This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/NB2LWnjHT9_OdID1ts0RcFPwKGQ.roa File: NB2LWnjHT9_OdID1ts0RcFPwKGQ.roa (raw, json) Hash identifier: mZou46RX6NNyW8lU0qa5tsLs6e+gZ1j+Q57s8qZ9Pp0= Subject key identifier: 34:1D:8B:5A:78:C7:4F:DF:CE:74:80:F5:B6:CD:11:70:53:F0:28:64 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C809F0FFE4F0DDD3670441EB16DDDB3 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/NB2LWnjHT9_OdID1ts0RcFPwKGQ.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62445 IP address blocks: 2a05:b680:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9f:0f:fe:4f:0d:dd:36:70:44:1e:b1:6d:dd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=341d8b5a78c74fdfce7480f5b6cd117053f02864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:3a:e1:fc:dd:ce:7b:32:ff:39:2f:14:0f: d8:05:94:6b:6e:c7:df:b8:35:49:64:46:ad:fe:2a: cc:3d:0e:89:c4:59:a0:c7:9c:3e:22:91:f1:8a:ad: 51:fb:29:bc:91:5b:03:c6:4a:5b:19:90:c5:45:19: 53:e4:49:66:c2:95:80:07:56:b8:a2:27:50:62:94: 2a:c3:6c:50:2c:41:b8:1c:71:77:a7:e1:03:8b:49: 28:7c:81:4d:bf:17:5e:e9:ea:4f:ee:e5:20:2a:6d: 7d:94:d2:8d:fd:22:2d:16:49:1a:0a:60:53:6d:52: 35:43:61:9d:c0:b8:12:30:d5:49:b7:31:77:f7:d2: 13:2c:55:eb:2a:c0:45:30:99:a2:59:de:a9:32:38: de:10:1f:02:12:5b:3c:c2:45:2e:d4:1e:1c:f3:66: 69:11:1b:64:86:3e:6a:3a:45:e1:03:b5:6f:6c:95: 6b:74:87:e8:7e:67:07:62:19:ed:a3:8e:90:8f:ee: 6a:2b:1d:1c:5e:20:90:f1:90:84:b3:be:10:25:4d: 8b:5a:36:9a:22:43:de:fd:d4:5b:02:5d:c7:95:25: 23:ba:7f:10:f6:cd:94:7d:cd:d9:0a:ac:7c:27:c6: ed:11:44:71:52:e9:38:85:ca:56:0f:d0:e9:dd:9d: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1D:8B:5A:78:C7:4F:DF:CE:74:80:F5:B6:CD:11:70:53:F0:28:64 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/NB2LWnjHT9_OdID1ts0RcFPwKGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b680:8::/48 Signature Algorithm: sha256WithRSAEncryption b7:5a:ee:61:f8:c2:76:88:5d:0c:07:f4:00:cc:25:be:72:d6: 69:bd:af:80:a2:eb:b6:30:ad:70:ac:4a:ae:14:ec:25:03:05: 7a:09:83:d9:11:44:2e:47:22:58:50:05:67:fc:fa:1d:b5:ac: ee:22:1e:a5:c5:3b:2d:a7:9c:f3:23:d9:5a:95:de:b5:4a:c9: bc:ec:cd:b3:87:ee:4a:96:a8:be:c1:c0:93:e9:17:c6:c3:31: bf:6b:7f:99:56:5f:6e:1f:f7:b4:87:f2:b8:57:1c:c0:e2:4f: 4e:42:30:94:cb:21:14:26:ea:28:d0:41:33:a7:e3:8e:ae:85: 66:91:48:76:78:aa:a8:72:92:c7:cf:e6:0c:74:86:23:2f:00: 92:5b:16:36:56:b0:8f:09:d6:a3:24:ce:d3:45:7f:83:a2:ee: 4f:86:84:09:3e:21:39:aa:16:ac:2f:ec:10:2d:1e:a4:c7:39: ca:43:cb:1e:52:29:0d:91:62:8f:e2:d6:e7:27:b9:68:71:cd: 64:f4:22:63:0b:e5:49:8a:27:bb:39:99:23:b5:cf:8f:43:cb: e1:b9:af:2f:fb:0e:9e:1d:4a:19:eb:29:2c:fe:13:10:8f:6f: db:e3:bb:ea:c0:58:10:9b:54:22:00:91:3a:88:57:44:2c:cb: 22:bd:0b:06 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gJ8P/k8N3TZwRB6xbd2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDFkOGI1YTc4Yzc0ZmRmY2U3NDgwZjViNmNkMTE3MDUzZjAyODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJc64fzdznsy/zkvFA/YBZRrbsff uDVJZEat/irMPQ6JxFmgx5w+IpHxiq1R+ym8kVsDxkpbGZDFRRlT5ElmwpWAB1a4 oidQYpQqw2xQLEG4HHF3p+EDi0kofIFNvxde6epP7uUgKm19lNKN/SItFkkaCmBT bVI1Q2GdwLgSMNVJtzF399ITLFXrKsBFMJmiWd6pMjjeEB8CEls8wkUu1B4c82Zp ERtkhj5qOkXhA7VvbJVrdIfofmcHYhnto46Qj+5qKx0cXiCQ8ZCEs74QJU2LWjaa IkPe/dRbAl3HlSUjun8Q9s2Ufc3ZCqx8J8btEURxUuk4hcpWD9Dp3Z0l/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDQdi1p4x0/fznSA9bbNEXBT8ChkMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvTkIyTFduakhUOV9PZElEMXRzMFJjRlB3S0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgW2gAAI MA0GCSqGSIb3DQEBCwUAA4IBAQC3Wu5h+MJ2iF0MB/QAzCW+ctZpva+Aouu2MK1w rEquFOwlAwV6CYPZEUQuRyJYUAVn/PodtazuIh6lxTstp5zzI9lald61Ssm87M2z h+5Klqi+wcCT6RfGwzG/a3+ZVl9uH/e0h/K4VxzA4k9OQjCUyyEUJuoo0EEzp+OO roVmkUh2eKqocpLHz+YMdIYjLwCSWxY2VrCPCdajJM7TRX+Dou5PhoQJPiE5qhas L+wQLR6kxznKQ8seUikNkWKP4tbnJ7locc1k9CJjC+VJiie7OZkjtc+PQ8vhua8v +w6eHUoZ6yks/hMQj2/b47vqwFgQm1QiAJE6iFdELMsivQsG -----END CERTIFICATE-----Generated at Wed Jan 21 10:46:57 2026 by rpki-client