This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/2ZJ5kTbDkQFVGBUeLd0y5apLGk4.roa File: 2ZJ5kTbDkQFVGBUeLd0y5apLGk4.roa (raw, json) Hash identifier: ZODc+kCP5UyKJRVzZyQVG4BaAWWyOIufRaMmAMzRM8g= Subject key identifier: D9:92:79:91:36:C3:91:01:55:18:15:1E:2D:DD:32:E5:AA:4B:1A:4E Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 019B7F14F76EBEA2E7003306DFE8586B3D38 Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/2ZJ5kTbDkQFVGBUeLd0y5apLGk4.roa Signing time: Fri 02 Jan 2026 14:20:39 +0000 ROA not before: Fri 02 Jan 2026 14:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 2a09:a702:6e::/48 maxlen: 48 2a09:a702:6f::/48 maxlen: 48 2a09:a702:70::/48 maxlen: 48 2a09:a702:71::/48 maxlen: 48 2a09:a702:74::/48 maxlen: 48 2a09:a702:75::/48 maxlen: 48 2a09:a702:78::/48 maxlen: 48 2a09:a702:79::/48 maxlen: 48 2a09:a702:7a::/48 maxlen: 48 2a09:a702:7b::/48 maxlen: 48 2a09:a702:7c::/48 maxlen: 48 2a09:a702:7d::/48 maxlen: 48 2a09:a702:7e::/48 maxlen: 48 2a09:a702:7f::/48 maxlen: 48 2a09:a702:80::/48 maxlen: 48 2a09:a702:81::/48 maxlen: 48 2a09:a702:82::/48 maxlen: 48 2a09:a702:83::/48 maxlen: 48 2a09:a702:84::/48 maxlen: 48 2a09:a702:85::/48 maxlen: 48 2a09:a702:86::/48 maxlen: 48 2a09:a702:87::/48 maxlen: 48 2a09:a702:88::/48 maxlen: 48 2a09:a702:89::/48 maxlen: 48 2a09:a702:8a::/48 maxlen: 48 2a09:a702:8b::/48 maxlen: 48 2a09:a702:8c::/48 maxlen: 48 2a09:a702:8d::/48 maxlen: 48 2a09:a702:8e::/48 maxlen: 48 2a09:a702:8f::/48 maxlen: 48 2a09:a702:90::/48 maxlen: 48 2a09:a702:91::/48 maxlen: 48 2a09:a702:96::/48 maxlen: 48 2a09:a702:97::/48 maxlen: 48 2a09:a702:98::/48 maxlen: 48 2a09:a702:99::/48 maxlen: 48 2a09:a702:9a::/48 maxlen: 48 2a09:a702:9b::/48 maxlen: 48 2a09:a702:9c::/48 maxlen: 48 2a09:a702:9d::/48 maxlen: 48 2a09:a702:9e::/48 maxlen: 48 2a09:a702:9f::/48 maxlen: 48 2a09:a702:a2::/48 maxlen: 48 2a09:a702:a3::/48 maxlen: 48 2a09:a702:a4::/48 maxlen: 48 2a09:a702:a5::/48 maxlen: 48 2a09:a702:a6::/48 maxlen: 48 2a09:a702:a7::/48 maxlen: 48 2a09:a702:ac::/48 maxlen: 48 2a09:a702:ad::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f7:6e:be:a2:e7:00:33:06:df:e8:58:6b:3d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Jan 2 14:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d992799136c391015518151e2ddd32e5aa4b1a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e4:32:31:ea:d6:58:5c:c3:0d:57:f6:b3:36: 60:7d:f6:8f:5f:04:a1:29:5c:d8:cc:68:73:7c:e9: e8:2d:13:c7:1e:d7:c2:36:94:5a:9e:f0:39:ff:55: 16:d4:b1:87:c1:9f:3d:7e:35:3a:f6:44:a9:94:28: 50:74:82:ab:37:13:04:5b:09:c1:7a:9d:a7:21:84: 3d:17:35:d2:11:e4:a1:96:5a:9f:a0:e0:38:cb:df: 21:e8:17:15:e3:e6:40:d6:92:63:e6:f0:7e:30:52: b1:61:38:b5:e5:29:0f:dd:7f:0b:3a:73:53:c4:2a: 9d:4e:5e:38:fc:30:fb:fd:2b:32:cf:43:21:6b:5b: db:a2:47:c4:51:22:f0:f8:57:26:58:13:94:8f:cd: ed:6f:fd:d6:a0:f0:db:64:a8:81:7a:f1:40:65:00: 3c:09:ac:fd:44:ef:cf:d5:74:3b:26:ff:67:4d:03: 8e:78:7e:c2:f8:34:f7:86:87:1a:df:22:c5:47:33: 