2:99:68:b9:37:1d:52:c6:79:68:41:e5:b9: 17:df:08:c2:8b:e4:60:7f:91:63:d1:31:04:03:17: 13:15:5e:d9:40:4c:cf:67:d1:4c:f8:b8:8b:67:97: 48:51:4b:8f:98:be:85:3b:95:c1:fa:bd:65:f7:fa: 02:6c:91:86:04:7f:d4:79:9b:5f:7f:15:9f:72:e9: 1a:40:65:6b:b0:7a:25:be:94:98:cc:5a:cb:28:e9: 11:67:b5:22:9e:ae:c7:d6:de:ee:75:ba:f8:e1:c8: 89:46:bf:ec:fe:e0:ac:2f:46:bc:80:3a:1c:1f:f9: 26:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FD:88:72:40:C5:A9:E0:1A:18:67:E2:4B:03:C2:36:9F:26:99:07 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pf2IckDFqeAaGGfiSwPCNp8mmQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:88d0::/44 Signature Algorithm: sha256WithRSAEncryption ae:c0:7f:72:91:bf:7f:40:ed:44:ab:38:a9:75:ea:6a:a6:a8: 24:98:0a:88:49:6e:f4:db:75:0f:bb:6d:d8:1f:94:51:09:74: 11:b5:a0:00:8f:b3:9f:48:f3:8a:a1:a2:70:19:e1:b0:32:26: b2:6b:79:17:31:2b:82:0f:b2:05:d9:10:a5:6b:e5:69:20:06: 8d:59:bd:dc:2d:a4:1a:da:ba:8a:2d:28:4e:ec:18:6f:28:ce: f6:e1:0d:d2:53:0e:f8:75:fe:d8:89:c5:e3:a3:47:6e:79:02: 23:6e:ab:ae:0b:96:23:f5:7f:81:76:86:0a:97:3f:92:24:8a: ee:81:62:3f:ae:79:67:49:0d:66:12:c1:e7:f9:6d:d5:d1:2b: dd:77:53:c6:77:22:58:f9:45:c6:26:e3:26:e0:6f:6a:57:cb: c8:a6:64:b4:fb:ae:99:a2:5d:da:96:a4:df:88:13:49:4e:c0: 9c:e1:c4:c2:8d:4a:61:51:a7:61:31:26:31:74:f1:b3:e5:a4: c1:69:58:0d:68:a7:f7:79:e6:6a:ae:1d:00:f6:ea:73:11:d9: bc:fc:a0:92:41:01:66:b2:7d:3b:6a:b4:c8:23:2e:bf:2a:f6: c3:23:18:10:07:7f:22:13:f1:e7:5a:50:91:13:b1:5a:27:a8: e4:e1:1a:fe -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+purGlSBinGLkkdxNSpZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWZkODg3MjQwYzVhOWUwMWExODY3ZTI0YjAzYzIzNjlmMjY5OTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqLTWCCz7Mpa29NoqInznRgiCfF3 mQwcIF7FZKD8J4y8w/5Zn+Z+SW93qWRR9C55sJLf8CvmGkrCXnTwNG5UQ8x5cvHz 9M88+RzW/8bGvrLha97qU5qe+TO9Cq5NYOHw2hDZND1wh+M0MpVLnzwhS8esTy+T WRZnCGrwcOKhtxRIJa3NxpETnOKZaLk3HVLGeWhB5bkX3wjCi+Rgf5Fj0TEEAxcT FV7ZQEzPZ9FM+LiLZ5dIUUuPmL6FO5XB+r1l9/oCbJGGBH/UeZtffxWfcukaQGVr sHolvpSYzFrLKOkRZ7Uinq7H1t7udbr44ciJRr/s/uCsL0a8gDocH/kmxwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKX9iHJAxangGhhn4ksDwjafJpkHMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvcGYySWNrREZxZUFhR0dmaVN3UENOcDhtbVFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIjQ MA0GCSqGSIb3DQEBCwUAA4IBAQCuwH9ykb9/QO1EqzipdepqpqgkmAqISW7023UP u23YH5RRCXQRtaAAj7OfSPOKoaJwGeGwMiaya3kXMSuCD7IF2RCla+VpIAaNWb3c LaQa2rqKLShO7BhvKM724Q3SUw74df7YicXjo0dueQIjbquuC5Yj9X+BdoYKlz+S JIrugWI/rnlnSQ1mEsHn+W3V0Svdd1PGdyJY+UXGJuMm4G9qV8vIpmS0+66Zol3a lqTfiBNJTsCc4cTCjUphUadhMSYxdPGz5aTBaVgNaKf3eeZqrh0A9upzEdm8/KCS QQFmsn07arTIIy6/KvbDIxgQB38iE/HnWlCRE7FaJ6jk4Rr+ -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:26 2026 by rpki-client