This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/znNyesTwbEHb5GdVovxJsLLM9KQ.roa File: znNyesTwbEHb5GdVovxJsLLM9KQ.roa (raw, json) Hash identifier: WbfDTvPg/i+BiVxKsZsH5gFpX+Sz+6FiIPk4KG/O+AA= Subject key identifier: CE:73:72:7A:C4:F0:6C:41:DB:E4:67:55:A2:FC:49:B0:B2:CC:F4:A4 Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Certificate serial: 019B7F8355C22EEB2ADCDC971568FA394FFA Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/znNyesTwbEHb5GdVovxJsLLM9KQ.roa Signing time: Fri 02 Jan 2026 16:21:12 +0000 ROA not before: Fri 02 Jan 2026 16:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2613 IP address blocks: 2a02:2528:2613::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:55:c2:2e:eb:2a:dc:dc:97:15:68:fa:39:4f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Validity Not Before: Jan 2 16:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce73727ac4f06c41dbe46755a2fc49b0b2ccf4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:f6:3a:c8:89:d7:76:10:4c:1d:26:fb:b9: 8e:5f:b3:d2:4f:71:e4:2c:fc:1a:db:72:af:a7:43: 31:eb:b7:93:1d:8e:24:cf:c4:14:53:0e:28:22:27: 6b:b6:e6:05:0f:e8:e3:05:1c:97:8a:15:b9:90:c3: e2:61:d3:01:dd:a9:22:6c:10:15:d7:25:7b:d2:8b: b5:de:85:f5:ff:fb:3f:30:40:1f:59:5a:68:31:20: 49:14:9e:ca:64:e2:ff:db:5f:a5:bd:4e:88:bf:85: eb:68:97:0d:d8:88:b3:57:21:b3:00:53:7f:df:78: 74:5c:6b:86:8c:4d:b5:d1:2c:45:47:42:e6:a8:fa: a4:54:3e:82:86:f7:29:2a:fd:4d:07:f6:a6:ca:c6: 9d:f6:88:c5:13:de:e4:09:20:87:60:09:ff:86:cf: 4c:a5:24:f4:62:34:d0:ef:8f:a6:87:bb:f0:ac:d2: 0a:3e:5f:92:a1:68:14:ce:77:10:fa:87:f3:45:af: 0d:a2:f0:a9:2e:02:d5:9c:7a:72:78:4c:16:a5:85: ef:8f:d4:55:2e:09:42:e9:7f:e9:28:cf:79:16:35: a8:46:e2:79:d6:60:35:9a:76:9c:39:ef:55:4c:58: 09:d9:3b:f2:17:3b:61:43:54:30:51:e2:2b:65:47: 32:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:73:72:7A:C4:F0:6C:41:DB:E4:67:55:A2:FC:49:B0:B2:CC:F4:A4 X509v3 Authority Key Identifier: keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/znNyesTwbEHb5GdVovxJsLLM9KQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2528:2613::/48 Signature Algorithm: sha256WithRSAEncryption 60:f0:39:12:80:17:39:0c:c1:43:03:ba:9b:ec:81:e8:78:28: c1:8e:9f:32:de:bf:bd:86:ce:b9:b5:64:63:1b:ea:b5:c2:d5: 0e:13:94:2d:cf:e0:55:14:bc:ad:5b:1f:9f:13:61:07:e9:ba: 49:4d:57:58:c0:95:ff:d1:cf:8b:4f:b8:94:f6:f7:70:ce:21: c3:da:c2:61:17:87:62:4e:67:af:2f:49:c8:01:98:84:21:90: 7e:6c:98:dc:99:90:2d:07:bc:ec:43:58:ec:66:41:b2:eb:15: bb:f2:97:d0:6d:b3:cd:13:ab:e0:64:60:14:70:ab:e0:4e:ba: 5f:2f:67:21:53:69:02:ff:c9:aa:2e:94:9f:e3:69:46:b2:ee: a5:94:76:cd:57:07:a3:6c:47:f7:40:23:10:8f:01:5d:aa:ca: 74:bb:95:d1:a6:0b:d0:b3:81:b3:aa:ef:03:5a:04:5c:0b:4a: b5:ba:e8:0a:7a:79:4f:a0:d0:80:ec:53:63:3b:81:ef:3a:dd: a2:b4:a4:15:30:c8:89:f1:52:22:05:ab:a6:39:a3:2c:4c:ee: 3e:00:85:fc:a3:d1:d7:85:b1:93:1b:09:83:d8:4c:7a:7d:dd: 75:d9:d6:b0:d7:b6:37:64:35:49:a9:55:66:da:83:f1:a2:ef: 14:87:fe:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g1XCLusq3NyXFWj6OU/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj NGZkMjIwHhcNMjYwMTAyMTYyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTczNzI3YWM0ZjA2YzQxZGJlNDY3NTVhMmZjNDliMGIyY2NmNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju72OsiJ13YQTB0m+7mOX7PST3Hk LPwa23Kvp0Mx67eTHY4kz8QUUw4oIidrtuYFD+jjBRyXihW5kMPiYdMB3akibBAV 1yV70ou13oX1//s/MEAfWVpoMSBJFJ7KZOL/21+lvU6Iv4XraJcN2IizVyGzAFN/ 33h0XGuGjE210SxFR0LmqPqkVD6ChvcpKv1NB/amysad9ojFE97kCSCHYAn/hs9M pST0YjTQ74+mh7vwrNIKPl+SoWgUzncQ+ofzRa8NovCpLgLVnHpyeEwWpYXvj9RV LglC6X/pKM95FjWoRuJ51mA1mnacOe9VTFgJ2TvyFzthQ1QwUeIrZUcyswIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM5zcnrE8GxB2+RnVaL8SbCyzPSkMB8GA1UdIwQY MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt MzQ2OTAzNGZhNDQxLzEvem5OeWVzVHdiRUhiNUdkVm92eEpzTExNOUtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIlKCYT MA0GCSqGSIb3DQEBCwUAA4IBAQBg8DkSgBc5DMFDA7qb7IHoeCjBjp8y3r+9hs65 tWRjG+q1wtUOE5Qtz+BVFLytWx+fE2EH6bpJTVdYwJX/0c+LT7iU9vdwziHD2sJh F4diTmevL0nIAZiEIZB+bJjcmZAtB7zsQ1jsZkGy6xW78pfQbbPNE6vgZGAUcKvg TrpfL2chU2kC/8mqLpSf42lGsu6llHbNVwejbEf3QCMQjwFdqsp0u5XRpgvQs4Gz qu8DWgRcC0q1uugKenlPoNCA7FNjO4HvOt2itKQVMMiJ8VIiBaumOaMsTO4+AIX8 o9HXhbGTGwmD2Ex6fd112daw17Y3ZDVJqVVm2oPxou8Uh/4P -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:36 2026 by rpki-client