This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/n2cwiplK4QxCrTwGBHLplO2ULeU.roa File: n2cwiplK4QxCrTwGBHLplO2ULeU.roa (raw, json) Hash identifier: 7aeKHzASb9QXAHN2dhVECcGoHU8aQKfp4EYYcWeuYiY= Subject key identifier: 9F:67:30:8A:99:4A:E1:0C:42:AD:3C:06:04:72:E9:94:ED:94:2D:E5 Certificate issuer: /CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4 Certificate serial: 019B7FF215C1084A36CCA987B9F1A306532D Authority key identifier: 8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/n2cwiplK4QxCrTwGBHLplO2ULeU.roa Signing time: Fri 02 Jan 2026 18:22:10 +0000 ROA not before: Fri 02 Jan 2026 18:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212464 IP address blocks: 2001:67c:2be0::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:15:c1:08:4a:36:cc:a9:87:b9:f1:a3:06:53:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4 Validity Not Before: Jan 2 18:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f67308a994ae10c42ad3c060472e994ed942de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:01:a9:a3:6b:27:15:d0:b7:67:de:31:75:04: 6d:16:34:a6:ef:e2:64:61:28:15:b7:68:03:cb:f7: e4:c4:12:3e:f8:ed:b0:1a:da:65:8b:86:04:cb:b4: 45:7c:63:d0:c9:ed:e4:9b:4e:b0:e9:27:0b:c3:f5: da:a4:5e:26:10:81:c6:88:0d:a1:3a:8d:d8:71:b3: 42:a9:3f:db:d1:35:b3:2d:0e:eb:c1:e1:1c:f8:89: 28:33:b3:82:58:97:5f:cc:f2:0a:9b:cc:ea:bc:3d: 5b:92:2a:d5:bc:fe:bd:4d:6f:4f:ae:98:16:2d:58: 1f:8f:e4:d0:45:df:6e:d4:86:50:9e:f8:40:57:e6: 22:a2:1c:5b:de:42:f3:fa:ac:53:19:33:4e:7d:c6: 21:02:1b:32:24:e8:43:6c:83:07:4b:28:d5:b0:c2: 64:b6:21:b3:af:18:27:fd:90:85:af:85:d1:13:0c: 56:52:e0:7f:f1:77:24:9f:62:8c:8a:18:69:bb:f3: e1:ce:25:b4:20:87:95:06:20:f4:82:21:84:9e:37: 99:a7:57:d6:10:e8:24:d0:41:52:9b:4b:98:84:db: 75:d8:46:82:58:6d:b2:68:4b:ae:b7:8c:2a:33:31: ca:e6:36:35:9d:af:5e:cf:9f:2b:f8:1a:b9:c7:67: ed:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:67:30:8A:99:4A:E1:0C:42:AD:3C:06:04:72:E9:94:ED:94:2D:E5 X509v3 Authority Key Identifier: keyid:8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/n2cwiplK4QxCrTwGBHLplO2ULeU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2be0::/48 Signature Algorithm: sha256WithRSAEncryption bb:46:89:20:f2:94:97:8c:de:a7:dc:c0:69:6c:b4:de:0e:b7: 82:14:dc:03:21:df:30:ef:0e:a5:8b:91:14:b7:55:5c:63:b5: 6b:19:9e:8c:b7:25:0a:48:91:26:8f:6a:18:d9:94:49:0e:39: 22:3b:1d:3a:e7:ae:7f:50:a1:46:72:c0:72:0f:b1:a8:8c:4b: 7b:7a:21:0c:09:f9:3f:86:f7:3a:bb:15:7f:96:d7:ee:d3:90: 6e:fe:6d:4b:37:35:ab:21:51:48:33:96:6e:81:23:61:ef:e2: 6b:88:ea:b0:26:c0:4d:ca:80:18:ca:39:e1:5a:03:5f:e5:8a: a4:d3:f4:83:e4:3f:9b:5a:13:dd:52:ca:3d:41:3a:3f:4a:90: 42:2d:e2:39:bd:d1:b6:cf:a2:ab:ed:86:ab:f1:d2:d4:33:1b: ee:7a:ae:bf:f7:c7:1b:ab:a8:45:b3:6c:4b:94:1b:80:77:2e: 31:89:a0:eb:6e:e8:a0:69:b0:0f:eb:cf:94:13:eb:ee:92:42: f7:98:6a:af:57:27:ba:7c:0f:bd:f7:ac:76:7b:7e:72:66:4e: 8d:71:46:f8:5d:51:2a:ba:47:84:0f:8d:14:95:11:b3:5e:46: a6:9a:f5:62:0f:df:f7:d3:d4:1d:f4:51:a9:57:2f:2a:6c:e8: 95:40:3c:12 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8hXBCEo2zKmHufGjBlMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZDA5ODE3ZGZlYTRjNjZjOTQxOGY5ZjM5MDZmMWQwZTA3 Y2M5ZDQwHhcNMjYwMTAyMTgyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjY3MzA4YTk5NGFlMTBjNDJhZDNjMDYwNDcyZTk5NGVkOTQyZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QGpo2snFdC3Z94xdQRtFjSm7+Jk YSgVt2gDy/fkxBI++O2wGtpli4YEy7RFfGPQye3km06w6ScLw/XapF4mEIHGiA2h Oo3YcbNCqT/b0TWzLQ7rweEc+IkoM7OCWJdfzPIKm8zqvD1bkirVvP69TW9PrpgW LVgfj+TQRd9u1IZQnvhAV+Yiohxb3kLz+qxTGTNOfcYhAhsyJOhDbIMHSyjVsMJk tiGzrxgn/ZCFr4XREwxWUuB/8Xckn2KMihhpu/PhziW0IIeVBiD0giGEnjeZp1fW EOgk0EFSm0uYhNt12EaCWG2yaEuut4wqMzHK5jY1na9ez58r+Bq5x2ftqwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ9nMIqZSuEMQq08BgRy6ZTtlC3lMB8GA1UdIwQY MBaAFI3QmBff6kxmyUGPnzkG8dDgfMnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamRDWUY5X3FUR2JKUVktZk9RYngwT0I4eWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MzM3ZWMtYjRkZS00NDlhLWI2MDct ZWE5Y2I1MjdhZTcxLzEvbjJjd2lwbEs0UXhDclR3R0JITHBsTzJVTGVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85MzM3ZWMtYjRkZS00NDlhLWI2MDctZWE5Y2I1MjdhZTcx LzEvamRDWUY5X3FUR2JKUVktZk9RYngwT0I4eWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCvg MA0GCSqGSIb3DQEBCwUAA4IBAQC7Rokg8pSXjN6n3MBpbLTeDreCFNwDId8w7w6l i5EUt1VcY7VrGZ6MtyUKSJEmj2oY2ZRJDjkiOx06565/UKFGcsByD7GojEt7eiEM Cfk/hvc6uxV/ltfu05Bu/m1LNzWrIVFIM5ZugSNh7+JriOqwJsBNyoAYyjnhWgNf 5Yqk0/SD5D+bWhPdUso9QTo/SpBCLeI5vdG2z6Kr7Yar8dLUMxvueq6/98cbq6hF s2xLlBuAdy4xiaDrbuigabAP68+UE+vukkL3mGqvVye6fA+996x2e35yZk6NcUb4 XVEqukeED40UlRGzXkammvViD9/309Qd9FGpVy8qbOiVQDwS -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:12 2026 by rpki-client