This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/p_2QswK0tfCmIfiQf4KGVocaP0k.roa File: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (raw, json) Hash identifier: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E= Subject key identifier: A7:FD:90:B3:02:B4:B5:F0:A6:21:F8:90:7F:82:86:56:87:1A:3F:49 Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019B7A5BA1904DA1C5C30F555E7C6FD76C1F Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/p_2QswK0tfCmIfiQf4KGVocaP0k.roa Signing time: Thu 01 Jan 2026 16:19:44 +0000 ROA not before: Thu 01 Jan 2026 16:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48777 IP address blocks: 2a0a:4587:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:a1:90:4d:a1:c5:c3:0f:55:5e:7c:6f:d7:6c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Jan 1 16:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7fd90b302b4b5f0a621f8907f828656871a3f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:92:52:e0:6f:15:0d:7d:09:3d:1e:cc:8c: f4:e1:a0:48:58:94:38:42:b2:ac:49:64:2c:30:ec: c7:d0:98:fa:d2:03:c4:36:8f:3c:ba:88:9d:73:70: d9:67:91:2a:6a:e7:ac:a7:68:d3:b6:fa:d1:61:d9: aa:8b:c7:15:09:1c:c9:8e:a6:dc:6c:cf:9d:64:2a: 7e:71:93:79:8c:68:a3:41:0d:ac:88:7d:6b:91:4e: e2:0b:97:46:15:65:34:68:15:2f:07:92:54:e7:dc: 13:35:a6:e1:d7:49:d8:46:67:1f:61:1e:04:bd:73: b7:23:54:00:b0:37:aa:45:63:c8:06:f3:e9:78:4b: 1c:2d:40:5b:44:d2:2c:6d:10:2f:96:4d:5e:a4:d9: f0:35:2e:6d:fb:3c:53:13:93:4d:35:44:c1:08:74: 7a:a9:9b:c5:bb:88:5e:37:9b:5b:17:f3:c5:c3:05: 9f:52:78:bd:ad:5f:e8:f3:67:b5:52:59:78:37:33: 08:9f:e3:65:90:09:e7:01:f7:83:d7:24:af:ad:88: b6:b8:47:ad:ff:a1:cb:07:7e:7a:14:f3:62:d2:4e: 8c:2e:38:04:65:15:94:ac:d4:3c:c1:16:95:6b:fb: 3a:f0:44:a8:b7:fd:a5:61:96:f5:5f:0e:42:e8:2e: 9b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FD:90:B3:02:B4:B5:F0:A6:21:F8:90:7F:82:86:56:87:1A:3F:49 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/p_2QswK0tfCmIfiQf4KGVocaP0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:4587:2020::/48 Signature Algorithm: sha256WithRSAEncryption 40:81:c7:c8:b9:0f:3e:e7:d0:33:0b:99:4b:3d:8d:7b:57:d3: 75:ea:f0:02:ef:ae:e3:36:fb:8a:23:52:51:bc:13:dc:53:9d: db:89:08:c3:f8:17:08:f0:3a:4c:50:e1:92:cd:05:fa:f5:5b: 59:c1:81:61:6c:a9:4c:b2:a7:ac:3f:e4:b3:79:75:01:29:b8: bc:09:88:bd:b1:76:56:26:19:eb:c2:d5:46:77:43:49:a2:08: 83:c7:fc:e6:d7:b8:4d:4a:1f:91:2c:dd:28:50:1b:d6:cd:7b: 79:9e:ed:56:3c:13:cb:23:7f:d8:e4:47:bc:52:0c:4e:59:6c: f6:21:0d:35:02:56:32:6a:68:8f:2c:d1:9b:c6:2a:65:d2:bf: 1a:58:bc:32:f5:ba:f9:12:5c:0b:bf:87:47:0a:9a:6e:00:37: 33:b9:99:d9:37:97:e8:9c:d5:6c:17:a9:08:b9:73:0f:02:bc: a4:e8:24:c7:b1:68:6a:3a:f7:44:51:ed:4c:5c:ae:2b:38:f9: ad:bf:a1:a0:86:df:b2:7d:b7:58:17:12:8f:54:63:14:fd:6b: 97:71:50:50:54:04:d4:dc:bd:12:f7:e5:e1:58:f5:fc:f3:3d: a4:eb:4c:e3:c1:46:62:89:e5:ce:54:df:f2:eb:14:2a:d8:1f: 4f:48:a5:1f -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt6W6GQTaHFww9VXnxv12wfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwMTAxMTYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2ZkOTBiMzAyYjRiNWYwYTYyMWY4OTA3ZjgyODY1Njg3MWEzZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGWSUuBvFQ19CT0ezIz04aBIWJQ4 QrKsSWQsMOzH0Jj60gPENo88uoidc3DZZ5Eqauesp2jTtvrRYdmqi8cVCRzJjqbc bM+dZCp+cZN5jGijQQ2siH1rkU7iC5dGFWU0aBUvB5JU59wTNabh10nYRmcfYR4E vXO3I1QAsDeqRWPIBvPpeEscLUBbRNIsbRAvlk1epNnwNS5t+zxTE5NNNUTBCHR6 qZvFu4heN5tbF/PFwwWfUni9rV/o82e1Ull4NzMIn+NlkAnnAfeD1ySvrYi2uEet /6HLB356FPNi0k6MLjgEZRWUrNQ8wRaVa/s68ESot/2lYZb1Xw5C6C6btwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFKf9kLMCtLXwpiH4kH+ChlaHGj9JMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xL3BfMlFzd0swdGZDbUlmaVFmNEtHVm9jYVAway5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1LTM4MjM1NWZjMmZm MS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCkWH ICAwDQYJKoZIhvcNAQELBQADggEBAECBx8i5Dz7n0DMLmUs9jXtX03Xq8ALvruM2 +4ojUlG8E9xTnduJCMP4FwjwOkxQ4ZLNBfr1W1nBgWFsqUyyp6w/5LN5dQEpuLwJ iL2xdlYmGevC1UZ3Q0miCIPH/ObXuE1KH5Es3ShQG9bNe3me7VY8E8sjf9jkR7xS DE5ZbPYhDTUCVjJqaI8s0ZvGKmXSvxpYvDL1uvkSXAu/h0cKmm4ANzO5mdk3l+ic 1WwXqQi5cw8CvKToJMexaGo690RR7Uxcris4+a2/oaCG37J9t1gXEo9UYxT9a5dx UFBUBNTcvRL35eFY9fzzPaTrTOPBRmKJ5c5U3/LrFCrYH09IpR8= -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:15 2026 by rpki-client