This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1-2g2IGlgQeS3_ojffHokkRny6BA.roa File: 1-2g2IGlgQeS3_ojffHokkRny6BA.roa (raw, json) Hash identifier: vLJi1sqDMwuknrSgbZqhQtuqqC5GhUfB9g9O5wC5iqQ= Subject key identifier: FB:68:36:20:69:60:41:E4:B7:FE:88:DF:7C:7A:24:91:19:F2:E8:10 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EAA85F7499B7C275556B0D4A75A81 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1-2g2IGlgQeS3_ojffHokkRny6BA.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205591 IP address blocks: 2a0e:aa01:bad0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:aa:85:f7:49:9b:7c:27:55:56:b0:d4:a7:5a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb683620696041e4b7fe88df7c7a249119f2e810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:03:08:e4:dc:ff:56:c8:ab:ee:0c:7a:d8: 31:68:06:c1:1f:53:9a:a6:9f:ca:fd:52:1e:7e:54: 7e:0a:ff:c9:61:18:aa:28:3d:59:b6:41:4a:26:4b: f7:d2:50:41:de:8f:a6:ff:03:42:80:3f:82:fd:87: 3b:cb:d9:f5:df:ec:41:4f:a8:88:c8:db:9b:c3:f7: 2b:64:1b:73:4a:b7:0d:de:04:53:3d:b2:25:3e:d0: 91:2f:08:e5:e9:eb:1a:1b:08:03:e8:7e:52:71:86: 73:f4:b0:81:7c:54:94:f9:76:1d:51:fa:d1:8f:55: 5c:5e:c1:b7:0b:39:71:d1:29:30:ee:b3:1d:fa:51: 9c:12:aa:86:93:ca:1f:42:60:15:3f:a9:37:76:3f: 30:76:e8:d7:88:c1:63:ff:c4:5f:1b:9e:0e:6d:53: 67:70:a5:10:e9:43:3e:a4:fe:10:17:f4:e1:6a:6d: 36:06:4a:4b:5e:3d:17:2e:06:d1:de:7e:90:5d:cc: 42:d8:16:4a:c7:9f:51:3e:9c:75:13:6a:67:bb:32: f5:b9:f4:d7:b7:79:8a:e4:a7:3e:66:69:56:57:e5: 0b:cc:2e:a8:9b:e7:5b:6c:a9:0b:c2:c6:10:b7:5e: 12:98:8f:da:b7:e7:17:80:bc:d0:3c:6c:8d:5d:12: ff:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:68:36:20:69:60:41:E4:B7:FE:88:DF:7C:7A:24:91:19:F2:E8:10 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1-2g2IGlgQeS3_ojffHokkRny6BA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa01:bad0::/44 Signature Algorithm: sha256WithRSAEncryption 81:ed:98:81:af:3d:67:d0:ef:4e:84:ad:3e:95:70:f3:17:aa: 1b:81:42:35:89:eb:a4:af:f2:1e:72:06:57:0d:61:e2:86:cc: 72:4e:11:f1:27:91:22:b2:e7:f2:75:a0:a7:60:47:b0:c2:e5: a3:18:d2:4d:4e:28:7f:88:2c:22:4a:46:88:af:70:43:22:cc: 11:2f:15:1a:dd:e8:3e:7d:ae:ce:5f:f0:f3:d3:86:01:33:c8: 16:cd:65:64:89:4f:cb:b2:9f:6d:13:46:35:df:16:c3:85:1f: f7:86:83:21:62:b9:51:ca:ed:10:71:0d:f2:a8:76:f3:cc:58: ff:1b:49:98:af:63:7f:94:ce:26:30:a0:2f:d4:d2:ad:15:60: 44:d5:7b:9a:20:eb:e6:21:34:d8:2a:7c:86:79:ff:e4:40:a9: 2d:34:9c:7c:dd:9a:ca:e1:20:bb:8b:a5:1a:c6:8e:54:fc:02: 20:65:0d:6a:17:a8:b7:91:52:87:c2:74:0b:11:82:f6:f8:18: 09:c1:7d:cf:e2:ae:b8:1f:84:85:9c:c3:3e:b9:fb:74:1d:a2: 38:7a:99:4a:34:a1:4d:61:64:19:cf:dc:3d:ff:8a:0f:86:45: d2:c5:9f:12:fe:ec:f3:2f:ea:51:9d:9d:d5:1f:fa:08:69:c9: 49:55:c0:26 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt5fqqF90mbfCdVVrDUp1qBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjY4MzYyMDY5NjA0MWU0YjdmZTg4ZGY3YzdhMjQ5MTE5ZjJlODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxoDCOTc/1bIq+4MetgxaAbBH1Oa pp/K/VIeflR+Cv/JYRiqKD1ZtkFKJkv30lBB3o+m/wNCgD+C/Yc7y9n13+xBT6iI yNubw/crZBtzSrcN3gRTPbIlPtCRLwjl6esaGwgD6H5ScYZz9LCBfFSU+XYdUfrR j1VcXsG3Czlx0Skw7rMd+lGcEqqGk8ofQmAVP6k3dj8wdujXiMFj/8RfG54ObVNn cKUQ6UM+pP4QF/Tham02BkpLXj0XLgbR3n6QXcxC2BZKx59RPpx1E2pnuzL1ufTX t3mK5Kc+ZmlWV+ULzC6om+dbbKkLwsYQt14SmI/at+cXgLzQPGyNXRL/FwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPtoNiBpYEHkt/6I33x6JJEZ8ugQMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvMS0yZzJJR2xnUWVTM19vamZmSG9ra1JueTZCQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2YvNzJiZjJmLThlMzQtNDhhMi04NDlhLWE1NDFkMWJjZWUx OS8xL2syRzF6V2xvSmJkUHpMcDlsOFBRb25KTzg2by5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoOqgG6 0DANBgkqhkiG9w0BAQsFAAOCAQEAge2Yga89Z9DvToStPpVw8xeqG4FCNYnrpK/y HnIGVw1h4obMck4R8SeRIrLn8nWgp2BHsMLloxjSTU4of4gsIkpGiK9wQyLMES8V Gt3oPn2uzl/w89OGATPIFs1lZIlPy7KfbRNGNd8Ww4Uf94aDIWK5UcrtEHEN8qh2 88xY/xtJmK9jf5TOJjCgL9TSrRVgRNV7miDr5iE02Cp8hnn/5ECpLTScfN2ayuEg u4ulGsaOVPwCIGUNaheot5FSh8J0CxGC9vgYCcF9z+KuuB+EhZzDPrn7dB2iOHqZ SjShTWFkGc/cPf+KD4ZF0sWfEv7s8y/qUZ2d1R/6CGnJSVXAJg== -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:19 2026 by rpki-client