This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2cz7o77UtDBborV87pIlpyuojPI.roa File: 2cz7o77UtDBborV87pIlpyuojPI.roa (raw, json) Hash identifier: eq6kXAaa74ngA5wIE6RDSsmR+Dl6o9wS0UGCb9/GB9A= Subject key identifier: D9:CC:FB:A3:BE:D4:B4:30:5B:A2:B5:7C:EE:92:25:A7:2B:A8:8C:F2 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1C480826C03BDFC9AA12AA6FD5F75 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2cz7o77UtDBborV87pIlpyuojPI.roa Signing time: Fri 02 Jan 2026 18:21:49 +0000 ROA not before: Fri 02 Jan 2026 18:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205544 IP address blocks: 2a09:17c0:b19a::/48 maxlen: 48 2a0e:1a83:88::/48 maxlen: 48 2a0f:1206:77::/48 maxlen: 48 2a0f:1540::/29 maxlen: 29 2a0f:1640::/29 maxlen: 29 2a0f:1940::/29 maxlen: 29 2a0f:2840::/29 maxlen: 29 2a0f:2940::/29 maxlen: 29 2a0f:2a40::/29 maxlen: 29 2a0f:2dc0::/29 maxlen: 29 2a0f:2e40::/29 maxlen: 29 2a0f:30c0::/29 maxlen: 29 2a0f:3140::/29 maxlen: 29 2a0f:3540::/29 maxlen: 29 2a0f:3740::/29 maxlen: 29 2a0f:bc02::/32 maxlen: 32 2a0f:e1c0:3::/48 maxlen: 48 2a0f:e1c7:100::/48 maxlen: 48 2a0f:e200:5::/48 maxlen: 48 2a0f:e202:97::/48 maxlen: 48 2a0f:e440::/29 maxlen: 29 2a0f:ea40:8::/48 maxlen: 48 2a0f:ea44:88::/48 maxlen: 48 2a11:3240::/29 maxlen: 29 2a11:4800::/29 maxlen: 29 2a11:8700::/29 maxlen: 29 2a11:e580::/29 maxlen: 29 2a12:3f00::/29 maxlen: 29 2a12:4b00::/29 maxlen: 29 2a12:5900::/29 maxlen: 29 2a12:cd00::/29 maxlen: 29 2a12:ecc0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c4:80:82:6c:03:bd:fc:9a:a1:2a:a6:fd:5f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9ccfba3bed4b4305ba2b57cee9225a72ba88cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:d1:f0:02:7c:38:61:8c:fc:6d:2e:e4:d3: 85:e3:00:07:d7:de:39:04:6b:cf:b5:67:a8:a7:93: 8a:9e:b0:47:62:3c:0a:80:f5:6d:0d:d0:4b:1f:d5: 77:f5:ad:03:67:70:69:1d:18:30:43:15:2e:04:9d: b4:b7:db:b2:7a:5d:06:eb:db:88:b4:23:16:4e:ce: fe:a1:b1:7c:e1:48:31:1e:08:11:f4:4c:f2:3f:a9: 9e:07:91:7f:b3:2b:27:ce:11:33:98:70:2d:4b:fc: e7:26:86:9d:fa:86:c8:3a:26:0a:0c:50:64:45:f3: 3c:ee:17:50:88:e8:ec:c8:f3:3d:d1:ed:cf:30:3a: d2:af:e0:58:4f:ee:89:5c:df:34:ed:09:7a:63:15: 99:0b:d1:33:57:b6:54:ac:da:3a:f0:c1:9d:52:7f: 5e:12:2c:5a:2c:1f:cf:4f:41:0c:ac:a9:71:d5:a8: 51:56:80:90:cb:50:16:b8:f4:10:06:34:bf:64:61: 9a:29:c0:5d:6f:dd:11:35:eb:95:10:45:a4:f9:50: 7c:b5:12:3d:82:8b:4c:df:21:e7:db:7e:ae:71:d3: 57:07:db:70:17:82:a5:93:70:26:81:a0:94:95:49: 0e:b4:56:e9:9e:6a:6c:06:f4:07:0e:25:54:97:d6: 09:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CC:FB:A3:BE:D4:B4:30:5B:A2:B5:7C:EE:92:25:A7:2B:A8:8C:F2 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2cz7o77UtDBborV87pIlpyuojPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:17c0:b19a::/48 2a0e:1a83:88::/48 2a0f:1206:77::/48 2a0f:1540::/29 2a0f:1640::/29 2a0f:1940::/29 