This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/n2KWOfawjYsdrcU5kcTAVZoJ1KA.roa File: n2KWOfawjYsdrcU5kcTAVZoJ1KA.roa (raw, json) Hash identifier: xCEQfYPaY0aViHtL0tmC47O4thf/Lzk7C/w84Q6tZQg= Subject key identifier: 9F:62:96:39:F6:B0:8D:8B:1D:AD:C5:39:91:C4:C0:55:9A:09:D4:A0 Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b Certificate serial: 019B7FF287700775319756EB6207E054464C Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/n2KWOfawjYsdrcU5kcTAVZoJ1KA.roa Signing time: Fri 02 Jan 2026 18:22:39 +0000 ROA not before: Fri 02 Jan 2026 18:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197422 IP address blocks: 2001:67c:2608::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:87:70:07:75:31:97:56:eb:62:07:e0:54:46:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b Validity Not Before: Jan 2 18:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f629639f6b08d8b1dadc53991c4c0559a09d4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:12:f3:2a:4d:b2:58:36:5a:8a:31:fc:79: 9c:e5:5d:1a:d0:31:1d:04:6f:62:70:da:02:eb:bb: ef:11:a6:1c:89:14:92:2f:03:98:a5:3a:d2:d9:49: 70:0e:0f:cd:45:41:29:e3:2e:58:a8:bd:11:cb:27: 7a:fc:40:9d:cb:36:42:4d:16:9d:77:a9:25:f3:7c: d7:a8:72:9f:ce:e3:23:96:c2:d2:04:ef:26:23:8c: f9:26:f4:67:9b:6b:2a:85:37:f1:53:42:79:4f:77: 44:a2:8b:1f:d1:ae:29:1a:fc:ae:ae:f9:19:39:e9: 7b:02:04:f7:7e:60:10:ce:1f:eb:29:55:72:97:b2: 60:52:08:52:0d:72:6e:c9:1e:12:44:66:d9:2f:0c: d7:90:5e:3f:c1:2b:fe:80:1b:cf:4b:bd:33:b4:ce: 26:d4:08:02:f9:1e:84:e5:c6:22:b9:64:f3:a5:07: af:26:eb:ff:7c:e2:a2:39:0c:5a:0d:49:16:54:ed: 8e:a2:16:4f:36:d8:f4:74:9a:d9:61:9e:08:27:e6: 22:1d:be:58:5e:2d:9f:e2:b3:cd:4f:a3:d7:23:e0: a3:dc:80:ec:85:c6:c2:c7:cb:bd:54:da:fd:99:e2: fb:b4:11:95:2e:68:c3:25:0d:51:3d:5d:de:85:32: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:62:96:39:F6:B0:8D:8B:1D:AD:C5:39:91:C4:C0:55:9A:09:D4:A0 X509v3 Authority Key Identifier: keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/n2KWOfawjYsdrcU5kcTAVZoJ1KA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2608::/48 Signature Algorithm: sha256WithRSAEncryption 0b:0c:98:c5:0e:9f:72:9b:45:77:c2:b2:8d:d0:f8:b8:1b:80: 9e:64:48:7e:4f:5f:7e:82:a5:32:f3:f7:70:81:76:e2:f6:9c: 6c:2e:79:af:7b:ba:e2:fe:3b:62:85:d1:62:47:19:d1:a9:04: 3a:27:5a:6f:5f:cb:ce:ab:5d:e5:3b:55:a4:2b:8e:0f:5d:6b: c7:7f:a6:6f:fd:25:cc:e5:2f:75:af:1d:5d:b1:96:5f:66:3c: ff:c1:bc:d6:28:b1:99:e3:fa:66:6c:8e:c1:65:53:dc:82:f1: b2:d3:b0:3d:f4:d6:ee:cc:e6:1e:1d:0e:7b:66:ac:78:ab:28: 2b:eb:cc:05:35:40:ff:89:e8:8d:09:72:a2:19:3b:4b:16:9b: 98:92:d8:2c:23:bc:da:c2:08:10:08:ca:22:f3:8e:a2:29:61: b4:87:23:be:7e:e8:fb:9e:24:2f:e4:4e:ae:40:c1:c0:eb:8f: ba:a8:8f:b9:04:09:ba:1e:7e:85:f1:96:90:4a:91:8e:11:cb: a7:ea:7f:df:c6:4a:a8:66:c4:ad:c3:8f:71:f3:85:bc:bc:7b: ff:bc:41:d9:fb:56:9a:bc:6f:62:e0:2a:63:59:f4:32:fd:aa: 13:2e:f4:ab:88:10:a0:d7:3e:4d:95:0e:31:5b:54:58:e3:d4: c0:40:b0:d5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8odwB3Uxl1brYgfgVEZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NDQ0NGEwODY3ZmNjYTlhMzU2OWMxZmQwOTIxMzM1NDZh MzdmNGIwHhcNMjYwMTAyMTgyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjYyOTYzOWY2YjA4ZDhiMWRhZGM1Mzk5MWM0YzA1NTlhMDlkNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9US8ypNslg2Woox/Hmc5V0a0DEd BG9icNoC67vvEaYciRSSLwOYpTrS2UlwDg/NRUEp4y5YqL0Ryyd6/ECdyzZCTRad d6kl83zXqHKfzuMjlsLSBO8mI4z5JvRnm2sqhTfxU0J5T3dEoosf0a4pGvyurvkZ Oel7AgT3fmAQzh/rKVVyl7JgUghSDXJuyR4SRGbZLwzXkF4/wSv+gBvPS70ztM4m 1AgC+R6E5cYiuWTzpQevJuv/fOKiOQxaDUkWVO2OohZPNtj0dJrZYZ4IJ+YiHb5Y Xi2f4rPNT6PXI+Cj3IDshcbCx8u9VNr9meL7tBGVLmjDJQ1RPV3ehTLEJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ9iljn2sI2LHa3FOZHEwFWaCdSgMB8GA1UdIwQY MBaAFPdERKCGf8ypo1acH9CSEzVGo39LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mNjQwNTMtYjkzOC00YzUxLThlYzUt NWQyNTI0NGU0YWFkLzEvbjJLV09mYXdqWXNkcmNVNWtjVEFWWm9KMUtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mNjQwNTMtYjkzOC00YzUxLThlYzUtNWQyNTI0NGU0YWFk LzEvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCYI MA0GCSqGSIb3DQEBCwUAA4IBAQALDJjFDp9ym0V3wrKN0Pi4G4CeZEh+T19+gqUy 8/dwgXbi9pxsLnmve7ri/jtihdFiRxnRqQQ6J1pvX8vOq13lO1WkK44PXWvHf6Zv /SXM5S91rx1dsZZfZjz/wbzWKLGZ4/pmbI7BZVPcgvGy07A99NbuzOYeHQ57Zqx4 qygr68wFNUD/ieiNCXKiGTtLFpuYktgsI7zawggQCMoi846iKWG0hyO+fuj7niQv 5E6uQMHA64+6qI+5BAm6Hn6F8ZaQSpGOEcun6n/fxkqoZsStw49x84W8vHv/vEHZ +1aavG9i4CpjWfQy/aoTLvSriBCg1z5NlQ4xW1RY49TAQLDV -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:41 2026 by rpki-client