This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2lTK1BnZ9ONcGyRv1zaeTKS7ybM.roa File: 2lTK1BnZ9ONcGyRv1zaeTKS7ybM.roa (raw, json) Hash identifier: tT5n3g6tJUPaeiL+FqRbbFGKzrp6tPF9hzUYBI55wK0= Subject key identifier: DA:54:CA:D4:19:D9:F4:E3:5C:1B:24:6F:D7:36:9E:4C:A4:BB:C9:B3 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E39D1BD9E3827165F7A2FC8915CF2 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2lTK1BnZ9ONcGyRv1zaeTKS7ybM.roa Signing time: Thu 01 Jan 2026 12:17:54 +0000 ROA not before: Thu 01 Jan 2026 12:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206499 IP address blocks: 2a0c:da04:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:39:d1:bd:9e:38:27:16:5f:7a:2f:c8:91:5c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da54cad419d9f4e35c1b246fd7369e4ca4bbc9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:09:14:d8:94:5d:ca:a6:9c:d9:f4:18:db:59: c1:65:87:e4:0f:2e:d4:67:4f:76:f7:e3:08:60:f4: 7d:a5:8a:e2:27:b1:3a:22:a7:b0:a8:fe:9b:bd:ad: 75:ae:46:db:00:13:29:70:20:81:d9:93:ea:32:45: 98:83:bd:1b:ed:6a:84:b4:49:d9:5c:0f:ae:9b:ee: 4c:dd:bb:32:9b:e5:8b:06:77:52:5d:64:20:7d:0b: 3c:4d:be:01:91:40:d4:61:de:68:74:15:20:47:1e: d4:ca:f6:4d:2e:9a:96:57:69:cc:e5:2e:ed:9e:c7: da:fc:37:8c:7c:1a:22:7b:67:4c:33:dd:8d:69:5c: 32:80:29:a9:03:41:3b:cf:ff:dc:18:35:cf:e6:61: 7b:be:37:8e:2c:5f:1d:d2:22:fb:30:cc:c2:55:ac: 1b:20:df:75:49:4b:7e:2e:8c:95:48:a4:c4:e5:ef: 21:b3:a9:22:dd:f0:92:27:12:4d:e8:c6:52:cf:e1: d7:59:27:89:58:03:e5:24:df:4d:38:59:4b:3c:78: 47:33:d0:78:b3:35:54:94:db:32:9c:c7:bf:2e:f8: 9e:98:a4:82:8f:63:54:12:ad:1b:9c:e4:0a:97:c4: 7c:60:0b:99:b2:be:d4:28:10:35:9f:77:3a:df:8f: 16:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:54:CA:D4:19:D9:F4:E3:5C:1B:24:6F:D7:36:9E:4C:A4:BB:C9:B3 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2lTK1BnZ9ONcGyRv1zaeTKS7ybM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:da04:c::/48 Signature Algorithm: sha256WithRSAEncryption 54:93:c1:20:50:12:de:26:6e:ef:75:1a:e9:78:19:b9:86:22: 1b:12:99:b0:82:08:16:20:5a:48:90:9e:9e:c3:ab:db:2f:40: 2e:1f:6b:99:37:58:d1:5d:e2:06:b1:a7:d6:cc:f7:b1:f2:3c: 73:21:78:b0:a7:eb:96:28:12:8c:d7:2b:32:26:c2:6a:84:d4: f7:00:da:1f:ee:22:03:84:35:20:25:85:c0:ac:20:0d:ea:f0: 1f:1d:0b:a7:eb:38:45:3a:91:47:24:ff:79:dd:a2:b4:56:c0: 1a:47:fd:dc:50:cf:42:fb:73:e2:28:5e:16:9b:c0:12:a0:89: d9:c3:e2:85:7c:4d:58:f6:b6:65:62:3b:77:7d:2a:e9:68:22: 6c:b1:50:1b:ab:8d:df:ce:01:6c:3a:4c:fc:1c:5e:2b:62:f2: 1e:b9:e7:82:23:7e:74:b2:6d:0b:87:3c:a1:c1:29:94:f4:01: c2:ac:bd:fc:8d:a2:46:89:31:7b:78:4e:e3:64:79:43:dc:79: 95:97:1b:e8:17:b1:a0:1b:35:7b:99:33:86:40:6a:83:3b:f8: c0:99:d8:0c:94:b3:52:a2:d6:5a:ab:2a:86:dc:3e:84:8f:d4: 53:85:de:2d:f1:2e:c9:e0:d8:a1:d9:df:c9:35:ab:0d:31:2c: ef:98:f2:4c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fjnRvZ44JxZfei/IkVzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTU0Y2FkNDE5ZDlmNGUzNWMxYjI0NmZkNzM2OWU0Y2E0YmJjOWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gkU2JRdyqac2fQY21nBZYfkDy7U Z0929+MIYPR9pYriJ7E6IqewqP6bva11rkbbABMpcCCB2ZPqMkWYg70b7WqEtEnZ XA+um+5M3bsym+WLBndSXWQgfQs8Tb4BkUDUYd5odBUgRx7UyvZNLpqWV2nM5S7t nsfa/DeMfBoie2dMM92NaVwygCmpA0E7z//cGDXP5mF7vjeOLF8d0iL7MMzCVawb IN91SUt+LoyVSKTE5e8hs6ki3fCSJxJN6MZSz+HXWSeJWAPlJN9NOFlLPHhHM9B4 szVUlNsynMe/LviemKSCj2NUEq0bnOQKl8R8YAuZsr7UKBA1n3c6348WJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNpUytQZ2fTjXBskb9c2nkyku8mzMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvMmxUSzFCblo5T05jR3lSdjF6YWVUS1M3eWJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgzaBAAM MA0GCSqGSIb3DQEBCwUAA4IBAQBUk8EgUBLeJm7vdRrpeBm5hiIbEpmwgggWIFpI kJ6ew6vbL0AuH2uZN1jRXeIGsafWzPex8jxzIXiwp+uWKBKM1ysyJsJqhNT3ANof 7iIDhDUgJYXArCAN6vAfHQun6zhFOpFHJP953aK0VsAaR/3cUM9C+3PiKF4Wm8AS oInZw+KFfE1Y9rZlYjt3fSrpaCJssVAbq43fzgFsOkz8HF4rYvIeueeCI350sm0L hzyhwSmU9AHCrL38jaJGiTF7eE7jZHlD3HmVlxvoF7GgGzV7mTOGQGqDO/jAmdgM lLNSotZaqyqG3D6Ej9RThd4t8S7J4Nih2d/JNasNMSzvmPJM -----END CERTIFICATE-----Generated at Fri Jan 2 21:08:03 2026 by rpki-client