This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/2pf-zTxW5BjaAWCTFG2DLvsJI6Y.roa File: 2pf-zTxW5BjaAWCTFG2DLvsJI6Y.roa (raw, json) Hash identifier: 00cQ7niNdYupTzs8uevKOCewXa1tnY8zfKm3DEiLyz0= Subject key identifier: DA:97:FE:CD:3C:56:E4:18:DA:01:60:93:14:6D:83:2E:FB:09:23:A6 Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Certificate serial: 019B7F8384FC672AE376EDCFCADAD3847EB7 Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/2pf-zTxW5BjaAWCTFG2DLvsJI6Y.roa Signing time: Fri 02 Jan 2026 16:21:24 +0000 ROA not before: Fri 02 Jan 2026 16:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40028 IP address blocks: 2a0e:1c80:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:84:fc:67:2a:e3:76:ed:cf:ca:da:d3:84:7e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Validity Not Before: Jan 2 16:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da97fecd3c56e418da016093146d832efb0923a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:9d:f4:9e:96:18:d4:b3:3d:8f:c1:6c:10: 8a:0e:b5:ab:6e:8e:eb:79:1a:5e:00:d3:2a:e1:68: 8c:4b:17:fa:28:74:b9:fd:26:84:3a:9b:7b:2e:69: 72:61:7f:ef:dd:67:3b:40:35:5e:e2:96:bb:fb:a8: c0:1e:50:c4:28:29:fa:26:c6:13:9d:74:db:85:86: 1b:fc:fe:d4:e2:ce:2c:90:99:09:1e:2d:52:0c:e3: d2:df:9d:15:71:6c:b3:9a:86:60:56:43:7c:63:9e: dd:28:a6:e6:0c:07:70:29:17:1f:53:96:f0:6a:8d: 57:63:31:a6:a0:58:6a:0e:b3:ff:62:8a:60:d8:7a: 05:40:dd:6e:49:86:94:ce:1a:71:7b:f5:a0:aa:1b: 8e:e9:0b:d6:a5:c0:58:6c:94:12:c0:e8:38:79:9e: 27:6d:66:b9:0d:ac:c2:b8:85:ac:a0:77:69:9a:74: 1b:5d:b0:3f:14:b9:f2:4a:2d:29:a5:9a:5d:e7:83: 71:f3:93:a0:a2:65:25:9a:6d:57:fa:02:23:b1:97: 72:90:4a:65:67:18:9c:5a:9d:4d:ed:af:5b:f0:6b: 78:9b:3b:86:8e:1d:22:7b:85:41:9c:5a:d9:8a:ec: dd:ec:77:28:3e:bd:2d:b1:49:ed:c7:6c:a1:e6:6e: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:97:FE:CD:3C:56:E4:18:DA:01:60:93:14:6D:83:2E:FB:09:23:A6 X509v3 Authority Key Identifier: keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/2pf-zTxW5BjaAWCTFG2DLvsJI6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:1c80:5::/48 Signature Algorithm: sha256WithRSAEncryption 44:01:1c:d0:a4:b0:62:fc:e5:50:e9:0e:67:be:22:a0:da:c0: 61:24:25:7c:77:5b:d8:d4:80:22:da:20:ec:09:ca:d2:4b:29: f6:79:8c:39:f1:62:28:df:b2:15:e3:37:80:7a:ef:d7:fb:f7: 4d:00:07:20:0f:18:80:ec:aa:40:14:4e:d4:95:5a:0c:6a:5c: 42:5a:fc:fa:e4:e0:01:0f:fa:51:82:9e:08:64:fa:14:23:e2: 35:ba:81:e1:49:17:6b:a4:e4:2c:27:2d:04:78:8c:92:07:bb: 28:7e:44:14:1d:4b:f7:0f:69:8f:cc:5f:17:51:5e:2d:63:15: fd:77:f4:ae:90:db:c5:be:51:9d:06:28:c8:2a:82:ae:e3:0a: 65:63:81:c5:9d:29:b8:b0:18:06:06:d9:5f:85:03:9e:c0:8a: 13:17:29:48:99:29:a9:11:c4:b4:a2:0d:a8:a8:10:a3:e4:28: 64:51:8c:81:07:49:ba:f8:a3:49:38:6f:78:3f:2e:2c:fa:e2: 12:ac:0b:f7:28:06:82:ea:66:7b:6a:8a:47:29:19:e4:73:dc: 91:0b:40:d0:e8:56:09:45:6a:e3:de:f6:26:03:51:e5:98:41: 55:aa:18:e2:07:80:1f:38:4d:9b:0a:df:c1:d7:79:ae:04:d6: eb:a2:c8:7d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g4T8Zyrjdu3PytrThH63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk OTgzZjYwHhcNMjYwMTAyMTYyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTk3ZmVjZDNjNTZlNDE4ZGEwMTYwOTMxNDZkODMyZWZiMDkyM2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PGd9J6WGNSzPY/BbBCKDrWrbo7r eRpeANMq4WiMSxf6KHS5/SaEOpt7LmlyYX/v3Wc7QDVe4pa7+6jAHlDEKCn6JsYT nXTbhYYb/P7U4s4skJkJHi1SDOPS350VcWyzmoZgVkN8Y57dKKbmDAdwKRcfU5bw ao1XYzGmoFhqDrP/Yopg2HoFQN1uSYaUzhpxe/WgqhuO6QvWpcBYbJQSwOg4eZ4n bWa5DazCuIWsoHdpmnQbXbA/FLnySi0ppZpd54Nx85OgomUlmm1X+gIjsZdykEpl ZxicWp1N7a9b8Gt4mzuGjh0ie4VBnFrZiuzd7HcoPr0tsUntx2yh5m5mYQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNqX/s08VuQY2gFgkxRtgy77CSOmMB8GA1UdIwQY MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt MDliZTlkYjExZjY2LzEvMnBmLXpUeFc1QmphQVdDVEZHMkRMdnNKSTZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2 LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4cgAAF MA0GCSqGSIb3DQEBCwUAA4IBAQBEARzQpLBi/OVQ6Q5nviKg2sBhJCV8d1vY1IAi 2iDsCcrSSyn2eYw58WIo37IV4zeAeu/X+/dNAAcgDxiA7KpAFE7UlVoMalxCWvz6 5OABD/pRgp4IZPoUI+I1uoHhSRdrpOQsJy0EeIySB7sofkQUHUv3D2mPzF8XUV4t YxX9d/SukNvFvlGdBijIKoKu4wplY4HFnSm4sBgGBtlfhQOewIoTFylImSmpEcS0 og2oqBCj5ChkUYyBB0m6+KNJOG94Py4s+uISrAv3KAaC6mZ7aopHKRnkc9yRC0DQ 6FYJRWrj3vYmA1HlmEFVqhjiB4AfOE2bCt/B13muBNbrosh9 -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:32 2026 by rpki-client