This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/n2KBANa3wBwM2_JjLezjaU7yil4.roa File: n2KBANa3wBwM2_JjLezjaU7yil4.roa (raw, json) Hash identifier: nQL7RujWiI6DbmiRr/tEusZiL9ZmH5N96DaqJuKa6wA= Subject key identifier: 9F:62:81:00:D6:B7:C0:1C:0C:DB:F2:63:2D:EC:E3:69:4E:F2:8A:5E Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208 Certificate serial: 019B7C7F300FF6F52D4B2F617B0B95DB264A Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/n2KBANa3wBwM2_JjLezjaU7yil4.roa Signing time: Fri 02 Jan 2026 02:17:48 +0000 ROA not before: Fri 02 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15435 IP address blocks: 2001:67c:2ef0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:30:0f:f6:f5:2d:4b:2f:61:7b:0b:95:db:26:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208 Validity Not Before: Jan 2 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f628100d6b7c01c0cdbf2632dece3694ef28a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:d4:2b:63:e6:c5:98:38:ba:3e:fb:49:7d: 93:86:0c:84:ed:e2:38:93:aa:d7:e1:0a:85:da:0e: 3a:5b:41:26:ac:f7:5c:59:d3:88:c5:fc:7c:af:17: c1:b8:f6:fe:7a:00:b4:c9:6d:3e:5e:7b:89:43:80: 32:5f:f1:f0:4b:1c:6a:af:f6:5a:d4:43:9d:a8:72: ba:0a:b2:4f:a7:b6:60:f0:6e:bb:35:06:37:37:e3: b5:59:23:84:5f:e2:24:9d:23:09:d7:3e:96:e6:5c: fb:f4:69:b4:8b:b6:f9:72:d8:e4:2c:89:91:c7:2f: c9:e8:1a:35:73:bf:62:fd:d8:4b:64:90:6c:65:75: a9:9a:f2:09:6f:c3:a9:e4:05:35:54:41:6e:2b:55: f4:21:16:ea:6a:a5:78:fd:81:86:04:9e:86:1b:4d: 8f:6f:c9:1e:42:fe:b5:8f:6d:fe:d2:c4:37:02:1b: 63:57:cf:1b:80:f6:cf:d5:ed:30:37:ab:48:16:7e: eb:8a:fb:41:0e:3f:6c:8a:c1:06:1d:12:5b:ad:97: 6f:b7:4f:ef:86:8b:cd:a6:59:51:2a:e3:fc:32:77: 91:34:2f:c9:45:a6:99:eb:41:30:72:7b:95:83:5b: 88:43:d7:5d:b5:26:10:bb:21:b4:89:f8:c8:80:be: 63:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:62:81:00:D6:B7:C0:1C:0C:DB:F2:63:2D:EC:E3:69:4E:F2:8A:5E X509v3 Authority Key Identifier: keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/n2KBANa3wBwM2_JjLezjaU7yil4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2ef0::/48 Signature Algorithm: sha256WithRSAEncryption 3b:1e:93:6a:67:97:aa:04:83:3e:d0:ba:a0:f4:55:ea:fa:1c: 44:bd:89:2a:6e:9f:f9:c3:7e:c7:be:a7:23:df:4e:d6:50:cf: 1e:7d:bb:4d:5a:1a:9c:10:13:2a:a4:67:34:8f:cb:99:36:f7: 86:a8:a4:3e:de:78:b8:62:54:49:92:a0:db:1c:e5:45:28:06: 85:ba:55:3c:5b:e6:a4:d1:40:f2:e9:53:28:b7:37:16:64:c6: 73:83:7e:54:88:a9:49:5d:c2:29:33:44:15:e9:23:ce:c4:ea: 3e:cd:0f:6f:56:9d:dd:d0:f6:c2:b5:ea:71:80:84:51:c3:b7: 61:a6:03:93:1f:e4:e5:dd:05:79:14:44:e4:fc:fa:0e:2a:97: 69:11:b5:5f:d7:50:ad:e9:4f:27:39:42:bd:0a:b6:10:b9:46: c8:63:e7:b8:9d:3c:f5:85:c6:f7:5d:1f:45:ba:a8:67:4c:09: 02:3a:48:bb:46:20:75:cc:5e:d7:3e:fb:d2:df:b9:2a:3a:9a: 88:97:9c:18:34:21:d1:82:be:51:8d:e3:5f:ec:3d:9f:13:c2: 21:e6:92:4b:d3:b4:bd:e8:75:07:a7:7f:b8:72:43:18:1c:2a: 19:41:97:56:9d:5a:86:c1:ff:55:50:80:dc:55:dc:3e:56:f7: 9f:b9:2b:71 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8fzAP9vUtSy9hewuV2yZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzgxMThkYjA1ZTRjOTNlNzZmYTFmMWM5NTY3OWM3MDVi ZWIyMDgwHhcNMjYwMTAyMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjYyODEwMGQ2YjdjMDFjMGNkYmYyNjMyZGVjZTM2OTRlZjI4YTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1XUK2PmxZg4uj77SX2ThgyE7eI4 k6rX4QqF2g46W0EmrPdcWdOIxfx8rxfBuPb+egC0yW0+XnuJQ4AyX/HwSxxqr/Za 1EOdqHK6CrJPp7Zg8G67NQY3N+O1WSOEX+IknSMJ1z6W5lz79Gm0i7b5ctjkLImR xy/J6Bo1c79i/dhLZJBsZXWpmvIJb8Op5AU1VEFuK1X0IRbqaqV4/YGGBJ6GG02P b8keQv61j23+0sQ3AhtjV88bgPbP1e0wN6tIFn7rivtBDj9sisEGHRJbrZdvt0/v hovNpllRKuP8MneRNC/JRaaZ60EwcnuVg1uIQ9ddtSYQuyG0ifjIgL5j+QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ9igQDWt8AcDNvyYy3s42lO8opeMB8GA1UdIwQY MBaAFKN4EY2wXkyT52+h8clWeccFvrIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2Yt ODY2NjA3YWYyZmE1LzEvbjJLQkFOYTN3QndNMl9KakxlemphVTd5aWw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2YtODY2NjA3YWYyZmE1 LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC7w MA0GCSqGSIb3DQEBCwUAA4IBAQA7HpNqZ5eqBIM+0Lqg9FXq+hxEvYkqbp/5w37H vqcj307WUM8efbtNWhqcEBMqpGc0j8uZNveGqKQ+3ni4YlRJkqDbHOVFKAaFulU8 W+ak0UDy6VMotzcWZMZzg35UiKlJXcIpM0QV6SPOxOo+zQ9vVp3d0PbCtepxgIRR w7dhpgOTH+Tl3QV5FETk/PoOKpdpEbVf11Ct6U8nOUK9CrYQuUbIY+e4nTz1hcb3 XR9FuqhnTAkCOki7RiB1zF7XPvvS37kqOpqIl5wYNCHRgr5RjeNf7D2fE8Ih5pJL 07S96HUHp3+4ckMYHCoZQZdWnVqGwf9VUIDcVdw+VvefuStx -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:50 2026 by rpki-client