This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa File: 2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa (raw, json) Hash identifier: IF9NGoEJ576DjGe0oh23BNnEV/9sdYpBnLiKAR1szr4= Subject key identifier: D9:6F:14:6E:E3:33:27:FE:25:D1:75:EA:A7:63:28:A9:67:C5:5E:9A Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Certificate serial: 019B7E38E4F7F663E239C0774D0EFE78B751 Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 2a04:a3c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e4:f7:f6:63:e2:39:c0:77:4d:0e:fe:78:b7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d96f146ee33327fe25d175eaa76328a967c55e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:16:a2:f7:d6:a3:f3:af:55:92:36:1b:43:63: 39:94:3d:f8:4b:39:f7:14:69:79:0b:90:4b:15:e5: 60:b5:ea:f3:13:4a:8b:4d:e0:78:f5:5e:99:ca:6d: ad:7e:f0:73:a9:90:58:7c:ca:df:45:67:a9:35:aa: d4:44:e3:21:09:41:c9:95:42:36:fa:4c:29:85:7a: 2c:60:b1:a4:03:ed:cc:86:20:5d:37:29:83:be:b4: f2:c8:b1:cd:1a:36:39:69:ba:b3:3a:c3:be:db:8a: cf:3a:ce:14:86:7a:3b:be:24:f8:11:2b:4c:25:21: 38:f5:93:6c:3a:f6:76:1e:d9:b0:1f:ab:a4:5c:84: cf:4e:e4:89:b9:91:1a:2a:d5:d3:d2:04:5c:ea:c1: d1:16:23:51:3c:ee:18:af:b7:86:65:e2:07:43:79: 0a:0a:9f:c3:c4:6a:f7:d0:34:cf:5c:8b:78:c8:bc: b5:84:8a:91:d6:1b:ac:46:fe:d0:10:99:00:0f:81: 98:e8:e5:fb:a1:7d:dc:fe:12:ca:61:96:7c:71:7b: 6c:db:50:20:8d:10:03:a5:c7:61:18:39:20:f1:ca: 78:c8:b4:3a:70:77:cf:0c:31:f1:22:b4:67:8a:cc: b2:fd:d6:af:da:62:41:01:f1:4f:d5:83:b9:1e:4b: b9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6F:14:6E:E3:33:27:FE:25:D1:75:EA:A7:63:28:A9:67:C5:5E:9A X509v3 Authority Key Identifier: keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:a3c7::/32 Signature Algorithm: sha256WithRSAEncryption 27:e9:0b:a8:af:df:45:72:17:20:fe:55:7f:d9:98:1a:04:2b: 5c:b8:98:6a:d2:ce:47:fe:e1:c8:e8:22:bf:65:93:3d:22:0c: b6:10:51:41:0c:5a:69:ed:a2:22:40:69:33:f1:36:78:4e:6d: 7b:93:5b:00:5e:c1:32:9f:98:19:b2:b5:62:c9:53:bb:84:bf: ef:98:d0:d5:a3:0c:39:a7:ba:2b:35:ab:2e:bf:3e:2c:0d:d6: f8:db:1e:e0:6f:4f:27:a7:fd:a2:44:02:23:63:2c:12:de:25: 0d:26:fd:0b:c7:51:67:67:54:1d:24:94:59:92:aa:6a:9e:4e: c5:b1:76:a1:9f:25:f2:06:bf:6e:36:4c:ad:ea:21:87:39:92: 1d:30:dc:38:d0:ff:b9:60:f7:04:06:d4:e2:6f:9e:a7:ff:3a: 6c:68:8b:45:79:fd:cd:40:34:da:b8:3f:5b:d8:76:13:b7:b4: 4c:18:c4:b7:34:67:53:dc:37:48:72:09:0b:88:a3:b8:59:59: ce:2d:3a:69:e6:ac:ba:ed:33:dd:90:43:2a:6d:7f:14:e8:3c: 02:91:8e:48:3a:6d:43:3a:53:9b:58:18:40:c8:0b:da:66:75: 7b:93:24:6d:ab:61:7f:b7:e2:be:50:06:40:ce:18:03:1f:e6: b5:bd:3e:67 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OOT39mPiOcB3TQ7+eLdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDQ2OGYzY2MzZjM4NmYyNmU2MjgxYjdmYThiMGMzYmIy MzZhMDYwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTZmMTQ2ZWUzMzMyN2ZlMjVkMTc1ZWFhNzYzMjhhOTY3YzU1ZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Rai99aj869VkjYbQ2M5lD34Szn3 FGl5C5BLFeVgterzE0qLTeB49V6Zym2tfvBzqZBYfMrfRWepNarUROMhCUHJlUI2 +kwphXosYLGkA+3MhiBdNymDvrTyyLHNGjY5abqzOsO+24rPOs4Uhno7viT4EStM JSE49ZNsOvZ2HtmwH6ukXITPTuSJuZEaKtXT0gRc6sHRFiNRPO4Yr7eGZeIHQ3kK Cp/DxGr30DTPXIt4yLy1hIqR1husRv7QEJkAD4GY6OX7oX3c/hLKYZZ8cXts21Ag jRADpcdhGDkg8cp4yLQ6cHfPDDHxIrRnisyy/dav2mJBAfFP1YO5Hku5BQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNlvFG7jMyf+JdF16qdjKKlnxV6aMB8GA1UdIwQY MBaAFNlEaPPMPzhvJuYoG3+osMO7I2oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2Qt NzZmYTUxNWI0YjZlLzEvMlc4VWJ1TXpKXzRsMFhYcXAyTW9xV2ZGWHBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2QtNzZmYTUxNWI0YjZl LzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgSjxzAN BgkqhkiG9w0BAQsFAAOCAQEAJ+kLqK/fRXIXIP5Vf9mYGgQrXLiYatLOR/7hyOgi v2WTPSIMthBRQQxaae2iIkBpM/E2eE5te5NbAF7BMp+YGbK1YslTu4S/75jQ1aMM Oae6KzWrLr8+LA3W+Nse4G9PJ6f9okQCI2MsEt4lDSb9C8dRZ2dUHSSUWZKqap5O xbF2oZ8l8ga/bjZMreohhzmSHTDcOND/uWD3BAbU4m+ep/86bGiLRXn9zUA02rg/ W9h2E7e0TBjEtzRnU9w3SHIJC4ijuFlZzi06aeasuu0z3ZBDKm1/FOg8ApGOSDpt QzpTm1gYQMgL2mZ1e5Mkbathf7fivlAGQM4YAx/mtb0+Zw== -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:31 2026 by rpki-client