This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/I2-3MbaNye2nISA88GAaBssSVSc.roa File: I2-3MbaNye2nISA88GAaBssSVSc.roa (raw, json) Hash identifier: q+VmUDiv7p0kneQ8g1unqIzNm299nsRuJGURtlabEbs= Subject key identifier: 23:6F:B7:31:B6:8D:C9:ED:A7:21:20:3C:F0:60:1A:06:CB:12:55:27 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3952091FD48313C12EBDAD3B318892 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/I2-3MbaNye2nISA88GAaBssSVSc.roa Signing time: Fri 02 Jan 2026 10:20:44 +0000 ROA not before: Fri 02 Jan 2026 10:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210821 IP address blocks: 2a0c:b641:250::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:52:09:1f:d4:83:13:c1:2e:bd:ad:3b:31:88:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=236fb731b68dc9eda721203cf0601a06cb125527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e5:8c:da:3b:15:51:bb:41:04:32:3d:30:f2: 3a:b8:55:c9:ca:bd:da:e6:f6:bb:82:fd:45:92:46: 14:c8:bf:db:03:29:87:f8:6a:56:a3:2d:39:df:44: d6:8e:c3:91:92:fb:3e:6a:a0:20:6c:38:c9:d9:03: 2e:62:72:16:f0:f4:39:b3:58:1b:a6:2f:cb:84:11: c0:8f:1c:d8:d0:e2:43:23:dc:11:a2:7c:44:e9:69: 4f:2f:d8:a4:36:d3:30:e7:24:a0:e6:53:9c:17:6d: 87:ee:93:ae:b9:73:91:63:8a:ab:5b:5b:01:14:a3: de:8f:76:d6:1b:e0:37:8e:38:e7:49:e9:b2:63:f3: 3c:68:a9:59:ad:a9:21:55:53:da:23:c6:ae:db:9d: 42:ce:e9:20:90:a6:59:56:44:27:86:db:c6:e7:f9: 51:5c:b5:b9:7f:3c:ca:da:81:cc:fe:77:8c:6a:ae: 9a:ed:91:da:de:b0:9d:c4:27:1c:1b:f3:22:d6:8d: 9a:49:e0:be:30:ca:70:47:b6:54:a7:4f:9a:08:39: a2:fd:46:41:06:33:90:7d:6e:d1:d7:e9:fa:2c:90: 8e:66:8d:18:be:8f:78:f6:43:a9:9b:bb:a8:08:1f: c4:a0:73:3e:16:08:67:8f:2f:bc:5c:8e:a4:d6:50: 01:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6F:B7:31:B6:8D:C9:ED:A7:21:20:3C:F0:60:1A:06:CB:12:55:27 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/I2-3MbaNye2nISA88GAaBssSVSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:250::/44 Signature Algorithm: sha256WithRSAEncryption 75:6d:c9:55:dd:3e:84:4a:fb:dd:66:27:61:38:d9:b7:a8:d3: ee:ef:ef:bf:3b:18:98:8f:ad:7c:54:5c:4e:4e:9c:47:5c:d5: b1:1e:9f:14:42:54:cd:34:8e:1c:8d:d5:37:3b:a7:72:05:b3: 4e:ec:ab:fc:ab:27:09:e1:d7:d3:07:fa:47:09:51:84:bf:1c: ff:7f:7a:d0:db:2d:98:a4:c7:0e:ab:73:c9:51:d2:99:cc:48: 98:aa:af:e8:d2:f4:9b:ea:da:68:95:0b:81:84:2e:65:60:20: a3:8c:d6:37:3e:fc:1b:57:88:b4:23:1c:aa:31:df:29:a9:3e: d2:8c:e1:94:b6:d8:e9:39:42:11:df:e5:3a:2a:8e:3c:58:89: 0e:16:77:9f:0d:0e:aa:35:ab:87:16:8b:84:34:a1:78:cc:de: 67:77:96:64:81:3c:4f:ae:5b:05:87:9a:92:8d:17:de:d0:d9: dd:8d:af:44:8e:18:24:63:5b:e1:0b:3e:90:8f:68:e3:43:bf: 86:40:be:6f:32:68:50:a1:9a:c2:0d:4e:93:ec:a1:64:ef:b3: e6:4b:21:c5:fa:89:9c:e2:fe:6d:53:f1:e1:61:bc:2a:df:3a: 4d:41:45:7d:ee:4c:d8:63:fe:63:cb:80:7d:cb:90:a5:6f:51: b5:f8:69:a6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVIJH9SDE8Euva07MYiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzZmYjczMWI2OGRjOWVkYTcyMTIwM2NmMDYwMWEwNmNiMTI1NTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOWM2jsVUbtBBDI9MPI6uFXJyr3a 5va7gv1FkkYUyL/bAymH+GpWoy0530TWjsORkvs+aqAgbDjJ2QMuYnIW8PQ5s1gb pi/LhBHAjxzY0OJDI9wRonxE6WlPL9ikNtMw5ySg5lOcF22H7pOuuXORY4qrW1sB FKPej3bWG+A3jjjnSemyY/M8aKlZrakhVVPaI8au251CzukgkKZZVkQnhtvG5/lR XLW5fzzK2oHM/neMaq6a7ZHa3rCdxCccG/Mi1o2aSeC+MMpwR7ZUp0+aCDmi/UZB BjOQfW7R1+n6LJCOZo0Yvo949kOpm7uoCB/EoHM+Fghnjy+8XI6k1lABCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCNvtzG2jcntpyEgPPBgGgbLElUnMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvSTItM01iYU55ZTJuSVNBODhHQWFCc3NTVlNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQJQ MA0GCSqGSIb3DQEBCwUAA4IBAQB1bclV3T6ESvvdZidhONm3qNPu7++/OxiYj618 VFxOTpxHXNWxHp8UQlTNNI4cjdU3O6dyBbNO7Kv8qycJ4dfTB/pHCVGEvxz/f3rQ 2y2YpMcOq3PJUdKZzEiYqq/o0vSb6tpolQuBhC5lYCCjjNY3PvwbV4i0IxyqMd8p qT7SjOGUttjpOUIR3+U6Ko48WIkOFnefDQ6qNauHFouENKF4zN5nd5ZkgTxPrlsF h5qSjRfe0Nndja9EjhgkY1vhCz6Qj2jjQ7+GQL5vMmhQoZrCDU6T7KFk77PmSyHF +omc4v5tU/HhYbwq3zpNQUV97kzYY/5jy4B9y5Clb1G1+Gmm -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:59 2026 by rpki-client