This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/stw2PhEZsN2fOlwpVqIhJ5Nftic.roa File: stw2PhEZsN2fOlwpVqIhJ5Nftic.roa (raw, json) Hash identifier: vv/hWhSaodIEY5w4wtl+gXWo827Hn+IQIFsUYYqlDGk= Subject key identifier: B2:DC:36:3E:11:19:B0:DD:9F:3A:5C:29:56:A2:21:27:93:5F:B6:27 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82CA1AA67159B126F1F66CFF369755 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/stw2PhEZsN2fOlwpVqIhJ5Nftic.roa Signing time: Fri 02 Jan 2026 16:20:36 +0000 ROA not before: Fri 02 Jan 2026 16:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205117 IP address blocks: 2a0b:b87:ffe3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ca:1a:a6:71:59:b1:26:f1:f6:6c:ff:36:97:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2dc363e1119b0dd9f3a5c2956a22127935fb627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:de:76:27:43:79:a6:31:1f:62:3a:10:3c:9c: 4f:cd:51:78:6b:5f:b9:9e:76:98:f9:b3:54:2b:02: db:e1:66:6f:26:9d:45:80:c1:fc:8b:eb:03:5c:dd: 81:97:5f:4a:17:be:ea:da:f9:5d:ae:78:e7:b5:d3: 92:f2:7e:9d:7c:59:eb:99:2f:7a:5c:fc:d7:e2:c2: 91:63:09:59:02:78:1b:81:91:51:1a:b2:63:9b:fe: 43:eb:25:70:53:a8:76:6e:30:16:dc:e3:68:f1:a2: 77:c6:37:91:9b:61:ef:aa:2c:fb:95:96:76:e7:56: 5f:ae:1a:3f:23:af:3a:78:b7:66:79:e9:00:10:72: 7a:a4:d8:15:58:d7:5c:dc:35:24:de:05:ea:c2:8f: e6:ec:83:5b:29:ed:e6:53:e5:50:21:8e:17:27:e3: 28:10:82:de:b4:18:25:83:26:78:61:9e:f8:2f:04: 2b:5e:65:38:fb:a5:73:0a:0e:f5:72:23:d1:6f:53: 05:8e:88:eb:e2:6c:82:82:4f:19:8f:71:fd:41:2c: 81:11:37:de:92:cc:80:3c:6c:59:3a:e5:8f:a5:3f: 1d:50:91:90:a8:13:51:b9:95:58:1c:b4:a2:87:8b: ab:8e:9f:e1:d9:68:13:5a:12:86:7d:bf:74:94:40: 8c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DC:36:3E:11:19:B0:DD:9F:3A:5C:29:56:A2:21:27:93:5F:B6:27 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/stw2PhEZsN2fOlwpVqIhJ5Nftic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffe3::/48 Signature Algorithm: sha256WithRSAEncryption 14:df:04:b8:12:91:81:de:6d:69:25:55:5d:46:60:2f:a1:c9: ae:ba:f7:75:dd:b5:52:26:8a:80:f5:d4:31:f6:fe:8d:bc:bb: c2:87:64:61:2a:f6:ff:c6:f1:53:15:ff:76:66:d0:bb:25:2c: 33:67:67:01:be:34:d0:cf:12:44:a6:ff:74:78:8e:a6:47:dd: 54:28:66:80:57:bb:db:68:f3:41:7d:bf:05:24:f1:0b:70:ea: 97:cc:38:3c:c7:ef:18:58:67:33:31:ed:c5:70:26:bf:65:50: 98:f7:75:12:b7:85:c1:81:bd:5e:cf:ab:e4:85:59:27:55:d6: dd:23:74:9f:dc:86:fd:e1:ab:3f:5b:40:0c:95:96:ca:c7:bc: 0d:5e:f4:ea:dd:d7:67:37:f6:ff:23:7a:2f:f3:41:56:63:83: f4:fb:81:41:8b:04:d7:4d:51:e3:f6:19:e2:a0:50:bc:18:ac: 4f:6c:8c:67:1f:8e:5c:4f:34:06:74:e5:81:1b:da:ed:42:17: f7:b9:f0:33:6c:c9:fb:fd:1c:a6:3b:08:e4:3e:75:c5:45:c6: 6e:44:32:d0:f7:e7:da:5e:6a:35:93:28:30:49:43:4d:f8:a3: ce:39:e0:7a:06:b9:1a:34:df:69:c5:36:b3:b1:d8:67:6b:d8: 01:7a:21:dc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gsoapnFZsSbx9mz/NpdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmRjMzYzZTExMTliMGRkOWYzYTVjMjk1NmEyMjEyNzkzNWZiNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+N52J0N5pjEfYjoQPJxPzVF4a1+5 nnaY+bNUKwLb4WZvJp1FgMH8i+sDXN2Bl19KF77q2vldrnjntdOS8n6dfFnrmS96 XPzX4sKRYwlZAngbgZFRGrJjm/5D6yVwU6h2bjAW3ONo8aJ3xjeRm2Hvqiz7lZZ2 51Zfrho/I686eLdmeekAEHJ6pNgVWNdc3DUk3gXqwo/m7INbKe3mU+VQIY4XJ+Mo EILetBglgyZ4YZ74LwQrXmU4+6VzCg71ciPRb1MFjojr4myCgk8Zj3H9QSyBETfe ksyAPGxZOuWPpT8dUJGQqBNRuZVYHLSih4urjp/h2WgTWhKGfb90lECM7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLLcNj4RGbDdnzpcKVaiISeTX7YnMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvc3R3MlBoRVpzTjJmT2x3cFZxSWhKNU5mdGljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh//j MA0GCSqGSIb3DQEBCwUAA4IBAQAU3wS4EpGB3m1pJVVdRmAvocmuuvd13bVSJoqA 9dQx9v6NvLvCh2RhKvb/xvFTFf92ZtC7JSwzZ2cBvjTQzxJEpv90eI6mR91UKGaA V7vbaPNBfb8FJPELcOqXzDg8x+8YWGczMe3FcCa/ZVCY93USt4XBgb1ez6vkhVkn VdbdI3Sf3Ib94as/W0AMlZbKx7wNXvTq3ddnN/b/I3ov80FWY4P0+4FBiwTXTVHj 9hnioFC8GKxPbIxnH45cTzQGdOWBG9rtQhf3ufAzbMn7/RymOwjkPnXFRcZuRDLQ 9+faXmo1kygwSUNN+KPOOeB6BrkaNN9pxTazsdhna9gBeiHc -----END CERTIFICATE-----Generated at Tue Jan 20 15:17:50 2026 by rpki-client