This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0Rzitr3CvWTg3pUh2SfrsKYYJVo.roa File: 0Rzitr3CvWTg3pUh2SfrsKYYJVo.roa (raw, json) Hash identifier: 7GLAD0E6W/XbxnM9oX3zx3BZPTEcpNwCGvZxkYPOcpQ= Subject key identifier: D1:1C:E2:B6:BD:C2:BD:64:E0:DE:95:21:D9:27:EB:B0:A6:18:25:5A Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39573C9FD03C19C64834EC5E06354E Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0Rzitr3CvWTg3pUh2SfrsKYYJVo.roa Signing time: Fri 02 Jan 2026 10:20:45 +0000 ROA not before: Fri 02 Jan 2026 10:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212196 IP address blocks: 2a0c:b641:d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:57:3c:9f:d0:3c:19:c6:48:34:ec:5e:06:35:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d11ce2b6bdc2bd64e0de9521d927ebb0a618255a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:5e:ce:b9:66:8b:b9:9e:59:70:b1:f8:ff: dc:f6:a6:ab:e6:bc:20:08:da:2c:91:09:66:b7:d5: 33:68:6c:11:41:0b:f7:37:9a:da:ef:8b:48:1f:b2: c5:da:4b:80:6b:cf:5b:04:2a:8c:97:5c:3f:62:dc: 75:cb:fc:3a:d6:95:a2:e9:7a:4f:cd:aa:c4:61:39: f0:34:97:4b:63:2a:88:17:26:3d:4b:ca:c6:09:45: 0c:f7:81:63:1e:dc:dd:d4:aa:30:dc:5e:fb:1f:32: 45:52:d9:81:70:f6:16:c8:eb:c9:e1:f8:16:1c:f0: 75:b5:0b:06:2f:d9:20:74:3d:96:09:b0:4c:fb:c5: 39:a1:a2:f7:62:d7:72:3f:b4:6f:ae:34:29:f6:b9: 1a:f6:a3:8c:98:f5:78:bd:c1:ef:2c:d7:0e:8e:e7: 5f:4e:e4:0d:6e:d9:78:28:1e:60:e7:cd:f6:10:32: 90:b1:26:34:52:7e:e8:ce:f4:9b:9a:d6:b8:08:4f: e3:14:59:ec:10:d9:45:52:47:e9:a8:ca:ab:b5:64: 39:e2:32:dd:4d:2b:28:7e:0d:d7:c8:dd:19:6f:20: 42:79:0c:cf:00:7d:c1:8a:ff:e2:49:a9:58:1e:8f: 75:2c:5a:40:c5:01:a1:09:cc:9d:f0:7d:14:85:aa: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1C:E2:B6:BD:C2:BD:64:E0:DE:95:21:D9:27:EB:B0:A6:18:25:5A X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0Rzitr3CvWTg3pUh2SfrsKYYJVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:d0::/44 Signature Algorithm: sha256WithRSAEncryption 0e:79:1a:f9:df:af:69:f5:b4:65:83:45:d1:76:a5:66:6d:be: b3:a2:8d:81:8c:b5:05:ed:e9:29:c8:d9:52:49:97:31:a9:5b: 6f:9b:71:04:82:61:4f:f9:bd:b6:7d:66:02:88:1e:20:53:a5: d1:d0:06:dd:cd:6d:bf:5a:66:e1:85:0c:0e:2c:4e:38:97:0a: 42:c8:cc:eb:ba:e7:7a:d6:3f:46:d7:f3:f2:e6:b8:74:cb:f9: b9:63:61:51:63:f2:8e:69:72:4b:0c:8c:c0:4d:95:96:e3:7a: 0f:7c:42:b0:e3:15:d2:44:f3:b5:2c:99:4a:de:2e:01:18:a8: cd:dd:1f:b2:1f:83:5b:55:1c:70:2f:26:07:5c:7f:64:32:9e: 98:8f:83:f1:3a:58:b6:20:27:a7:98:06:af:3a:71:1a:6d:90: 05:5f:1b:49:d5:65:65:9b:de:36:2c:c0:62:88:94:0b:a2:89: 2b:0d:e6:7a:98:a8:42:84:b7:7c:3d:7e:e6:8f:8e:b3:c8:27: 1e:ba:a2:7a:1a:f4:77:31:ec:d6:c2:f3:c4:ca:a7:03:14:5a: ec:76:5f:c6:fd:d0:37:35:de:68:93:a5:1a:07:93:cf:b5:02: e8:36:14:4c:bb:03:d2:74:29:76:36:71:dd:94:b2:f4:af:c3: 91:8d:63:e5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVc8n9A8GcZINOxeBjVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTFjZTJiNmJkYzJiZDY0ZTBkZTk1MjFkOTI3ZWJiMGE2MTgyNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtpezrlmi7meWXCx+P/c9qar5rwg CNoskQlmt9UzaGwRQQv3N5ra74tIH7LF2kuAa89bBCqMl1w/Ytx1y/w61pWi6XpP zarEYTnwNJdLYyqIFyY9S8rGCUUM94FjHtzd1Kow3F77HzJFUtmBcPYWyOvJ4fgW HPB1tQsGL9kgdD2WCbBM+8U5oaL3YtdyP7RvrjQp9rka9qOMmPV4vcHvLNcOjudf TuQNbtl4KB5g5832EDKQsSY0Un7ozvSbmta4CE/jFFnsENlFUkfpqMqrtWQ54jLd TSsofg3XyN0ZbyBCeQzPAH3Biv/iSalYHo91LFpAxQGhCcyd8H0Uhaoe2wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNEc4ra9wr1k4N6VIdkn67CmGCVaMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvMFJ6aXRyM0N2V1RnM3BVaDJTZnJzS1lZSlZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQDQ MA0GCSqGSIb3DQEBCwUAA4IBAQAOeRr5369p9bRlg0XRdqVmbb6zoo2BjLUF7ekp yNlSSZcxqVtvm3EEgmFP+b22fWYCiB4gU6XR0AbdzW2/WmbhhQwOLE44lwpCyMzr uud61j9G1/Py5rh0y/m5Y2FRY/KOaXJLDIzATZWW43oPfEKw4xXSRPO1LJlK3i4B GKjN3R+yH4NbVRxwLyYHXH9kMp6Yj4PxOli2ICenmAavOnEabZAFXxtJ1WVlm942 LMBiiJQLookrDeZ6mKhChLd8PX7mj46zyCceuqJ6GvR3MezWwvPEyqcDFFrsdl/G /dA3Nd5ok6UaB5PPtQLoNhRMuwPSdCl2NnHdlLL0r8ORjWPl -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:05 2026 by rpki-client