This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/2gnx3T23gnHyfvabZqmNGBx5Pow.roa File: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (raw, json) Hash identifier: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg= Subject key identifier: DA:09:F1:DD:3D:B7:82:71:F2:7E:F6:9B:66:A9:8D:18:1C:79:3E:8C Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01 Certificate serial: 019B78354DED82C9AC8D500549AB0E760F6C Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/2gnx3T23gnHyfvabZqmNGBx5Pow.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43413 IP address blocks: 78.41.16.0/21 maxlen: 21 92.63.48.0/20 maxlen: 20 2a04:bc00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4d:ed:82:c9:ac:8d:50:05:49:ab:0e:76:0f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01 Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da09f1dd3db78271f27ef69b66a98d181c793e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:96:e0:97:e6:fc:e2:23:07:f6:66:7d:8f: 89:0c:de:79:ec:f7:06:52:53:74:27:c0:c7:b7:aa: 8b:01:d0:3b:fc:ed:8b:94:2b:29:33:f5:5d:27:31: 24:b4:5a:43:5c:a1:69:b8:52:25:4e:7f:a7:19:34: 92:1e:0c:3b:ed:9e:52:fd:34:79:c1:02:72:e6:d9: dc:17:c1:8a:e6:2f:9c:40:d3:d3:84:d6:ac:d8:ce: b6:86:f1:2f:eb:6f:e0:5f:02:e2:61:2e:de:d6:f4: a4:6e:77:60:34:c7:0b:0b:e0:ba:27:74:b1:36:89: 36:7e:fb:3c:80:65:b4:1a:a4:59:da:e3:90:37:4d: ff:5e:72:fb:f4:5d:be:1d:ba:58:29:f7:fe:13:63: 6e:a0:fe:1f:1f:8d:1a:11:16:ed:77:64:13:f9:67: 99:1f:6a:e3:f3:f0:83:11:ea:13:eb:6f:c9:44:c9: 80:63:2e:58:34:ea:4a:b7:36:aa:b9:e7:52:f9:ff: 25:2c:61:74:31:a9:d0:d1:65:0d:2b:20:2d:68:02: e9:ca:be:d4:61:53:19:79:d7:eb:f6:e3:11:4c:94: 8c:ee:a4:2d:46:d7:03:90:aa:11:54:80:2d:21:f7: 51:bb:5d:99:a2:fe:f4:96:31:b8:a0:4c:05:5f:5a: 33:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:09:F1:DD:3D:B7:82:71:F2:7E:F6:9B:66:A9:8D:18:1C:79:3E:8C X509v3 Authority Key Identifier: keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/2gnx3T23gnHyfvabZqmNGBx5Pow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.16.0/21 92.63.48.0/20 IPv6: 2a04:bc00::/29 Signature Algorithm: sha256WithRSAEncryption 2f:5b:58:32:ac:b0:c3:ef:4e:99:d9:fa:68:48:df:c6:cb:30: b3:2c:63:26:44:61:d2:eb:60:30:27:24:94:cd:95:b4:9e:18: 61:14:f1:6b:d7:1d:36:f8:38:9a:17:94:27:31:1d:50:b0:d7: 66:7c:0e:4c:de:4d:31:32:25:81:ef:eb:5d:f4:97:ab:5e:19: 7d:7c:b2:60:34:a4:d4:50:a8:de:d3:00:f1:7e:36:60:34:f7: f8:73:62:84:95:67:10:dd:c7:32:3d:81:0d:62:b5:b3:74:aa: fc:75:e4:af:f1:82:51:0e:a9:73:e7:22:d3:c9:6f:6a:e0:aa: 50:37:34:c4:2d:7e:57:84:5e:71:c8:41:db:22:c7:01:2e:96: e3:71:f6:f8:ff:98:21:05:38:88:27:12:38:eb:70:5a:e4:d6: 80:b1:42:af:37:06:50:b6:17:8b:f3:a7:97:80:76:e4:04:67: 97:5d:79:b6:9a:4e:be:c9:63:9b:cb:bc:07:c4:00:d0:d4:22: 00:da:9e:91:b3:2e:7a:6c:6b:f8:89:ce:93:43:e7:a0:f0:14: f4:fa:0b:80:f4:2b:59:18:ed:e4:dd:c0:99:a2:b0:e8:a9:4b: 6f:8a:17:08:0c:72:1a:d3:71:14:67:bb:4b:73:7f:6d:dc:39: b1:91:07:7e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NU3tgsmsjVAFSasOdg9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjMzZDRmM2FjMGE4ODc4NDBhMjg0Y2RjMWFiZWI3ZGQ2 NDJmMDEwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTA5ZjFkZDNkYjc4MjcxZjI3ZWY2OWI2NmE5OGQxODFjNzkzZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNqW4Jfm/OIjB/ZmfY+JDN557PcG UlN0J8DHt6qLAdA7/O2LlCspM/VdJzEktFpDXKFpuFIlTn+nGTSSHgw77Z5S/TR5 wQJy5tncF8GK5i+cQNPThNas2M62hvEv62/gXwLiYS7e1vSkbndgNMcLC+C6J3Sx Nok2fvs8gGW0GqRZ2uOQN03/XnL79F2+HbpYKff+E2NuoP4fH40aERbtd2QT+WeZ H2rj8/CDEeoT62/JRMmAYy5YNOpKtzaquedS+f8lLGF0ManQ0WUNKyAtaALpyr7U YVMZedfr9uMRTJSM7qQtRtcDkKoRVIAtIfdRu12Zov70ljG4oEwFX1ozzQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNoJ8d09t4Jx8n72m2apjRgceT6MMB8GA1UdIwQY MBaAFJ/zPU86wKiHhAooTNwavrfdZC8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQt MzA3MjUwM2Q4NjA3LzEvMmdueDNUMjNnbkh5ZnZhYlpxbU5HQng1UG93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQtMzA3MjUwM2Q4NjA3 LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDTikQAwQE XD8wMA0EAgACMAcDBQMqBLwAMA0GCSqGSIb3DQEBCwUAA4IBAQAvW1gyrLDD706Z 2fpoSN/GyzCzLGMmRGHS62AwJySUzZW0nhhhFPFr1x02+DiaF5QnMR1QsNdmfA5M 3k0xMiWB7+td9JerXhl9fLJgNKTUUKje0wDxfjZgNPf4c2KElWcQ3ccyPYENYrWz dKr8deSv8YJRDqlz5yLTyW9q4KpQNzTELX5XhF5xyEHbIscBLpbjcfb4/5ghBTiI JxI463Ba5NaAsUKvNwZQtheL86eXgHbkBGeXXXm2mk6+yWOby7wHxADQ1CIA2p6R sy56bGv4ic6TQ+eg8BT0+guA9CtZGO3k3cCZorDoqUtvihcIDHIa03EUZ7tLc39t 3DmxkQd+ -----END CERTIFICATE-----Generated at Mon Jan 12 01:33:26 2026 by rpki-client