This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/X2dDxuQy5C2iRkWsBYanoWzzFBA.roa File: X2dDxuQy5C2iRkWsBYanoWzzFBA.roa (raw, json) Hash identifier: BH0EGwq9/zGZL3BbgmxWs2ULLI0cGkQKECrJ00Vi4nI= Subject key identifier: 5F:67:43:C6:E4:32:E4:2D:A2:46:45:AC:05:86:A7:A1:6C:F3:14:10 Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6 Certificate serial: 019B7EA4F2FC2424E5DAFE8E46A2547F8E53 Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/X2dDxuQy5C2iRkWsBYanoWzzFBA.roa Signing time: Fri 02 Jan 2026 12:18:17 +0000 ROA not before: Fri 02 Jan 2026 12:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203269 IP address blocks: 2001:67c:428::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f2:fc:24:24:e5:da:fe:8e:46:a2:54:7f:8e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6 Validity Not Before: Jan 2 12:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f6743c6e432e42da24645ac0586a7a16cf31410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:25:90:32:2b:3f:82:a0:6b:1b:5c:33:16:9a: 8e:e4:9b:a7:c2:f4:83:63:50:70:60:8b:71:ac:ad: 7d:5b:2a:89:a0:ad:33:d9:87:85:d8:c7:ba:9a:86: c7:a9:34:b1:3a:68:cd:fd:98:bf:d8:b4:8c:0b:5b: bf:4f:60:0d:be:b4:b1:5e:ad:68:1c:49:da:0a:70: e3:4b:d4:8a:19:66:e8:fa:e9:fa:e9:9a:22:2d:96: eb:cf:bc:82:8d:8a:90:e8:59:34:fe:e7:08:fc:80: 61:f4:3f:19:0b:57:84:00:15:3a:33:0d:89:42:b6: a7:af:54:38:7e:82:c7:b2:98:ee:1f:78:75:59:c3: 2f:88:e3:80:51:0e:20:e1:b0:a8:dc:b8:21:09:16: 8c:97:9a:79:93:67:60:1e:37:1a:57:97:59:07:01: e7:67:e6:c8:de:b9:ca:99:44:e4:1c:09:7d:0b:d7: 22:d4:11:13:d7:c0:64:6b:61:fa:1b:de:f2:4f:ef: c1:13:da:3e:76:fb:95:1c:2f:2a:77:06:15:e5:d4: 2b:0f:f9:9e:8e:db:a4:64:31:05:14:a7:13:8d:36: 8e:30:e1:d8:86:7f:60:02:0c:af:97:19:a1:30:36: 28:73:92:ab:52:37:ee:80:1d:7c:f6:85:1b:0a:1e: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:67:43:C6:E4:32:E4:2D:A2:46:45:AC:05:86:A7:A1:6C:F3:14:10 X509v3 Authority Key Identifier: keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/X2dDxuQy5C2iRkWsBYanoWzzFBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:428::/48 Signature Algorithm: sha256WithRSAEncryption 8b:61:5e:34:74:f0:2a:e5:03:f2:6f:b3:51:c4:aa:ba:d4:99: 1f:f4:05:78:32:9a:a9:8f:80:31:19:35:dd:01:29:ce:99:03: f2:e9:04:5f:1a:cc:b7:35:85:eb:fd:24:5d:27:30:2c:b5:78: cc:ec:55:55:40:f1:03:d0:fd:a6:3d:6e:20:73:45:11:dc:f6: 36:5a:b5:5d:bd:ff:5c:a3:6f:8c:a8:34:4a:cb:74:7b:a8:68: 69:0b:71:0c:08:49:83:45:6f:24:ee:69:d8:11:89:e7:23:8a: 8f:a6:d3:24:ec:dc:ee:27:67:9c:a1:46:8a:3d:1e:6a:ea:15: 0b:22:59:ed:a3:e3:59:23:1f:11:85:6b:dd:2b:8b:7e:86:05: 1b:7e:4e:fe:a0:bc:6a:d6:2f:5f:bc:84:6f:29:b4:2d:61:6f: b4:0b:dd:fe:b4:0a:f9:e1:63:24:e3:61:9e:99:12:87:64:b4: eb:e2:d2:56:64:fd:a5:f7:90:bf:27:67:12:a4:0c:e9:35:48: 55:6f:dd:06:ad:87:4c:d2:6b:f9:66:52:16:a0:99:31:1d:91: 20:89:fb:cb:7f:88:26:e1:c4:2f:b6:3b:65:0c:76:43:37:60: 8f:e6:8b:6c:fd:96:ea:56:d9:96:63:ea:26:b4:a8:91:ad:da: 8b:8d:8f:5d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pPL8JCTl2v6ORqJUf45TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MDhlMDRmZDdiZjgxYjY3NWRjYmU3YjI5YWEyNjNjOTEy MDc4YjYwHhcNMjYwMTAyMTIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjY3NDNjNmU0MzJlNDJkYTI0NjQ1YWMwNTg2YTdhMTZjZjMxNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiWQMis/gqBrG1wzFpqO5JunwvSD Y1BwYItxrK19WyqJoK0z2YeF2Me6mobHqTSxOmjN/Zi/2LSMC1u/T2ANvrSxXq1o HEnaCnDjS9SKGWbo+un66ZoiLZbrz7yCjYqQ6Fk0/ucI/IBh9D8ZC1eEABU6Mw2J Qranr1Q4foLHspjuH3h1WcMviOOAUQ4g4bCo3LghCRaMl5p5k2dgHjcaV5dZBwHn Z+bI3rnKmUTkHAl9C9ci1BET18Bka2H6G97yT+/BE9o+dvuVHC8qdwYV5dQrD/me jtukZDEFFKcTjTaOMOHYhn9gAgyvlxmhMDYoc5KrUjfugB189oUbCh6aPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF9nQ8bkMuQtokZFrAWGp6Fs8xQQMB8GA1UdIwQY MBaAFDcI4E/Xv4G2ddy+eymqJjyRIHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMmZjZmEtN2RjMS00MjAwLTg5OWUt YmM0OTNkNWNiYjVjLzEvWDJkRHh1UXk1QzJpUmtXc0JZYW5vV3p6RkJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMmZjZmEtN2RjMS00MjAwLTg5OWUtYmM0OTNkNWNiYjVj LzEvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAQo MA0GCSqGSIb3DQEBCwUAA4IBAQCLYV40dPAq5QPyb7NRxKq61Jkf9AV4Mpqpj4Ax GTXdASnOmQPy6QRfGsy3NYXr/SRdJzAstXjM7FVVQPED0P2mPW4gc0UR3PY2WrVd vf9co2+MqDRKy3R7qGhpC3EMCEmDRW8k7mnYEYnnI4qPptMk7NzuJ2ecoUaKPR5q 6hULIlnto+NZIx8RhWvdK4t+hgUbfk7+oLxq1i9fvIRvKbQtYW+0C93+tAr54WMk 42GemRKHZLTr4tJWZP2l95C/J2cSpAzpNUhVb90GrYdM0mv5ZlIWoJkxHZEgifvL f4gm4cQvtjtlDHZDN2CP5ots/ZbqVtmWY+omtKiRrdqLjY9d -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:45 2026 by rpki-client