7e:56:2a:a3:b4:94:4a:97:c4:46:ea:54:db:1b:8b: 57:98:36:99:5f:e8:f8:64:f1:6b:e9:dc:b1:5f:48: 5b:04:75:02:39:ae:0d:f2:e5:01:a8:7d:8d:18:76: 16:a4:ee:23:aa:4e:c1:6e:8a:10:b2:3b:72:de:28: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:92:79:91:36:C3:91:01:55:18:15:1E:2D:DD:32:E5:AA:4B:1A:4E X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/2ZJ5kTbDkQFVGBUeLd0y5apLGk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:a702:6e::-2a09:a702:71:ffff:ffff:ffff:ffff:ffff 2a09:a702:74::/47 2a09:a702:78::-2a09:a702:91:ffff:ffff:ffff:ffff:ffff 2a09:a702:96::-2a09:a702:9f:ffff:ffff:ffff:ffff:ffff 2a09:a702:a2::-2a09:a702:a7:ffff:ffff:ffff:ffff:ffff 2a09:a702:ac::/47 Signature Algorithm: sha256WithRSAEncryption 34:d3:8b:e5:8a:31:71:9d:60:9d:f8:56:e7:3a:e1:39:d5:7c: d0:64:a2:55:8b:61:fa:41:b0:e0:b8:ba:a2:7b:13:c2:a2:2c: 6d:71:0f:53:55:2a:94:a7:59:8a:28:12:3e:b9:da:aa:3d:ab: 14:01:89:8e:e3:d2:e5:f7:9a:a9:cc:a7:d7:a6:eb:b6:a5:ac: ca:d9:3a:10:6e:23:8a:fb:e9:87:07:0e:58:04:44:55:50:dd: f0:1c:3c:36:a4:0d:14:4f:0c:7d:57:e7:bd:7f:de:88:a8:29: f8:e9:8e:75:b3:9e:15:7d:be:12:41:22:b2:f8:c1:e1:15:ab: 53:af:41:45:1a:2c:c6:de:97:f9:37:3d:c1:4d:92:6a:4e:26: 23:33:43:e9:f0:44:72:e1:dd:f4:51:1e:5b:9c:fe:16:1d:56: 6c:6c:ae:a3:24:37:9a:4e:57:48:f9:10:c1:3a:06:41:95:77: 7d:13:97:f8:6b:cb:08:68:18:c4:1d:9f:c5:ca:03:e6:79:86: d5:a7:4d:6a:29:0d:4e:45:65:a8:7d:a5:ad:19:2e:db:47:e3: 38:7d:82:5f:ff:0e:52:f7:95:ca:0b:6e:93:cf:2f:7b:12:2b: 40:82:d6:81:4e:ff:05:f9:ba:f9:da:bd:23:9e:5b:4e:6f:07: 07:bc:95:fe -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZt/FPduvqLnADMG3+hYaz04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjYwMTAyMTQyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTkyNzk5MTM2YzM5MTAxNTUxODE1MWUyZGRkMzJlNWFhNGIxYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uQyMerWWFzDDVf2szZgffaPXwSh KVzYzGhzfOnoLRPHHtfCNpRanvA5/1UW1LGHwZ89fjU69kSplChQdIKrNxMEWwnB ep2nIYQ9FzXSEeShllqfoOA4y98h6BcV4+ZA1pJj5vB+MFKxYTi15SkP3X8LOnNT xCqdTl44/DD7/Ssyz0Mha1vbokfEUSLw+FcmWBOUj83tb/3WoPDbZKiBevFAZQA8 Caz9RO/P1XQ7Jv9nTQOOeH7C+DT3hoca3yLFRzN+ViqjtJRKl8RG6lTbG4tXmDaZ X+j4ZPFr6dyxX0hbBHUCOa4N8uUBqH2NGHYWpO4jqk7BbooQsjty3ih5aQIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFNmSeZE2w5EBVRgVHi3dMuWqSxpOMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvMlpKNWtUYkRrUUZWR0JVZUxkMHk1YXBMR2s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAAjBiMBIDBwEqCacC AG4DBwEqCacCAHADBwEqCacCAHQwEgMHAyoJpwIAeAMHASoJpwIAkDASAwcBKgmn AgCWAwcFKgmnAgCAMBIDBwEqCacCAKIDBwMqCacCAKADBwEqCacCAKwwDQYJKoZI hvcNAQELBQADggEBADTTi+WKMXGdYJ34Vuc64TnVfNBkolWLYfpBsOC4uqJ7E8Ki LG1xD1NVKpSnWYooEj652qo9qxQBiY7j0uX3mqnMp9em67alrMrZOhBuI4r76YcH DlgERFVQ3fAcPDakDRRPDH1X571/3oioKfjpjnWznhV9vhJBIrL4weEVq1OvQUUa LMbel/k3PcFNkmpOJiMzQ+nwRHLh3fRRHluc/hYdVmxsrqMkN5pOV0j5EME6BkGV d30Tl/hrywhoGMQdn8XKA+Z5htWnTWopDU5FZah9pa0ZLttH4zh9gl//DlL3lcoL bpPPL3sSK0CC1oFO/wX5uvnavSOeW05vBwe8lf4= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:30 2026 by rpki-client