This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/2b6Eq9cl8ekzMy1PxZJi91z-iqY.roa File: 2b6Eq9cl8ekzMy1PxZJi91z-iqY.roa (raw, json) Hash identifier: Xz6QbDMbodjD7oUbur2DkmlMy4mu0KFHGg13oNwyOk0= Subject key identifier: D9:BE:84:AB:D7:25:F1:E9:33:33:2D:4F:C5:92:62:F7:5C:FE:8A:A6 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019A7A1B41B0A8A0C4730DC06721B6E6BC7E Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/2b6Eq9cl8ekzMy1PxZJi91z-iqY.roa Signing time: Wed 12 Nov 2025 22:06:37 +0000 ROA not before: Wed 12 Nov 2025 22:06:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214079 IP address blocks: 2a0d:d940:40::/44 maxlen: 44 2a0d:d940:2003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7a:1b:41:b0:a8:a0:c4:73:0d:c0:67:21:b6:e6:bc:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Nov 12 22:06:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d9be84abd725f1e933332d4fc59262f75cfe8aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:7c:6b:5e:e9:27:5d:46:2e:7a:e8:56:e2: 6a:be:52:1b:aa:d2:07:58:76:1d:c9:dd:ed:6c:79: 50:f3:4a:7c:2d:36:e5:99:2c:8c:80:01:26:48:d8: 84:c8:55:c8:e2:b2:1e:53:05:9d:73:b0:f3:5d:82: b0:e4:49:90:89:83:87:f3:b3:af:eb:77:dc:7a:76: c2:9c:da:8d:ce:45:e2:4d:b2:92:24:08:38:59:35: 36:99:d9:0e:93:e8:a2:13:14:79:24:43:84:e1:74: c0:59:6b:62:b7:c4:35:93:22:29:db:e9:f5:d9:b6: 32:f6:2f:bf:56:8f:3b:41:db:8f:87:7f:13:fd:1a: e8:96:61:7f:1f:e2:35:bd:69:c3:e5:fc:2d:23:62: 83:4d:7e:93:5b:07:86:9f:03:aa:fd:24:f3:2d:b5: 32:f5:b1:00:67:65:b4:e6:25:99:5f:b2:36:db:b8: ae:41:d4:8f:37:93:80:fa:af:3e:b5:e5:f1:cc:a0: 8a:64:eb:58:36:e8:36:cd:39:0d:54:72:23:49:84: 99:22:01:d3:b1:c6:02:2b:05:6c:61:14:db:07:0b: 7a:c3:08:9b:b3:66:6e:6d:e7:e1:29:69:bc:d0:e9: 89:92:25:32:23:01:65:c0:63:94:38:d6:04:69:69: bb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BE:84:AB:D7:25:F1:E9:33:33:2D:4F:C5:92:62:F7:5C:FE:8A:A6 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/2b6Eq9cl8ekzMy1PxZJi91z-iqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:40::/44 2a0d:d940:2003::/48 Signature Algorithm: sha256WithRSAEncryption 12:d1:d7:92:75:08:ce:fc:5b:f4:99:d7:01:5b:b6:a4:3a:fc: 86:e4:8c:84:98:d0:8e:f1:f3:a3:32:55:b7:8b:58:84:2b:f9: 0b:d1:31:fc:c2:8e:81:a3:85:ac:11:3e:be:0b:c8:dd:07:ef: 9d:a6:90:ea:79:32:ab:f8:85:dd:d0:aa:81:b9:3d:8e:a3:bd: 7f:cf:83:ab:db:b6:57:f9:c1:7a:96:7c:f0:3b:00:d1:a6:fd: 25:17:e4:37:39:3b:42:1b:c3:72:e0:96:6b:2a:59:2a:98:27: c8:72:58:ee:d8:cb:8e:c8:52:ae:58:2e:9f:c0:23:b5:3d:c7: 1a:09:db:65:76:67:f6:b3:91:54:dc:b9:48:02:7a:ea:bb:e1: d3:87:83:57:08:cf:13:33:2d:9c:c0:82:1d:be:93:a4:c3:fd: 4d:5f:04:be:91:9d:4b:6e:34:f9:36:ac:28:f9:2d:a8:55:b0: 53:b1:c1:7c:e0:a3:d6:3d:06:5f:bd:79:ce:99:2e:b6:92:c9: b8:eb:18:31:58:47:a0:cc:f4:05:db:2c:1b:0a:d9:9f:80:d6: 12:28:2a:5a:79:cf:59:57:38:ae:9a:73:b7:23:0a:06:f3:84: 78:c3:00:1f:37:ca:ac:fa:fc:ec:e0:a0:96:ad:10:1c:d7:de: f0:fa:f2:c1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZp6G0GwqKDEcw3AZyG25rx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjUxMTEyMjIwNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWJlODRhYmQ3MjVmMWU5MzMzMzJkNGZjNTkyNjJmNzVjZmU4YWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBB8a17pJ11GLnroVuJqvlIbqtIH WHYdyd3tbHlQ80p8LTblmSyMgAEmSNiEyFXI4rIeUwWdc7DzXYKw5EmQiYOH87Ov 63fcenbCnNqNzkXiTbKSJAg4WTU2mdkOk+iiExR5JEOE4XTAWWtit8Q1kyIp2+n1 2bYy9i+/Vo87QduPh38T/RrolmF/H+I1vWnD5fwtI2KDTX6TWweGnwOq/STzLbUy 9bEAZ2W05iWZX7I227iuQdSPN5OA+q8+teXxzKCKZOtYNug2zTkNVHIjSYSZIgHT scYCKwVsYRTbBwt6wwibs2ZubefhKWm80OmJkiUyIwFlwGOUONYEaWm7hwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNm+hKvXJfHpMzMtT8WSYvdc/oqmMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvMmI2RXE5Y2w4ZWt6TXkxUHhaSmk5MXotaXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg3ZQABA AwcAKg3ZQCADMA0GCSqGSIb3DQEBCwUAA4IBAQAS0deSdQjO/Fv0mdcBW7akOvyG 5IyEmNCO8fOjMlW3i1iEK/kL0TH8wo6Bo4WsET6+C8jdB++dppDqeTKr+IXd0KqB uT2Oo71/z4Or27ZX+cF6lnzwOwDRpv0lF+Q3OTtCG8Ny4JZrKlkqmCfIclju2MuO yFKuWC6fwCO1PccaCdtldmf2s5FU3LlIAnrqu+HTh4NXCM8TMy2cwIIdvpOkw/1N XwS+kZ1LbjT5Nqwo+S2oVbBTscF84KPWPQZfvXnOmS62ksm46xgxWEegzPQF2ywb CtmfgNYSKCpaec9ZVziumnO3IwoG84R4wwAfN8qs+vzs4KCWrRAc197w+vLB -----END CERTIFICATE-----Generated at Fri Dec 5 19:29:49 2025 by rpki-client