This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/m2WjaGlBAPztzFvBOucPXcVz1A8.roa File: m2WjaGlBAPztzFvBOucPXcVz1A8.roa (raw, json) Hash identifier: 8IEpJ0cdndWX7mjoIio/qLWep6snHpr/fCFNjySaEQc= Subject key identifier: 9B:65:A3:68:69:41:00:FC:ED:CC:5B:C1:3A:E7:0F:5D:C5:73:D4:0F Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a Certificate serial: 019B775933748C414038324D91E10315A906 Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/m2WjaGlBAPztzFvBOucPXcVz1A8.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202647 IP address blocks: 2a13:bc2:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:33:74:8c:41:40:38:32:4d:91:e1:03:15:a9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa7eb1115130fac94091061e31462a565226885a Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b65a368694100fcedcc5bc13ae70f5dc573d40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d5:a1:ae:5a:01:3a:8c:93:ef:f3:08:3a:19: c2:f5:1e:f7:49:89:c8:4c:b3:b6:90:95:0f:d7:bf: af:a4:8b:a4:6b:ab:b5:55:7e:f9:f1:42:81:92:4d: bf:77:f8:d9:3c:2f:fe:4a:bf:8e:1c:21:fa:21:10: e0:9e:45:32:06:9c:b7:a4:e0:a9:c8:8a:83:db:bb: 1b:68:e7:05:99:c7:d1:2f:e9:9d:a1:07:34:93:ec: 62:bc:68:a8:8d:e1:9c:87:db:b0:a4:83:ce:b5:11: a5:c8:c7:17:11:8f:84:9e:f8:9f:c8:7f:08:05:d2: 31:ed:4d:28:ad:c3:e7:1e:46:8a:13:ee:03:7c:ec: 3c:70:16:97:6f:0a:9f:5a:26:11:56:07:29:c6:58: 0e:ab:26:e4:5f:3a:42:de:9b:5e:69:62:94:22:70: 4a:47:05:20:07:ec:86:4d:3f:bd:bb:f2:0e:6e:3a: b5:f9:f0:01:cf:e0:6f:b0:44:20:72:65:74:5d:9b: 8f:ce:88:37:5d:1d:32:b7:89:b5:c0:69:b1:d2:4f: 7e:b5:2c:26:9b:a8:13:41:00:f4:d0:74:03:0a:97: 21:38:f0:d8:fb:b1:b2:22:97:40:eb:5a:c8:2f:00: b4:20:ce:27:b6:4c:c2:07:97:74:0e:bd:cc:74:e5: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:65:A3:68:69:41:00:FC:ED:CC:5B:C1:3A:E7:0F:5D:C5:73:D4:0F X509v3 Authority Key Identifier: keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/m2WjaGlBAPztzFvBOucPXcVz1A8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:bc2:1000::/36 Signature Algorithm: sha256WithRSAEncryption 25:d8:0b:55:92:34:0a:65:f2:3f:27:c9:d7:48:98:fe:bd:ad: 70:e9:f6:3a:a2:a1:6e:df:26:9f:12:f9:92:09:c0:dd:a4:44: c0:00:df:2b:a1:a5:ca:f5:9b:da:e8:43:71:61:fc:f5:ff:c8: 57:0d:40:c8:86:64:7d:bf:bc:93:8e:2c:92:0d:b8:28:e2:6f: 8b:2c:5d:cb:ae:51:02:f4:0d:e2:c0:32:e3:ff:f5:10:95:48: ed:1e:b2:98:d7:05:a6:a2:bf:f6:dc:14:52:7e:04:8a:40:d3: e8:d0:11:c4:fc:20:d0:cc:07:a1:ab:38:3d:4c:63:f6:91:cf: 7e:ae:b0:9f:5a:96:56:9b:1c:5f:8f:d6:d3:a5:9b:19:ea:59: 3d:28:51:f1:06:f6:19:44:bf:b3:47:c2:e3:ea:ae:f3:8e:78: 09:55:df:49:ce:4c:1e:36:f1:d8:90:e8:54:c0:47:19:c1:d8: ab:58:48:53:80:92:37:39:68:8e:69:e1:47:c9:84:ef:69:f7: cc:73:16:06:48:6b:bb:45:70:1b:56:cd:83:fb:34:34:73:7b: 07:ab:93:30:13:a8:70:54:f9:b8:81:a3:21:7d:b7:4b:c0:f7: 5e:d3:26:27:a6:02:8d:0f:8c:a3:78:e3:b3:34:5e:f1:fb:44: c9:70:af:6a -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt3WTN0jEFAODJNkeEDFakGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhN2ViMTExNTEzMGZhYzk0MDkxMDYxZTMxNDYyYTU2NTIy Njg4NWEwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjY1YTM2ODY5NDEwMGZjZWRjYzViYzEzYWU3MGY1ZGM1NzNkNDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdWhrloBOoyT7/MIOhnC9R73SYnI TLO2kJUP17+vpIuka6u1VX758UKBkk2/d/jZPC/+Sr+OHCH6IRDgnkUyBpy3pOCp yIqD27sbaOcFmcfRL+mdoQc0k+xivGiojeGch9uwpIPOtRGlyMcXEY+EnvifyH8I BdIx7U0orcPnHkaKE+4DfOw8cBaXbwqfWiYRVgcpxlgOqybkXzpC3pteaWKUInBK RwUgB+yGTT+9u/IObjq1+fABz+BvsEQgcmV0XZuPzog3XR0yt4m1wGmx0k9+tSwm m6gTQQD00HQDCpchOPDY+7GyIpdA61rILwC0IM4ntkzCB5d0Dr3MdOWQ9QIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFJtlo2hpQQD87cxbwTrnD13Fc9QPMB8GA1UdIwQY MBaAFPp+sRFRMPrJQJEGHjFGKlZSJohaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1uNnhFVkV3LXNsQWtRWWVNVVlxVmxJbWlGby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvYzE1ZTk5LTI5NjUtNDc2Zi05YWVm LThhMjczZjRhZDE1ZC8xL20yV2phR2xCQVB6dHpGdkJPdWNQWGNWejFBOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmMvYzE1ZTk5LTI5NjUtNDc2Zi05YWVmLThhMjczZjRhZDE1 ZC8xLzEtbjZ4RVZFdy1zbEFrUVllTVVZcVZsSW1pRm8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqEwvC EDANBgkqhkiG9w0BAQsFAAOCAQEAJdgLVZI0CmXyPyfJ10iY/r2tcOn2OqKhbt8m nxL5kgnA3aREwADfK6GlyvWb2uhDcWH89f/IVw1AyIZkfb+8k44skg24KOJviyxd y65RAvQN4sAy4//1EJVI7R6ymNcFpqK/9twUUn4EikDT6NARxPwg0MwHoas4PUxj 9pHPfq6wn1qWVpscX4/W06WbGepZPShR8Qb2GUS/s0fC4+qu8454CVXfSc5MHjbx 2JDoVMBHGcHYq1hIU4CSNzlojmnhR8mE72n3zHMWBkhru0VwG1bNg/s0NHN7B6uT MBOocFT5uIGjIX23S8D3XtMmJ6YCjQ+Mo3jjszRe8ftEyXCvag== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:28 2026 by rpki-client