This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/N_2U4grFu5nxrIC9KlTuX1giSbM.roa File: N_2U4grFu5nxrIC9KlTuX1giSbM.roa (raw, json) Hash identifier: hqGwhEQ2nYAefg3hkWNmS4mDHtwG/bdG2tIurSMQLtE= Subject key identifier: 37:FD:94:E2:0A:C5:BB:99:F1:AC:80:BD:2A:54:EE:5F:58:22:49:B3 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38C01ADCCCCDA6E4A0DD4506C94861 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/N_2U4grFu5nxrIC9KlTuX1giSbM.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214963 IP address blocks: 2a13:a5c3:ff20::/44 maxlen: 48 2a13:a5c7:2100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c0:1a:dc:cc:cd:a6:e4:a0:dd:45:06:c9:48:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37fd94e20ac5bb99f1ac80bd2a54ee5f582249b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:5f:56:3e:6d:d8:1d:ba:25:49:71:96:fe: ae:fb:48:85:e6:8c:5c:fc:42:05:62:2c:b9:86:c2: 1b:b5:fd:83:fa:4e:21:06:f0:77:61:bc:eb:82:d1: 62:da:db:9c:24:a5:6e:f2:33:4e:f7:8b:5e:50:1c: 20:c5:8b:e0:d7:f6:07:22:ab:e4:1a:ee:56:7b:03: b4:b1:13:0d:ba:a2:55:9f:bb:5d:8a:3e:3e:b9:01: 3b:28:76:33:ae:d7:a8:a7:5a:4d:2a:a1:00:21:56: 4a:9a:32:b8:99:a7:d3:14:d8:96:a1:5c:5f:3e:7d: 6e:ac:35:3d:ea:56:3c:51:18:7e:db:2b:00:bb:2c: f2:c3:11:f4:cf:e3:94:e0:df:b8:6e:24:42:94:17: 2a:3f:56:7c:29:f9:86:63:de:4a:f1:2e:4c:6b:3f: 40:45:0d:57:88:c8:12:92:73:74:20:9a:e7:14:9d: 56:fb:91:af:12:9d:f4:0a:4e:3a:43:f1:26:3e:92: e0:03:db:4d:b7:da:e7:c9:9b:3b:2f:89:2c:84:8c: ce:59:ea:7c:38:98:79:e8:36:82:b3:0c:14:00:da: c8:91:4a:41:e3:67:7b:29:5f:38:15:70:11:d4:b0: 7d:93:cf:78:fe:b6:40:ab:04:33:ca:12:da:65:1b: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FD:94:E2:0A:C5:BB:99:F1:AC:80:BD:2A:54:EE:5F:58:22:49:B3 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/N_2U4grFu5nxrIC9KlTuX1giSbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c3:ff20::/44 2a13:a5c7:2100::/40 Signature Algorithm: sha256WithRSAEncryption 4a:1f:6c:fe:28:11:6a:29:d6:af:24:2a:21:16:17:ec:a6:15: 61:97:9d:2f:cb:57:05:51:27:55:df:31:5a:82:d7:22:b1:44: ae:d7:25:8b:57:f4:9d:41:0a:56:11:d6:df:cd:d3:b8:50:58: 40:0d:a3:17:2f:b8:6a:d7:ba:6e:5a:dd:83:15:cb:2c:7c:72: 1e:6e:c2:ce:d2:6d:8f:d8:91:30:25:21:65:67:9a:d7:77:b1: 1e:b2:2d:12:9a:59:0d:98:b4:1d:ed:0b:d2:70:90:f3:9a:fc: 17:91:d4:a0:b9:89:de:36:40:55:11:40:2d:cb:2a:3e:3b:6b: 1c:d7:e8:57:95:2b:bf:62:cb:e2:d0:18:1c:42:55:5f:e4:0b: 43:fc:1e:c2:1e:1a:c1:3f:f2:86:0c:7c:06:d9:95:f5:7a:4d: f0:76:c7:a1:bc:40:f0:d9:df:3f:6a:d8:02:f0:42:8e:35:e8: 89:ab:e6:b8:bd:82:f9:19:2f:6d:96:5d:19:3c:ca:71:48:76: 11:85:fe:dc:89:53:02:2e:36:ab:e5:1c:58:75:93:27:96:3a: b0:81:bb:12:90:a0:db:55:4c:e9:bb:10:a4:31:c0:ca:45:e7: 14:78:57:04:b5:b0:90:1d:b3:5c:ce:3c:f3:f9:52:80:bd:28: 8d:e9:7d:83 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt+OMAa3MzNpuSg3UUGyUhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2ZkOTRlMjBhYzViYjk5ZjFhYzgwYmQyYTU0ZWU1ZjU4MjI0OWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkNfVj5t2B26JUlxlv6u+0iF5oxc /EIFYiy5hsIbtf2D+k4hBvB3YbzrgtFi2tucJKVu8jNO94teUBwgxYvg1/YHIqvk Gu5WewO0sRMNuqJVn7tdij4+uQE7KHYzrteop1pNKqEAIVZKmjK4mafTFNiWoVxf Pn1urDU96lY8URh+2ysAuyzywxH0z+OU4N+4biRClBcqP1Z8KfmGY95K8S5Maz9A RQ1XiMgSknN0IJrnFJ1W+5GvEp30Ck46Q/EmPpLgA9tNt9rnyZs7L4kshIzOWep8 OJh56DaCswwUANrIkUpB42d7KV84FXAR1LB9k894/rZAqwQzyhLaZRtXeQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFDf9lOIKxbuZ8ayAvSpU7l9YIkmzMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvTl8yVTRnckZ1NW54cklDOUtsVHVYMWdpU2JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhOlw/8g AwYAKhOlxyEwDQYJKoZIhvcNAQELBQADggEBAEofbP4oEWop1q8kKiEWF+ymFWGX nS/LVwVRJ1XfMVqC1yKxRK7XJYtX9J1BClYR1t/N07hQWEANoxcvuGrXum5a3YMV yyx8ch5uws7SbY/YkTAlIWVnmtd3sR6yLRKaWQ2YtB3tC9JwkPOa/BeR1KC5id42 QFURQC3LKj47axzX6FeVK79iy+LQGBxCVV/kC0P8HsIeGsE/8oYMfAbZlfV6TfB2 x6G8QPDZ3z9q2ALwQo416Imr5ri9gvkZL22WXRk8ynFIdhGF/tyJUwIuNqvlHFh1 kyeWOrCBuxKQoNtVTOm7EKQxwMpF5xR4VwS1sJAds1zOPPP5UoC9KI3pfYM= -----END CERTIFICATE-----Generated at Mon Jan 5 03:47:28 2026 by rpki-client