This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/2jmGEk4OVcICepreDNCO9eAT7tM.roa File: 2jmGEk4OVcICepreDNCO9eAT7tM.roa (raw, json) Hash identifier: BFDa7KtVd8lP+Nx0xYbBnf+5dOJVnOedVDkc++Nuqto= Subject key identifier: DA:39:86:12:4E:0E:55:C2:02:7A:9A:DE:0C:D0:8E:F5:E0:13:EE:D3 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38C3B60A90DE3ED4FBDB3162E53F50 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/2jmGEk4OVcICepreDNCO9eAT7tM.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216256 IP address blocks: 2a13:a5c7:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c3:b6:0a:90:de:3e:d4:fb:db:31:62:e5:3f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da3986124e0e55c2027a9ade0cd08ef5e013eed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:11:4a:a8:1e:c3:ab:42:cd:ee:76:67:bd:eb: 13:8a:fa:6c:75:6d:f5:b5:6e:e1:16:d3:c2:89:a5: 97:a8:bc:44:f9:d7:04:df:6d:4e:34:87:96:68:96: f1:be:78:30:7b:81:d0:6b:d5:71:0d:d6:25:df:33: 1f:df:f3:71:31:a9:66:53:67:ba:22:fa:a9:79:30: 11:86:8f:7d:27:33:51:98:9b:3c:0d:97:58:e4:d3: af:79:33:06:b1:43:f6:f8:b4:1f:6d:91:42:23:f5: 1d:25:38:a9:c3:95:e1:e1:3d:68:6d:53:6d:80:4f: 8b:c0:26:7f:60:c7:2f:88:9f:e7:98:76:fb:4c:5c: e6:0e:ca:3c:e4:9b:22:90:66:60:e0:47:e3:80:00: 65:a7:72:37:53:1b:cc:82:6f:66:03:c6:0e:a2:5e: 08:04:60:a7:71:8d:6d:03:84:c2:8f:8b:f4:c3:cb: bd:c9:94:06:14:0c:37:26:c0:e2:5d:39:4c:4a:3b: 87:ba:6c:3e:f6:92:32:56:9d:b8:76:b9:00:ab:3b: 82:97:d6:e0:9f:73:ec:68:3b:e9:2e:b7:af:31:a3: 45:ef:81:f9:65:f1:0a:59:e9:42:32:72:89:25:1b: 87:7b:54:94:78:f2:18:87:5e:64:d6:16:87:87:ce: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:39:86:12:4E:0E:55:C2:02:7A:9A:DE:0C:D0:8E:F5:E0:13:EE:D3 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/2jmGEk4OVcICepreDNCO9eAT7tM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:3400::/40 Signature Algorithm: sha256WithRSAEncryption ae:6f:e3:28:35:36:31:82:e9:af:ac:b9:bc:59:c9:d6:52:f5: b0:9a:58:68:07:22:23:b0:8c:43:18:93:15:51:65:77:04:a0: 56:11:4b:b8:7d:44:63:02:4c:61:29:ad:58:68:a3:d4:9c:39: 13:14:e8:39:77:b2:cb:ce:ae:61:95:5f:f2:55:57:cf:3b:aa: 85:f6:82:b1:41:56:66:51:0c:b6:d4:78:1b:bb:89:cd:7f:ab: 4f:38:6c:93:af:f0:6f:23:7d:4d:03:a9:a0:86:35:97:4a:c4: 8b:29:4c:2b:a0:99:8b:da:c9:f5:29:2a:56:66:01:bb:43:97: ee:62:7d:4a:ca:3b:fb:6e:ed:f6:1c:76:be:8e:1a:0c:3a:f7: f1:f4:ce:86:3d:12:64:1e:d6:47:d8:c1:6e:db:a6:e9:47:fc: 07:ee:33:a4:d0:ba:1e:7c:ec:63:1c:52:5c:15:7d:3b:e1:05: d4:ed:ba:93:22:eb:bd:ec:aa:46:bf:0b:9c:f5:5a:b1:ea:55: ae:79:9f:f2:23:d6:6d:c5:a1:4c:fa:e9:32:33:a0:16:d2:d7: b2:ca:ff:5a:1a:48:88:77:16:66:0b:cf:7d:6f:66:68:0c:03: a9:be:bd:88:9c:5f:d8:77:82:85:ff:2b:7c:04:6b:98:9c:0c: 03:e6:13:77 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OMO2CpDePtT72zFi5T9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTM5ODYxMjRlMGU1NWMyMDI3YTlhZGUwY2QwOGVmNWUwMTNlZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRFKqB7Dq0LN7nZnvesTivpsdW31 tW7hFtPCiaWXqLxE+dcE321ONIeWaJbxvngwe4HQa9VxDdYl3zMf3/NxMalmU2e6 IvqpeTARho99JzNRmJs8DZdY5NOveTMGsUP2+LQfbZFCI/UdJTipw5Xh4T1obVNt gE+LwCZ/YMcviJ/nmHb7TFzmDso85JsikGZg4EfjgABlp3I3UxvMgm9mA8YOol4I BGCncY1tA4TCj4v0w8u9yZQGFAw3JsDiXTlMSjuHumw+9pIyVp24drkAqzuCl9bg n3PsaDvpLrevMaNF74H5ZfEKWelCMnKJJRuHe1SUePIYh15k1haHh86qdQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNo5hhJODlXCAnqa3gzQjvXgE+7TMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvMmptR0VrNE9WY0lDZXByZUROQ085ZUFUN3RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxzQw DQYJKoZIhvcNAQELBQADggEBAK5v4yg1NjGC6a+subxZydZS9bCaWGgHIiOwjEMY kxVRZXcEoFYRS7h9RGMCTGEprVhoo9ScORMU6Dl3ssvOrmGVX/JVV887qoX2grFB VmZRDLbUeBu7ic1/q084bJOv8G8jfU0DqaCGNZdKxIspTCugmYvayfUpKlZmAbtD l+5ifUrKO/tu7fYcdr6OGgw69/H0zoY9EmQe1kfYwW7bpulH/AfuM6TQuh587GMc UlwVfTvhBdTtupMi673sqka/C5z1WrHqVa55n/Ij1m3FoUz66TIzoBbS17LK/1oa SIh3FmYLz31vZmgMA6m+vYicX9h3goX/K3wEa5icDAPmE3c= -----END CERTIFICATE-----Generated at Mon Jan 5 03:48:28 2026 by rpki-client