This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/RaM2EZlf-MRur6O4ctCc-wEpO-o.roa File: RaM2EZlf-MRur6O4ctCc-wEpO-o.roa (raw, json) Hash identifier: MrBF2bfdOoZgC2wJ/ecOhwAgbwv7ESrEXfcS/2Odito= Subject key identifier: 45:A3:36:11:99:5F:F8:C4:6E:AF:A3:B8:72:D0:9C:FB:01:29:3B:EA Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Certificate serial: 019B77C6FF41FB9E75E62D3E1DDAA2F909F8 Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/RaM2EZlf-MRur6O4ctCc-wEpO-o.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213903 IP address blocks: 2a0a:d682::/32 maxlen: 48 2a0a:d683::/32 maxlen: 48 2a0a:d684::/32 maxlen: 48 2a0a:d685::/32 maxlen: 48 2a0a:d686:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 04:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ff:41:fb:9e:75:e6:2d:3e:1d:da:a2:f9:09:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45a33611995ff8c46eafa3b872d09cfb01293bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:0d:a6:08:3d:14:a2:19:87:9a:2e:84:47: e4:0f:45:4f:58:87:7e:c9:2b:ca:50:8c:c8:58:59: fc:74:bd:10:7a:92:73:3f:c9:29:ef:c1:37:d6:76: 76:06:ea:66:db:ae:e2:c8:59:b2:73:e3:ec:7c:8e: 3f:ed:2d:74:ee:b7:45:53:40:32:cd:ef:25:dc:85: 04:69:5c:95:b9:80:74:23:3b:13:87:d9:6f:38:9e: 18:80:d7:87:f7:cf:76:b5:0d:ff:10:47:7a:62:61: bc:9c:95:47:56:13:67:71:84:e0:95:dd:7f:51:33: 84:be:e4:d3:34:f9:9b:db:bf:2d:f9:7e:aa:ca:6f: c9:a9:d1:64:e2:16:a7:21:85:d3:ed:d2:bc:88:9b: bd:dd:1e:3b:c3:e1:c0:00:f7:05:b4:bf:49:b4:d0: 35:95:73:d6:a2:90:8b:25:07:b8:ba:2e:d1:c8:06: 64:82:fd:63:94:70:65:89:49:43:34:2d:9c:71:8d: 9e:86:58:d5:3c:e8:e2:32:55:28:e3:63:da:36:4b: a8:b8:65:c9:dd:58:74:50:45:97:11:12:53:7c:a1: 4e:de:55:a8:b6:d5:ef:40:ee:2f:ce:23:b9:ad:f1: 84:de:85:6b:6d:22:ff:16:93:7a:6c:cc:dc:59:1e: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A3:36:11:99:5F:F8:C4:6E:AF:A3:B8:72:D0:9C:FB:01:29:3B:EA X509v3 Authority Key Identifier: keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/RaM2EZlf-MRur6O4ctCc-wEpO-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d682::-2a0a:d685:ffff:ffff:ffff:ffff:ffff:ffff 2a0a:d686:8000::/40 Signature Algorithm: sha256WithRSAEncryption b9:53:c4:20:ab:ce:2f:f3:e9:b2:f9:8e:ea:8b:82:5a:e3:d1: 65:2a:5c:0c:ef:6f:93:8e:13:5b:49:1b:92:0d:71:77:53:6d: 19:1c:b5:8e:41:a3:35:85:5b:d2:6e:4e:16:b7:23:41:b6:cf: c6:a3:fe:29:1f:09:a8:d8:84:df:38:4f:90:a3:5c:b9:5d:75: 28:34:95:2f:64:e2:30:f7:ed:d8:6e:a3:82:f1:2a:06:c3:87: 1e:99:e2:22:e8:99:cc:03:ed:62:82:47:ac:95:69:66:05:d5: b3:51:7f:9a:04:66:f0:f0:fa:ab:ec:c6:34:cc:60:af:41:25: 62:90:93:a2:af:0e:cf:86:67:ec:4a:3a:69:60:b4:e7:00:06: cd:d4:4f:3d:43:ea:e3:ab:8d:35:8c:26:f6:3c:2e:05:1f:a0: 2d:0e:1f:d1:a2:c4:b9:fe:be:dc:07:5c:34:34:9c:c9:73:9a: 44:57:9b:59:cb:c6:71:c6:f9:70:7e:86:37:5c:c1:13:6f:16: 80:ec:47:ac:e9:1b:a5:45:fc:b2:67:2b:6f:da:5d:3a:f1:59: 9c:a9:64:6f:6d:7d:79:b4:b2:4d:52:b5:82:bc:02:2b:9d:d3: 78:96:6c:0c:da:0e:8c:75:6c:c2:23:e4:d9:03:f1:66:58:5b: c6:49:5e:ee -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xv9B+5515i0+Hdqi+Qn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNzQ0ZGE3OWYwNTMxYTczYWQ2ZjRiYWYwODM3ZTkzZWI2 ODAxYjEwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWEzMzYxMTk5NWZmOGM0NmVhZmEzYjg3MmQwOWNmYjAxMjkzYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujoNpgg9FKIZh5ouhEfkD0VPWId+ ySvKUIzIWFn8dL0QepJzP8kp78E31nZ2Bupm267iyFmyc+PsfI4/7S107rdFU0Ay ze8l3IUEaVyVuYB0IzsTh9lvOJ4YgNeH9892tQ3/EEd6YmG8nJVHVhNncYTgld1/ UTOEvuTTNPmb278t+X6qym/JqdFk4hanIYXT7dK8iJu93R47w+HAAPcFtL9JtNA1 lXPWopCLJQe4ui7RyAZkgv1jlHBliUlDNC2ccY2ehljVPOjiMlUo42PaNkuouGXJ 3Vh0UEWXERJTfKFO3lWottXvQO4vziO5rfGE3oVrbSL/FpN6bMzcWR5kjwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEWjNhGZX/jEbq+juHLQnPsBKTvqMB8GA1UdIwQY MBaAFJt0TaefBTGnOtb0uvCDfpPraAGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zYjE3NDItMzA3NS00Y2M5LThlOGUt OTJhYjgwZTJlZmQ1LzEvUmFNMkVabGYtTVJ1cjZPNGN0Q2Mtd0VwTy1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zYjE3NDItMzA3NS00Y2M5LThlOGUtOTJhYjgwZTJlZmQ1 LzEvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYMA4DBQEqCtaC AwUBKgrWhAMGACoK1oaAMA0GCSqGSIb3DQEBCwUAA4IBAQC5U8Qgq84v8+my+Y7q i4Ja49FlKlwM72+TjhNbSRuSDXF3U20ZHLWOQaM1hVvSbk4WtyNBts/Go/4pHwmo 2ITfOE+Qo1y5XXUoNJUvZOIw9+3YbqOC8SoGw4cemeIi6JnMA+1igkeslWlmBdWz UX+aBGbw8Pqr7MY0zGCvQSVikJOirw7PhmfsSjppYLTnAAbN1E89Q+rjq401jCb2 PC4FH6AtDh/RosS5/r7cB1w0NJzJc5pEV5tZy8ZxxvlwfoY3XMETbxaA7Ees6Rul RfyyZytv2l068VmcqWRvbX15tLJNUrWCvAIrndN4lmwM2g6MdWzCI+TZA/FmWFvG SV7u -----END CERTIFICATE-----Generated at Thu Jan 22 12:13:32 2026 by rpki-client