This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2COUmkDmMUfrnDn9fGVYQq5lnpM.roa File: 2COUmkDmMUfrnDn9fGVYQq5lnpM.roa (raw, json) Hash identifier: ylAE35EndlyTUhJT8mx3OIzbc+FgU4Nj8uAar/Gjas8= Subject key identifier: D8:23:94:9A:40:E6:31:47:EB:9C:39:FD:7C:65:58:42:AE:65:9E:93 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA40BB27D03988B5CB5D14FD5FDEA05 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2COUmkDmMUfrnDn9fGVYQq5lnpM.roa Signing time: Thu 01 Jan 2026 22:18:26 +0000 ROA not before: Thu 01 Jan 2026 22:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202306 IP address blocks: 2a04:5200:5977::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:0b:b2:7d:03:98:8b:5c:b5:d1:4f:d5:fd:ea:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d823949a40e63147eb9c39fd7c655842ae659e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:4b:d7:2d:0b:e2:8a:8c:65:5c:3e:8e:7b: 05:1a:5a:6a:5a:d3:00:c2:6b:7a:34:53:f1:90:53: da:e0:11:52:c8:20:0a:54:79:e1:39:31:82:ca:01: 10:99:84:ee:6e:a6:16:92:13:1d:cb:32:a4:b4:17: 82:f3:9c:6a:f2:30:f0:3d:4a:24:a5:a9:e8:bf:f5: 39:40:b1:af:8d:6c:24:0e:07:ba:f3:ce:07:db:c9: f5:d5:73:59:c7:c3:66:df:04:b6:eb:12:57:eb:04: 69:5a:68:44:05:2f:76:0d:65:03:d1:66:13:90:f5: 25:f6:e1:f1:b5:53:5e:61:bf:c0:c7:31:2c:52:35: b0:f6:64:93:af:61:b7:bc:98:e2:75:40:6f:52:16: aa:63:80:45:70:ae:42:f8:26:a4:7d:eb:ad:4b:6e: eb:7b:f2:c3:db:32:53:e0:30:38:a9:ca:eb:62:72: c8:ae:cb:62:e5:50:a8:52:a6:a6:aa:99:3c:02:ca: 71:7a:8e:a4:a1:1f:3a:c2:79:96:4c:8e:6e:4f:ad: 8b:2b:6e:7c:45:bd:f4:d2:5a:fe:66:9d:87:58:44: 15:0c:b1:5d:4c:6e:70:71:94:85:1d:34:e4:41:1e: 33:26:23:f0:20:5f:a2:46:6e:99:44:49:16:ab:9b: 7e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:23:94:9A:40:E6:31:47:EB:9C:39:FD:7C:65:58:42:AE:65:9E:93 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2COUmkDmMUfrnDn9fGVYQq5lnpM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:5200:5977::/48 Signature Algorithm: sha256WithRSAEncryption 27:72:21:86:fb:60:5a:98:b6:76:83:98:22:a1:58:17:0f:e4: 3a:3a:ab:ec:af:e5:fd:8a:f5:63:0d:11:65:e4:8c:80:8d:f2: 32:91:33:7d:3b:e1:77:1d:c8:dc:4c:01:e7:4d:ac:8b:00:32: ae:27:af:10:1f:be:e3:87:ab:ff:2d:e1:3c:8f:be:ba:02:d9: c2:83:ea:8d:5b:d9:39:f4:01:0f:e2:a3:cf:e1:ff:e0:f9:bc: fe:21:9a:55:2e:49:5d:44:06:68:af:cc:6e:1e:54:e4:bb:bb: 71:bc:a3:28:68:06:5a:35:2c:7e:58:b4:e0:af:8a:19:e4:fd: 7c:89:5e:55:60:1b:04:c5:17:cc:24:cf:58:91:3b:ab:4c:fd: 6c:68:86:4a:c8:c8:49:b5:28:b7:9a:28:df:7b:f8:01:e3:fb: 50:78:0b:6f:70:7a:cf:ce:b6:e2:05:fe:22:92:60:e9:cc:58: 79:d8:14:f3:00:fc:13:39:72:1e:8d:06:a0:47:14:8f:8b:48: 9b:78:2d:2b:a6:77:50:42:c3:8b:f2:2e:bc:27:22:d3:f2:69: 80:39:23:2b:a6:0c:a1:09:de:9a:c2:2c:ff:95:ca:68:28:28: 39:9b:08:5a:e6:86:13:d9:8e:84:89:3a:e2:a3:4e:61:c3:bf: 0b:34:3a:a9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pAuyfQOYi1y10U/V/eoFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODIzOTQ5YTQwZTYzMTQ3ZWI5YzM5ZmQ3YzY1NTg0MmFlNjU5ZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj1L1y0L4oqMZVw+jnsFGlpqWtMA wmt6NFPxkFPa4BFSyCAKVHnhOTGCygEQmYTubqYWkhMdyzKktBeC85xq8jDwPUok panov/U5QLGvjWwkDge6884H28n11XNZx8Nm3wS26xJX6wRpWmhEBS92DWUD0WYT kPUl9uHxtVNeYb/AxzEsUjWw9mSTr2G3vJjidUBvUhaqY4BFcK5C+CakfeutS27r e/LD2zJT4DA4qcrrYnLIrsti5VCoUqamqpk8Aspxeo6koR86wnmWTI5uT62LK258 Rb300lr+Zp2HWEQVDLFdTG5wcZSFHTTkQR4zJiPwIF+iRm6ZREkWq5t+oQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNgjlJpA5jFH65w5/XxlWEKuZZ6TMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvMkNPVW1rRG1NVWZybkRuOWZHVllRcTVsbnBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgRSAFl3 MA0GCSqGSIb3DQEBCwUAA4IBAQAnciGG+2BamLZ2g5gioVgXD+Q6Oqvsr+X9ivVj DRFl5IyAjfIykTN9O+F3HcjcTAHnTayLADKuJ68QH77jh6v/LeE8j766AtnCg+qN W9k59AEP4qPP4f/g+bz+IZpVLkldRAZor8xuHlTku7txvKMoaAZaNSx+WLTgr4oZ 5P18iV5VYBsExRfMJM9YkTurTP1saIZKyMhJtSi3mijfe/gB4/tQeAtvcHrPzrbi Bf4ikmDpzFh52BTzAPwTOXIejQagRxSPi0ibeC0rpndQQsOL8i68JyLT8mmAOSMr pgyhCd6awiz/lcpoKCg5mwha5oYT2Y6EiTrio05hw78LNDqp -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:56 2026 by rpki-client