This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/D2cBu8ZL9n7QZOPtLn9hkQAh-lo.roa File: D2cBu8ZL9n7QZOPtLn9hkQAh-lo.roa (raw, json) Hash identifier: C/dFvopoiiGXLPDlyfk2zWPc6+szhE9C8P71xtijMwA= Subject key identifier: 0F:67:01:BB:C6:4B:F6:7E:D0:64:E3:ED:2E:7F:61:91:00:21:FA:5A Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1AEEFA07AF0C010AC975B96D5D756 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/D2cBu8ZL9n7QZOPtLn9hkQAh-lo.roa Signing time: Fri 02 Jan 2026 18:21:43 +0000 ROA not before: Fri 02 Jan 2026 18:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34665 IP address blocks: 2a0f:31c5::/32 maxlen: 32 2a0f:7d05::/32 maxlen: 32 2a0f:dec0::/29 maxlen: 29 2a10:3440::/29 maxlen: 29 2a13:1480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ae:ef:a0:7a:f0:c0:10:ac:97:5b:96:d5:d7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f6701bbc64bf67ed064e3ed2e7f61910021fa5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:ac:9a:d4:a4:ef:c8:bb:8a:a6:ff:01:0d: aa:0d:bf:26:88:19:2c:56:0c:c2:80:f3:cb:33:e2: c8:c1:2b:66:bb:a7:c1:56:ea:6e:f4:1c:40:f5:a3: e9:30:b8:ae:e5:ea:2c:63:32:0c:ef:16:88:12:76: e2:a8:1b:91:33:c0:b7:46:78:fa:63:1c:67:f3:62: 0b:3b:c5:98:1f:57:ad:ed:37:fe:a6:43:ac:a1:1c: ae:9c:d3:d3:78:62:37:78:da:9c:0b:52:50:19:0e: 71:6a:a2:a8:03:39:74:32:a1:e6:53:f9:4e:f4:d1: bb:b8:f0:32:f2:16:db:cc:ff:d0:3e:98:97:0f:4e: c2:29:cf:b2:4a:a1:b2:cd:fd:21:3c:5a:ad:38:cc: d9:a5:b6:66:56:62:55:3e:1a:5f:b5:a5:c4:c4:f9: 9c:ed:41:f0:60:9d:e5:21:c3:db:56:a0:f0:42:f2: f0:f4:d6:5f:93:0d:1b:13:fe:8b:d8:2a:96:89:b9: e1:d9:fd:c7:99:95:50:f4:9e:66:b4:9a:e6:7c:cf: 1f:ef:92:fb:d1:00:77:c6:a0:ed:24:4f:0a:34:10: 83:c0:8d:99:d7:a5:59:a5:d9:74:8e:a4:bf:78:ab: 49:42:3f:e0:70:5f:51:60:17:6b:9e:90:04:10:4b: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:67:01:BB:C6:4B:F6:7E:D0:64:E3:ED:2E:7F:61:91:00:21:FA:5A X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/D2cBu8ZL9n7QZOPtLn9hkQAh-lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:31c5::/32 2a0f:7d05::/32 2a0f:dec0::/29 2a10:3440::/29 2a13:1480::/29 Signature Algorithm: sha256WithRSAEncryption 87:8e:b4:50:a8:76:71:f6:bb:f8:8c:32:f7:51:33:56:0d:5b: 3a:e1:28:d0:32:e9:3b:a4:f6:c3:7e:1e:34:29:2a:ea:55:29: 85:9c:90:61:37:3c:12:97:74:ca:8b:b0:a0:22:d1:99:f8:49: 7e:fe:a9:ec:7b:d1:5c:f6:fc:92:74:1f:99:ab:80:58:29:f8: c6:b4:a8:90:08:99:be:dc:b3:b6:a6:f3:03:9c:3d:bc:f8:2d: da:58:ce:d9:6b:c0:25:55:fb:65:14:40:32:06:b3:44:80:eb: 77:79:29:66:da:a3:d8:57:b7:25:66:ea:f3:a7:00:9a:56:c2: 03:f4:28:95:e8:4b:5c:ae:bd:6b:f9:5d:2e:3e:5c:8e:08:c1: 44:01:64:25:c2:ed:be:00:38:58:ac:ba:70:31:41:b9:ac:6b: 4d:62:5e:5c:c0:bd:ed:e3:29:6a:95:d8:2e:64:25:bc:c9:f4: 26:ff:4a:7b:f3:05:03:2f:f5:63:bb:16:8d:40:cb:92:9e:c1: 46:92:7c:4c:ae:a2:78:e0:96:96:56:a8:35:23:ed:00:08:81: cb:b8:35:b2:e6:26:5a:7a:a2:2c:49:85:72:db:c8:3f:af:94: 50:ba:a1:08:8a:45:f1:a5:aa:54:b6:8d:09:e7:84:d5:a8:f2: 2d:7a:12:7a -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/8a7voHrwwBCsl1uW1ddWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjY3MDFiYmM2NGJmNjdlZDA2NGUzZWQyZTdmNjE5MTAwMjFmYTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq2smtSk78i7iqb/AQ2qDb8miBks VgzCgPPLM+LIwStmu6fBVupu9BxA9aPpMLiu5eosYzIM7xaIEnbiqBuRM8C3Rnj6 Yxxn82ILO8WYH1et7Tf+pkOsoRyunNPTeGI3eNqcC1JQGQ5xaqKoAzl0MqHmU/lO 9NG7uPAy8hbbzP/QPpiXD07CKc+ySqGyzf0hPFqtOMzZpbZmVmJVPhpftaXExPmc 7UHwYJ3lIcPbVqDwQvLw9NZfkw0bE/6L2CqWibnh2f3HmZVQ9J5mtJrmfM8f75L7 0QB3xqDtJE8KNBCDwI2Z16VZpdl0jqS/eKtJQj/gcF9RYBdrnpAEEEuitwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFA9nAbvGS/Z+0GTj7S5/YZEAIfpaMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvRDJjQnU4Wkw5bjdRWk9QdExuOWhrUUFoLWxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUAKg8xxQMF ACoPfQUDBQMqD97AAwUDKhA0QAMFAyoTFIAwDQYJKoZIhvcNAQELBQADggEBAIeO tFCodnH2u/iMMvdRM1YNWzrhKNAy6Tuk9sN+HjQpKupVKYWckGE3PBKXdMqLsKAi 0Zn4SX7+qex70Vz2/JJ0H5mrgFgp+Ma0qJAImb7cs7am8wOcPbz4LdpYztlrwCVV +2UUQDIGs0SA63d5KWbao9hXtyVm6vOnAJpWwgP0KJXoS1yuvWv5XS4+XI4IwUQB ZCXC7b4AOFisunAxQbmsa01iXlzAve3jKWqV2C5kJbzJ9Cb/SnvzBQMv9WO7Fo1A y5KewUaSfEyuonjglpZWqDUj7QAIgcu4NbLmJlp6oixJhXLbyD+vlFC6oQiKRfGl qlS2jQnnhNWo8i16Eno= -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:51 2026 by rpki-client