This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/2-Q8-2uMpkm8p3MOPZw_W72AvNs.roa File: 2-Q8-2uMpkm8p3MOPZw_W72AvNs.roa (raw, json) Hash identifier: tg0h05nrXxXnWjaxkqGRSl6Be7xJrTxFL2QzNub3pSk= Subject key identifier: DB:E4:3C:FB:6B:8C:A6:49:BC:A7:73:0E:3D:9C:3F:5B:BD:80:BC:DB Certificate issuer: /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e Certificate serial: 019B9DB4DBC18E14DEAB87BF359514AF0483 Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/2-Q8-2uMpkm8p3MOPZw_W72AvNs.roa Signing time: Thu 08 Jan 2026 13:03:54 +0000 ROA not before: Thu 08 Jan 2026 13:03:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209425 IP address blocks: 2001:3b80:e000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:b4:db:c1:8e:14:de:ab:87:bf:35:95:14:af:04:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e Validity Not Before: Jan 8 13:03:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbe43cfb6b8ca649bca7730e3d9c3f5bbd80bcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:57:bf:46:fe:43:3f:ed:5b:d6:19:43:6a:ed: d5:02:21:4d:09:6d:2d:64:d5:91:47:a2:17:b5:45: aa:35:eb:85:07:40:bc:c6:11:fe:43:b6:78:c8:01: e8:91:c3:88:bb:59:38:5a:39:ad:d2:b5:28:ae:c7: 2d:d4:f6:74:d2:c0:57:4b:a8:3e:8f:2e:3c:b9:7e: 32:76:20:e5:67:ea:62:51:e3:2e:fe:14:3a:80:4b: 68:f6:e9:b4:4e:01:59:18:66:64:02:42:1f:ed:98: e9:79:84:6e:a7:51:89:32:fb:c8:9d:bd:b5:7b:e3: a6:ab:07:92:f9:27:ce:e4:51:b5:bc:7d:0a:d0:51: 93:a3:f4:a7:f1:fe:fe:78:73:f5:78:9e:ea:7b:d8: fc:3e:57:40:1d:b9:b4:15:64:7a:0d:ee:91:62:fe: 6d:63:3a:f2:66:e6:36:d0:ab:34:61:8a:1f:e3:62: 64:c3:8f:3c:39:ba:ec:b5:60:e0:fb:88:3a:b7:59: 79:54:96:b7:ae:4b:d7:f6:69:10:f3:18:9b:ce:bc: 0b:aa:e7:47:d8:32:2b:a4:28:7d:aa:85:3f:be:4b: f0:71:4c:1e:df:2b:cd:7d:51:99:49:b1:a9:ec:9f: ab:c1:b1:ac:22:b0:e5:69:93:8c:6e:18:3f:38:21: 7d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E4:3C:FB:6B:8C:A6:49:BC:A7:73:0E:3D:9C:3F:5B:BD:80:BC:DB X509v3 Authority Key Identifier: keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/2-Q8-2uMpkm8p3MOPZw_W72AvNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3b80:e000::/36 Signature Algorithm: sha256WithRSAEncryption 02:53:17:12:3f:a4:81:28:6e:9f:3c:7a:a7:44:1d:b6:49:26: 90:35:c1:72:aa:10:73:f4:aa:ff:6e:de:de:2a:a8:29:06:61: a2:e6:f0:63:fb:19:34:3f:23:4b:19:c0:e6:02:08:cf:45:b6: 2c:e4:cb:f5:c1:bb:ec:07:19:22:7d:22:58:36:3a:fd:2d:23: 41:34:c6:f5:bc:27:bb:b1:d2:16:fe:c2:c5:6f:23:3f:18:18: 74:40:43:91:fc:8c:aa:47:15:95:b5:1e:9f:94:5d:7f:b8:63: 5c:24:54:81:be:42:6a:6f:b5:ae:32:3c:97:56:07:59:62:bb: fd:f2:16:1d:b0:a2:c9:b2:37:ce:ca:31:9b:d3:43:60:08:84: 74:a3:a3:e1:c1:37:7e:c4:6c:48:e7:3b:b8:46:4c:2e:91:e0: 73:4f:9a:09:9c:e9:86:19:61:30:67:31:e4:6f:e8:48:49:f0: 71:74:6b:23:7b:85:9b:aa:8c:ed:f8:1e:ae:8a:cb:e5:46:bf: a3:71:f8:00:08:d0:38:fb:7a:df:fc:45:80:c1:e2:e0:5a:57: 00:94:e1:87:99:91:82:ce:b6:44:4f:95:6a:af:60:f0:df:f1: a7:5c:2c:ca:f7:b8:ad:2c:de:fd:16:70:24:51:5c:2b:23:76: 04:1a:06:96 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZudtNvBjhTeq4e/NZUUrwSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjE3OGZjMzM1ZGYwMTU0MzcyOGUyOWI3OGU5NTI4ZWYx ZjVmNmUwHhcNMjYwMTA4MTMwMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmU0M2NmYjZiOGNhNjQ5YmNhNzczMGUzZDljM2Y1YmJkODBiY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFe/Rv5DP+1b1hlDau3VAiFNCW0t ZNWRR6IXtUWqNeuFB0C8xhH+Q7Z4yAHokcOIu1k4Wjmt0rUorsct1PZ00sBXS6g+ jy48uX4ydiDlZ+piUeMu/hQ6gEto9um0TgFZGGZkAkIf7ZjpeYRup1GJMvvInb21 e+OmqweS+SfO5FG1vH0K0FGTo/Sn8f7+eHP1eJ7qe9j8PldAHbm0FWR6De6RYv5t YzryZuY20Ks0YYof42Jkw488ObrstWDg+4g6t1l5VJa3rkvX9mkQ8xibzrwLqudH 2DIrpCh9qoU/vkvwcUwe3yvNfVGZSbGp7J+rwbGsIrDlaZOMbhg/OCF9VQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNvkPPtrjKZJvKdzDj2cP1u9gLzbMB8GA1UdIwQY MBaAFCyxePwzXfAVQ3KOKbeOlSjvH19uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWIt MGY3OTY0MzIxY2UxLzEvMi1ROC0ydU1wa204cDNNT1Bad19XNzJBdk5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWItMGY3OTY0MzIxY2Ux LzEvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEIAE7gOAw DQYJKoZIhvcNAQELBQADggEBAAJTFxI/pIEobp88eqdEHbZJJpA1wXKqEHP0qv9u 3t4qqCkGYaLm8GP7GTQ/I0sZwOYCCM9Ftizky/XBu+wHGSJ9Ilg2Ov0tI0E0xvW8 J7ux0hb+wsVvIz8YGHRAQ5H8jKpHFZW1Hp+UXX+4Y1wkVIG+Qmpvta4yPJdWB1li u/3yFh2wosmyN87KMZvTQ2AIhHSjo+HBN37EbEjnO7hGTC6R4HNPmgmc6YYZYTBn MeRv6EhJ8HF0ayN7hZuqjO34Hq6Ky+VGv6Nx+AAI0Dj7et/8RYDB4uBaVwCU4YeZ kYLOtkRPlWqvYPDf8adcLMr3uK0s3v0WcCRRXCsjdgQaBpY= -----END CERTIFICATE-----Generated at Mon Jan 26 01:40:09 2026 by rpki-client