This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/2Rd6Xj6wiV3raIwL5cSqXIH30zs.roa File: 2Rd6Xj6wiV3raIwL5cSqXIH30zs.roa (raw, json) Hash identifier: mcr43yG8w/sxouuaXQhH08XNyvdGHXOCp9ED1nTWn+k= Subject key identifier: D9:17:7A:5E:3E:B0:89:5D:EB:68:8C:0B:E5:C4:AA:5C:81:F7:D3:3B Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248 Certificate serial: 019AEDE816FF266F26FCCCB0C90FC97CD350 Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/2Rd6Xj6wiV3raIwL5cSqXIH30zs.roa Signing time: Fri 05 Dec 2025 09:46:41 +0000 ROA not before: Fri 05 Dec 2025 09:46:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209807 IP address blocks: 2001:67c:ed0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:e8:16:ff:26:6f:26:fc:cc:b0:c9:0f:c9:7c:d3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248 Validity Not Before: Dec 5 09:46:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d9177a5e3eb0895deb688c0be5c4aa5c81f7d33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:c0:71:ac:c4:6f:6f:ec:a7:9e:ee:97:5b: 2a:2d:57:bf:7e:8c:f7:f5:9c:30:20:9c:03:4b:b2: d1:74:89:95:c2:91:ad:5b:0a:2a:36:f8:2d:36:01: 64:1e:a1:43:93:2f:e8:7c:c2:26:75:76:32:a0:16: 61:67:a0:bd:37:38:ad:9d:ff:6d:cc:eb:02:c9:f6: 9b:48:c5:94:0c:4b:d7:fb:61:01:f7:2c:09:41:3c: 0a:d7:34:9e:15:39:d6:c7:50:93:b7:55:87:16:76: d1:85:e7:28:08:b6:67:0b:d3:67:c0:c9:03:6e:92: 90:7b:e0:a4:bb:7d:ad:b5:e7:4b:67:33:98:6c:22: af:71:10:b6:44:e8:7a:09:d0:68:c3:a2:4a:6f:5b: 68:75:5c:52:08:59:c1:76:05:a3:11:d8:32:18:90: 4d:4a:7b:81:9e:03:17:67:bc:31:1c:fb:7b:a9:81: 32:48:ee:bb:49:d7:df:4d:09:0a:fe:22:17:2e:eb: c7:94:68:a2:d2:36:96:5b:7c:78:3f:51:76:22:e1: ef:6a:65:5d:fe:0d:11:11:f2:24:6a:4b:57:d8:01: 8b:fe:bf:f4:21:fa:af:26:ce:63:c1:81:85:d7:10: e9:16:5d:46:ed:c7:37:66:f2:ce:51:75:09:ac:be: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:17:7A:5E:3E:B0:89:5D:EB:68:8C:0B:E5:C4:AA:5C:81:F7:D3:3B X509v3 Authority Key Identifier: keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/2Rd6Xj6wiV3raIwL5cSqXIH30zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ed0::/48 Signature Algorithm: sha256WithRSAEncryption 96:6e:38:24:77:8f:8a:06:f7:32:b5:98:2a:89:b4:c5:fa:1d: df:90:ef:9f:44:57:8e:03:15:e4:25:5d:e2:3f:5f:55:34:f0: f9:d7:af:c7:37:5f:37:1b:41:da:49:84:b0:0b:08:a0:2f:e9: d7:31:93:db:4b:a1:50:57:f8:0c:90:81:8e:ab:97:ec:d6:bf: f5:be:2e:c6:60:05:37:b9:71:42:d8:15:b8:d2:7b:73:cd:90: 9b:84:94:fa:c3:88:30:69:1c:e5:3f:ac:3b:7a:54:b7:b5:74: e4:14:51:26:6f:4f:9e:53:0e:e0:d9:0e:79:d6:f3:d2:b9:2a: 5e:29:a9:b6:7a:76:76:33:b1:81:b9:77:51:cd:af:a8:cc:1b: 4a:20:d1:e6:8e:86:1c:28:cc:e4:ad:4a:bb:0f:f6:8a:5e:9c: 0e:02:e7:44:06:63:c6:0d:ea:3a:c5:da:84:11:f7:a8:2c:5a: 50:95:a5:b4:81:21:b9:37:74:68:f8:1e:f3:b0:e9:39:ff:b3: e4:4a:0e:05:c1:3e:92:8b:42:17:93:60:f5:b5:da:9b:36:4e: 8a:a8:4f:03:bc:63:05:00:ab:5e:52:21:5a:1f:a2:4e:b2:17: 28:80:2b:e7:17:c0:93:e3:49:69:16:bc:bc:ef:10:e3:d9:c2: a2:9a:b2:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrt6Bb/Jm8m/MywyQ/JfNNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTc1ODc3M2E5OWU3NzFiOTBjYTliYjIyZjdmY2FkYmZi NjMyNDgwHhcNMjUxMjA1MDk0NjQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTE3N2E1ZTNlYjA4OTVkZWI2ODhjMGJlNWM0YWE1YzgxZjdkMzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb3AcazEb2/sp57ul1sqLVe/foz3 9ZwwIJwDS7LRdImVwpGtWwoqNvgtNgFkHqFDky/ofMImdXYyoBZhZ6C9Nzitnf9t zOsCyfabSMWUDEvX+2EB9ywJQTwK1zSeFTnWx1CTt1WHFnbRhecoCLZnC9NnwMkD bpKQe+Cku32ttedLZzOYbCKvcRC2ROh6CdBow6JKb1todVxSCFnBdgWjEdgyGJBN SnuBngMXZ7wxHPt7qYEySO67SdffTQkK/iIXLuvHlGii0jaWW3x4P1F2IuHvamVd /g0REfIkaktX2AGL/r/0IfqvJs5jwYGF1xDpFl1G7cc3ZvLOUXUJrL761QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNkXel4+sIld62iMC+XEqlyB99M7MB8GA1UdIwQY MBaAFEkXWHc6medxuQypuyL3/K2/tjJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUt ZTdkYjk1ZTNiY2M0LzEvMlJkNlhqNndpVjNyYUl3TDVjU3FYSUgzMHpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUtZTdkYjk1ZTNiY2M0 LzEvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA7Q MA0GCSqGSIb3DQEBCwUAA4IBAQCWbjgkd4+KBvcytZgqibTF+h3fkO+fRFeOAxXk JV3iP19VNPD516/HN183G0HaSYSwCwigL+nXMZPbS6FQV/gMkIGOq5fs1r/1vi7G YAU3uXFC2BW40ntzzZCbhJT6w4gwaRzlP6w7elS3tXTkFFEmb0+eUw7g2Q551vPS uSpeKam2enZ2M7GBuXdRza+ozBtKINHmjoYcKMzkrUq7D/aKXpwOAudEBmPGDeo6 xdqEEfeoLFpQlaW0gSG5N3Ro+B7zsOk5/7PkSg4FwT6Si0IXk2D1tdqbNk6KqE8D vGMFAKteUiFaH6JOshcogCvnF8CT40lpFry87xDj2cKimrIp -----END CERTIFICATE-----Generated at Sun Dec 7 16:56:09 2025 by rpki-client