This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/2UTsdBqwcGY6WLPGQu2AQnmmQaw.roa File: 2UTsdBqwcGY6WLPGQu2AQnmmQaw.roa (raw, json) Hash identifier: N0cgvop2VFVQVWMu1UTzJj1ZcUJzTX91lueVGv/YOHc= Subject key identifier: D9:44:EC:74:1A:B0:70:66:3A:58:B3:C6:42:ED:80:42:79:A6:41:AC Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019B797E40A48090C3EC046020D2C1C31756 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/2UTsdBqwcGY6WLPGQu2AQnmmQaw.roa Signing time: Thu 01 Jan 2026 12:17:55 +0000 ROA not before: Thu 01 Jan 2026 12:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196782 IP address blocks: 2a03:2a80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:40:a4:80:90:c3:ec:04:60:20:d2:c1:c3:17:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Jan 1 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d944ec741ab070663a58b3c642ed804279a641ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:2d:cd:16:1c:7d:5f:7d:70:68:f2:fa:d3: 94:b9:a8:81:cc:5a:d2:e7:43:3a:20:5c:49:bf:50: 6d:e5:f3:81:45:12:e0:2d:5e:76:fe:92:e0:e7:50: 4e:38:95:fc:6a:fd:bc:43:13:2a:3f:c8:e7:5a:e4: e1:a4:02:86:30:20:a2:64:4b:20:05:0e:55:14:ca: 30:de:6c:d2:c5:30:4c:20:e7:89:ec:13:69:ac:82: 1e:dc:e5:85:ce:68:f4:e4:2f:ca:27:a5:2e:03:16: ca:4a:34:47:62:cb:d2:8c:f4:8b:75:53:09:f5:8a: 82:03:21:91:31:14:f1:c1:dc:ca:48:7a:47:7b:46: ed:8f:db:93:81:0e:b5:38:64:d6:af:9e:96:39:e5: e9:59:5f:24:fa:b8:b1:a0:e2:25:c3:75:a1:9f:b1: 92:4c:dd:45:f5:38:d8:11:aa:ee:dc:8b:cd:6e:47: bb:df:97:94:28:22:1f:32:71:3d:6d:35:c2:79:10: 14:d3:71:e4:23:5f:db:ac:46:4d:1f:19:44:62:37: e5:61:77:fa:f4:3b:0e:53:c2:70:3e:02:b9:e8:b0: 11:69:6f:2f:b6:2b:91:19:3f:3b:8c:95:f4:75:d2: a2:e2:35:c4:5c:dc:53:f3:58:11:61:cb:d1:c9:3d: 28:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:44:EC:74:1A:B0:70:66:3A:58:B3:C6:42:ED:80:42:79:A6:41:AC X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/2UTsdBqwcGY6WLPGQu2AQnmmQaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:2a80::/32 Signature Algorithm: sha256WithRSAEncryption 42:e0:66:56:89:0e:c1:1a:1a:11:a7:b1:1f:b8:2d:a7:6c:92: a9:06:95:85:94:78:93:61:b7:b7:8e:0a:f6:8f:eb:b8:9c:1d: cb:be:6a:42:c1:d3:15:00:aa:8f:db:7f:65:93:69:7c:c8:f8: 8c:f0:65:83:5f:9b:20:21:c4:f4:72:fd:39:1c:e1:e9:9b:82: 82:25:f1:49:2a:9c:5f:3a:aa:54:dc:60:0a:bd:e0:7f:d8:61: d9:0b:ce:21:02:17:ed:22:97:8b:5a:93:20:30:a6:ce:a3:4c: d7:5e:ba:6e:7b:0e:31:b5:68:1b:44:24:71:f1:39:4f:32:8d: 26:47:98:9f:9a:4f:14:e6:bd:c6:99:7d:9b:8b:5b:ed:74:fd: 47:53:3b:e2:97:58:c4:1a:d2:47:e2:a7:09:17:af:3a:9c:07: 7a:d9:84:e6:8d:ba:1a:9f:04:ac:45:52:6a:13:ce:05:34:89: 54:df:68:2f:14:14:8e:7f:d8:e4:5a:12:75:aa:bd:89:29:39: 9d:28:79:47:04:4b:f6:fc:d4:c0:04:74:8e:b2:47:0d:ca:be: e0:db:d1:a4:56:77:46:20:83:f7:29:5e:d4:04:b1:dd:78:81: 95:c6:9b:49:33:1c:6e:71:69:a9:03:de:42:02:36:54:96:c2: 1f:eb:2e:47 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fkCkgJDD7ARgINLBwxdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjYwMTAxMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTQ0ZWM3NDFhYjA3MDY2M2E1OGIzYzY0MmVkODA0Mjc5YTY0MWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcQtzRYcfV99cGjy+tOUuaiBzFrS 50M6IFxJv1Bt5fOBRRLgLV52/pLg51BOOJX8av28QxMqP8jnWuThpAKGMCCiZEsg BQ5VFMow3mzSxTBMIOeJ7BNprIIe3OWFzmj05C/KJ6UuAxbKSjRHYsvSjPSLdVMJ 9YqCAyGRMRTxwdzKSHpHe0btj9uTgQ61OGTWr56WOeXpWV8k+rixoOIlw3Whn7GS TN1F9TjYEaru3IvNbke735eUKCIfMnE9bTXCeRAU03HkI1/brEZNHxlEYjflYXf6 9DsOU8JwPgK56LARaW8vtiuRGT87jJX0ddKi4jXEXNxT81gRYcvRyT0oqQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNlE7HQasHBmOlizxkLtgEJ5pkGsMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvMlVUc2RCcXdjR1k2V0xQR1F1MkFRbm1tUWF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgMqgDAN BgkqhkiG9w0BAQsFAAOCAQEAQuBmVokOwRoaEaexH7gtp2ySqQaVhZR4k2G3t44K 9o/ruJwdy75qQsHTFQCqj9t/ZZNpfMj4jPBlg1+bICHE9HL9ORzh6ZuCgiXxSSqc XzqqVNxgCr3gf9hh2QvOIQIX7SKXi1qTIDCmzqNM1166bnsOMbVoG0QkcfE5TzKN JkeYn5pPFOa9xpl9m4tb7XT9R1M74pdYxBrSR+KnCRevOpwHetmE5o26Gp8ErEVS ahPOBTSJVN9oLxQUjn/Y5FoSdaq9iSk5nSh5RwRL9vzUwAR0jrJHDcq+4NvRpFZ3 RiCD9yle1ASx3XiBlcabSTMcbnFpqQPeQgI2VJbCH+suRw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:07 2026 by rpki-client