This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/g2fN7tCyrysxEndgN_riAmLTYSU.roa File: g2fN7tCyrysxEndgN_riAmLTYSU.roa (raw, json) Hash identifier: XiGl00VYZp7eVqANIUc9SN7YbU0zcI0nIY4sSK0DTc4= Subject key identifier: 83:67:CD:EE:D0:B2:AF:2B:31:12:77:60:37:FA:E2:02:62:D3:61:25 Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019B7835305832E00BF28A5F8962ECBF675A Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/g2fN7tCyrysxEndgN_riAmLTYSU.roa Signing time: Thu 01 Jan 2026 06:18:30 +0000 ROA not before: Thu 01 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213449 IP address blocks: 2a10:fa82:8000::/35 maxlen: 48 2a10:fa82:8000::/44 maxlen: 44 2a10:fa82:8010::/44 maxlen: 44 2a10:fa82:8020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:30:58:32:e0:0b:f2:8a:5f:89:62:ec:bf:67:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8367cdeed0b2af2b3112776037fae20262d36125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:eb:b3:70:a9:c3:cb:b6:90:cb:a5:46:07: 5f:c2:08:4b:b8:99:fd:3b:e1:4d:f2:4b:c5:e1:21: 93:b0:46:ca:72:7b:ea:c9:6e:61:c9:56:36:41:5e: 84:76:5e:fe:17:4d:9d:22:d5:57:6e:28:59:ca:3b: 32:70:31:bf:2f:83:22:12:7c:43:86:d4:ff:2a:9b: 80:89:5a:5f:fd:d2:6e:10:2a:5a:19:c4:12:7a:78: 95:30:38:94:54:b7:f0:3f:f3:90:43:f7:e5:f6:ba: f1:bd:6d:e6:99:af:fd:09:26:12:88:91:a4:83:99: f1:31:8c:29:b8:71:a3:7f:b3:0c:33:87:0d:c9:be: 62:eb:b8:c1:c6:ce:94:89:00:39:7e:90:2a:11:9c: 82:4f:c8:49:07:2b:e8:0c:00:71:cf:ea:f7:e7:18: ae:2e:d0:ed:ec:72:ae:1d:2a:0a:88:fa:fe:1b:50: 1d:e3:72:99:13:89:b5:1d:57:75:90:52:63:91:89: 3e:d7:8f:da:69:ce:53:04:53:58:88:18:2e:78:99: 24:72:d8:95:31:69:b5:8b:76:dc:33:44:8a:3c:07: ad:62:05:28:cd:a2:e8:6d:0a:79:14:ab:36:44:cc: 3f:6b:79:7b:a4:41:e3:fd:8c:07:06:97:60:4a:e0: d8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:67:CD:EE:D0:B2:AF:2B:31:12:77:60:37:FA:E2:02:62:D3:61:25 X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/g2fN7tCyrysxEndgN_riAmLTYSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:fa82:8000::/35 Signature Algorithm: sha256WithRSAEncryption 8c:fe:8f:d8:bc:bf:fa:88:6a:75:ba:5d:59:16:4f:9c:5a:c1: 3b:63:da:f1:65:ac:47:ad:a4:32:45:48:9b:e7:cd:95:bc:14: 78:37:2f:5b:44:24:63:22:35:c3:96:6b:a0:af:d1:5e:cc:be: dc:65:8c:f0:7a:70:a5:a7:7f:6b:4f:1e:55:08:90:b7:ab:79: a0:db:f7:4e:f0:92:e5:7d:28:e4:fa:81:ef:16:b5:d4:88:74: 6d:ab:1a:df:e5:ae:93:1b:bc:09:89:22:00:67:d9:0c:0a:1d: b4:ad:72:20:8a:1d:ea:f8:8a:8b:bb:c4:51:3b:49:b8:1f:da: 00:d6:1c:ee:6c:ad:ff:7f:ad:f5:4d:5e:89:37:03:14:2b:76: a6:0f:c7:29:e2:04:98:ec:55:71:5b:fd:14:cf:ca:e3:76:77: 1f:37:ac:48:b5:ab:97:39:a0:6d:ab:30:2e:d8:24:e7:df:c7: f6:be:1e:86:80:ed:a4:15:26:dd:79:15:4d:35:2b:82:52:12: 4c:f1:92:70:ad:b1:81:2a:c8:1a:1b:a7:5c:18:b2:5f:48:90: 41:47:05:38:65:56:59:25:9e:01:05:c4:c8:b9:b0:21:66:1b: d9:77:ba:18:d2:de:db:31:e7:d1:30:10:46:33:d5:8e:f5:4d: 0d:12:c6:ba -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4NTBYMuAL8opfiWLsv2daMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzY3Y2RlZWQwYjJhZjJiMzExMjc3NjAzN2ZhZTIwMjYyZDM2MTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCzrs3Cpw8u2kMulRgdfwghLuJn9 O+FN8kvF4SGTsEbKcnvqyW5hyVY2QV6Edl7+F02dItVXbihZyjsycDG/L4MiEnxD htT/KpuAiVpf/dJuECpaGcQSeniVMDiUVLfwP/OQQ/fl9rrxvW3mma/9CSYSiJGk g5nxMYwpuHGjf7MMM4cNyb5i67jBxs6UiQA5fpAqEZyCT8hJByvoDABxz+r35xiu LtDt7HKuHSoKiPr+G1Ad43KZE4m1HVd1kFJjkYk+14/aac5TBFNYiBgueJkkctiV MWm1i3bcM0SKPAetYgUozaLobQp5FKs2RMw/a3l7pEHj/YwHBpdgSuDY+QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFINnze7Qsq8rMRJ3YDf64gJi02ElMB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvZzJmTjd0Q3lyeXN4RW5kZ05fcmlBbUxUWVNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKhD6goAw DQYJKoZIhvcNAQELBQADggEBAIz+j9i8v/qIanW6XVkWT5xawTtj2vFlrEetpDJF SJvnzZW8FHg3L1tEJGMiNcOWa6Cv0V7MvtxljPB6cKWnf2tPHlUIkLereaDb907w kuV9KOT6ge8WtdSIdG2rGt/lrpMbvAmJIgBn2QwKHbStciCKHer4iou7xFE7Sbgf 2gDWHO5srf9/rfVNXok3AxQrdqYPxyniBJjsVXFb/RTPyuN2dx83rEi1q5c5oG2r MC7YJOffx/a+HoaA7aQVJt15FU01K4JSEkzxknCtsYEqyBobp1wYsl9IkEFHBThl VlklngEFxMi5sCFmG9l3uhjS3tsx59EwEEYz1Y71TQ0Sxro= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:11 2026 by rpki-client