This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/n2leCq1IHInB8JMONxXocTHAAQo.roa File: n2leCq1IHInB8JMONxXocTHAAQo.roa (raw, json) Hash identifier: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M= Subject key identifier: 9F:69:5E:0A:AD:48:1C:89:C1:F0:93:0E:37:15:E8:71:31:C0:01:0A Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019B7AC93E54A9EB9E578B7EFF7B7855EC8F Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/n2leCq1IHInB8JMONxXocTHAAQo.roa Signing time: Thu 01 Jan 2026 18:19:27 +0000 ROA not before: Thu 01 Jan 2026 18:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 2a04:5b81:2120::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3e:54:a9:eb:9e:57:8b:7e:ff:7b:78:55:ec:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f695e0aad481c89c1f0930e3715e87131c0010a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:cf:20:e0:f9:f5:cc:c7:d1:35:32:ca:fb: ba:56:55:0f:c0:a0:d3:3c:92:30:b4:37:34:0c:e2: 87:0d:28:bd:7b:63:53:e2:ae:da:30:2c:99:a1:5f: f4:50:ad:81:12:61:d4:ae:ed:24:e3:dc:3e:dc:07: b4:d8:79:34:a6:4c:aa:c2:82:bd:44:66:ba:97:11: c9:95:df:e7:80:1f:83:97:23:aa:1b:55:ef:71:39: a1:a4:b6:4d:71:22:1c:14:3c:63:df:34:23:00:c6: 58:35:2d:77:97:d7:fe:6b:0b:3c:5b:61:cd:2d:af: 7a:17:11:3b:19:a1:46:cf:7d:9f:0f:48:a6:72:cb: 16:88:d4:f5:39:42:7c:5b:46:1d:fa:8a:fd:8e:e2: 31:ff:61:55:11:81:3c:e7:c3:cb:cb:ff:71:b0:ad: 50:dc:74:cb:95:f3:d0:af:1d:9c:08:d8:15:9c:7c: fa:dd:d7:eb:4c:e5:b5:58:ec:aa:ac:fd:5a:e3:a9: e5:1f:74:ee:81:34:05:8a:d5:e0:24:28:a6:e7:88: eb:06:79:26:f4:37:2c:cc:ac:6f:c5:9b:2a:68:8b: b6:e7:d8:de:66:80:a4:53:f7:96:28:bc:06:68:ad: ff:fc:1e:a8:5b:86:1a:4b:a4:a6:76:1d:59:da:e8: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:69:5E:0A:AD:48:1C:89:C1:F0:93:0E:37:15:E8:71:31:C0:01:0A X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/n2leCq1IHInB8JMONxXocTHAAQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:5b81:2120::/44 Signature Algorithm: sha256WithRSAEncryption 1f:30:32:ff:b1:08:d5:f8:6d:6d:9f:55:03:fd:85:18:c3:6a: 36:a3:c3:d1:64:a2:52:0d:eb:04:09:f4:8e:75:dd:59:9f:2d: da:7e:48:10:56:a2:86:a0:97:1b:b5:00:05:8b:d3:7c:fc:98: 40:e5:09:1d:6f:35:36:40:1a:28:30:52:42:67:e8:4a:8a:eb: 0c:61:74:ed:ca:7f:ea:d5:e3:e2:23:5c:04:50:b2:39:6d:53: b4:c7:ed:e4:dc:20:40:d2:0c:b9:79:d0:fa:59:98:04:54:20: 00:67:53:8e:1b:6a:fb:ab:9b:48:d1:ff:de:aa:2c:1b:c1:2a: e6:46:dc:c4:bc:e2:8e:1e:07:06:b0:37:f2:22:5d:34:83:2b: 01:90:05:e8:e1:4f:2c:ed:a2:86:25:e7:9b:99:6b:a4:37:3a: f6:a9:7b:74:7c:9d:80:74:ad:ab:3d:fc:48:28:ea:23:96:d7: 91:c3:1e:12:66:3c:e8:27:27:23:a2:fd:c0:13:e5:35:da:94: 4a:b9:0b:f6:ce:3d:10:df:b9:31:f5:c6:5f:bc:f7:42:1e:5f: 3c:e4:d7:36:56:2a:e9:b5:a9:da:5b:ca:e3:2e:36:59:a2:fb: d8:6f:6e:7d:3b:00:c4:50:b3:7e:21:5a:7c:2f:ae:85:73:bc: 81:3e:6b:91 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yT5UqeueV4t+/3t4VeyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjY5NWUwYWFkNDgxYzg5YzFmMDkzMGUzNzE1ZTg3MTMxYzAwMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqPPIOD59czH0TUyyvu6VlUPwKDT PJIwtDc0DOKHDSi9e2NT4q7aMCyZoV/0UK2BEmHUru0k49w+3Ae02Hk0pkyqwoK9 RGa6lxHJld/ngB+DlyOqG1XvcTmhpLZNcSIcFDxj3zQjAMZYNS13l9f+aws8W2HN La96FxE7GaFGz32fD0imcssWiNT1OUJ8W0Yd+or9juIx/2FVEYE858PLy/9xsK1Q 3HTLlfPQrx2cCNgVnHz63dfrTOW1WOyqrP1a46nlH3TugTQFitXgJCim54jrBnkm 9DcszKxvxZsqaIu259jeZoCkU/eWKLwGaK3//B6oW4YaS6Smdh1Z2uhxDwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ9pXgqtSByJwfCTDjcV6HExwAEKMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvbjJsZUNxMUlISW5COEpNT054WG9jVEhBQVFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgRbgSEg MA0GCSqGSIb3DQEBCwUAA4IBAQAfMDL/sQjV+G1tn1UD/YUYw2o2o8PRZKJSDesE CfSOdd1Zny3afkgQVqKGoJcbtQAFi9N8/JhA5QkdbzU2QBooMFJCZ+hKiusMYXTt yn/q1ePiI1wEULI5bVO0x+3k3CBA0gy5edD6WZgEVCAAZ1OOG2r7q5tI0f/eqiwb wSrmRtzEvOKOHgcGsDfyIl00gysBkAXo4U8s7aKGJeebmWukNzr2qXt0fJ2AdK2r PfxIKOojlteRwx4SZjzoJycjov3AE+U12pRKuQv2zj0Q37kx9cZfvPdCHl885Nc2 VirptanaW8rjLjZZovvYb259OwDEULN+IVp8L66Fc7yBPmuR -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:02 2026 by rpki-client