This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/2E1p8fabJ0AaZVQtK27is72W3zA.roa File: 2E1p8fabJ0AaZVQtK27is72W3zA.roa (raw, json) Hash identifier: seOc2odI/aAB9kmMiUcr+Fn5jR9zKFiFx7mITmVnxdg= Subject key identifier: D8:4D:69:F1:F6:9B:27:40:1A:65:54:2D:2B:6E:E2:B3:BD:96:DF:30 Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5 Certificate serial: 019B7D5CCE5E175C61FF3B3DE13772294731 Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/2E1p8fabJ0AaZVQtK27is72W3zA.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196939 IP address blocks: 2a01:4a60:ffbf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ce:5e:17:5c:61:ff:3b:3d:e1:37:72:29:47:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854c8176d9c42c704b310913309470351bb599e5 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d84d69f1f69b27401a65542d2b6ee2b3bd96df30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:6e:6c:b7:3b:4d:6c:63:4e:e3:43:6c:46: d6:10:c6:c7:db:45:b2:72:92:1e:ee:18:9e:4d:89: fa:2d:f1:6a:70:3e:a9:9d:86:e0:49:0e:cf:35:7d: fb:3e:78:f3:f3:3c:80:87:a5:c1:8d:f3:62:f8:e1: a0:0d:a0:b4:52:a9:c0:87:c9:7a:9c:a0:66:4c:f3: 0b:07:40:22:37:d7:03:0d:60:e7:2d:76:51:b3:9a: f1:77:43:4a:e1:00:30:de:6a:3a:ff:77:70:aa:13: 0f:79:1a:8a:bb:21:72:4f:8a:26:6b:28:7b:18:6d: 7f:f9:36:7b:bb:5c:12:06:49:17:bb:3d:c9:ea:6e: 9d:7d:cd:d3:bf:ed:57:b7:9c:f6:98:8f:fb:75:20: 40:99:49:43:3c:d7:2a:dd:92:39:de:4c:db:df:13: f7:f2:03:00:0d:e8:ca:fc:ca:9b:cd:fa:0a:93:ce: 07:f7:32:a7:b5:0e:60:42:b9:b6:89:14:1d:e0:9d: 7d:5d:80:31:c4:70:1f:ba:d4:ba:c9:3a:2d:12:fd: 77:05:8a:3f:09:3d:bb:a6:4b:80:fb:52:b3:11:1d: 01:66:3a:83:36:e7:19:fd:34:2f:9e:2e:4d:21:21: fb:21:b0:23:f4:14:ae:82:25:3e:1c:f1:25:af:af: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4D:69:F1:F6:9B:27:40:1A:65:54:2D:2B:6E:E2:B3:BD:96:DF:30 X509v3 Authority Key Identifier: keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/2E1p8fabJ0AaZVQtK27is72W3zA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:4a60:ffbf::/48 Signature Algorithm: sha256WithRSAEncryption 19:4f:60:99:1d:17:87:c0:b2:e7:d7:a5:ac:2d:54:01:51:75: ff:9c:7e:f2:2f:dd:3b:c1:6e:8f:00:c0:27:3a:52:b0:37:a1: 44:eb:58:78:75:cb:64:3b:ed:38:73:b3:9e:97:e0:8c:3f:9b: 27:89:f1:6d:03:f5:90:01:53:d1:82:dc:41:9e:49:14:fa:16: bf:a3:b2:68:69:df:1f:0f:10:a3:f6:e2:3c:85:e0:27:59:04: 69:c6:bf:0a:cd:0f:74:66:e7:ef:bb:1a:d4:98:17:0d:9c:14: 7e:43:08:07:fe:76:19:44:0c:0c:c2:c3:2a:1a:84:a5:2d:d4: 19:2f:f8:ac:84:f0:b4:f4:70:56:09:c1:3f:b8:e5:9a:73:2d: bc:60:db:b4:bb:41:10:25:d8:6f:81:b0:87:53:b1:e5:ae:18: 90:16:2b:f3:ca:c4:6e:de:dc:07:7d:6e:bd:c0:f1:2d:7e:92: 37:80:d0:71:17:75:03:03:4e:c3:52:5d:e0:e3:20:eb:50:24: ff:17:76:6d:65:86:e1:7f:3c:9b:08:ff:ee:34:e4:1f:93:fe: 3d:aa:93:11:25:20:5c:c6:99:33:96:4a:59:c1:af:ee:26:6d: 76:e9:d5:23:e4:1e:0d:92:cd:3c:99:39:1d:3f:84:c2:7e:c2: 5f:6e:55:1f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XM5eF1xh/zs94TdyKUcxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGM4MTc2ZDljNDJjNzA0YjMxMDkxMzMwOTQ3MDM1MWJi NTk5ZTUwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODRkNjlmMWY2OWIyNzQwMWE2NTU0MmQyYjZlZTJiM2JkOTZkZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t9ubLc7TWxjTuNDbEbWEMbH20Wy cpIe7hieTYn6LfFqcD6pnYbgSQ7PNX37Pnjz8zyAh6XBjfNi+OGgDaC0UqnAh8l6 nKBmTPMLB0AiN9cDDWDnLXZRs5rxd0NK4QAw3mo6/3dwqhMPeRqKuyFyT4omayh7 GG1/+TZ7u1wSBkkXuz3J6m6dfc3Tv+1Xt5z2mI/7dSBAmUlDPNcq3ZI53kzb3xP3 8gMADejK/MqbzfoKk84H9zKntQ5gQrm2iRQd4J19XYAxxHAfutS6yTotEv13BYo/ CT27pkuA+1KzER0BZjqDNucZ/TQvni5NISH7IbAj9BSugiU+HPElr6//SQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNhNafH2mydAGmVULStu4rO9lt8wMB8GA1UdIwQY MBaAFIVMgXbZxCxwSzEJEzCUcDUbtZnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjkt YjA3ZjAxNmExNzYyLzEvMkUxcDhmYWJKMEFhWlZRdEsyN2lzNzJXM3pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjktYjA3ZjAxNmExNzYy LzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgFKYP+/ MA0GCSqGSIb3DQEBCwUAA4IBAQAZT2CZHReHwLLn16WsLVQBUXX/nH7yL907wW6P AMAnOlKwN6FE61h4dctkO+04c7Oel+CMP5snifFtA/WQAVPRgtxBnkkU+ha/o7Jo ad8fDxCj9uI8heAnWQRpxr8KzQ90ZufvuxrUmBcNnBR+QwgH/nYZRAwMwsMqGoSl LdQZL/ishPC09HBWCcE/uOWacy28YNu0u0EQJdhvgbCHU7HlrhiQFivzysRu3twH fW69wPEtfpI3gNBxF3UDA07DUl3g4yDrUCT/F3ZtZYbhfzybCP/uNOQfk/49qpMR JSBcxpkzlkpZwa/uJm126dUj5B4Nks08mTkdP4TCfsJfblUf -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:28 2026 by rpki-client