This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/2rAGmumAatpMz3kw0VsK7nvOOnQ.roa File: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (raw, json) Hash identifier: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU= Subject key identifier: DA:B0:06:9A:E9:80:6A:DA:4C:CF:79:30:D1:5B:0A:EE:7B:CE:3A:74 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B8EA1210CB7696FE823723C26CD709B46 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/2rAGmumAatpMz3kw0VsK7nvOOnQ.roa Signing time: Mon 05 Jan 2026 14:48:02 +0000 ROA not before: Mon 05 Jan 2026 14:48:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211421 IP address blocks: 2a03:9381:9::/48 maxlen: 48 2a03:9381:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:a1:21:0c:b7:69:6f:e8:23:72:3c:26:cd:70:9b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 5 14:48:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dab0069ae9806ada4ccf7930d15b0aee7bce3a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8b:8c:8b:ea:2f:19:4a:19:47:31:6a:83:76: 97:e1:d7:46:0c:ad:fe:b8:5d:d2:e8:1e:67:80:9e: fc:7d:06:5d:ee:58:5f:78:99:65:f3:e6:9f:c1:d7: 9f:23:e1:91:88:fe:c0:b6:52:27:31:6c:7b:05:7c: 86:92:01:3b:ba:88:43:49:79:06:a7:1f:af:92:fa: 34:c1:e2:e8:bf:4d:eb:03:e1:3f:28:f1:3b:ac:42: 3d:d7:b4:f4:7a:c0:0d:e3:44:a2:77:ee:32:8d:61: 54:b5:31:a6:9e:9f:b8:e5:1f:d1:30:2d:40:c9:8f: 8d:49:69:5f:35:da:e8:22:35:ea:90:0a:fe:ee:6a: 9d:fc:01:c6:8f:7d:b4:d5:77:55:79:d0:01:e8:2a: 29:f4:dd:bb:54:51:d4:fd:4d:c3:39:6f:01:d9:a6: 63:68:fe:7a:a6:68:b5:7a:12:0f:bf:18:49:4e:2a: cd:f1:64:ae:b9:74:3e:2e:75:78:67:6c:f9:cb:1b: 77:73:1a:0d:9f:51:03:de:77:68:2d:dc:67:e1:52: 77:75:21:69:48:46:be:f7:27:fd:63:0b:f6:08:fe: 4e:22:37:09:36:8b:ae:3e:f6:5e:a8:ff:73:f0:a1: cf:a8:d6:8f:d6:c0:59:3a:72:d6:e6:be:f6:c6:d8: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B0:06:9A:E9:80:6A:DA:4C:CF:79:30:D1:5B:0A:EE:7B:CE:3A:74 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/2rAGmumAatpMz3kw0VsK7nvOOnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:9381:9::/48 2a03:9381:10::/48 Signature Algorithm: sha256WithRSAEncryption 61:ac:f4:e9:9f:34:02:ec:f3:e4:fc:ae:20:d3:e3:e0:8f:9e: 7a:3d:cf:19:25:e6:d5:85:c5:a7:05:e6:05:0c:44:3d:72:22: f5:31:c3:e5:f6:8f:1f:44:8c:b3:29:07:66:e7:30:76:78:26: 24:04:16:f4:72:68:40:e2:cd:5d:f4:9b:62:c1:42:f4:b3:9b: c6:69:dd:20:a8:7e:c5:dc:63:a6:1c:bb:e5:8a:1c:18:2c:98: b4:d6:d9:50:f0:21:bc:6e:10:35:65:19:47:4f:3d:36:07:91: 3c:27:8d:3e:9b:2b:82:c9:40:24:ba:cd:a5:c3:d1:e7:d6:d3: e4:9a:e1:30:16:8b:4d:58:6a:13:15:33:42:a1:11:9b:1a:a8: fa:75:d3:45:ec:74:34:54:45:24:27:1e:a1:ac:cc:cf:17:db: e9:41:1a:91:1b:c4:ae:fe:ab:1f:23:f3:86:fd:cf:91:a6:f9: c9:d3:d9:d9:69:8d:3f:44:eb:16:69:78:02:93:24:c2:80:0e: 67:8a:23:ba:2b:68:a0:4d:85:7b:c3:62:75:77:8c:d1:8e:e2: 68:90:dc:94:02:79:bd:d0:3b:57:7f:49:11:3d:74:62:f1:54: a6:04:f1:b5:14:91:b0:11:5e:5a:d5:8d:86:58:1b:e4:75:18: ed:7b:15:cd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuOoSEMt2lv6CNyPCbNcJtGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTA1MTQ0ODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWIwMDY5YWU5ODA2YWRhNGNjZjc5MzBkMTViMGFlZTdiY2UzYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIuMi+ovGUoZRzFqg3aX4ddGDK3+ uF3S6B5ngJ78fQZd7lhfeJll8+afwdefI+GRiP7AtlInMWx7BXyGkgE7uohDSXkG px+vkvo0weLov03rA+E/KPE7rEI917T0esAN40Sid+4yjWFUtTGmnp+45R/RMC1A yY+NSWlfNdroIjXqkAr+7mqd/AHGj3201XdVedAB6Cop9N27VFHU/U3DOW8B2aZj aP56pmi1ehIPvxhJTirN8WSuuXQ+LnV4Z2z5yxt3cxoNn1ED3ndoLdxn4VJ3dSFp SEa+9yf9Ywv2CP5OIjcJNouuPvZeqP9z8KHPqNaP1sBZOnLW5r72xtgiQwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNqwBprpgGraTM95MNFbCu57zjp0MB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvMnJBR211bUFhdHBNejNrdzBWc0s3bnZPT25RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgOTgQAJ AwcAKgOTgQAQMA0GCSqGSIb3DQEBCwUAA4IBAQBhrPTpnzQC7PPk/K4g0+Pgj556 Pc8ZJebVhcWnBeYFDEQ9ciL1McPl9o8fRIyzKQdm5zB2eCYkBBb0cmhA4s1d9Jti wUL0s5vGad0gqH7F3GOmHLvlihwYLJi01tlQ8CG8bhA1ZRlHTz02B5E8J40+myuC yUAkus2lw9Hn1tPkmuEwFotNWGoTFTNCoRGbGqj6ddNF7HQ0VEUkJx6hrMzPF9vp QRqRG8Su/qsfI/OG/c+RpvnJ09nZaY0/ROsWaXgCkyTCgA5niiO6K2igTYV7w2J1 d4zRjuJokNyUAnm90DtXf0kRPXRi8VSmBPG1FJGwEV5a1Y2GWBvkdRjtexXN -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:15 2026 by rpki-client