This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/2gcY3ooMDtENNPRWePtszkCDkgs.roa File: 2gcY3ooMDtENNPRWePtszkCDkgs.roa (raw, json) Hash identifier: PLRCudoMhsoW+Bz0W12dYcuTY5aB41TFPhykgGGz39I= Subject key identifier: DA:07:18:DE:8A:0C:0E:D1:0D:34:F4:56:78:FB:6C:CE:40:83:92:0B Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019AA1EB79F77994B77B2DD9122A206833BD Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/2gcY3ooMDtENNPRWePtszkCDkgs.roa Signing time: Thu 20 Nov 2025 15:39:15 +0000 ROA not before: Thu 20 Nov 2025 15:39:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214670 IP address blocks: 2a06:8184::/32 maxlen: 32 2a06:8185::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:eb:79:f7:79:94:b7:7b:2d:d9:12:2a:20:68:33:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Nov 20 15:39:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=da0718de8a0c0ed10d34f45678fb6cce4083920b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:79:93:29:89:d2:94:31:07:f5:8b:ef:e8:bd: 70:00:4e:d1:4f:e0:5f:24:fb:54:4b:ce:91:14:20: a3:f4:12:a1:41:a1:ee:db:f8:21:eb:4c:e4:47:e8: ea:d1:be:67:18:6c:cf:3c:d6:73:a6:74:98:27:4e: c6:a0:16:f9:17:dd:2d:b2:68:16:91:1e:f8:42:51: 52:29:1d:7e:9e:1a:d0:83:2d:20:15:31:fd:bb:9e: 37:c2:bc:e5:06:00:67:12:22:f2:2c:1c:e6:62:13: 94:84:5c:9f:13:c7:4b:24:32:2c:e3:4f:05:d8:93: 1a:61:3e:05:c5:de:8d:2b:16:45:f5:1c:67:1e:f1: 27:7a:10:c2:fb:b1:cf:81:77:73:f8:5b:13:cf:8b: b0:82:21:15:73:46:3c:5a:05:62:11:e2:e0:57:01: 69:4c:57:a1:d1:8a:21:83:2a:12:ef:b8:0f:e3:66: 79:15:12:6a:41:2f:f9:60:12:08:84:bc:cb:3f:03: cc:8e:48:1b:65:fe:a8:94:d7:aa:98:c5:ac:1e:f4: 63:ce:f1:3d:86:6e:6e:38:2d:9e:39:ae:5d:e1:2e: 2a:84:ad:85:91:d2:05:51:2c:d2:d6:f4:5d:cb:ce: 7d:79:bf:b8:f6:26:ad:d7:c3:4e:c5:68:f0:7e:4d: 75:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:07:18:DE:8A:0C:0E:D1:0D:34:F4:56:78:FB:6C:CE:40:83:92:0B X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/2gcY3ooMDtENNPRWePtszkCDkgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:8184::/31 Signature Algorithm: sha256WithRSAEncryption 75:79:b4:f1:60:7c:3c:57:f9:95:df:92:ff:7d:07:e4:93:c9: be:7f:55:f6:59:4e:3c:ea:c1:4c:af:55:b7:14:a7:4c:29:93: 9f:6d:04:44:da:13:8e:85:c5:b1:f2:7e:a7:4f:86:05:72:24: 66:86:4f:e9:dc:57:91:92:b3:25:c0:8a:4d:2a:88:0c:fd:d0: e5:67:a8:8c:14:a8:c2:25:ec:c6:e0:49:55:9f:73:11:dc:cb: 8d:b8:49:53:ed:5e:a6:df:89:37:4c:98:9f:71:9b:5b:98:a6: 38:22:72:18:d7:15:f3:fd:0f:8c:a7:c1:25:28:31:17:35:34: f3:16:05:2f:23:3b:47:c7:d8:09:da:4c:f0:da:2c:62:a8:ba: 93:3c:aa:0b:dd:be:53:b4:4a:84:0a:e2:5d:8b:2b:dc:06:96: 33:fb:0b:41:01:51:3b:a8:21:f6:cd:eb:30:c4:14:25:50:0d: 02:68:9b:45:5e:99:cd:1f:38:57:c0:27:55:b8:3d:ec:22:ef: 29:f6:b6:ab:6b:88:84:50:91:a8:f1:c5:83:a3:fd:df:3a:dc: e4:8b:54:2a:87:f3:d8:35:f8:5c:47:9b:dc:fc:9b:a5:0c:87: 40:e3:79:8c:65:f5:ca:bd:a7:f4:e1:49:4c:ba:8f:c7:78:db: 7d:d7:96:25 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqh63n3eZS3ey3ZEiogaDO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjUxMTIwMTUzOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTA3MThkZThhMGMwZWQxMGQzNGY0NTY3OGZiNmNjZTQwODM5MjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXmTKYnSlDEH9Yvv6L1wAE7RT+Bf JPtUS86RFCCj9BKhQaHu2/gh60zkR+jq0b5nGGzPPNZzpnSYJ07GoBb5F90tsmgW kR74QlFSKR1+nhrQgy0gFTH9u543wrzlBgBnEiLyLBzmYhOUhFyfE8dLJDIs408F 2JMaYT4Fxd6NKxZF9RxnHvEnehDC+7HPgXdz+FsTz4uwgiEVc0Y8WgViEeLgVwFp TFeh0YohgyoS77gP42Z5FRJqQS/5YBIIhLzLPwPMjkgbZf6olNeqmMWsHvRjzvE9 hm5uOC2eOa5d4S4qhK2FkdIFUSzS1vRdy859eb+49iat18NOxWjwfk11ZwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNoHGN6KDA7RDTT0Vnj7bM5Ag5ILMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvMmdjWTNvb01EdEVOTlBSV2VQdHN6a0NEa2dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKgaBhDAN BgkqhkiG9w0BAQsFAAOCAQEAdXm08WB8PFf5ld+S/30H5JPJvn9V9llOPOrBTK9V txSnTCmTn20ERNoTjoXFsfJ+p0+GBXIkZoZP6dxXkZKzJcCKTSqIDP3Q5WeojBSo wiXsxuBJVZ9zEdzLjbhJU+1ept+JN0yYn3GbW5imOCJyGNcV8/0PjKfBJSgxFzU0 8xYFLyM7R8fYCdpM8NosYqi6kzyqC92+U7RKhAriXYsr3AaWM/sLQQFRO6gh9s3r MMQUJVANAmibRV6ZzR84V8AnVbg97CLvKfa2q2uIhFCRqPHFg6P93zrc5ItUKofz 2DX4XEeb3PybpQyHQON5jGX1yr2n9OFJTLqPx3jbfdeWJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:41 2025 by rpki-client