This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/K2I95KyZrJIjj7zPBZI4hpCKPL0.roa File: K2I95KyZrJIjj7zPBZI4hpCKPL0.roa (raw, json) Hash identifier: sDlQ2WAoqM4s6faGspubDUvrjpx0RkRVpocNzS4/Mz0= Subject key identifier: 2B:62:3D:E4:AC:99:AC:92:23:8F:BC:CF:05:92:38:86:90:8A:3C:BD Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Certificate serial: 019B7C121BC5E5FB53E2C251277296B91565 Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/K2I95KyZrJIjj7zPBZI4hpCKPL0.roa Signing time: Fri 02 Jan 2026 00:18:40 +0000 ROA not before: Fri 02 Jan 2026 00:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214231 IP address blocks: 2a01:e5c0:8000::/48 maxlen: 48 2a01:e5c0:8001::/48 maxlen: 48 2a01:e5c0:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:1b:c5:e5:fb:53:e2:c2:51:27:72:96:b9:15:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Validity Not Before: Jan 2 00:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b623de4ac99ac92238fbccf05923886908a3cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:a6:20:b5:eb:e1:72:5d:37:d0:e3:33:cc: bc:1a:0e:38:cf:fe:58:54:e6:be:75:c6:7e:86:93: 08:df:b4:4c:e9:f9:58:e9:08:06:bb:e2:db:75:c8: c5:d7:b6:8e:f8:03:66:e6:3b:12:df:65:6f:ad:5a: 52:de:64:b6:39:de:c6:d7:6c:0f:26:55:c3:80:11: ad:ae:b6:5a:be:d3:f6:f3:b7:85:3f:d0:1e:68:63: 55:25:f5:4b:3e:f7:9e:4f:ea:dc:ad:d6:5b:da:b0: 64:00:3b:47:89:cc:0e:51:ab:72:be:b5:bf:49:ef: c9:1e:ab:e0:c8:17:da:07:e1:33:1f:89:1c:57:8c: 68:d1:18:d9:da:78:eb:73:8a:a9:21:0e:97:50:5d: af:a8:ef:87:ab:bb:15:bd:fa:98:36:c5:2d:ab:7c: d5:b8:9a:51:12:b3:46:df:90:1e:eb:75:47:95:0a: 4c:04:08:c5:28:d7:28:ad:47:af:90:46:48:a4:29: 20:67:f1:44:14:68:24:6f:57:ef:00:b5:24:1c:65: bb:bb:e4:55:d3:61:d6:ed:6d:ee:1f:cf:e3:c9:a1: 1c:5c:ed:c1:29:54:4a:a5:33:e3:f7:d5:80:22:31: 41:06:53:4a:6f:bc:85:8b:83:f5:e3:e7:57:b1:b9: 4b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:62:3D:E4:AC:99:AC:92:23:8F:BC:CF:05:92:38:86:90:8A:3C:BD X509v3 Authority Key Identifier: keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/K2I95KyZrJIjj7zPBZI4hpCKPL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e5c0:8000::-2a01:e5c0:8002:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 46:c0:32:d0:31:2b:7c:af:df:3d:9b:37:64:2d:33:ec:45:1b: 6e:aa:04:cc:14:6d:01:6d:d7:b7:3e:45:17:2d:61:d6:07:3c: 58:7b:67:2a:df:23:57:18:dc:3c:24:25:ea:18:33:eb:ca:ff: a9:e6:7f:0b:ad:a2:b4:44:79:e9:aa:ce:f5:50:c0:c9:d8:34: 0c:5a:88:00:ce:92:25:25:0a:55:55:0f:95:77:82:e3:8f:b4: f8:18:57:e8:c4:4b:93:42:41:51:4a:5e:e7:b3:cf:36:c8:90: e9:3b:66:f3:14:d5:75:42:09:e5:7a:be:e1:d3:96:96:09:ac: 5e:95:c6:bf:7a:bf:bd:da:a9:8a:4a:b0:eb:a3:31:15:ea:af: 1d:ff:e4:43:eb:a7:8b:36:c2:1c:1b:32:a5:d1:c9:c4:c0:9e: 0d:a0:28:31:21:09:93:a0:ff:b6:f0:3a:18:0d:fe:ad:82:60: dc:32:9c:81:5c:5e:8d:f4:e0:a9:91:4f:7c:6c:3f:40:5f:cd: dd:77:d8:7a:cb:90:01:f2:ea:f8:47:f7:6a:63:82:36:f6:63: 75:42:6d:92:a3:4a:b2:f4:54:83:f2:80:32:65:43:0e:a6:01: 9b:c1:db:fb:f9:e3:bb:33:2e:67:85:6a:0c:cb:b0:a1:13:9a: ab:cb:60:4c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt8EhvF5ftT4sJRJ3KWuRVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhN2Q1ZmNhMWU0Njk5MjlkNGE4YjZmNTdhZjNjYmNkYzYz OWEzNWUwHhcNMjYwMTAyMDAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjYyM2RlNGFjOTlhYzkyMjM4ZmJjY2YwNTkyMzg4NjkwOGEzY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eSmILXr4XJdN9DjM8y8Gg44z/5Y VOa+dcZ+hpMI37RM6flY6QgGu+LbdcjF17aO+ANm5jsS32VvrVpS3mS2Od7G12wP JlXDgBGtrrZavtP287eFP9AeaGNVJfVLPveeT+rcrdZb2rBkADtHicwOUatyvrW/ Se/JHqvgyBfaB+EzH4kcV4xo0RjZ2njrc4qpIQ6XUF2vqO+Hq7sVvfqYNsUtq3zV uJpRErNG35Ae63VHlQpMBAjFKNcorUevkEZIpCkgZ/FEFGgkb1fvALUkHGW7u+RV 02HW7W3uH8/jyaEcXO3BKVRKpTPj99WAIjFBBlNKb7yFi4P14+dXsblLtQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFCtiPeSsmaySI4+8zwWSOIaQijy9MB8GA1UdIwQY MBaAFNp9X8oeRpkp1Ki29Xrzy83GOaNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGIt NDFiNzMwMzI3Yzc4LzEvSzJJOTVLeVpySklqajd6UEJaSTRocENLUEwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGItNDFiNzMwMzI3Yzc4 LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBgcqAeXA gAMHACoB5cCAAjANBgkqhkiG9w0BAQsFAAOCAQEARsAy0DErfK/fPZs3ZC0z7EUb bqoEzBRtAW3Xtz5FFy1h1gc8WHtnKt8jVxjcPCQl6hgz68r/qeZ/C62itER56arO 9VDAydg0DFqIAM6SJSUKVVUPlXeC44+0+BhX6MRLk0JBUUpe57PPNsiQ6Ttm8xTV dUIJ5Xq+4dOWlgmsXpXGv3q/vdqpikqw66MxFeqvHf/kQ+unizbCHBsypdHJxMCe DaAoMSEJk6D/tvA6GA3+rYJg3DKcgVxejfTgqZFPfGw/QF/N3XfYesuQAfLq+Ef3 amOCNvZjdUJtkqNKsvRUg/KAMmVDDqYBm8Hb+/njuzMuZ4VqDMuwoROaq8tgTA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:55 2026 by rpki-client