This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/2X2Ba8rgbouM32gnizEyTUGgONU.roa File: 2X2Ba8rgbouM32gnizEyTUGgONU.roa (raw, json) Hash identifier: /S0uaILIP04CzsCMDO3CxuQ/dGQk0LoPnR9uswe+Dno= Subject key identifier: D9:7D:81:6B:CA:E0:6E:8B:8C:DF:68:27:8B:31:32:4D:41:A0:38:D5 Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B76EB2D99D0526E890B63B34CE5E1C796 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/2X2Ba8rgbouM32gnizEyTUGgONU.roa Signing time: Thu 01 Jan 2026 00:18:02 +0000 ROA not before: Thu 01 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34665 IP address blocks: 2a0c:6900::/29 maxlen: 29 2a0c:6900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2d:99:d0:52:6e:89:0b:63:b3:4c:e5:e1:c7:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d97d816bcae06e8b8cdf68278b31324d41a038d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:44:1c:e1:dc:14:98:26:5a:b3:a8:95:34: 76:d9:2a:38:0d:2b:91:5d:c7:a3:2a:d1:23:9b:1d: f4:2c:f3:7c:95:a2:fc:30:4f:04:87:a9:98:83:d4: 4d:b0:50:00:1b:ae:72:97:e0:94:b0:cf:58:da:c2: 46:d8:5a:37:75:26:25:7a:50:07:db:01:23:d6:6b: e1:d5:a3:b6:3d:03:65:d0:75:41:33:e3:0a:55:e6: c8:53:59:2f:31:07:15:b8:a1:2a:5a:15:72:68:79: e3:b3:82:98:b1:ca:8a:fc:96:91:1f:7c:d3:82:2f: ab:f6:fb:c8:65:d0:6d:0b:30:54:6d:ee:8b:9e:35: e0:91:b4:4c:b9:1e:5a:58:50:40:03:4d:9f:27:36: 6a:3f:2e:9e:46:ce:64:5d:e7:3a:34:dd:3a:3b:b7: 3a:d6:e8:3d:b7:ba:cb:f6:42:08:15:5b:a9:2b:4e: f6:52:60:85:56:d5:92:36:a9:72:e5:b4:2d:8c:85: c1:b6:18:f3:58:d3:fd:e6:3f:2d:41:67:68:5b:ad: 55:57:68:f0:06:85:9e:55:e7:eb:e9:a0:ab:30:23: 1c:e0:0d:1f:5a:4c:03:33:aa:57:6e:1f:fc:60:63: 3d:82:94:99:f8:07:a3:e1:ab:ee:a6:66:f3:bb:09: 0d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7D:81:6B:CA:E0:6E:8B:8C:DF:68:27:8B:31:32:4D:41:A0:38:D5 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/2X2Ba8rgbouM32gnizEyTUGgONU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:6900::/29 Signature Algorithm: sha256WithRSAEncryption 83:a5:7f:16:66:cb:dc:81:c0:58:99:0f:37:00:6e:24:2e:de: 87:a4:09:05:06:e8:a9:69:aa:6e:87:ba:e3:dc:b1:7e:17:d5: 62:95:78:0e:3b:a5:f0:f8:1e:b1:5d:da:9c:a3:aa:40:61:41: c8:aa:16:03:4a:82:6c:ea:9d:02:6d:c9:87:ef:9f:f9:53:1d: 73:2b:3a:27:61:92:a2:35:1e:a3:3c:94:17:ca:8f:a9:31:8c: 77:61:5b:b3:63:00:cf:c2:41:d9:4d:ef:bd:94:18:06:49:13: ee:66:1a:3c:8b:2e:8d:49:49:3c:94:2e:b1:dc:12:6d:bf:fd: 16:0c:84:67:a6:3f:8a:13:f2:70:bd:52:49:47:fd:77:62:9b: 15:7c:86:54:8f:51:e6:30:6d:68:95:17:63:b5:04:1d:83:03: fa:f8:04:8b:71:17:33:2b:a2:e8:e2:1f:85:79:b6:3c:5d:81: 93:57:1d:0d:c4:04:5f:39:23:cd:73:d1:ad:a9:90:9d:1b:4a: 9e:2c:22:ff:b6:2d:71:5d:9c:ce:b5:1d:dc:1e:6e:99:73:38: 6e:ce:a5:e6:ba:86:74:28:28:77:1d:ec:d3:62:fc:e4:7a:6b: 5d:62:d3:f1:f7:ef:6f:2f:3d:d7:41:1d:98:4b:c5:6a:10:bf: 8b:e6:cf:d9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt26y2Z0FJuiQtjs0zl4ceWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTdkODE2YmNhZTA2ZThiOGNkZjY4Mjc4YjMxMzI0ZDQxYTAzOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1JEHOHcFJgmWrOolTR22So4DSuR XcejKtEjmx30LPN8laL8ME8Eh6mYg9RNsFAAG65yl+CUsM9Y2sJG2Fo3dSYlelAH 2wEj1mvh1aO2PQNl0HVBM+MKVebIU1kvMQcVuKEqWhVyaHnjs4KYscqK/JaRH3zT gi+r9vvIZdBtCzBUbe6LnjXgkbRMuR5aWFBAA02fJzZqPy6eRs5kXec6NN06O7c6 1ug9t7rL9kIIFVupK072UmCFVtWSNqly5bQtjIXBthjzWNP95j8tQWdoW61VV2jw BoWeVefr6aCrMCMc4A0fWkwDM6pXbh/8YGM9gpSZ+Aej4avupmbzuwkNcQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNl9gWvK4G6LjN9oJ4sxMk1BoDjVMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvMlgyQmE4cmdib3VNMzJnbml6RXlUVUdnT05VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgxpADAN BgkqhkiG9w0BAQsFAAOCAQEAg6V/FmbL3IHAWJkPNwBuJC7eh6QJBQboqWmqboe6 49yxfhfVYpV4Djul8PgesV3anKOqQGFByKoWA0qCbOqdAm3Jh++f+VMdcys6J2GS ojUeozyUF8qPqTGMd2Fbs2MAz8JB2U3vvZQYBkkT7mYaPIsujUlJPJQusdwSbb/9 FgyEZ6Y/ihPycL1SSUf9d2KbFXyGVI9R5jBtaJUXY7UEHYMD+vgEi3EXMyui6OIf hXm2PF2Bk1cdDcQEXzkjzXPRramQnRtKniwi/7YtcV2czrUd3B5umXM4bs6l5rqG dCgodx3s02L85HprXWLT8ffvby8910EdmEvFahC/i+bP2Q== -----END CERTIFICATE-----Generated at Sun Jan 25 13:46:42 2026 by rpki-client