This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/2MEGX0xXq-CS52TZ2rRO2bOlBks.roa File: 2MEGX0xXq-CS52TZ2rRO2bOlBks.roa (raw, json) Hash identifier: /HvTwpT0Q11rSBUmASk+8crSrENE7H5BgnIrEvjimdw= Subject key identifier: D8:C1:06:5F:4C:57:AB:E0:92:E7:64:D9:DA:B4:4E:D9:B3:A5:06:4B Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55 Certificate serial: 019B7B368D7B1C8FA5D8E07E5F6EEC9DED86 Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/2MEGX0xXq-CS52TZ2rRO2bOlBks.roa Signing time: Thu 01 Jan 2026 20:18:51 +0000 ROA not before: Thu 01 Jan 2026 20:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51861 IP address blocks: 2001:67c:374::/48 maxlen: 48 2001:67c:374:4000::/50 maxlen: 50 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8d:7b:1c:8f:a5:d8:e0:7e:5f:6e:ec:9d:ed:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55 Validity Not Before: Jan 1 20:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8c1065f4c57abe092e764d9dab44ed9b3a5064b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:37:94:5a:b2:45:19:93:b2:34:f3:db:0a: f2:d6:a7:6b:8e:31:0a:50:33:b0:9a:9d:c2:89:3a: 3f:e2:e1:c6:a3:c4:44:de:47:8b:cf:93:ee:48:1c: 60:bf:d8:35:3d:87:bb:70:8a:1d:a5:72:cb:14:1c: 35:e9:c2:93:39:58:b4:4e:39:08:32:e2:2f:10:58: 94:b1:7e:af:26:83:07:95:74:9a:e9:fc:36:08:e6: d0:ff:3d:09:1d:4a:31:6c:23:93:97:f6:f2:96:0e: 72:3e:8a:64:72:38:c1:4d:91:78:4d:d5:b9:3c:49: ba:b8:65:0f:c3:e1:19:24:33:81:2c:3d:41:1f:0f: 2f:47:c1:9a:fe:2c:f2:0e:16:1d:97:0c:e9:59:b0: ea:81:75:0c:fa:f1:bb:49:e8:2b:e7:e2:37:1b:83: 63:e4:4b:be:1c:33:94:50:3f:1b:b9:68:ca:aa:cb: 0e:94:71:c5:d1:09:97:6d:2f:73:6b:f1:3a:e0:85: 96:b1:b0:2b:20:45:a2:93:3c:ab:38:bd:9b:ed:e4: 5d:20:32:0a:35:83:ce:ff:04:f3:1f:f1:f9:6f:26: 5b:34:cb:1e:1d:f0:19:69:6e:0a:85:da:4b:1f:f2: ee:a1:f0:83:7d:ab:4e:e2:e8:c7:bb:00:88:74:d4: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C1:06:5F:4C:57:AB:E0:92:E7:64:D9:DA:B4:4E:D9:B3:A5:06:4B X509v3 Authority Key Identifier: keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/2MEGX0xXq-CS52TZ2rRO2bOlBks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:374::/48 Signature Algorithm: sha256WithRSAEncryption 36:85:bb:42:b2:09:bc:6c:0c:34:62:f1:ba:80:ac:1b:54:d6: ed:cf:65:90:d8:38:9b:18:5c:ac:db:0e:fc:e4:17:a9:c2:9c: 03:bf:6d:cb:65:b2:52:f6:fb:96:3e:c8:33:0b:ef:af:fe:a5: d6:15:7b:5c:a6:35:09:be:c6:5e:0c:dd:c1:0b:1f:48:35:2b: 05:b6:35:97:8a:ac:d9:fb:85:f2:fd:af:cf:3a:a7:f3:1c:57: f6:33:33:09:74:5b:96:c6:d3:c8:1b:d0:f7:8c:20:1f:cb:e5: 64:62:70:ad:ac:aa:48:c8:51:53:7d:49:a4:ab:f7:ee:33:ac: 0c:ff:69:8e:fb:cd:74:07:56:45:26:c0:1f:c0:05:2d:9f:19: e9:03:3f:c8:6b:3a:25:76:4e:75:eb:f6:21:54:43:38:e2:50: 76:c6:7b:20:8d:ea:69:ff:36:11:cb:5b:a7:c6:e0:5b:f0:da: 8a:31:55:fe:25:34:9b:bb:7b:10:03:bd:06:32:ba:c5:2d:6e: 82:9e:93:d6:73:96:d7:4e:4f:b1:67:a7:59:40:2d:3d:06:8a: bd:e4:a0:1e:19:a5:4c:77:82:f0:59:bb:9a:24:62:1c:e8:5c: 10:78:29:ed:20:36:f8:78:03:a5:93:6a:6d:09:cf:cd:5f:79: 15:54:ae:26 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7No17HI+l2OB+X27sne2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNWE1YTQzYmQyMzg0Zjg5MmQyNjVlNTU4YjQ0MTFlOGIy MzJiNTUwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGMxMDY1ZjRjNTdhYmUwOTJlNzY0ZDlkYWI0NGVkOWIzYTUwNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4Q3lFqyRRmTsjTz2wry1qdrjjEK UDOwmp3CiTo/4uHGo8RE3keLz5PuSBxgv9g1PYe7cIodpXLLFBw16cKTOVi0TjkI MuIvEFiUsX6vJoMHlXSa6fw2CObQ/z0JHUoxbCOTl/bylg5yPopkcjjBTZF4TdW5 PEm6uGUPw+EZJDOBLD1BHw8vR8Ga/izyDhYdlwzpWbDqgXUM+vG7Segr5+I3G4Nj 5Eu+HDOUUD8buWjKqssOlHHF0QmXbS9za/E64IWWsbArIEWikzyrOL2b7eRdIDIK NYPO/wTzH/H5byZbNMseHfAZaW4KhdpLH/LuofCDfatO4ujHuwCIdNRMvwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNjBBl9MV6vgkudk2dq0TtmzpQZLMB8GA1UdIwQY MBaAFLJaWkO9I4T4ktJl5Vi0QR6LIytVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODIt NWViZGU4YjhjZTFkLzEvMk1FR1gweFhxLUNTNTJUWjJyUk8yYk9sQmtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODItNWViZGU4YjhjZTFk LzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAN0 MA0GCSqGSIb3DQEBCwUAA4IBAQA2hbtCsgm8bAw0YvG6gKwbVNbtz2WQ2DibGFys 2w785BepwpwDv23LZbJS9vuWPsgzC++v/qXWFXtcpjUJvsZeDN3BCx9INSsFtjWX iqzZ+4Xy/a/POqfzHFf2MzMJdFuWxtPIG9D3jCAfy+VkYnCtrKpIyFFTfUmkq/fu M6wM/2mO+810B1ZFJsAfwAUtnxnpAz/Iazoldk516/YhVEM44lB2xnsgjepp/zYR y1unxuBb8NqKMVX+JTSbu3sQA70GMrrFLW6CnpPWc5bXTk+xZ6dZQC09Boq95KAe GaVMd4LwWbuaJGIc6FwQeCntIDb4eAOlk2ptCc/NX3kVVK4m -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:34 2026 by rpki-client