This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/2Xg5OEnftZpb5k1x6rbrB8U5XK0.roa File: 2Xg5OEnftZpb5k1x6rbrB8U5XK0.roa (raw, json) Hash identifier: OeoDUAvzC45r4+LBNY8DW9yDFIp01V3DXvggRO1V4u0= Subject key identifier: D9:78:39:38:49:DF:B5:9A:5B:E6:4D:71:EA:B6:EB:07:C5:39:5C:AD Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EBD5B0E528AD10F7DE0BA9D99D266 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/2Xg5OEnftZpb5k1x6rbrB8U5XK0.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214483 IP address blocks: 2a0e:aa07:e1f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bd:5b:0e:52:8a:d1:0f:7d:e0:ba:9d:99:d2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d978393849dfb59a5be64d71eab6eb07c5395cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:f1:4f:97:73:51:43:e4:d2:08:6a:2d:d3: b2:2d:f9:ec:70:8f:76:f0:40:1b:d3:df:a3:74:42: a5:1f:d7:00:97:62:59:97:94:c0:0a:12:67:73:f7: 01:07:b0:9f:2e:8f:3e:8f:ff:6d:18:5b:72:13:e4: 72:c7:67:b0:52:2d:46:a2:84:09:62:d3:b7:6f:73: e0:ff:23:d8:c4:0b:2d:b4:bd:34:71:9c:2c:3a:fa: b0:9c:c4:2f:17:3e:62:38:3a:2f:83:6e:79:72:cb: 63:c7:00:cf:54:84:5e:4c:65:6f:3f:51:dd:98:43: bc:cb:2c:0a:5c:36:11:15:1b:81:6c:1b:0c:fd:e3: 8f:8e:e3:38:47:56:73:8e:e2:b2:a1:f9:d4:92:8b: 7e:4a:e5:3e:b0:5c:c7:0e:86:d6:e7:ca:87:76:e9: c4:37:f0:9a:b2:9e:b2:d0:06:09:64:ad:d1:4e:cd: 78:9a:f1:71:09:50:dc:29:4e:99:1e:12:db:95:6c: c0:1a:d8:44:62:8d:b2:84:6b:f2:86:73:58:76:a9: 52:cb:85:ae:49:50:d6:bf:c9:ad:01:b3:8c:8d:ab: a2:9c:4c:fd:68:ec:dc:15:5e:cd:06:a3:ae:bf:04: f2:1d:02:b8:0b:96:c7:87:f0:10:f4:be:ad:6b:1b: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:78:39:38:49:DF:B5:9A:5B:E6:4D:71:EA:B6:EB:07:C5:39:5C:AD X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/2Xg5OEnftZpb5k1x6rbrB8U5XK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e1f0::/44 Signature Algorithm: sha256WithRSAEncryption 25:0d:72:73:0d:fe:cd:61:d1:bb:02:b8:75:4a:c4:db:06:6e: ba:09:05:3c:76:f1:72:e8:5e:c7:ed:cc:35:9b:61:c6:54:7b: 80:bf:3b:57:5d:ad:b4:8e:84:f0:e6:a3:86:02:bf:dd:4c:c1: d5:97:4d:cd:79:71:aa:86:06:45:6d:e9:3d:47:d7:95:ab:26: ec:7c:c8:1c:9c:8b:17:19:64:c5:9a:c6:da:65:b0:1d:12:49: 66:db:7c:25:68:05:7f:3e:ad:18:5a:40:19:9f:6a:2c:0e:78: 52:95:2e:3a:1f:f8:78:74:cb:c0:d3:a9:01:95:0c:9c:54:70: 65:f9:d8:4c:6a:32:d4:30:97:fe:c4:90:b8:28:eb:99:63:f8: 6c:06:95:e7:a6:90:d1:d3:dd:0a:ba:1b:79:1d:6e:96:cf:87: 60:a4:2f:98:c6:ab:12:9f:cb:78:f2:43:72:2d:40:35:b3:e6: 59:86:fa:d7:43:9a:0f:77:f6:14:bc:15:66:45:50:86:e0:03: 26:4b:82:a6:c2:bf:c2:dc:d1:a9:43:3e:1a:f8:5f:37:e9:91: a9:02:4c:a1:4f:1e:93:6e:ad:5d:29:d5:e6:6d:cf:60:79:b8: a2:45:fd:d7:85:19:f6:bc:51:d0:39:08:ad:89:c5:86:85:89: 07:a9:9f:6b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fr1bDlKK0Q994LqdmdJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTc4MzkzODQ5ZGZiNTlhNWJlNjRkNzFlYWI2ZWIwN2M1Mzk1Y2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSvxT5dzUUPk0ghqLdOyLfnscI92 8EAb09+jdEKlH9cAl2JZl5TAChJnc/cBB7CfLo8+j/9tGFtyE+Ryx2ewUi1GooQJ YtO3b3Pg/yPYxAsttL00cZwsOvqwnMQvFz5iODovg255cstjxwDPVIReTGVvP1Hd mEO8yywKXDYRFRuBbBsM/eOPjuM4R1ZzjuKyofnUkot+SuU+sFzHDobW58qHdunE N/Casp6y0AYJZK3RTs14mvFxCVDcKU6ZHhLblWzAGthEYo2yhGvyhnNYdqlSy4Wu SVDWv8mtAbOMjauinEz9aOzcFV7NBqOuvwTyHQK4C5bHh/AQ9L6taxuPVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNl4OThJ37WaW+ZNceq26wfFOVytMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvMlhnNU9FbmZ0WnBiNWsxeDZyYnJCOFU1WEswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Hw MA0GCSqGSIb3DQEBCwUAA4IBAQAlDXJzDf7NYdG7Arh1SsTbBm66CQU8dvFy6F7H 7cw1m2HGVHuAvztXXa20joTw5qOGAr/dTMHVl03NeXGqhgZFbek9R9eVqybsfMgc nIsXGWTFmsbaZbAdEklm23wlaAV/Pq0YWkAZn2osDnhSlS46H/h4dMvA06kBlQyc VHBl+dhMajLUMJf+xJC4KOuZY/hsBpXnppDR090Kuht5HW6Wz4dgpC+YxqsSn8t4 8kNyLUA1s+ZZhvrXQ5oPd/YUvBVmRVCG4AMmS4Kmwr/C3NGpQz4a+F836ZGpAkyh Tx6Tbq1dKdXmbc9gebiiRf3XhRn2vFHQOQiticWGhYkHqZ9r -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:05 2026 by rpki-client