This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/2a-W31onNiq0P4jZYsOq6cktHKs.roa File: 2a-W31onNiq0P4jZYsOq6cktHKs.roa (raw, json) Hash identifier: piKQ/orqtUMianHlky3opOkohv1nKhRucZj+NR8lslQ= Subject key identifier: D9:AF:96:DF:5A:27:36:2A:B4:3F:88:D9:62:C3:AA:E9:C9:2D:1C:AB Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13F590B9DC6462B82517FDD45C9FDB Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/2a-W31onNiq0P4jZYsOq6cktHKs.roa Signing time: Fri 02 Jan 2026 14:19:33 +0000 ROA not before: Fri 02 Jan 2026 14:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50542 IP address blocks: 2a02:2698:1400::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:f5:90:b9:dc:64:62:b8:25:17:fd:d4:5c:9f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9af96df5a27362ab43f88d962c3aae9c92d1cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:46:bb:b0:14:86:5f:98:e0:31:ae:6f:3b: 21:3e:6b:56:e4:8d:67:89:86:22:48:db:c0:2d:a0: e4:71:21:58:98:7e:74:17:6f:7d:cc:91:55:f7:9c: e7:56:5d:f6:a7:62:e8:90:7d:dc:91:13:83:a5:fd: ee:dc:1a:e6:92:00:c8:d6:b2:d0:5c:48:ef:59:9c: 24:75:6a:6e:54:84:f2:41:33:12:5c:fa:5b:57:0c: b4:5b:7d:74:f3:b8:02:5a:fe:50:96:18:26:dd:ae: d8:95:3a:af:ca:5d:97:fd:37:0d:85:35:f6:ef:1c: 9c:8e:0b:58:1e:62:dd:32:e7:17:52:0a:c1:ab:be: 35:3e:b3:25:13:57:12:f6:cc:72:73:b3:54:fd:34: 2e:e2:8f:12:f1:60:c1:a3:6d:84:be:85:e2:76:73: 36:4b:f7:4b:b4:6e:3a:6b:e5:3f:cf:9d:3b:5d:52: 71:4f:8a:40:e5:f5:8b:67:ec:bb:63:af:4a:cf:b4: 16:38:ec:ff:df:3a:fc:17:a8:c2:a3:63:27:1e:a4: 30:74:89:72:d0:8e:09:97:07:8d:37:86:0c:7e:2c: f4:db:7e:aa:0e:32:31:82:73:a1:83:6b:11:c7:4b: 74:5d:a8:96:60:db:48:bf:7a:39:23:bb:75:84:f2: 3c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AF:96:DF:5A:27:36:2A:B4:3F:88:D9:62:C3:AA:E9:C9:2D:1C:AB X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/2a-W31onNiq0P4jZYsOq6cktHKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:1400::/38 Signature Algorithm: sha256WithRSAEncryption 05:6b:1a:27:17:0b:aa:05:cd:15:e8:89:40:74:aa:21:11:9c: b6:07:35:11:fb:c7:23:eb:67:77:2c:1b:90:ab:89:99:1a:55: 87:46:58:8b:f1:db:0d:22:f6:2c:56:5e:18:7a:f0:a8:22:28: 4a:41:7f:de:eb:10:0a:4a:a5:ac:ae:68:63:9d:1f:60:6a:3b: 7e:6b:4f:1e:e9:19:5d:c4:35:2b:0a:4f:c0:2c:8a:9f:8f:5c: 55:5e:5b:8f:e7:96:89:01:bf:e4:29:71:a2:db:7e:22:1f:1a: dd:8e:88:c9:21:74:78:d1:47:22:7f:9b:84:f2:4e:27:98:69: 34:c5:a6:6c:85:37:ef:8c:1e:c0:cd:af:02:23:9f:7e:69:a7: 4a:48:e5:d5:8b:4a:d2:84:ce:d1:c5:c2:cd:7e:d1:0d:67:d8: c7:58:81:0c:23:c8:f1:e3:6b:90:f5:63:f8:22:d8:4f:17:25: 93:56:45:eb:14:6c:1c:52:28:54:ce:67:3c:55:b2:cf:ce:d9: 63:c8:55:9f:74:d7:70:5c:b9:95:51:db:59:c1:71:23:64:04: 40:bf:4f:47:7f:a6:2c:b4:87:97:91:bb:26:40:7e:a2:a7:d5: 97:08:d8:b7:84:36:b9:4b:23:50:98:10:c6:ce:d7:23:c8:9f: bd:3a:96:34 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E/WQudxkYrglF/3UXJ/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWFmOTZkZjVhMjczNjJhYjQzZjg4ZDk2MmMzYWFlOWM5MmQxY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTdGu7AUhl+Y4DGubzshPmtW5I1n iYYiSNvALaDkcSFYmH50F299zJFV95znVl32p2LokH3ckRODpf3u3BrmkgDI1rLQ XEjvWZwkdWpuVITyQTMSXPpbVwy0W31087gCWv5Qlhgm3a7YlTqvyl2X/TcNhTX2 7xycjgtYHmLdMucXUgrBq741PrMlE1cS9sxyc7NU/TQu4o8S8WDBo22EvoXidnM2 S/dLtG46a+U/z507XVJxT4pA5fWLZ+y7Y69Kz7QWOOz/3zr8F6jCo2MnHqQwdIly 0I4JlweNN4YMfiz0236qDjIxgnOhg2sRx0t0XaiWYNtIv3o5I7t1hPI8UwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNmvlt9aJzYqtD+I2WLDqunJLRyrMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvMmEtVzMxb25OaXEwUDRqWllzT3E2Y2t0SEtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmBQw DQYJKoZIhvcNAQELBQADggEBAAVrGicXC6oFzRXoiUB0qiERnLYHNRH7xyPrZ3cs G5CriZkaVYdGWIvx2w0i9ixWXhh68KgiKEpBf97rEApKpayuaGOdH2BqO35rTx7p GV3ENSsKT8Asip+PXFVeW4/nlokBv+QpcaLbfiIfGt2OiMkhdHjRRyJ/m4TyTieY aTTFpmyFN++MHsDNrwIjn35pp0pI5dWLStKEztHFws1+0Q1n2MdYgQwjyPHja5D1 Y/gi2E8XJZNWResUbBxSKFTOZzxVss/O2WPIVZ9013BcuZVR21nBcSNkBEC/T0d/ piy0h5eRuyZAfqKn1ZcI2LeENrlLI1CYEMbO1yPIn706ljQ= -----END CERTIFICATE-----Generated at Thu Feb 5 05:57:35 2026 by rpki-client