This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/2n1oysBsLoiaYcanB-5u9wHCku4.roa File: 2n1oysBsLoiaYcanB-5u9wHCku4.roa (raw, json) Hash identifier: N9Y8sdrm6t7ka/+qYdutIPmZstG6eMi6hXnCFfXaBBI= Subject key identifier: DA:7D:68:CA:C0:6C:2E:88:9A:61:C6:A7:07:EE:6E:F7:01:C2:92:EE Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Certificate serial: 019B7E3875B16808C3BCCF88188F58DB6BCD Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/2n1oysBsLoiaYcanB-5u9wHCku4.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43395 IP address blocks: 164.138.203.0/24 maxlen: 24 2a05:7a80:fffd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:75:b1:68:08:c3:bc:cf:88:18:8f:58:db:6b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da7d68cac06c2e889a61c6a707ee6ef701c292ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:4c:b3:7a:0b:b2:2d:db:30:33:12:eb:3f: 0a:42:c7:67:ae:72:48:96:c0:2c:ae:91:df:c8:48: 23:62:0e:d8:9f:a7:7f:80:db:f4:eb:61:a1:e4:ea: 45:0f:1f:f0:f4:d9:f1:e2:06:09:ca:7c:46:86:8d: c4:84:bf:ac:19:cd:5e:cd:0c:d4:dd:32:e3:6d:b4: 5f:40:a4:52:87:2c:9e:00:ec:8c:98:6c:89:c0:d2: 72:c4:08:9e:27:ef:8c:3f:a2:e1:9e:e0:16:65:08: 40:98:a0:7b:69:0f:13:7e:77:c2:c9:3c:f5:d4:f8: f3:26:2a:9c:ab:b1:54:da:ed:b0:43:3b:5e:0f:5e: 51:27:2d:d9:25:9a:29:a4:75:67:99:35:38:30:9c: 25:0c:79:80:43:d8:8b:64:4c:20:b2:a8:81:5a:7a: 77:44:39:0f:99:8a:2a:f9:44:0a:70:91:5f:78:7e: ac:24:a9:9c:b3:1a:71:46:e5:a5:7c:2d:6a:52:63: 0b:61:45:57:4a:e5:0c:10:d3:96:e4:85:4d:9a:c5: dc:14:a4:5f:06:6f:52:10:af:29:83:7f:d5:ce:c2: 87:9a:38:30:6e:fe:9b:82:da:b0:c2:16:25:d5:b5: ba:04:e7:41:cb:15:d5:a4:e2:a3:93:22:d8:15:51: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7D:68:CA:C0:6C:2E:88:9A:61:C6:A7:07:EE:6E:F7:01:C2:92:EE X509v3 Authority Key Identifier: keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/2n1oysBsLoiaYcanB-5u9wHCku4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.203.0/24 IPv6: 2a05:7a80:fffd::/48 Signature Algorithm: sha256WithRSAEncryption 35:81:87:4a:d0:3c:fd:c2:1e:dd:05:4b:e8:cf:6a:4e:bf:33: 6d:a7:0e:1e:8d:c6:6a:43:35:a2:77:56:aa:97:4d:5a:33:d1: a5:40:89:1e:ff:b7:5e:e1:18:98:b2:af:2d:93:b3:1f:53:80: b1:f9:53:6b:1c:e8:db:82:b9:48:50:44:11:66:46:e9:12:6e: a2:42:cb:3d:e6:02:34:90:12:74:06:e4:04:0b:cb:4d:98:c8: 3d:02:60:07:b8:23:a2:b9:a5:fb:eb:fd:83:2a:9d:d5:28:af: fd:aa:c4:ec:79:d7:78:5b:03:d9:73:7a:46:cf:0f:62:93:5c: 3c:3f:31:5d:3f:74:48:fb:07:a0:ba:95:90:bc:a6:a7:7b:95: a9:3c:08:4e:ab:24:de:af:b9:db:a2:97:ab:9d:b3:7c:76:15: 82:50:d3:16:41:97:59:44:f1:d5:32:4f:48:79:60:b1:eb:62: a1:21:23:46:b3:81:95:5f:c7:d1:03:ca:e3:22:90:4c:04:bd: 4e:53:bb:23:ce:c5:02:f9:12:10:f1:24:dd:2e:11:6f:f3:87: b0:36:22:20:0b:37:22:17:a8:45:a1:08:45:0e:f1:44:9b:49: 85:2b:6f:38:77:96:7c:c1:e9:e9:63:b6:89:16:dc:d5:0d:40: 43:05:41:cd -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OHWxaAjDvM+IGI9Y22vNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTMwY2FiM2JhZTViNTI5ZmFiZWI5OTc5YmQ2ODVmN2Iy YmRhYjMwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTdkNjhjYWMwNmMyZTg4OWE2MWM2YTcwN2VlNmVmNzAxYzI5MmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9hMs3oLsi3bMDMS6z8KQsdnrnJI lsAsrpHfyEgjYg7Yn6d/gNv062Gh5OpFDx/w9Nnx4gYJynxGho3EhL+sGc1ezQzU 3TLjbbRfQKRShyyeAOyMmGyJwNJyxAieJ++MP6LhnuAWZQhAmKB7aQ8TfnfCyTz1 1PjzJiqcq7FU2u2wQzteD15RJy3ZJZoppHVnmTU4MJwlDHmAQ9iLZEwgsqiBWnp3 RDkPmYoq+UQKcJFfeH6sJKmcsxpxRuWlfC1qUmMLYUVXSuUMENOW5IVNmsXcFKRf Bm9SEK8pg3/VzsKHmjgwbv6bgtqwwhYl1bW6BOdByxXVpOKjkyLYFVGs2wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNp9aMrAbC6ImmHGpwfubvcBwpLuMB8GA1UdIwQY MBaAFJdTDKs7rltSn6vrmXm9aF97K9qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYt OWNmYTJjN2Q4MTZlLzEvMm4xb3lzQnNMb2lhWWNhbkItNXU5d0hDa3U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYtOWNmYTJjN2Q4MTZl LzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQApIrLMA8E AgACMAkDBwAqBXqA//0wDQYJKoZIhvcNAQELBQADggEBADWBh0rQPP3CHt0FS+jP ak6/M22nDh6NxmpDNaJ3VqqXTVoz0aVAiR7/t17hGJiyry2Tsx9TgLH5U2sc6NuC uUhQRBFmRukSbqJCyz3mAjSQEnQG5AQLy02YyD0CYAe4I6K5pfvr/YMqndUor/2q xOx513hbA9lzekbPD2KTXDw/MV0/dEj7B6C6lZC8pqd7lak8CE6rJN6vuduil6ud s3x2FYJQ0xZBl1lE8dUyT0h5YLHrYqEhI0azgZVfx9EDyuMikEwEvU5TuyPOxQL5 EhDxJN0uEW/zh7A2IiALNyIXqEWhCEUO8USbSYUrbzh3lnzB6eljtokW3NUNQEMF Qc0= -----END CERTIFICATE-----Generated at Mon Jan 26 21:05:07 2026 by rpki-client