This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/2bmw9no-UmKWSe4rc7sT8B_iUTg.roa File: 2bmw9no-UmKWSe4rc7sT8B_iUTg.roa (raw, json) Hash identifier: HULTd2+GuFkhv8FTrerx2JZ62u/CENDg3ZSlZ4yXiUc= Subject key identifier: D9:B9:B0:F6:7A:3E:52:62:96:49:EE:2B:73:BB:13:F0:1F:E2:51:38 Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088 Certificate serial: 019B77C697B526778536ACB82C611F12F994 Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/2bmw9no-UmKWSe4rc7sT8B_iUTg.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a01:f440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:97:b5:26:77:85:36:ac:b8:2c:61:1f:12:f9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9b9b0f67a3e52629649ee2b73bb13f01fe25138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:88:92:48:a7:20:a6:55:fa:1f:e6:34:6b:0c: 46:4d:e4:d7:db:ab:36:dc:59:32:62:30:b2:fb:ac: 5c:8f:f2:95:77:8f:ae:f8:9f:d9:b9:94:76:a5:e3: ce:0c:5b:bb:d1:ad:66:ec:8d:c2:2c:41:c3:96:ae: f3:2a:55:2a:b9:bb:9a:c0:7d:f7:b6:cf:ec:c8:bf: 02:fa:85:cf:53:c8:31:a7:c1:9b:7d:5c:5a:db:7b: 20:2c:26:60:81:9b:7f:45:d0:63:09:ec:94:27:99: e5:0d:93:c4:10:c5:ae:a4:70:b8:5c:ed:39:56:64: 71:31:c2:a4:38:26:1a:c0:2f:4e:56:04:db:93:ee: 8f:6e:0d:28:97:99:ed:27:12:18:42:dc:ba:40:4f: e1:85:37:d3:d7:52:1d:a3:2b:c3:f0:71:58:cd:44: 39:02:bc:17:71:8c:26:c6:52:2e:26:b7:2c:86:75: db:fb:0a:6f:ad:87:b7:64:2b:f3:f9:72:66:7b:97: e6:5a:e1:9d:54:0c:b1:41:5d:ce:58:46:82:fb:29: dc:c4:ba:31:28:bd:36:45:4d:b0:39:6d:fe:90:53: 0b:33:18:02:3e:cb:45:a7:d0:9a:b8:cd:08:c0:3d: 7b:c4:42:40:e9:ee:29:ba:2e:31:c9:ca:f0:5f:18: f5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B9:B0:F6:7A:3E:52:62:96:49:EE:2B:73:BB:13:F0:1F:E2:51:38 X509v3 Authority Key Identifier: keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/2bmw9no-UmKWSe4rc7sT8B_iUTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:f440::/29 Signature Algorithm: sha256WithRSAEncryption 5a:9c:99:10:64:43:28:09:a9:93:c5:bc:83:21:4b:b1:59:c3: 0f:b2:83:15:19:b8:d3:8c:65:29:73:06:e5:1d:0d:f7:8e:ad: cb:09:9e:21:71:90:f1:33:f3:4a:e7:d8:10:aa:0b:82:59:89: 53:6a:81:8c:8f:97:73:c5:33:1b:71:6b:11:fc:ec:e4:28:34: 98:aa:21:8a:bd:26:1b:53:e2:5b:2e:8b:5a:da:e5:ad:d0:c9: a8:33:d0:a9:64:43:24:df:03:3f:6d:19:68:71:24:1b:62:58: b6:83:16:6e:a8:84:f9:05:90:c8:02:5f:8e:de:97:72:34:f0: 93:63:5d:76:ce:0a:e7:9d:ba:d4:e0:80:a9:64:0d:c7:96:73: 8d:5e:27:d1:e6:5f:18:49:50:4f:9b:22:e6:18:4b:ac:24:0f: d0:fb:db:6a:37:4f:bc:7c:36:e6:3c:5f:8c:0c:c3:ec:bc:8c: 0e:d8:27:e4:f2:01:d7:a2:f9:af:ca:27:db:1e:dc:61:ee:a7: cf:03:15:1b:0d:b9:e4:1d:70:24:76:e7:2b:3a:ee:4c:a0:e0: 98:6b:5b:34:70:c8:fe:db:7c:3d:79:65:ac:d8:27:d0:3b:9d: 53:4a:2a:b4:9a:32:7b:7a:fc:6d:b6:a3:07:5c:6d:af:40:64: 0c:a6:27:07 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xpe1JneFNqy4LGEfEvmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZWZmZTk4YzI0YzNkNmQ2MDg3YzhkMWQzZjkwMWI4Y2Nk NDAwODgwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWI5YjBmNjdhM2U1MjYyOTY0OWVlMmI3M2JiMTNmMDFmZTI1MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4iSSKcgplX6H+Y0awxGTeTX26s2 3FkyYjCy+6xcj/KVd4+u+J/ZuZR2pePODFu70a1m7I3CLEHDlq7zKlUqubuawH33 ts/syL8C+oXPU8gxp8GbfVxa23sgLCZggZt/RdBjCeyUJ5nlDZPEEMWupHC4XO05 VmRxMcKkOCYawC9OVgTbk+6Pbg0ol5ntJxIYQty6QE/hhTfT11IdoyvD8HFYzUQ5 ArwXcYwmxlIuJrcshnXb+wpvrYe3ZCvz+XJme5fmWuGdVAyxQV3OWEaC+yncxLox KL02RU2wOW3+kFMLMxgCPstFp9CauM0IwD17xEJA6e4pui4xycrwXxj1jwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNm5sPZ6PlJilknuK3O7E/Af4lE4MB8GA1UdIwQY MBaAFEXv/pjCTD1tYIfI0dP5AbjM1ACIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAt ZGViN2I5MTg5MTY5LzEvMmJtdzluby1VbUtXU2U0cmM3c1Q4Ql9pVVRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAtZGViN2I5MTg5MTY5 LzEvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgH0QDAN BgkqhkiG9w0BAQsFAAOCAQEAWpyZEGRDKAmpk8W8gyFLsVnDD7KDFRm404xlKXMG 5R0N946tywmeIXGQ8TPzSufYEKoLglmJU2qBjI+Xc8UzG3FrEfzs5Cg0mKohir0m G1PiWy6LWtrlrdDJqDPQqWRDJN8DP20ZaHEkG2JYtoMWbqiE+QWQyAJfjt6XcjTw k2Ndds4K55261OCAqWQNx5ZzjV4n0eZfGElQT5si5hhLrCQP0PvbajdPvHw25jxf jAzD7LyMDtgn5PIB16L5r8on2x7cYe6nzwMVGw255B1wJHbnKzruTKDgmGtbNHDI /tt8PXllrNgn0DudU0oqtJoye3r8bbajB1xtr0BkDKYnBw== -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:47 2026 by rpki-client