This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/2dNlCcYTwuLwzsnBQLcW5azrUC0.roa File: 2dNlCcYTwuLwzsnBQLcW5azrUC0.roa (raw, json) Hash identifier: LdCokJaoTg0Ayv8WOg6znK8za4O+cYZSIl7zsI7HgqI= Subject key identifier: D9:D3:65:09:C6:13:C2:E2:F0:CE:C9:C1:40:B7:16:E5:AC:EB:50:2D Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792 Certificate serial: 019B7DCA3FB7C342B1B4A483588E0B561015 Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/2dNlCcYTwuLwzsnBQLcW5azrUC0.roa Signing time: Fri 02 Jan 2026 08:19:25 +0000 ROA not before: Fri 02 Jan 2026 08:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a10:20c7:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 17:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3f:b7:c3:42:b1:b4:a4:83:58:8e:0b:56:10:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62927b36b138f086358938e3acfda4638e56a792 Validity Not Before: Jan 2 08:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9d36509c613c2e2f0cec9c140b716e5aceb502d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:33:87:15:51:63:9f:0b:0c:43:c8:5a:74:78: 80:e4:fe:e1:26:f4:9a:c9:5b:cd:16:36:b9:12:39: 41:e5:5f:8f:29:a6:c3:78:88:25:ca:57:2c:83:a8: 28:94:7e:0c:d7:4b:d9:ac:a9:f6:61:48:9e:cd:e3: aa:b9:8a:39:f4:95:3d:c4:21:3d:66:b1:69:73:11: fb:d3:f0:bf:58:48:b4:b4:57:d4:06:2f:4d:d1:70: 80:02:d0:54:b7:57:da:66:04:d6:09:05:6e:19:29: 85:c0:43:f9:d0:82:12:fe:cf:b9:4b:e1:3e:ec:22: 7e:a2:73:35:58:19:36:42:95:36:50:35:76:a7:fb: d5:92:90:6e:a2:e1:0c:e2:19:b3:48:c8:c2:bc:1e: 1c:4f:7e:12:35:48:a8:95:8c:8d:50:bd:77:57:6c: f5:b5:78:43:9e:66:dc:56:f9:52:b5:5e:52:84:aa: 59:4b:3e:dd:17:b9:47:5c:3f:67:3c:9e:18:74:fd: 07:32:45:7f:d2:96:e9:94:84:74:32:7b:9d:cb:fb: be:bf:b3:06:6b:53:bf:42:d6:18:a9:7b:69:40:0b: 5d:ea:b8:3b:c1:2a:80:a2:91:ba:99:af:48:34:3a: 34:75:8b:ab:d3:ae:b5:c5:4d:31:ea:a1:3f:82:07: 88:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D3:65:09:C6:13:C2:E2:F0:CE:C9:C1:40:B7:16:E5:AC:EB:50:2D X509v3 Authority Key Identifier: keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/2dNlCcYTwuLwzsnBQLcW5azrUC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:20c7:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 94:17:72:81:e2:c1:87:ca:77:e9:4a:3f:6d:70:97:1e:52:a0: fa:a0:e0:02:73:18:54:7e:f7:3b:bd:5a:b8:f0:b3:ac:6c:46: c9:74:84:57:fc:88:d1:85:c6:24:03:de:60:e2:b3:05:7c:03: fe:7c:e1:9d:64:66:d2:12:65:46:59:f7:b9:51:51:b2:6b:c6: f9:db:bc:36:5c:be:02:05:85:21:43:a3:33:1e:62:46:6e:16: b6:c9:46:29:64:b5:ed:8a:6f:26:75:18:08:02:1a:50:ea:28: df:76:88:b7:cd:4c:2f:a6:66:97:54:36:d4:5c:6f:8f:d0:1a: ee:d6:b8:8e:83:b9:b1:ad:70:0b:87:76:6d:7c:0c:03:08:28: 36:25:e6:d7:e9:45:ae:38:d4:64:cd:60:b1:61:2b:54:6f:b8: 6f:a1:76:bc:b4:b4:e3:bc:5c:3b:e0:bc:3f:fa:29:15:c6:58: 2a:cf:0e:0d:bf:e9:d3:df:7f:2a:49:a1:f3:fa:10:16:2e:44: 6d:e4:32:96:d4:38:3b:7b:0d:cb:8c:79:da:cd:33:10:66:07: 16:a9:0d:57:42:b2:08:d9:75:ad:23:ca:2c:fb:c2:bd:88:6e: cf:84:48:5b:d6:07:72:90:87:8e:57:dc:31:5c:dd:38:92:0c: c0:78:79:c1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9yj+3w0KxtKSDWI4LVhAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOTI3YjM2YjEzOGYwODYzNTg5MzhlM2FjZmRhNDYzOGU1 NmE3OTIwHhcNMjYwMTAyMDgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWQzNjUwOWM2MTNjMmUyZjBjZWM5YzE0MGI3MTZlNWFjZWI1MDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjOHFVFjnwsMQ8hadHiA5P7hJvSa yVvNFja5EjlB5V+PKabDeIglylcsg6golH4M10vZrKn2YUiezeOquYo59JU9xCE9 ZrFpcxH70/C/WEi0tFfUBi9N0XCAAtBUt1faZgTWCQVuGSmFwEP50IIS/s+5S+E+ 7CJ+onM1WBk2QpU2UDV2p/vVkpBuouEM4hmzSMjCvB4cT34SNUiolYyNUL13V2z1 tXhDnmbcVvlStV5ShKpZSz7dF7lHXD9nPJ4YdP0HMkV/0pbplIR0Mnudy/u+v7MG a1O/QtYYqXtpQAtd6rg7wSqAopG6ma9INDo0dYur0661xU0x6qE/ggeIowIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNnTZQnGE8Li8M7JwUC3FuWs61AtMB8GA1UdIwQY MBaAFGKSezaxOPCGNYk446z9pGOOVqeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEt YTk5YzdlZTVjMjg0LzEvMmRObENjWVR3dUx3enNuQlFMY1c1YXpyVUMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEtYTk5YzdlZTVjMjg0 LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhAgx/8w DQYJKoZIhvcNAQELBQADggEBAJQXcoHiwYfKd+lKP21wlx5SoPqg4AJzGFR+9zu9 Wrjws6xsRsl0hFf8iNGFxiQD3mDiswV8A/584Z1kZtISZUZZ97lRUbJrxvnbvDZc vgIFhSFDozMeYkZuFrbJRilkte2KbyZ1GAgCGlDqKN92iLfNTC+mZpdUNtRcb4/Q Gu7WuI6DubGtcAuHdm18DAMIKDYl5tfpRa441GTNYLFhK1RvuG+hdry0tOO8XDvg vD/6KRXGWCrPDg2/6dPffypJofP6EBYuRG3kMpbUODt7DcuMedrNMxBmBxapDVdC sgjZda0jyiz7wr2Ibs+ESFvWB3KQh45X3DFc3TiSDMB4ecE= -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:53 2026 by rpki-client