This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/z2vW7tiYOyrD-jbrKE2AFi-xwqc.roa File: z2vW7tiYOyrD-jbrKE2AFi-xwqc.roa (raw, json) Hash identifier: QRZcJvpK6Wvq3nCgJSFwXPW7yw+NhY5x3R0Yau7Lprw= Subject key identifier: CF:6B:D6:EE:D8:98:3B:2A:C3:FA:36:EB:28:4D:80:16:2F:B1:C2:A7 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E389CACBB3C067325EAA60C97C14F7B Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/z2vW7tiYOyrD-jbrKE2AFi-xwqc.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34663 IP address blocks: 2a04:9a01:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9c:ac:bb:3c:06:73:25:ea:a6:0c:97:c1:4f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf6bd6eed8983b2ac3fa36eb284d80162fb1c2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e4:6b:5a:4a:90:08:0b:8a:9d:01:a1:f3:0e: 01:77:67:3e:3f:20:50:9f:a6:c5:bd:ce:6f:bf:97: 1d:eb:d0:17:08:ce:d2:8b:f3:f5:4c:26:47:af:b0: 50:ce:f5:5f:fc:98:2a:42:39:15:1d:f8:0b:b2:a9: 21:d0:2e:41:27:18:92:a8:29:cf:43:23:18:75:79: 08:8d:a0:0d:f9:5f:34:91:f9:78:09:02:9a:e1:52: d3:12:42:ae:78:18:ba:f3:2d:88:23:1e:0c:39:2c: 9f:35:16:a9:1a:a3:70:4c:00:5e:79:e1:bc:82:a8: 15:dc:1f:a6:91:94:cc:d3:d5:20:2a:c3:f3:19:6f: ac:b4:08:9a:14:5d:6f:46:d1:dd:ef:2e:87:36:5a: 49:96:5f:12:2a:b2:fd:52:0d:02:0b:7d:6f:86:56: 18:f0:87:fc:59:62:bc:65:74:9f:ab:e9:e2:51:49: d8:a8:5f:4a:b1:e5:3e:7a:93:64:ae:05:e3:4b:fd: 0e:53:81:79:db:99:cc:b5:68:5a:63:0a:5f:d9:f2: 18:92:30:dc:b9:7a:eb:18:3a:8b:30:15:6e:e6:74: 91:97:80:bd:42:d3:5a:27:b0:05:b9:13:72:6c:80: ab:1b:ba:5c:53:92:87:f8:03:02:ed:e9:25:d7:ae: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6B:D6:EE:D8:98:3B:2A:C3:FA:36:EB:28:4D:80:16:2F:B1:C2:A7 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/z2vW7tiYOyrD-jbrKE2AFi-xwqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9a01:1000::/36 Signature Algorithm: sha256WithRSAEncryption 37:29:43:7f:af:67:ce:f4:6b:ed:f8:0c:d1:76:2f:8d:38:33: 24:54:f9:e9:8a:e7:cc:c7:91:40:4b:6c:56:6a:9c:f5:9b:e4: 69:07:0b:d4:08:89:98:a0:a8:c3:3a:42:06:10:fb:7a:ee:f4: a2:4f:02:27:c9:bd:a6:78:79:44:7e:46:73:4f:f8:f9:c2:33: 30:3c:35:c4:66:62:1d:89:9b:c1:b5:f8:95:0a:6e:c3:de:ed: 9d:58:10:6d:e6:e5:b3:45:08:bc:34:de:a1:7f:be:1e:58:47: 0b:5b:a6:c2:71:d6:cc:08:cf:f9:50:a4:88:e4:2e:0d:22:8e: dc:d8:37:09:4a:a0:77:3b:d2:11:e3:7b:b6:bd:26:27:84:cd: e8:1f:90:86:74:d8:83:91:ee:c2:82:60:d3:2f:c7:d0:54:4a: 50:74:20:91:7a:71:40:1b:7f:b2:07:ae:e6:8f:f6:0c:94:5b: c8:39:92:a3:32:a2:98:e3:0b:c1:07:0d:a3:3a:17:35:c6:72: a6:0a:a9:42:21:d5:3f:d2:62:86:19:4a:c6:b2:5f:19:31:1d: 3a:d6:38:01:ce:ed:4f:cc:1a:7c:71:86:34:7b:d8:c1:6f:f6: 7b:a2:82:1d:cd:e6:15:af:d8:e9:7d:d4:e3:d9:48:46:d2:cc: 1b:d7:37:99 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OJysuzwGcyXqpgyXwU97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjZiZDZlZWQ4OTgzYjJhYzNmYTM2ZWIyODRkODAxNjJmYjFjMmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmORrWkqQCAuKnQGh8w4Bd2c+PyBQ n6bFvc5vv5cd69AXCM7Si/P1TCZHr7BQzvVf/JgqQjkVHfgLsqkh0C5BJxiSqCnP QyMYdXkIjaAN+V80kfl4CQKa4VLTEkKueBi68y2IIx4MOSyfNRapGqNwTABeeeG8 gqgV3B+mkZTM09UgKsPzGW+stAiaFF1vRtHd7y6HNlpJll8SKrL9Ug0CC31vhlYY 8If8WWK8ZXSfq+niUUnYqF9KseU+epNkrgXjS/0OU4F525nMtWhaYwpf2fIYkjDc uXrrGDqLMBVu5nSRl4C9QtNaJ7AFuRNybICrG7pcU5KH+AMC7ekl167NTQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFM9r1u7YmDsqw/o26yhNgBYvscKnMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvejJ2Vzd0aVlPeXJELWpicktFMkFGaS14d3FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgSaARAw DQYJKoZIhvcNAQELBQADggEBADcpQ3+vZ870a+34DNF2L404MyRU+emK58zHkUBL bFZqnPWb5GkHC9QIiZigqMM6QgYQ+3ru9KJPAifJvaZ4eUR+RnNP+PnCMzA8NcRm Yh2Jm8G1+JUKbsPe7Z1YEG3m5bNFCLw03qF/vh5YRwtbpsJx1swIz/lQpIjkLg0i jtzYNwlKoHc70hHje7a9JieEzegfkIZ02IOR7sKCYNMvx9BUSlB0IJF6cUAbf7IH ruaP9gyUW8g5kqMyopjjC8EHDaM6FzXGcqYKqUIh1T/SYoYZSsayXxkxHTrWOAHO 7U/MGnxxhjR72MFv9nuigh3N5hWv2Ol91OPZSEbSzBvXN5k= -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:48 2026 by rpki-client