This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/2j9VUbHTcDA1b90rifQ58Inn2f8.roa File: 2j9VUbHTcDA1b90rifQ58Inn2f8.roa (raw, json) Hash identifier: Lgs88tbxXG61dcN+ofeHaAXMJYWju9945L7ezP0hATg= Subject key identifier: DA:3F:55:51:B1:D3:70:30:35:6F:DD:2B:89:F4:39:F0:89:E7:D9:FF Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C73415A651EBFFAE682C064F71AF3A Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/2j9VUbHTcDA1b90rifQ58Inn2f8.roa Signing time: Thu 01 Jan 2026 04:18:22 +0000 ROA not before: Thu 01 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215402 IP address blocks: 2a0e:4005:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:34:15:a6:51:eb:ff:ae:68:2c:06:4f:71:af:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da3f5551b1d37030356fdd2b89f439f089e7d9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:36:88:43:65:05:56:8e:e4:33:52:ef:88: 41:c9:94:ea:83:de:82:fc:4b:24:43:ec:f4:58:a9: 95:07:33:43:fc:e5:66:56:98:a6:f4:99:20:bf:85: 51:92:17:83:70:ea:f7:4c:c2:9d:03:cd:6b:8b:fd: eb:41:c7:7d:92:ab:8c:63:92:4a:cc:d1:4b:59:81: 85:17:12:5a:ef:06:ac:81:0b:0f:2c:c4:6b:c3:9b: c7:72:1a:29:47:9a:a4:80:79:2c:fe:09:fb:9c:3e: c4:1d:b3:a2:2f:61:20:86:7d:ab:a0:db:7e:b2:78: cf:b2:97:ba:ef:69:99:48:4b:e7:a7:eb:e1:c6:06: 0e:65:70:bc:2e:02:ed:22:7c:ae:53:c3:58:a2:29: 95:17:38:a3:0e:dc:bb:a0:e9:ec:60:e1:0d:78:e3: b2:d1:59:63:9f:d1:50:de:1a:86:26:79:cd:72:c4: e5:bc:8c:40:4f:fd:2c:c3:c3:6f:58:ad:33:03:54: 41:c8:75:82:a1:d4:85:68:f0:96:2f:27:9d:35:52: f0:da:9c:ff:2f:cb:06:61:5f:79:fe:85:97:5b:5d: 8c:20:66:e3:bb:4f:72:5e:36:0e:0f:38:25:dc:0c: 7b:25:35:7d:11:0e:dd:16:51:ef:e8:03:50:c8:0d: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3F:55:51:B1:D3:70:30:35:6F:DD:2B:89:F4:39:F0:89:E7:D9:FF X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/2j9VUbHTcDA1b90rifQ58Inn2f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:4005:1000::/48 Signature Algorithm: sha256WithRSAEncryption e5:d6:c3:f8:de:9c:0b:4e:0f:82:9e:e0:3d:b6:6a:e9:22:a2: 9d:49:fb:ca:d1:4f:93:0f:e0:7f:38:f9:4d:f4:36:42:79:b5: 3e:de:52:c2:a7:65:b3:c4:43:bb:f2:58:51:5a:1b:83:15:61: dd:b2:9c:28:ca:9c:49:0e:17:f5:43:2b:20:2c:96:ba:33:2b: 4a:7a:9a:26:8c:10:37:2f:f4:27:84:84:cf:59:a0:1b:2b:11: ef:15:11:6e:bf:19:87:9d:bf:48:d7:da:55:2d:f6:3b:56:69: 74:36:04:3e:6a:57:ac:e8:26:a0:ba:fd:50:cc:f8:12:50:dc: 49:fe:ab:3a:e7:d0:38:d8:89:3b:8e:13:a6:4c:45:d1:fd:3b: 37:71:a8:d9:f9:a9:6c:2d:11:32:52:92:a2:7a:27:74:03:79: cd:ff:24:38:56:40:63:a8:cd:cc:8a:c0:21:dc:ba:2e:01:9c: e6:97:ca:25:b8:dd:b4:f4:b9:38:eb:49:0c:10:d2:d5:ea:a6: 49:3a:9a:d5:e1:ed:b9:13:dd:3a:35:2f:ed:53:7f:89:d3:a1: f9:44:82:5e:f2:23:fc:be:a0:24:3e:dc:af:9a:a4:1e:64:c2: c0:04:47:38:c2:e8:7f:be:2b:e9:42:17:de:e9:2a:52:0f:f3: c3:ba:95:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xzQVplHr/65oLAZPca86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTNmNTU1MWIxZDM3MDMwMzU2ZmRkMmI4OWY0MzlmMDg5ZTdkOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/02iENlBVaO5DNS74hByZTqg96C /EskQ+z0WKmVBzND/OVmVpim9Jkgv4VRkheDcOr3TMKdA81ri/3rQcd9kquMY5JK zNFLWYGFFxJa7wasgQsPLMRrw5vHchopR5qkgHks/gn7nD7EHbOiL2Eghn2roNt+ snjPspe672mZSEvnp+vhxgYOZXC8LgLtInyuU8NYoimVFzijDty7oOnsYOENeOOy 0Vljn9FQ3hqGJnnNcsTlvIxAT/0sw8NvWK0zA1RByHWCodSFaPCWLyedNVLw2pz/ L8sGYV95/oWXW12MIGbju09yXjYODzgl3Ax7JTV9EQ7dFlHv6ANQyA15lwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNo/VVGx03AwNW/dK4n0OfCJ59n/MB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvMmo5VlViSFRjREExYjkwcmlmUTU4SW5uMmY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg5ABRAA MA0GCSqGSIb3DQEBCwUAA4IBAQDl1sP43pwLTg+CnuA9tmrpIqKdSfvK0U+TD+B/ OPlN9DZCebU+3lLCp2WzxEO78lhRWhuDFWHdspwoypxJDhf1QysgLJa6MytKepom jBA3L/QnhITPWaAbKxHvFRFuvxmHnb9I19pVLfY7Vml0NgQ+ales6Caguv1QzPgS UNxJ/qs659A42Ik7jhOmTEXR/Ts3cajZ+alsLREyUpKieid0A3nN/yQ4VkBjqM3M isAh3LouAZzml8oluN209Lk460kMENLV6qZJOprV4e25E906NS/tU3+J06H5RIJe 8iP8vqAkPtyvmqQeZMLABEc4wuh/vivpQhfe6SpSD/PDupW+ -----END CERTIFICATE-----Generated at Wed Jan 21 06:47:00 2026 by rpki-client