This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/t2nL53rqQH9ZIp81_-HhgG8dVNI.roa File: t2nL53rqQH9ZIp81_-HhgG8dVNI.roa (raw, json) Hash identifier: GIrpEJPMzecFz9VODcEZ6nb6Fh/ZSXTj6qVIHCsRa0g= Subject key identifier: B7:69:CB:E7:7A:EA:40:7F:59:22:9F:35:FF:E1:E1:80:6F:1D:54:D2 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C80192C9CAB80CB65006FCB81D893B6 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/t2nL53rqQH9ZIp81_-HhgG8dVNI.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26042 IP address blocks: 2a0f:7803:f611::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:19:2c:9c:ab:80:cb:65:00:6f:cb:81:d8:93:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b769cbe77aea407f59229f35ffe1e1806f1d54d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:c7:94:0e:2e:09:06:11:f1:06:0f:92:e6: e2:91:1b:b6:6f:c9:dc:24:ba:30:e5:27:da:d2:ac: 21:12:cd:47:c3:7a:e5:27:f7:a5:a6:fd:29:07:36: f9:03:53:97:b4:05:b0:32:38:11:f8:85:69:a5:12: f0:f2:85:54:e8:8d:8e:b5:12:a3:d3:47:1b:bc:2b: 46:00:6e:d1:97:03:d8:a4:32:c9:fb:e4:3f:9b:9f: 8b:10:23:2b:93:7b:50:7e:5f:e9:4c:bf:99:57:a4: b3:88:dc:c3:bd:a0:37:f5:ad:44:ee:34:3e:86:df: a9:3a:ce:27:d0:4e:01:6f:5e:18:e3:b3:77:41:a6: 9a:b1:97:5a:ed:a5:01:a3:5a:b7:b1:c8:00:b5:f1: fe:e7:b4:2d:48:ec:1a:8e:5c:86:a6:33:7a:da:33: 72:df:eb:18:db:40:44:50:45:ef:78:23:03:10:e4: 6a:ef:fc:99:dc:df:a0:0a:0f:12:72:57:11:85:ff: a0:b1:2d:02:e9:e8:7c:66:4c:04:20:64:f5:ef:45: 4d:65:cf:22:65:b3:88:a5:15:ac:ae:72:80:f7:fa: 66:29:9e:29:1b:fb:55:4c:6a:43:3c:8e:57:04:9e: 41:3a:e8:1c:d8:78:42:37:fb:b5:b5:24:b9:6f:f3: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:69:CB:E7:7A:EA:40:7F:59:22:9F:35:FF:E1:E1:80:6F:1D:54:D2 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/t2nL53rqQH9ZIp81_-HhgG8dVNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:f611::/48 Signature Algorithm: sha256WithRSAEncryption 00:1b:63:8c:31:50:aa:e9:51:a5:55:c7:68:ff:1f:c2:1a:2f: 3b:59:30:c7:5c:bd:d6:25:c8:10:d0:bd:41:2c:f2:ae:27:bc: bf:1a:9d:5f:78:69:f2:c9:52:37:af:86:6c:a1:ff:4f:ed:c1: e1:2b:eb:5f:bf:ab:4e:8a:e1:36:68:58:04:59:73:44:32:a8: 4e:5a:91:df:18:87:94:65:ee:4a:14:2c:74:28:8c:a7:5c:1d: f2:d6:02:8b:e1:ce:10:27:b8:1f:39:81:a7:86:a8:07:c3:4d: 78:04:33:f6:b5:4c:e8:84:ce:94:52:53:4e:2f:a4:40:91:89: 20:4f:15:b8:af:92:a9:49:ad:47:77:e3:87:00:f8:cf:aa:73: 97:22:df:b4:13:11:52:b4:e3:1c:8e:74:48:dd:80:29:d1:e0: 49:8a:d9:01:f7:7c:0e:2b:a6:77:82:5c:0e:07:eb:50:f4:b4: a0:73:83:d0:b4:40:77:f3:f2:23:b6:3d:23:68:19:8e:21:08: 12:c1:d5:9b:84:6f:64:66:7a:30:eb:77:35:11:6b:bc:fe:f8: 66:9c:de:fa:13:f8:a3:58:59:7a:e5:61:d4:f9:b1:ae:d8:f8: 6b:94:67:4c:6b:ab:3f:2b:09:50:c8:7b:df:35:99:22:f9:97: bf:a1:9f:38 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gBksnKuAy2UAb8uB2JO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzY5Y2JlNzdhZWE0MDdmNTkyMjlmMzVmZmUxZTE4MDZmMWQ1NGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2PHlA4uCQYR8QYPkubikRu2b8nc JLow5Sfa0qwhEs1Hw3rlJ/elpv0pBzb5A1OXtAWwMjgR+IVppRLw8oVU6I2OtRKj 00cbvCtGAG7RlwPYpDLJ++Q/m5+LECMrk3tQfl/pTL+ZV6SziNzDvaA39a1E7jQ+ ht+pOs4n0E4Bb14Y47N3QaaasZda7aUBo1q3scgAtfH+57QtSOwajlyGpjN62jNy 3+sY20BEUEXveCMDEORq7/yZ3N+gCg8SclcRhf+gsS0C6eh8ZkwEIGT170VNZc8i ZbOIpRWsrnKA9/pmKZ4pG/tVTGpDPI5XBJ5BOugc2HhCN/u1tSS5b/MMVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLdpy+d66kB/WSKfNf/h4YBvHVTSMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvdDJuTDUzcnFRSDlaSXA4MV8tSGhnRzhkVk5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg94A/YR MA0GCSqGSIb3DQEBCwUAA4IBAQAAG2OMMVCq6VGlVcdo/x/CGi87WTDHXL3WJcgQ 0L1BLPKuJ7y/Gp1feGnyyVI3r4Zsof9P7cHhK+tfv6tOiuE2aFgEWXNEMqhOWpHf GIeUZe5KFCx0KIynXB3y1gKL4c4QJ7gfOYGnhqgHw014BDP2tUzohM6UUlNOL6RA kYkgTxW4r5KpSa1Hd+OHAPjPqnOXIt+0ExFStOMcjnRI3YAp0eBJitkB93wOK6Z3 glwOB+tQ9LSgc4PQtEB38/Ijtj0jaBmOIQgSwdWbhG9kZnow63c1EWu8/vhmnN76 E/ijWFl65WHU+bGu2PhrlGdMa6s/KwlQyHvfNZki+Ze/oZ84 -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:56 2026 by rpki-client