This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/2IgI2Ov0Fee-PwRq_weL6Nhj83I.roa File: 2IgI2Ov0Fee-PwRq_weL6Nhj83I.roa (raw, json) Hash identifier: HdYdfg7KzjjDTOgVzLOr5/bwdXvaXOYOwg34rUKYE80= Subject key identifier: D8:88:08:D8:EB:F4:15:E7:BE:3F:04:6A:FF:07:8B:E8:D8:63:F3:72 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84D0C4EF55CCD3AD89E111FEB09575 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/2IgI2Ov0Fee-PwRq_weL6Nhj83I.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214630 IP address blocks: 2a11:3b40::/32 maxlen: 32 2a12:6640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d0:c4:ef:55:cc:d3:ad:89:e1:11:fe:b0:95:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d88808d8ebf415e7be3f046aff078be8d863f372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0a:ad:71:88:4c:5d:9b:e3:61:a1:e4:ff:32: df:d6:92:ae:f9:30:23:50:17:22:02:01:2e:12:9c: 55:18:89:6d:51:31:6d:e9:08:11:b6:80:2f:ac:3e: 9a:36:ea:c6:10:64:86:6a:46:44:42:4e:0d:6b:f7: d0:74:44:02:0e:f6:40:2c:d0:96:81:e7:09:fc:70: d4:44:d8:b1:0b:44:61:9b:7d:79:50:27:b0:5a:2c: e2:2f:1d:57:65:83:9b:16:7e:7b:b3:4e:04:f0:19: 5d:c5:1e:6a:9e:26:89:eb:0a:0b:55:8b:96:58:3e: 9f:57:85:fb:1c:c4:43:61:ce:7f:79:4e:0e:ae:b5: 37:58:bf:82:e5:b2:da:15:95:e4:bf:4f:2c:3d:29: 78:8e:7e:f6:20:24:fb:07:d5:16:82:fb:39:63:d2: eb:b7:ec:48:dd:3b:13:e9:5c:ec:55:67:03:a3:33: 23:fc:22:ce:b6:da:d8:0f:ac:56:10:1e:32:36:17: 1c:f3:83:03:97:01:91:f0:fa:76:68:b3:c7:34:e4: 66:f0:ed:a8:75:f2:f7:09:00:73:fa:5f:a8:68:07: 1b:df:1f:41:6b:5e:21:43:99:c1:d8:e5:c8:2c:62: 3f:c5:28:26:67:05:ea:61:8d:53:4b:8e:e5:ac:dc: bd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:08:D8:EB:F4:15:E7:BE:3F:04:6A:FF:07:8B:E8:D8:63:F3:72 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/2IgI2Ov0Fee-PwRq_weL6Nhj83I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:3b40::/32 2a12:6640::/32 Signature Algorithm: sha256WithRSAEncryption c0:9a:0c:ae:f5:d8:35:e9:c8:c2:09:83:02:3b:11:7b:2e:78: 11:53:50:6d:de:c2:40:c9:5b:98:d2:05:17:f9:86:d3:91:4b: 22:0e:1e:21:c1:e1:26:0c:dd:ab:47:fd:c8:d4:5e:db:72:1a: 59:36:5a:ae:af:f8:c6:97:b8:48:9d:46:d9:d9:ed:06:9a:25: f5:4b:19:5d:38:eb:9b:b0:c2:00:f0:b0:ed:a1:af:0f:1c:49: 57:5b:56:83:76:44:a2:0b:b8:20:6a:99:10:27:7c:8b:41:ce: 4c:3d:0c:8a:70:e5:b0:5d:5e:dd:3e:51:18:26:ea:9c:eb:21: ee:a7:a0:97:fa:20:98:86:1b:45:fb:0d:5c:a0:a9:7b:72:7c: b3:27:86:54:8a:e1:bd:30:c4:a0:33:e4:af:c7:86:0f:82:07: 2e:b9:81:a6:d7:95:2a:87:3c:9a:a4:f4:6e:74:4a:63:9d:6a: 6b:ce:8f:30:23:22:f2:25:f4:27:b0:41:c9:4f:ea:8f:52:50: 08:30:99:a6:a3:7e:dd:a1:77:ab:c6:0b:0a:e3:46:7a:58:9f: fa:c9:6b:69:e6:44:d6:4b:0c:cd:44:52:7f:95:1e:7e:a1:10: 83:40:8f:ca:84:8d:05:28:f1:85:9e:06:7a:21:70:85:be:5f: 84:7f:c8:da -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/hNDE71XM062J4RH+sJV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODg4MDhkOGViZjQxNWU3YmUzZjA0NmFmZjA3OGJlOGQ4NjNmMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAqtcYhMXZvjYaHk/zLf1pKu+TAj UBciAgEuEpxVGIltUTFt6QgRtoAvrD6aNurGEGSGakZEQk4Na/fQdEQCDvZALNCW gecJ/HDURNixC0Rhm315UCewWiziLx1XZYObFn57s04E8BldxR5qniaJ6woLVYuW WD6fV4X7HMRDYc5/eU4OrrU3WL+C5bLaFZXkv08sPSl4jn72ICT7B9UWgvs5Y9Lr t+xI3TsT6VzsVWcDozMj/CLOttrYD6xWEB4yNhcc84MDlwGR8Pp2aLPHNORm8O2o dfL3CQBz+l+oaAcb3x9Ba14hQ5nB2OXILGI/xSgmZwXqYY1TS47lrNy92QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNiICNjr9BXnvj8Eav8Hi+jYY/NyMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvMklnSTJPdjBGZWUtUHdScV93ZUw2TmhqODNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhE7QAMF ACoSZkAwDQYJKoZIhvcNAQELBQADggEBAMCaDK712DXpyMIJgwI7EXsueBFTUG3e wkDJW5jSBRf5htORSyIOHiHB4SYM3atH/cjUXttyGlk2Wq6v+MaXuEidRtnZ7Qaa JfVLGV0465uwwgDwsO2hrw8cSVdbVoN2RKILuCBqmRAnfItBzkw9DIpw5bBdXt0+ URgm6pzrIe6noJf6IJiGG0X7DVygqXtyfLMnhlSK4b0wxKAz5K/Hhg+CBy65gabX lSqHPJqk9G50SmOdamvOjzAjIvIl9CewQclP6o9SUAgwmaajft2hd6vGCwrjRnpY n/rJa2nmRNZLDM1EUn+VHn6hEINAj8qEjQUo8YWeBnohcIW+X4R/yNo= -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:51 2026 by rpki-client