This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/RD2bQy42cJtcLUpPd6bwEgSdC5g.roa File: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (raw, json) Hash identifier: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY= Subject key identifier: 44:3D:9B:43:2E:36:70:9B:5C:2D:4A:4F:77:A6:F0:12:04:9D:0B:98 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019B7758ECCD049281BC3B6F8D8C8DEC3DED Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/RD2bQy42cJtcLUpPd6bwEgSdC5g.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206731 IP address blocks: 2a04:ff00:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ec:cd:04:92:81:bc:3b:6f:8d:8c:8d:ec:3d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=443d9b432e36709b5c2d4a4f77a6f012049d0b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2a:5d:41:70:6f:ed:95:07:e0:9e:92:f8:0e: 9e:f7:2f:84:3e:e3:1d:f4:26:3a:76:eb:fc:fd:bc: 02:57:57:72:6f:82:92:48:33:de:a0:c5:a7:d8:5c: 7b:11:a5:a6:a3:5f:0d:8e:00:64:b2:82:22:78:82: 66:5c:70:5a:10:68:8f:75:d5:55:31:65:d8:af:73: b5:24:0a:47:ec:5d:f3:23:ab:5c:a2:cd:25:3d:7a: 97:4b:67:1b:51:e7:c4:bc:aa:e2:36:d0:a1:93:ef: af:17:37:ac:30:db:fb:9b:1d:71:ed:3d:cc:4f:df: 51:88:d2:ba:1f:c2:64:0b:d4:05:42:44:74:2e:29: c1:c1:24:3f:61:6c:83:66:a4:aa:3e:b8:32:cb:a8: 0e:41:80:f6:a7:15:92:8a:a2:e7:80:23:bb:56:ea: 4a:39:d3:a5:cd:da:25:c6:60:4b:55:0c:4c:df:d8: 73:02:05:3e:39:d6:c5:aa:cf:52:e7:83:fc:ca:2c: c9:dd:ac:a0:2c:1a:f1:bc:a7:a2:45:5f:77:71:a7: 36:25:e1:b3:a3:9d:80:a9:05:97:81:38:99:ed:c6: de:74:05:7e:25:24:cd:2e:ea:ba:4e:6a:de:60:f5: 7f:08:02:e6:35:76:f3:bb:53:8f:1c:77:32:a9:aa: 06:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3D:9B:43:2E:36:70:9B:5C:2D:4A:4F:77:A6:F0:12:04:9D:0B:98 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/RD2bQy42cJtcLUpPd6bwEgSdC5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:ff00:300::/40 Signature Algorithm: sha256WithRSAEncryption 2e:50:9b:c8:1b:5d:06:f4:29:47:a6:98:56:6a:98:d1:d4:19: f5:c3:2d:32:12:65:0b:44:16:bd:bd:a9:70:e9:9a:7b:c9:3e: 93:6a:ba:14:a4:93:42:6e:db:79:05:ec:85:3c:20:95:b1:d6: bb:9c:19:24:2d:28:02:de:3f:41:b4:ad:37:70:10:b1:e4:fe: 58:cd:ea:d4:3b:e0:16:f1:de:6a:67:e9:c9:44:a4:83:41:39: bb:1c:08:04:13:9f:c2:03:13:0b:a1:43:df:e8:00:65:41:df: 19:be:f2:de:0d:38:f0:82:28:98:38:65:a1:06:08:df:54:c1: 9f:64:e0:25:68:fd:52:b8:f4:e4:fd:6c:7b:58:96:97:3a:1f: 22:b4:6a:73:f8:56:ab:1e:c1:c6:eb:5a:f4:64:ac:f9:01:27: 21:8d:e6:a6:bb:86:9a:06:16:c3:00:e5:1b:26:db:b4:57:52: af:aa:e0:50:af:61:98:17:da:db:11:bd:97:b5:68:ec:bd:c5: 70:55:69:0f:26:8b:50:a3:45:bd:f1:6f:cc:d8:13:f7:f3:22: 01:b0:7f:bc:f1:36:ae:c0:d6:7f:8d:3c:24:37:8b:2f:36:ad: 3d:ad:0d:5d:20:e8:55:88:92:4a:09:eb:ce:81:eb:d0:e8:da: 4b:1e:af:19 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WOzNBJKBvDtvjYyN7D3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDNkOWI0MzJlMzY3MDliNWMyZDRhNGY3N2E2ZjAxMjA0OWQwYjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoipdQXBv7ZUH4J6S+A6e9y+EPuMd 9CY6duv8/bwCV1dyb4KSSDPeoMWn2Fx7EaWmo18NjgBksoIieIJmXHBaEGiPddVV MWXYr3O1JApH7F3zI6tcos0lPXqXS2cbUefEvKriNtChk++vFzesMNv7mx1x7T3M T99RiNK6H8JkC9QFQkR0LinBwSQ/YWyDZqSqPrgyy6gOQYD2pxWSiqLngCO7VupK OdOlzdolxmBLVQxM39hzAgU+OdbFqs9S54P8yizJ3aygLBrxvKeiRV93cac2JeGz o52AqQWXgTiZ7cbedAV+JSTNLuq6TmreYPV/CALmNXbzu1OPHHcyqaoGrwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEQ9m0MuNnCbXC1KT3em8BIEnQuYMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvUkQyYlF5NDJjSnRjTFVwUGQ2YndFZ1NkQzVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgT/AAMw DQYJKoZIhvcNAQELBQADggEBAC5Qm8gbXQb0KUemmFZqmNHUGfXDLTISZQtEFr29 qXDpmnvJPpNquhSkk0Ju23kF7IU8IJWx1rucGSQtKALeP0G0rTdwELHk/ljN6tQ7 4Bbx3mpn6clEpINBObscCAQTn8IDEwuhQ9/oAGVB3xm+8t4NOPCCKJg4ZaEGCN9U wZ9k4CVo/VK49OT9bHtYlpc6HyK0anP4VqsewcbrWvRkrPkBJyGN5qa7hpoGFsMA 5Rsm27RXUq+q4FCvYZgX2tsRvZe1aOy9xXBVaQ8mi1CjRb3xb8zYE/fzIgGwf7zx Nq7A1n+NPCQ3iy82rT2tDV0g6FWIkkoJ686B69Do2kserxk= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:51 2026 by rpki-client