This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/2PyuqrcS4OQKpzci0LGo9D6zLpQ.roa File: 2PyuqrcS4OQKpzci0LGo9D6zLpQ.roa (raw, json) Hash identifier: OGKUjswmzZjw4KdgNAE5t9KQez9FN3RvuvNNE8jf0ts= Subject key identifier: D8:FC:AE:AA:B7:12:E0:E4:0A:A7:37:22:D0:B1:A8:F4:3E:B3:2E:94 Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3 Certificate serial: 019B7D5CB0774EF544010BF6BA0742B3C440 Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/2PyuqrcS4OQKpzci0LGo9D6zLpQ.roa Signing time: Fri 02 Jan 2026 06:19:45 +0000 ROA not before: Fri 02 Jan 2026 06:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204318 IP address blocks: 2a13:4c00::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b0:77:4e:f5:44:01:0b:f6:ba:07:42:b3:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3 Validity Not Before: Jan 2 06:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8fcaeaab712e0e40aa73722d0b1a8f43eb32e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:69:47:0c:02:73:dc:94:6f:23:ba:25:97:64: 89:7c:86:7e:66:2d:23:25:04:85:6b:58:17:97:90: 7b:5b:0d:da:a1:cc:7b:e2:21:3d:f3:49:9d:b5:96: c6:b2:53:8d:2d:c4:cc:52:02:1c:9c:47:48:5f:c9: 43:57:40:ae:78:13:35:8c:ed:73:25:b4:05:ac:e4: b4:9b:1b:56:37:0f:b0:69:81:7d:c3:0a:81:0a:3d: 89:58:36:65:f6:58:88:c2:ac:e2:b1:8a:ff:f7:56: 45:19:21:09:7e:8d:4d:c3:61:d5:98:d2:b0:20:ee: f0:ad:e2:88:88:3c:fb:58:64:c8:f5:3b:ea:d4:f0: a6:d9:0a:2e:ea:83:22:c3:08:18:c6:ce:ea:42:9e: 65:c1:8f:73:e2:cf:d6:cb:7c:70:1e:cc:b3:ce:f3: e7:ab:ea:e7:d5:eb:9e:9c:e9:8a:16:47:26:43:65: 4f:8c:f6:7e:a1:e8:3d:e9:b2:01:23:43:92:f1:55: 71:64:be:f5:0b:fb:71:9b:3b:15:36:eb:80:73:c5: b1:47:9d:69:bd:07:a1:e1:a5:b8:e3:a8:3b:1d:3c: 69:5d:f8:a6:42:a6:e5:6d:a8:58:14:9b:1b:7d:b6: b8:77:9b:7b:27:95:a6:cd:12:d9:bd:fe:fa:65:08: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FC:AE:AA:B7:12:E0:E4:0A:A7:37:22:D0:B1:A8:F4:3E:B3:2E:94 X509v3 Authority Key Identifier: keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/2PyuqrcS4OQKpzci0LGo9D6zLpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:4c00::/34 Signature Algorithm: sha256WithRSAEncryption 32:9c:89:cb:61:c2:ca:a2:55:21:dd:32:b5:97:cd:98:c2:4e: 70:e2:61:41:39:c0:d6:f7:93:4b:65:5e:08:41:4e:cc:44:00: 45:c7:3c:84:55:87:98:66:1c:48:60:3f:9e:e8:c1:3c:51:d9: 40:a3:67:a8:c7:09:86:2a:a2:1c:b2:87:fb:9d:ba:cd:d7:8a: ac:c5:78:25:01:4f:69:aa:99:62:c9:32:c6:2a:07:4e:d2:d4: 8e:2e:3f:df:2c:9f:85:27:e5:4b:06:ef:86:b9:6b:ba:d1:22: 57:9e:10:ab:f7:f4:56:53:23:67:76:ef:b0:4c:62:ba:11:28: c1:3d:ec:cf:c4:bd:aa:b8:48:35:aa:7e:85:dc:06:28:b8:d6: b0:c3:ca:ec:1d:80:26:4b:47:75:23:6f:4c:8f:08:fa:5e:1e: 06:56:ce:e2:ad:86:69:2a:8a:44:b6:7b:b6:7d:2c:71:e1:bf: 47:40:ae:31:a7:2f:d3:15:ef:83:0b:d0:5b:98:57:c5:a7:ee: 5b:9a:f4:42:df:ff:74:6d:a4:93:b8:6b:1d:0a:81:ab:ae:24: 2a:6b:7a:89:b1:8a:e3:81:21:01:b9:0a:da:7e:5b:7e:92:9c: 4b:77:cf:72:9c:ae:40:ee:6b:9c:97:b5:41:dd:44:64:d8:0d: d6:ca:a5:fb -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XLB3TvVEAQv2ugdCs8RAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTFkMjk1MDE0NWRjZWFjMDBjMGNhNGViNTM2ZDkyODY3 YjM4ZDMwHhcNMjYwMTAyMDYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGZjYWVhYWI3MTJlMGU0MGFhNzM3MjJkMGIxYThmNDNlYjMyZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GlHDAJz3JRvI7oll2SJfIZ+Zi0j JQSFa1gXl5B7Ww3aocx74iE980mdtZbGslONLcTMUgIcnEdIX8lDV0CueBM1jO1z JbQFrOS0mxtWNw+waYF9wwqBCj2JWDZl9liIwqzisYr/91ZFGSEJfo1Nw2HVmNKw IO7wreKIiDz7WGTI9Tvq1PCm2Qou6oMiwwgYxs7qQp5lwY9z4s/Wy3xwHsyzzvPn q+rn1euenOmKFkcmQ2VPjPZ+oeg96bIBI0OS8VVxZL71C/txmzsVNuuAc8WxR51p vQeh4aW446g7HTxpXfimQqblbahYFJsbfba4d5t7J5WmzRLZvf76ZQgmmQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNj8rqq3EuDkCqc3ItCxqPQ+sy6UMB8GA1UdIwQY MBaAFDaR0pUBRdzqwAwMpOtTbZKGezjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yYTk0MmEtZjFiZi00M2UyLWI5MmEt MWRlYzQwNTg0ODA2LzEvMlB5dXFyY1M0T1FLcHpjaTBMR285RDZ6THBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yYTk0MmEtZjFiZi00M2UyLWI5MmEtMWRlYzQwNTg0ODA2 LzEvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGKhNMAAAw DQYJKoZIhvcNAQELBQADggEBADKcicthwsqiVSHdMrWXzZjCTnDiYUE5wNb3k0tl XghBTsxEAEXHPIRVh5hmHEhgP57owTxR2UCjZ6jHCYYqohyyh/udus3XiqzFeCUB T2mqmWLJMsYqB07S1I4uP98sn4Un5UsG74a5a7rRIleeEKv39FZTI2d277BMYroR KME97M/Evaq4SDWqfoXcBii41rDDyuwdgCZLR3Ujb0yPCPpeHgZWzuKthmkqikS2 e7Z9LHHhv0dArjGnL9MV74ML0FuYV8Wn7lua9ELf/3RtpJO4ax0KgauuJCpreomx iuOBIQG5Ctp+W36SnEt3z3KcrkDua5yXtUHdRGTYDdbKpfs= -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:52 2026 by rpki-client