This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/2HtmQ8xlAJvm0moSCesBLrlqcg0.roa File: 2HtmQ8xlAJvm0moSCesBLrlqcg0.roa (raw, json) Hash identifier: KEh1A4R7uR3CothDrO5KpNTer5MO9ATqtUH8iwiVnsE= Subject key identifier: D8:7B:66:43:CC:65:00:9B:E6:D2:6A:12:09:EB:01:2E:B9:6A:72:0D Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21 Certificate serial: 019B7E3852225A189A758E59937C428E340F Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/2HtmQ8xlAJvm0moSCesBLrlqcg0.roa Signing time: Fri 02 Jan 2026 10:19:38 +0000 ROA not before: Fri 02 Jan 2026 10:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205056 IP address blocks: 2a02:7080:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:52:22:5a:18:9a:75:8e:59:93:7c:42:8e:34:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21 Validity Not Before: Jan 2 10:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d87b6643cc65009be6d26a1209eb012eb96a720d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:5a:11:77:06:db:9b:79:0b:06:92:13:44: 2f:5c:63:0f:0b:a0:f2:1e:4b:27:89:c7:7c:43:ac: 51:e2:c8:f1:c9:13:d0:3d:ba:21:90:1c:dc:87:c5: 59:db:ee:58:80:81:cd:cc:40:d7:17:b2:a9:8d:30: 39:79:75:4f:a7:87:87:f5:51:37:ac:00:46:cb:44: 2f:85:e4:5d:4c:16:d0:89:2c:0a:65:01:c7:52:43: b9:02:64:0f:cd:fb:38:96:df:d6:a0:62:fc:39:2e: 36:a4:88:64:f3:99:06:5f:da:7c:e0:13:d2:d0:5d: ee:25:e6:3c:10:3e:53:07:6f:8b:a6:cf:d1:92:81: b1:3b:27:45:69:17:40:ae:d1:b6:af:ca:44:52:b7: 4b:0e:95:1b:31:42:2d:6f:72:35:e5:a8:6a:e1:94: 6b:5f:79:87:b2:a7:63:1c:3e:a0:a2:78:dd:a0:36: eb:b7:67:94:1c:6e:0a:dd:e0:e0:28:59:fa:e8:23: 78:99:77:a3:da:89:8f:ab:c4:e1:ad:1c:96:0b:88: 40:62:3c:5f:5d:c0:6d:3d:5b:71:bf:fc:b0:84:c5: 7a:03:cf:5d:82:05:27:61:e8:8c:27:5a:37:e4:72: bf:5e:23:c8:99:e8:47:09:ab:1d:71:2d:a2:fd:d2: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7B:66:43:CC:65:00:9B:E6:D2:6A:12:09:EB:01:2E:B9:6A:72:0D X509v3 Authority Key Identifier: keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/2HtmQ8xlAJvm0moSCesBLrlqcg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:7080:2000::/48 Signature Algorithm: sha256WithRSAEncryption 77:79:8b:dc:75:63:85:4c:c6:a7:e2:53:72:0a:7e:14:d7:18: 7b:53:ae:40:0f:3d:1e:63:3e:51:10:99:8d:f5:37:94:e9:aa: 9c:78:80:8c:79:37:fe:4f:b6:d7:c1:7e:98:d5:8b:13:ce:5c: c8:17:4a:fc:9d:48:58:e9:68:e8:85:da:e9:12:a9:b8:67:35: 0a:08:c1:38:a0:5e:90:e7:ac:6f:99:21:f5:fe:58:67:a7:c6: 9f:77:09:4e:76:e0:0c:de:97:97:5c:9e:58:23:a1:95:31:e6: 0b:19:d7:95:58:eb:d4:80:ff:2d:e7:14:80:00:74:32:01:f7: 00:8e:28:94:1a:e3:ec:16:09:a3:4d:4f:69:73:ce:ce:9a:47: e3:b2:1f:e9:f0:2a:a6:7f:6f:b8:4c:84:88:28:2d:73:2c:d2: b7:c0:20:c5:8d:05:c2:e8:e4:9d:45:6f:57:6c:04:11:38:2c: 80:1d:74:1f:4d:17:4a:42:7c:80:5f:38:a2:40:77:21:45:c5: 0a:13:7b:f6:06:8b:17:01:84:be:de:ce:99:61:a0:2b:08:69: 69:34:c7:d6:66:22:1b:78:54:7e:41:99:00:48:0e:4a:22:bd: da:97:ee:ae:0c:2d:ad:2f:fe:05:e1:c6:48:67:17:cb:10:29: 7b:47:16:2e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OFIiWhiadY5Zk3xCjjQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlY2MyMjllNTY5OTEwNTgyODU2NGI3ODUwOWYzYjcyZjMw OTBhMjEwHhcNMjYwMTAyMTAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODdiNjY0M2NjNjUwMDliZTZkMjZhMTIwOWViMDEyZWI5NmE3MjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEtaEXcG25t5CwaSE0QvXGMPC6Dy Hksnicd8Q6xR4sjxyRPQPbohkBzch8VZ2+5YgIHNzEDXF7KpjTA5eXVPp4eH9VE3 rABGy0QvheRdTBbQiSwKZQHHUkO5AmQPzfs4lt/WoGL8OS42pIhk85kGX9p84BPS 0F3uJeY8ED5TB2+Lps/RkoGxOydFaRdArtG2r8pEUrdLDpUbMUItb3I15ahq4ZRr X3mHsqdjHD6gonjdoDbrt2eUHG4K3eDgKFn66CN4mXej2omPq8ThrRyWC4hAYjxf XcBtPVtxv/ywhMV6A89dggUnYeiMJ1o35HK/XiPImehHCasdcS2i/dLaCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNh7ZkPMZQCb5tJqEgnrAS65anINMB8GA1UdIwQY MBaAFI7MIp5WmRBYKFZLeFCfO3LzCQohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMt M2M5ZWJjNDU2NjIzLzEvMkh0bVE4eGxBSnZtMG1vU0Nlc0JMcmxxY2cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMtM2M5ZWJjNDU2NjIz LzEvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgJwgCAA MA0GCSqGSIb3DQEBCwUAA4IBAQB3eYvcdWOFTMan4lNyCn4U1xh7U65ADz0eYz5R EJmN9TeU6aqceICMeTf+T7bXwX6Y1YsTzlzIF0r8nUhY6WjohdrpEqm4ZzUKCME4 oF6Q56xvmSH1/lhnp8afdwlOduAM3peXXJ5YI6GVMeYLGdeVWOvUgP8t5xSAAHQy AfcAjiiUGuPsFgmjTU9pc87Omkfjsh/p8Cqmf2+4TISIKC1zLNK3wCDFjQXC6OSd RW9XbAQROCyAHXQfTRdKQnyAXziiQHchRcUKE3v2BosXAYS+3s6ZYaArCGlpNMfW ZiIbeFR+QZkASA5KIr3al+6uDC2tL/4F4cZIZxfLECl7RxYu -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:24 2026 by rpki-client