This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2F9IO_TChGunKcWkwvp-BDyIvfY.roa File: 2F9IO_TChGunKcWkwvp-BDyIvfY.roa (raw, json) Hash identifier: zQgC4plEKNhOvOKKRdgS9IPTT8xgxqgQDT/W90sl620= Subject key identifier: D8:5F:48:3B:F4:C2:84:6B:A7:29:C5:A4:C2:FA:7E:04:3C:88:BD:F6 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B4487D53E958125B5ECD49D36FD83CDB1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2F9IO_TChGunKcWkwvp-BDyIvfY.roa Signing time: Mon 22 Dec 2025 05:28:31 +0000 ROA not before: Mon 22 Dec 2025 05:28:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 53667 IP address blocks: 2a06:de05:6000::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:87:d5:3e:95:81:25:b5:ec:d4:9d:36:fd:83:cd:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 22 05:28:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d85f483bf4c2846ba729c5a4c2fa7e043c88bdf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:44:66:fa:a0:fa:1b:c0:ef:04:1e:3a:4f:2e: 18:5b:99:ba:f6:a5:d8:b3:3a:4d:6d:01:bb:e5:ef: c9:f0:ee:74:b1:b1:f1:cf:a0:47:7c:d1:80:6c:90: e9:f4:0d:b6:18:f1:7a:c5:f2:7a:1a:7f:27:a6:87: b6:1d:fc:f0:7c:27:b9:66:4d:30:78:da:98:ae:b2: 55:84:c8:97:03:99:1e:9f:8c:70:8a:9b:86:56:c0: 90:db:f3:c0:af:c7:d9:43:79:9b:c7:a9:f5:c4:9d: ba:a9:df:d3:5b:37:94:49:af:33:74:f4:20:3a:7e: 5b:6a:f7:c7:7c:fd:c4:40:d5:f6:06:a8:29:06:df: 7f:c7:07:07:9f:ad:e1:ea:4f:55:86:a3:5a:0a:2a: 0a:36:60:ab:d6:22:dc:b7:35:36:cd:e8:98:35:e8: c0:f3:b5:67:d4:e4:da:01:dd:78:ee:06:38:11:76: c7:ae:2e:96:e8:6a:54:e3:c9:23:c9:48:85:f5:ad: 7f:b4:1c:9d:2e:ec:35:3e:04:ec:4c:2c:3d:59:ad: c7:cb:36:3c:ee:a7:64:50:32:27:e6:4f:d6:37:5b: 99:f4:99:b1:64:73:2c:90:fb:75:6d:b2:8a:2e:8d: 2d:72:db:45:ad:43:9e:f5:f0:2f:9c:ab:c0:51:91: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5F:48:3B:F4:C2:84:6B:A7:29:C5:A4:C2:FA:7E:04:3C:88:BD:F6 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2F9IO_TChGunKcWkwvp-BDyIvfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de05:6000::/38 Signature Algorithm: sha256WithRSAEncryption b3:11:37:fb:0a:47:8a:79:d6:c3:2c:07:a6:65:ef:f4:7a:83: 3d:93:6e:02:fa:a4:c5:65:92:31:a7:cb:d6:3b:d5:8d:e3:60: 36:c2:a9:3b:e7:2d:06:87:c7:76:a7:31:37:6f:27:43:b5:cd: 9a:46:62:64:83:0a:2d:27:f9:72:d2:88:5c:e4:14:3b:ee:e1: 2e:70:79:02:4b:0d:ae:17:30:38:bd:b1:ea:f9:34:f7:44:b1: 9b:1f:0c:23:65:53:76:ea:13:0a:f0:76:a5:ac:f3:75:94:3b: a1:59:05:dc:98:3d:f9:a5:b0:1b:75:53:70:b0:3e:8a:be:75: c9:66:40:b1:23:06:69:19:1b:8f:70:4c:1b:6a:8b:3b:ac:83: 26:e1:b6:f9:81:dc:fd:f9:e3:05:d8:c7:e1:1b:8d:5b:f4:4a: b4:9a:53:33:f9:c5:ea:06:3d:cf:b9:7c:f9:15:1b:8c:eb:5a: 9f:86:7f:03:5f:35:65:9b:83:a2:07:5c:eb:f9:9c:0c:d8:e3: 68:2e:54:70:7f:13:25:d5:8b:b7:21:46:1d:a8:1c:bc:63:25: 1c:e6:35:e8:4e:f5:5e:7d:67:8e:62:48:8e:87:a5:62:5a:be: 47:9b:64:fd:16:21:a7:37:4d:86:de:94:4e:e2:6a:4b:d1:d8: 6d:42:94:00 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZtEh9U+lYEltezUnTb9g82xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjIyMDUyODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODVmNDgzYmY0YzI4NDZiYTcyOWM1YTRjMmZhN2UwNDNjODhiZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkRm+qD6G8DvBB46Ty4YW5m69qXY szpNbQG75e/J8O50sbHxz6BHfNGAbJDp9A22GPF6xfJ6Gn8npoe2HfzwfCe5Zk0w eNqYrrJVhMiXA5ken4xwipuGVsCQ2/PAr8fZQ3mbx6n1xJ26qd/TWzeUSa8zdPQg On5bavfHfP3EQNX2BqgpBt9/xwcHn63h6k9VhqNaCioKNmCr1iLctzU2zeiYNejA 87Vn1OTaAd147gY4EXbHri6W6GpU48kjyUiF9a1/tBydLuw1PgTsTCw9Wa3HyzY8 7qdkUDIn5k/WN1uZ9JmxZHMskPt1bbKKLo0tcttFrUOe9fAvnKvAUZHXBQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNhfSDv0woRrpynFpML6fgQ8iL32MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMkY5SU9fVENoR3VuS2NXa3d2cC1CRHlJdmZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgbeBWAw DQYJKoZIhvcNAQELBQADggEBALMRN/sKR4p51sMsB6Zl7/R6gz2TbgL6pMVlkjGn y9Y71Y3jYDbCqTvnLQaHx3anMTdvJ0O1zZpGYmSDCi0n+XLSiFzkFDvu4S5weQJL Da4XMDi9ser5NPdEsZsfDCNlU3bqEwrwdqWs83WUO6FZBdyYPfmlsBt1U3CwPoq+ dclmQLEjBmkZG49wTBtqizusgybhtvmB3P354wXYx+EbjVv0SrSaUzP5xeoGPc+5 fPkVG4zrWp+GfwNfNWWbg6IHXOv5nAzY42guVHB/EyXVi7chRh2oHLxjJRzmNehO 9V59Z45iSI6HpWJavkebZP0WIac3TYbelE7iakvR2G1ClAA= -----END CERTIFICATE-----Generated at Tue Dec 23 22:03:11 2025 by rpki-client