This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/z2WbFotJlc5p1cMGvSPUFFihXt0.roa File: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (raw, json) Hash identifier: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0= Subject key identifier: CF:65:9B:16:8B:49:95:CE:69:D5:C3:06:BD:23:D4:14:58:A1:5E:DD Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865 Certificate serial: 019BE79CC7E7F845F4EB017123FB4089CD21 Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/z2WbFotJlc5p1cMGvSPUFFihXt0.roa Signing time: Thu 22 Jan 2026 21:29:30 +0000 ROA not before: Thu 22 Jan 2026 21:29:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214598 IP address blocks: 2a00:4ac0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 00:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e7:9c:c7:e7:f8:45:f4:eb:01:71:23:fb:40:89:cd:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b588e466009520562061bef65b7f48298289865 Validity Not Before: Jan 22 21:29:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf659b168b4995ce69d5c306bd23d41458a15edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:75:05:a1:db:d9:b0:75:00:f1:b6:c5:34: e0:cf:31:e5:ff:02:bd:6d:df:8f:f4:6f:63:2d:89: 51:f8:dc:17:4c:90:31:37:28:43:1b:d0:17:e9:84: 83:00:b8:e2:78:5f:5d:3a:29:e4:e8:44:b1:fc:6a: 3d:51:ac:19:2c:5b:35:49:3d:af:4a:d4:7c:68:1b: 34:90:18:4b:21:b3:1a:da:36:22:f1:14:97:7e:2c: 76:d8:c4:e7:07:44:9a:80:8f:d4:0d:77:e3:ae:37: e0:c5:3e:14:1a:55:67:c0:5a:1f:47:1e:89:92:14: 33:8f:de:68:c1:3e:57:f2:72:5f:45:4d:aa:5c:48: 75:73:a4:8d:aa:46:1e:2a:c0:04:78:f0:a8:b6:63: b9:5d:e4:ed:a6:46:11:6b:a3:cd:b6:2e:7a:2a:73: 33:b2:89:24:41:68:bd:63:f9:29:73:80:d9:bb:e1: 26:d6:f4:06:63:cd:71:31:3d:26:c5:13:72:8d:0d: f6:e3:ac:e1:c2:61:b4:e2:05:60:f5:af:58:05:1a: a6:96:63:64:4e:9f:58:1c:07:f6:e2:c3:ae:0e:6b: 20:52:67:d8:7b:bb:f0:26:26:ad:63:9b:1f:fd:2a: a8:00:90:05:73:60:3b:b0:3f:79:2b:12:08:54:6a: 47:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:65:9B:16:8B:49:95:CE:69:D5:C3:06:BD:23:D4:14:58:A1:5E:DD X509v3 Authority Key Identifier: keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/z2WbFotJlc5p1cMGvSPUFFihXt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:4ac0::/29 Signature Algorithm: sha256WithRSAEncryption ab:1b:72:15:b9:79:a5:83:62:d8:d1:cc:ee:96:67:74:51:0e: 54:40:22:42:22:89:7e:42:cd:2b:48:db:6d:a8:4c:f1:f5:7a: 5c:e8:31:08:f5:8c:17:d9:62:6b:1c:c4:83:97:06:de:6b:cb: bb:f8:17:91:6e:5f:a6:e7:f3:bd:45:b0:03:b6:b5:a9:ab:af: db:c3:a8:2d:be:58:5e:ae:77:c7:08:27:2b:2c:c7:93:e9:e6: 64:d8:49:fa:1b:88:aa:87:f8:5d:c2:ea:8e:c0:db:3d:87:82: 4e:21:0f:9c:0f:8a:ed:78:2f:55:8d:1a:37:20:55:fc:08:15: 4c:2f:29:ef:ad:85:74:76:8b:fb:8e:3b:d2:41:6d:cb:27:3b: b0:3c:29:f4:1c:3b:0f:53:cd:17:56:31:dd:5e:d6:04:74:b6: 51:e6:9a:12:50:65:22:a3:82:3b:fd:da:6d:d0:53:f3:eb:1a: d1:cf:b9:03:5e:21:79:fe:d9:78:3e:84:6d:6a:05:30:40:f7: 60:f9:38:56:a7:c8:39:7a:b0:44:ef:cd:25:2c:40:da:fb:db: a1:d0:c0:1e:96:8f:1f:49:9f:8e:ee:4f:76:78:1c:60:b2:04: 11:31:e5:46:89:98:f1:03:69:6e:ff:53:a8:a4:f3:30:37:7a: 72:c0:19:e0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZvnnMfn+EX06wFxI/tAic0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNTg4ZTQ2NjAwOTUyMDU2MjA2MWJlZjY1YjdmNDgyOTgy ODk4NjUwHhcNMjYwMTIyMjEyOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjY1OWIxNjhiNDk5NWNlNjlkNWMzMDZiZDIzZDQxNDU4YTE1ZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vh1BaHb2bB1APG2xTTgzzHl/wK9 bd+P9G9jLYlR+NwXTJAxNyhDG9AX6YSDALjieF9dOink6ESx/Go9UawZLFs1ST2v StR8aBs0kBhLIbMa2jYi8RSXfix22MTnB0SagI/UDXfjrjfgxT4UGlVnwFofRx6J khQzj95owT5X8nJfRU2qXEh1c6SNqkYeKsAEePCotmO5XeTtpkYRa6PNti56KnMz sokkQWi9Y/kpc4DZu+Em1vQGY81xMT0mxRNyjQ3246zhwmG04gVg9a9YBRqmlmNk Tp9YHAf24sOuDmsgUmfYe7vwJiatY5sf/SqoAJAFc2A7sD95KxIIVGpHTwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFM9lmxaLSZXOadXDBr0j1BRYoV7dMB8GA1UdIwQY MBaAFCtYjkZgCVIFYgYb72W39IKYKJhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzFpT1JtQUpVZ1ZpQmh2dlpiZjBncGdvbUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zNzVmMTYtNmFlZS00NjJhLWE2Zjgt Y2NhZmI4MjQ3M2E1LzEvejJXYkZvdEpsYzVwMWNNR3ZTUFVGRmloWHQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8zNzVmMTYtNmFlZS00NjJhLWE2ZjgtY2NhZmI4MjQ3M2E1 LzEvSzFpT1JtQUpVZ1ZpQmh2dlpiZjBncGdvbUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgBKwDAN BgkqhkiG9w0BAQsFAAOCAQEAqxtyFbl5pYNi2NHM7pZndFEOVEAiQiKJfkLNK0jb bahM8fV6XOgxCPWMF9liaxzEg5cG3mvLu/gXkW5fpufzvUWwA7a1qauv28OoLb5Y Xq53xwgnKyzHk+nmZNhJ+huIqof4XcLqjsDbPYeCTiEPnA+K7XgvVY0aNyBV/AgV TC8p762FdHaL+4470kFtyyc7sDwp9Bw7D1PNF1Yx3V7WBHS2UeaaElBlIqOCO/3a bdBT8+sa0c+5A14hef7ZeD6EbWoFMED3YPk4VqfIOXqwRO/NJSxA2vvbodDAHpaP H0mfju5PdngcYLIEETHlRomY8QNpbv9TqKTzMDd6csAZ4A== -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:22 2026 by rpki-client