This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa File: s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa (raw, json) Hash identifier: gFIZdnfNAaCxSgU4XX/5DvqZKxy3vUU3BhECHFZPGJA= Subject key identifier: B3:63:73:AA:10:E9:9F:F3:08:CC:8B:B7:B1:4E:0D:9F:3E:4E:76:62 Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398 Certificate serial: 019B7B36A993050EFEB1FEC9FABB87A046CB Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa Signing time: Thu 01 Jan 2026 20:18:58 +0000 ROA not before: Thu 01 Jan 2026 20:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212591 IP address blocks: 2001:67c:590::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a9:93:05:0e:fe:b1:fe:c9:fa:bb:87:a0:46:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398 Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b36373aa10e99ff308cc8bb7b14e0d9f3e4e7662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:af:62:6c:19:5c:0b:4f:c8:f7:36:d5:85:cd: e5:9a:d3:5d:0d:a1:c7:60:58:31:b2:2c:6c:80:a1: 4e:bc:2f:18:5d:48:dd:6e:c8:48:fc:21:6f:f4:91: ff:df:25:28:f9:b7:dc:ea:79:4d:a8:f5:ec:47:0a: 57:67:f0:bc:c9:da:4f:b7:54:b8:37:64:4b:6b:ae: de:04:06:c7:ff:1f:de:ff:1c:20:da:a1:38:43:87: 5c:fd:fb:98:02:6a:6b:18:96:01:db:b4:03:97:02: af:f0:62:d4:6e:b6:b3:00:73:9a:57:5e:f6:25:26: 4e:a8:3b:f2:4c:38:d7:84:16:7f:c4:19:66:78:b8: 75:82:bd:03:df:a2:71:91:da:ca:85:eb:09:cb:a2: ad:c9:b4:03:b7:16:22:44:77:84:d8:22:86:6f:52: 1b:4a:5a:47:ca:0b:1b:ed:1f:8f:dc:99:93:cc:cc: ef:8b:37:7f:3a:09:4d:26:6c:1a:67:45:df:47:63: 14:29:df:4f:49:77:f8:cb:4d:e3:9b:67:0d:62:71: 90:d3:ba:01:5e:df:5f:93:cb:90:fd:b8:63:73:3d: 1b:22:05:f7:63:ee:0f:c8:e3:e6:ac:21:48:ce:34: 3c:1c:d2:84:a2:74:e8:f2:e9:04:eb:c0:0f:ba:07: c4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:63:73:AA:10:E9:9F:F3:08:CC:8B:B7:B1:4E:0D:9F:3E:4E:76:62 X509v3 Authority Key Identifier: keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:590::/48 Signature Algorithm: sha256WithRSAEncryption 7d:bb:97:23:bb:d3:ad:9f:7e:35:12:bf:45:c7:09:42:c6:56: 4f:eb:30:0b:25:8d:aa:c9:50:39:55:75:bf:3c:29:74:60:40: 11:40:31:7e:4f:49:f6:55:e3:08:43:ca:a2:c3:3f:9a:f9:0a: 26:ff:07:4d:41:d4:b5:c5:00:b3:5f:7c:c5:d0:7f:23:ff:0a: 8a:28:20:9c:c9:75:a4:88:69:bd:8d:3a:40:52:75:f5:81:e9: db:8c:d8:0a:b2:f1:b1:e1:99:7f:3d:27:28:5f:a5:a9:de:48: 11:7d:c4:c5:50:33:b6:e2:d7:5d:53:88:96:e3:9f:f7:00:3d: 9f:be:53:cf:1d:66:8d:7f:b6:0e:da:fd:98:a0:eb:0f:2f:a2: 9e:3a:4e:de:df:75:07:bc:8e:98:e9:b7:c8:8d:34:bf:79:b7: 2c:a5:45:e9:0d:9d:c7:e9:bc:22:e2:97:9e:56:d7:51:44:86: a8:41:e2:4c:71:73:fa:fc:c5:7a:49:64:88:79:d1:67:17:bd: 9d:b8:5a:d9:be:01:b4:c3:c4:58:1d:81:2c:10:d4:2d:f3:5e: c5:00:3a:aa:9e:db:0d:bf:e0:57:32:31:ab:90:80:e9:f4:22: a8:13:73:21:62:a5:0f:4d:1f:2c:74:c3:a4:4f:9b:a6:d2:98: fc:3c:1d:ff -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NqmTBQ7+sf7J+ruHoEbLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDliY2IyMjUyZWI2NDY5MDJjY2JmZDRjOTg2Y2IwYzJi OTEzOTgwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzYzNzNhYTEwZTk5ZmYzMDhjYzhiYjdiMTRlMGQ5ZjNlNGU3NjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K9ibBlcC0/I9zbVhc3lmtNdDaHH YFgxsixsgKFOvC8YXUjdbshI/CFv9JH/3yUo+bfc6nlNqPXsRwpXZ/C8ydpPt1S4 N2RLa67eBAbH/x/e/xwg2qE4Q4dc/fuYAmprGJYB27QDlwKv8GLUbrazAHOaV172 JSZOqDvyTDjXhBZ/xBlmeLh1gr0D36JxkdrKhesJy6KtybQDtxYiRHeE2CKGb1Ib SlpHygsb7R+P3JmTzMzvizd/OglNJmwaZ0XfR2MUKd9PSXf4y03jm2cNYnGQ07oB Xt9fk8uQ/bhjcz0bIgX3Y+4PyOPmrCFIzjQ8HNKEonTo8ukE68APugfE2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLNjc6oQ6Z/zCMyLt7FODZ8+TnZiMB8GA1UdIwQY MBaAFFAJvLIlLrZGkCzL/UyYbLDCuROYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2Mt ZDVkYTg1OGUxNWZiLzEvczJOenFoRHBuX01Jekl1M3NVNE5uejVPZG1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2MtZDVkYTg1OGUxNWZi LzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAWQ MA0GCSqGSIb3DQEBCwUAA4IBAQB9u5cju9Otn341Er9FxwlCxlZP6zALJY2qyVA5 VXW/PCl0YEARQDF+T0n2VeMIQ8qiwz+a+Qom/wdNQdS1xQCzX3zF0H8j/wqKKCCc yXWkiGm9jTpAUnX1genbjNgKsvGx4Zl/PScoX6Wp3kgRfcTFUDO24tddU4iW45/3 AD2fvlPPHWaNf7YO2v2YoOsPL6KeOk7e33UHvI6Y6bfIjTS/ebcspUXpDZ3H6bwi 4peeVtdRRIaoQeJMcXP6/MV6SWSIedFnF72duFrZvgG0w8RYHYEsENQt817FADqq ntsNv+BXMjGrkIDp9CKoE3MhYqUPTR8sdMOkT5um0pj8PB3/ -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:34 2026 by rpki-client