This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/2BnXbJN0-tuiSw2yPhv5M-hIP_g.roa File: 2BnXbJN0-tuiSw2yPhv5M-hIP_g.roa (raw, json) Hash identifier: 7StJAAew0duMZOz948e0I6qxBTgJCwCzq3+RHVzjmKc= Subject key identifier: D8:19:D7:6C:93:74:FA:DB:A2:4B:0D:B2:3E:1B:F9:33:E8:48:3F:F8 Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be Certificate serial: 019B7CECCEA795550BEDA7C017CE35009EDF Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/2BnXbJN0-tuiSw2yPhv5M-hIP_g.roa Signing time: Fri 02 Jan 2026 04:17:32 +0000 ROA not before: Fri 02 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49825 IP address blocks: 2001:67c:12d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ce:a7:95:55:0b:ed:a7:c0:17:ce:35:00:9e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be Validity Not Before: Jan 2 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d819d76c9374fadba24b0db23e1bf933e8483ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:b7:7c:e6:c1:2c:60:da:ac:ef:24:47:06: ae:13:99:aa:6b:85:9e:16:73:73:4b:75:c3:cc:e4: 3e:f2:d5:e1:5b:df:f3:4a:30:09:db:7b:3c:20:3d: e2:35:10:84:15:df:5a:a1:f6:27:e2:40:05:fd:1e: b9:0c:40:4b:f0:ac:49:be:d7:e8:f6:1c:bc:48:d5: 5c:96:b0:3c:d8:58:8b:88:5e:46:67:7d:f9:9b:aa: 84:a3:dd:51:d1:88:3a:1c:f3:8e:f1:77:b2:d9:24: fe:85:37:ae:d1:e4:aa:1a:32:fd:23:7c:26:8b:9d: bf:f0:02:6b:23:50:e8:de:a4:a7:5d:83:c7:2a:a9: 84:a0:47:ad:d8:f3:06:34:18:d1:c6:e0:7d:ab:f6: 62:6f:52:55:2f:0f:4d:5a:f5:bb:e8:ba:49:ee:00: 6f:59:65:42:96:cb:be:37:3e:3c:59:7e:a7:1e:97: 54:ba:d5:e9:00:c2:48:f5:a9:32:10:bd:1c:1f:eb: 6d:ed:88:ed:62:13:64:33:53:e8:19:c9:31:0b:49: 94:37:89:f8:61:0a:a1:39:98:1d:0f:8f:b8:33:77: cd:05:04:e9:f3:4c:f3:23:e6:b1:ce:5c:70:11:6e: 81:09:9b:a0:7d:64:74:1b:9a:b6:b0:6d:e0:b6:87: f6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:19:D7:6C:93:74:FA:DB:A2:4B:0D:B2:3E:1B:F9:33:E8:48:3F:F8 X509v3 Authority Key Identifier: keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/2BnXbJN0-tuiSw2yPhv5M-hIP_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:12d4::/48 Signature Algorithm: sha256WithRSAEncryption b7:d7:07:56:29:03:d7:1e:3c:f2:3b:4d:5f:8a:ad:8e:31:15: b9:8d:4e:c1:ce:1c:97:29:6a:52:27:ec:91:7f:44:68:af:e7: 53:6c:97:58:9c:17:0b:07:0b:0e:07:10:06:a0:cc:33:96:77: bc:d9:2e:32:40:b8:93:18:a4:a4:49:18:26:64:04:eb:3d:8b: 74:a9:45:53:5a:ff:75:2d:be:13:97:48:39:b7:94:69:ef:45: f3:30:5d:09:50:60:f0:8a:31:45:df:c1:d8:b3:04:b4:02:95: 73:ea:ba:a0:12:4e:7b:25:66:61:3a:dc:bd:be:1b:cd:b1:7a: 8f:f8:09:c5:c6:aa:3f:66:91:4a:9e:e2:f0:15:0a:2e:af:e3: 5f:17:04:2a:ea:c2:13:3c:dc:f6:db:62:d5:67:82:26:fe:82: 18:2b:ed:73:26:fe:9c:03:3e:7b:43:09:b5:3c:78:55:a2:86: 61:6d:95:3e:8a:df:5c:87:79:b1:f8:24:20:84:88:3a:d2:3d: 8e:84:1e:5e:f5:1a:46:e3:35:a5:ef:f3:66:e6:96:b2:05:35: c6:0f:3e:f6:66:43:34:1f:03:f3:e7:8a:1f:29:cf:e3:90:4e: 88:67:04:f7:eb:e2:4a:57:8f:6c:0b:41:b2:f7:f8:23:d6:32: 62:74:d9:14 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87M6nlVUL7afAF841AJ7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ODUyMmRhYzZiY2RlOGM0ODEzMzM1OTkxMzJhMTYyMDBl NmE1YmUwHhcNMjYwMTAyMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODE5ZDc2YzkzNzRmYWRiYTI0YjBkYjIzZTFiZjkzM2U4NDgzZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfi3fObBLGDarO8kRwauE5mqa4We FnNzS3XDzOQ+8tXhW9/zSjAJ23s8ID3iNRCEFd9aofYn4kAF/R65DEBL8KxJvtfo 9hy8SNVclrA82FiLiF5GZ335m6qEo91R0Yg6HPOO8Xey2ST+hTeu0eSqGjL9I3wm i52/8AJrI1Do3qSnXYPHKqmEoEet2PMGNBjRxuB9q/Zib1JVLw9NWvW76LpJ7gBv WWVClsu+Nz48WX6nHpdUutXpAMJI9akyEL0cH+tt7YjtYhNkM1PoGckxC0mUN4n4 YQqhOZgdD4+4M3fNBQTp80zzI+axzlxwEW6BCZugfWR0G5q2sG3gtof2CQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNgZ12yTdPrboksNsj4b+TPoSD/4MB8GA1UdIwQY MBaAFLWFItrGvN6MSBMzWZEyoWIA5qW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUt YmEzOTQ3YzliMjJiLzEvMkJuWGJKTjAtdHVpU3cyeVBodjVNLWhJUF9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUtYmEzOTQ3YzliMjJi LzEvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBLU MA0GCSqGSIb3DQEBCwUAA4IBAQC31wdWKQPXHjzyO01fiq2OMRW5jU7BzhyXKWpS J+yRf0Ror+dTbJdYnBcLBwsOBxAGoMwzlne82S4yQLiTGKSkSRgmZATrPYt0qUVT Wv91Lb4Tl0g5t5Rp70XzMF0JUGDwijFF38HYswS0ApVz6rqgEk57JWZhOty9vhvN sXqP+AnFxqo/ZpFKnuLwFQour+NfFwQq6sITPNz222LVZ4Im/oIYK+1zJv6cAz57 Qwm1PHhVooZhbZU+it9ch3mx+CQghIg60j2OhB5e9RpG4zWl7/Nm5payBTXGDz72 ZkM0HwPz54ofKc/jkE6IZwT36+JKV49sC0Gy9/gj1jJidNkU -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:18 2026 by rpki-client