This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/x2nu8-2ccqjHsn1Ou3xyH7-cq8s.roa File: x2nu8-2ccqjHsn1Ou3xyH7-cq8s.roa (raw, json) Hash identifier: VvtZkNuoab+ENXcc3Od+jJPAmDYauKnKrGrmB70oZj8= Subject key identifier: C7:69:EE:F3:ED:9C:72:A8:C7:B2:7D:4E:BB:7C:72:1F:BF:9C:AB:CB Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDF5CC282AB1C3C86D05486A6AD895 Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/x2nu8-2ccqjHsn1Ou3xyH7-cq8s.roa Signing time: Fri 02 Jan 2026 04:18:48 +0000 ROA not before: Fri 02 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212008 IP address blocks: 2a05:1082::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f5:cc:28:2a:b1:c3:c8:6d:05:48:6a:6a:d8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c769eef3ed9c72a8c7b27d4ebb7c721fbf9cabcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:67:0b:2c:41:40:72:78:d8:08:10:f6:37: b4:b9:d1:01:5a:94:e7:f2:45:c7:d8:17:15:c8:b0: a0:68:fc:60:9f:5b:f0:2b:f3:48:b7:28:29:ef:56: d4:bb:7f:ae:5d:78:0c:8c:5f:4e:1c:be:7a:4d:85: 47:3a:d0:6b:a2:31:4e:b2:3a:2b:12:6a:d0:01:e3: 43:20:f7:b6:49:68:f3:62:ed:1b:e1:a5:e0:15:9d: 75:3f:b7:6e:47:5c:76:65:33:eb:11:64:a9:01:92: 73:4c:92:eb:4d:a8:ef:99:01:73:10:5d:c2:f4:37: 71:3d:dc:a3:f0:27:3b:bd:b5:98:7f:44:ca:96:8b: 2a:b2:51:64:5e:68:27:5e:94:c1:26:47:75:8c:03: 7a:7e:e8:b0:62:22:6d:94:ef:89:37:ce:8b:bf:d3: 85:d7:e3:c2:f7:08:1d:ed:58:1d:3e:38:53:ad:0c: c1:25:01:c3:00:3c:cf:ba:83:56:44:35:58:58:ca: 09:55:b7:6e:ee:38:41:25:15:21:61:cf:f7:06:ff: f8:79:9e:6f:9c:05:89:b8:78:6e:98:97:bf:7e:43: 0b:ba:82:3d:a5:56:52:c4:0f:c1:bf:cd:c4:e0:b7: 06:2b:88:16:c3:48:53:65:cb:d8:57:f4:70:c1:7b: 40:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:69:EE:F3:ED:9C:72:A8:C7:B2:7D:4E:BB:7C:72:1F:BF:9C:AB:CB X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/x2nu8-2ccqjHsn1Ou3xyH7-cq8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:1082::/32 Signature Algorithm: sha256WithRSAEncryption 34:d0:8b:4d:7c:04:c8:c2:11:83:76:f3:80:dc:71:a8:58:c3: 83:79:f2:e8:49:af:40:60:a8:f6:16:0d:39:69:c4:2b:18:4f: 5e:de:21:b9:14:34:22:1a:ff:90:61:60:4e:85:f0:4a:b3:8d: 9f:0a:c8:f5:64:2c:b6:2d:97:4a:0f:d6:6f:fa:66:c6:45:b1: cf:cc:d5:79:9f:d7:42:29:6d:56:05:74:54:5b:b5:6a:09:2d: b5:7e:c7:08:1c:b0:d4:28:95:3c:b7:67:df:7f:c7:23:73:b1: da:07:43:cd:1e:1f:69:37:3c:d4:0c:ac:dd:39:63:e4:a5:0b: 71:10:76:f0:23:65:10:de:e7:a9:a6:f4:e4:ce:49:47:59:1d: 1a:a8:ee:e8:bf:4d:bb:b8:e2:7f:89:43:07:0f:0a:f4:c3:19: a1:56:63:f9:3b:62:e1:dc:89:55:84:9a:26:6e:67:ca:76:d0: 9a:1d:a2:9c:35:c8:16:61:00:a6:09:ed:65:5f:17:4b:a5:62: 38:68:cb:e1:d0:cf:84:27:d8:37:11:e6:27:10:a4:b4:63:0a: 9d:2b:65:55:7b:4d:04:67:ed:a6:d1:68:a5:63:dd:2a:ec:93: 95:a7:a2:28:77:c9:7d:68:5b:88:6e:08:b6:66:82:d3:87:4f: e6:6d:55:64 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87fXMKCqxw8htBUhqatiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzY5ZWVmM2VkOWM3MmE4YzdiMjdkNGViYjdjNzIxZmJmOWNhYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5FnCyxBQHJ42AgQ9je0udEBWpTn 8kXH2BcVyLCgaPxgn1vwK/NItygp71bUu3+uXXgMjF9OHL56TYVHOtBrojFOsjor EmrQAeNDIPe2SWjzYu0b4aXgFZ11P7duR1x2ZTPrEWSpAZJzTJLrTajvmQFzEF3C 9DdxPdyj8Cc7vbWYf0TKlosqslFkXmgnXpTBJkd1jAN6fuiwYiJtlO+JN86Lv9OF 1+PC9wgd7VgdPjhTrQzBJQHDADzPuoNWRDVYWMoJVbdu7jhBJRUhYc/3Bv/4eZ5v nAWJuHhumJe/fkMLuoI9pVZSxA/Bv83E4LcGK4gWw0hTZcvYV/RwwXtAwQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMdp7vPtnHKox7J9Trt8ch+/nKvLMB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEveDJudTgtMmNjcWpIc24xT3UzeHlINy1jcThzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgUQgjAN BgkqhkiG9w0BAQsFAAOCAQEANNCLTXwEyMIRg3bzgNxxqFjDg3ny6EmvQGCo9hYN OWnEKxhPXt4huRQ0Ihr/kGFgToXwSrONnwrI9WQsti2XSg/Wb/pmxkWxz8zVeZ/X QiltVgV0VFu1agkttX7HCByw1CiVPLdn33/HI3Ox2gdDzR4faTc81Ays3Tlj5KUL cRB28CNlEN7nqab05M5JR1kdGqju6L9Nu7jif4lDBw8K9MMZoVZj+Tti4dyJVYSa Jm5nynbQmh2inDXIFmEApgntZV8XS6ViOGjL4dDPhCfYNxHmJxCktGMKnStlVXtN BGftptFopWPdKuyTlaeiKHfJfWhbiG4ItmaC04dP5m1VZA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:29 2026 by rpki-client