2a0f:2840::/29 2a0f:2940::/29 2a0f:2a40::/29 2a0f:2dc0::/29 2a0f:2e40::/29 2a0f:30c0::/29 2a0f:3140::/29 2a0f:3540::/29 2a0f:3740::/29 2a0f:bc02::/32 2a0f:e1c0:3::/48 2a0f:e1c7:100::/48 2a0f:e200:5::/48 2a0f:e202:97::/48 2a0f:e440::/29 2a0f:ea40:8::/48 2a0f:ea44:88::/48 2a11:3240::/29 2a11:4800::/29 2a11:8700::/29 2a11:e580::/29 2a12:3f00::/29 2a12:4b00::/29 2a12:5900::/29 2a12:cd00::/29 2a12:ecc0:3::/48 Signature Algorithm: sha256WithRSAEncryption 4f:f0:b5:6e:d8:43:6c:74:54:6e:7b:49:da:f4:88:1d:bb:95: 62:0c:d8:f4:5d:da:c7:a6:af:16:c0:13:57:7a:8b:b8:25:e5: 67:94:c3:c4:6a:2b:b1:ed:82:dd:13:c6:ed:f8:74:61:3c:f3: ed:59:1f:96:d0:1f:af:2c:f7:61:87:7c:5b:e4:2b:31:45:2c: c9:8d:ab:2f:48:2f:24:73:6d:66:08:7b:78:f3:82:b7:cc:f7: 00:21:90:a9:59:7a:b1:2a:69:e8:ea:7c:f3:63:e4:7c:c4:7f: d1:a8:df:62:db:b3:58:17:6a:59:5c:4f:a1:75:09:a7:7d:f4: 15:06:db:e6:08:9d:42:18:ff:78:e4:31:7f:d1:c0:c1:17:10: 63:5e:2e:51:6e:dd:cd:f0:6f:19:d4:73:01:77:75:0d:46:bf: 8e:0b:56:8a:a9:21:e8:28:a0:30:f8:03:2e:02:cd:fc:c3:37: 1c:19:19:1b:d0:58:1e:45:da:42:17:37:c8:99:3e:12:8a:43: be:83:71:d7:98:e5:e5:ce:4a:02:0d:9e:a2:9d:cd:0a:2d:17: bb:65:74:34:ab:40:43:fc:b1:5b:b2:30:fc:00:69:0f:83:3c: b3:d3:6f:e2:8a:14:97:9d:22:d3:3f:c7:5e:42:34:d3:58:9c: d1:4b:b7:e5 -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISAZt/8cSAgmwDvfyaoSqm/V91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWNjZmJhM2JlZDRiNDMwNWJhMmI1N2NlZTkyMjVhNzJiYTg4Y2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcDR8AJ8OGGM/G0u5NOF4wAH1945 BGvPtWeop5OKnrBHYjwKgPVtDdBLH9V39a0DZ3BpHRgwQxUuBJ20t9uyel0G69uI tCMWTs7+obF84UgxHggR9EzyP6meB5F/sysnzhEzmHAtS/znJoad+obIOiYKDFBk RfM87hdQiOjsyPM90e3PMDrSr+BYT+6JXN807Ql6YxWZC9EzV7ZUrNo68MGdUn9e EixaLB/PT0EMrKlx1ahRVoCQy1AWuPQQBjS/ZGGaKcBdb90RNeuVEEWk+VB8tRI9 gotM3yHn236ucdNXB9twF4Klk3AmgaCUlUkOtFbpnmpsBvQHDiVUl9YJkQIDAQAB o4IC/jCCAvowHQYDVR0OBBYEFNnM+6O+1LQwW6K1fO6SJacrqIzyMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvMmN6N283N1V0REJib3JWODdwSWxweXVvalBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIH7BAIAAjCB9AMH ACoJF8CxmgMHACoOGoMAiAMHACoPEgYAdwMFAyoPFUADBQMqDxZAAwUDKg8ZQAMF AyoPKEADBQMqDylAAwUDKg8qQAMFAyoPLcADBQMqDy5AAwUDKg8wwAMFAyoPMUAD BQMqDzVAAwUDKg83QAMFACoPvAIDBwAqD+HAAAMDBwAqD+HHAQADBwAqD+IAAAUD BwAqD+ICAJcDBQMqD+RAAwcAKg/qQAAIAwcAKg/qRACIAwUDKhEyQAMFAyoRSAAD BQMqEYcAAwUDKhHlgAMFAyoSPwADBQMqEksAAwUDKhJZAAMFAyoSzQADBwAqEuzA AAMwDQYJKoZIhvcNAQELBQADggEBAE/wtW7YQ2x0VG57Sdr0iB27lWIM2PRd2sem rxbAE1d6i7gl5WeUw8RqK7Htgt0Txu34dGE88+1ZH5bQH68s92GHfFvkKzFFLMmN qy9ILyRzbWYIe3jzgrfM9wAhkKlZerEqaejqfPNj5HzEf9Go32Lbs1gXallcT6F1 Cad99BUG2+YInUIY/3jkMX/RwMEXEGNeLlFu3c3wbxnUcwF3dQ1Gv44LVoqpIego oDD4Ay4CzfzDNxwZGRvQWB5F2kIXN8iZPhKKQ76DcdeY5eXOSgINnqKdzQotF7tl dDSrQEP8sVuyMPwAaQ+DPLPTb+KKFJedItM/x15CNNNYnNFLt+U= -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:25 2026 by rpki-client