This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/ri2vYJesfddybqK6UaLh9V2RvNw.roa File: ri2vYJesfddybqK6UaLh9V2RvNw.roa (raw, json) Hash identifier: o/GKrhkl1lRLWD595uYZL3g9iAVKABVMqzW4acHlZ/I= Subject key identifier: AE:2D:AF:60:97:AC:7D:D7:72:6E:A2:BA:51:A2:E1:F5:5D:91:BC:DC Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Certificate serial: 019B78A27C54BF8F5E6970A48A690CC761EC Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/ri2vYJesfddybqK6UaLh9V2RvNw.roa Signing time: Thu 01 Jan 2026 08:17:53 +0000 ROA not before: Thu 01 Jan 2026 08:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202685 IP address blocks: 2a03:df00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7c:54:bf:8f:5e:69:70:a4:8a:69:0c:c7:61:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Validity Not Before: Jan 1 08:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae2daf6097ac7dd7726ea2ba51a2e1f55d91bcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:5c:80:37:cc:ac:7b:be:30:b8:49:32:0c: f4:83:b5:fe:14:1e:58:c5:b5:a6:24:05:af:9f:c4: d0:70:31:7e:da:7f:85:63:72:e4:d2:9a:87:f0:09: e0:0d:ef:30:4d:4c:08:e9:fa:da:59:bd:c6:cb:1f: 1e:e2:34:95:7c:e2:f5:f1:96:8b:9e:e4:4b:91:39: ec:24:0f:77:3f:e7:12:98:3e:14:5f:7d:e6:19:1c: d2:66:5b:4d:9d:a5:33:2f:d2:b9:a4:8f:ce:3a:1f: 92:95:54:dd:fb:2a:68:6a:98:60:4d:e1:06:e5:ae: d7:c7:8c:6a:bd:42:fa:58:27:be:87:e7:8d:2d:64: 63:f3:08:73:85:58:dc:0c:ed:8d:99:7b:0f:d6:61: 0f:0c:df:bd:44:99:9e:69:26:91:b2:4f:f9:ac:e5: 1a:09:15:4a:37:f2:d9:9e:9f:42:23:32:1c:f3:4d: 1d:88:49:82:65:7b:5d:f1:3d:f9:97:92:32:74:79: d5:3d:3e:96:cf:14:75:53:4c:5d:c3:6e:52:49:12: 2d:26:6f:70:2b:4a:9c:ce:8a:c8:1a:3d:2b:8c:7b: af:6a:2f:5d:8a:d7:3f:f8:a5:13:d3:37:5f:80:a8: cc:4e:1a:8e:98:5a:7b:b2:30:aa:b3:e5:34:87:b6: f0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2D:AF:60:97:AC:7D:D7:72:6E:A2:BA:51:A2:E1:F5:5D:91:BC:DC X509v3 Authority Key Identifier: keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/ri2vYJesfddybqK6UaLh9V2RvNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:df00::/29 Signature Algorithm: sha256WithRSAEncryption 95:98:64:ff:03:c1:ee:7c:2c:af:b3:a4:37:b1:e0:07:79:01: ac:a8:9e:5d:77:78:76:ff:e8:90:a1:07:45:59:f9:6b:8e:c3: a2:27:fc:70:03:43:a1:5e:6e:54:b5:67:06:0f:76:10:e2:c3: b8:57:5a:0a:e4:29:3f:a7:7f:f9:db:8a:01:e1:c1:f2:9b:98: 91:a6:78:64:0e:d0:4e:41:72:ac:59:ad:64:1b:77:4c:61:02: 62:bb:95:d1:54:9e:ad:79:fe:5f:5c:64:58:c2:64:ad:cd:18: a2:82:3c:e1:33:76:f8:30:de:39:ac:9f:48:33:a4:f8:e3:85: 8d:9f:61:9c:c7:ab:6c:a4:f0:4a:6f:5f:df:f2:51:4a:b5:08: a3:92:70:9c:36:fb:88:dc:12:92:2b:28:07:b9:63:17:1e:e5: 83:2e:3b:b7:81:f4:31:7f:8d:86:68:a1:35:95:2c:31:6b:39: 68:de:37:fe:ec:0c:8b:3c:38:db:f9:63:00:08:74:d4:4e:a3: 8e:54:69:63:01:9b:f9:b5:c3:13:04:bb:f2:cc:34:23:2c:ec: 11:cb:72:f3:73:f7:1a:6f:5b:5c:60:f1:57:68:b0:ff:5e:8e: 18:57:f3:45:dc:24:63:0e:40:f2:96:46:0e:d8:94:ad:f9:75: 79:85:6d:42 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4onxUv49eaXCkimkMx2HsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx YzRmZTIwHhcNMjYwMTAxMDgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTJkYWY2MDk3YWM3ZGQ3NzI2ZWEyYmE1MWEyZTFmNTVkOTFiY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7FcgDfMrHu+MLhJMgz0g7X+FB5Y xbWmJAWvn8TQcDF+2n+FY3Lk0pqH8AngDe8wTUwI6fraWb3Gyx8e4jSVfOL18ZaL nuRLkTnsJA93P+cSmD4UX33mGRzSZltNnaUzL9K5pI/OOh+SlVTd+ypoaphgTeEG 5a7Xx4xqvUL6WCe+h+eNLWRj8whzhVjcDO2NmXsP1mEPDN+9RJmeaSaRsk/5rOUa CRVKN/LZnp9CIzIc800diEmCZXtd8T35l5IydHnVPT6WzxR1U0xdw25SSRItJm9w K0qczorIGj0rjHuvai9ditc/+KUT0zdfgKjMThqOmFp7sjCqs+U0h7bwoQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFK4tr2CXrH3Xcm6iulGi4fVdkbzcMB8GA1UdIwQY MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt NzA4N2UzZmUyYTVkLzEvcmkydllKZXNmZGR5YnFLNlVhTGg5VjJSdk53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgPfADAN BgkqhkiG9w0BAQsFAAOCAQEAlZhk/wPB7nwsr7OkN7HgB3kBrKieXXd4dv/okKEH RVn5a47Doif8cANDoV5uVLVnBg92EOLDuFdaCuQpP6d/+duKAeHB8puYkaZ4ZA7Q TkFyrFmtZBt3TGECYruV0VSerXn+X1xkWMJkrc0YooI84TN2+DDeOayfSDOk+OOF jZ9hnMerbKTwSm9f3/JRSrUIo5JwnDb7iNwSkisoB7ljFx7lgy47t4H0MX+Nhmih NZUsMWs5aN43/uwMizw42/ljAAh01E6jjlRpYwGb+bXDEwS78sw0IyzsEcty83P3 Gm9bXGDxV2iw/16OGFfzRdwkYw5A8pZGDtiUrfl1eYVtQg== -----END CERTIFICATE-----Generated at Tue Feb 3 02:07:43 2026 by rpki-client