This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-8NMYCXjmizhuD_2-g9L0H3LJ8E.roa File: 1-8NMYCXjmizhuD_2-g9L0H3LJ8E.roa (raw, json) Hash identifier: GXeUvXEJISKRQSrEn25QzaT1GQkwOKU2uHCXx9q22jI= Subject key identifier: FB:C3:4C:60:25:E3:9A:2C:E1:B8:3F:F6:FA:0F:4B:D0:7D:CB:27:C1 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E392CB3AB093B6587F6AC65D53D6C98 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-8NMYCXjmizhuD_2-g9L0H3LJ8E.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61138 IP address blocks: 2a0c:b642:1a0e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2c:b3:ab:09:3b:65:87:f6:ac:65:d5:3d:6c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbc34c6025e39a2ce1b83ff6fa0f4bd07dcb27c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:c5:25:43:5a:2c:a7:86:03:43:44:58:9c: b3:2e:68:a8:cd:92:3e:a9:bb:3a:5d:a4:94:3c:35: d7:13:12:65:18:06:ae:ce:3d:aa:25:84:aa:50:a7: e0:d3:ba:6f:11:00:c1:1c:c4:09:e8:e7:01:df:c6: fb:9d:da:36:6b:be:2c:5a:cb:bd:04:61:43:12:9a: de:e2:28:a7:1f:10:2d:a9:63:0e:49:11:50:0b:49: 65:e8:a9:51:18:e0:9e:8c:57:c2:89:ff:01:37:43: 0d:4e:09:f8:00:fb:75:e3:da:db:f9:1e:71:c1:be: f2:46:6d:07:03:cf:c5:c5:e9:79:fe:49:82:f2:da: 71:02:ed:bf:dc:6b:ae:20:69:b3:bb:7d:d0:10:8c: f2:f4:42:c8:f2:1c:cc:ce:29:0e:cf:4c:41:c1:26: 3b:a8:9d:84:1b:c3:da:a8:99:bb:21:16:c8:79:d9: a4:ee:14:44:2e:a1:af:3f:f9:57:d9:93:03:ef:8e: 38:d4:f6:3e:44:93:44:60:a4:09:c9:a5:95:dd:83: da:32:7c:54:ef:68:c8:0d:d1:7e:a0:b9:b9:43:00: 84:f0:2a:9a:17:ec:26:aa:53:0c:5c:92:61:ed:72: 15:e1:2b:a8:aa:78:97:35:27:db:43:0c:6a:2c:25: 0d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C3:4C:60:25:E3:9A:2C:E1:B8:3F:F6:FA:0F:4B:D0:7D:CB:27:C1 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-8NMYCXjmizhuD_2-g9L0H3LJ8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:1a0e::/48 Signature Algorithm: sha256WithRSAEncryption 72:b5:c5:c8:71:d9:e2:14:b6:e9:43:4e:f4:fa:dd:a0:e6:70: 7d:37:d1:ed:e0:f0:e9:b9:eb:f7:55:19:9b:43:b5:5e:ac:4d: e5:2b:98:8c:1f:15:da:dc:9e:4b:49:73:25:e2:cf:30:27:90: 0d:89:39:a3:06:91:f8:24:ce:a6:f9:01:fd:c8:6b:00:85:a2: 65:b6:c1:90:da:38:21:13:69:07:9e:8f:88:cd:50:2f:d1:b4: 01:9a:94:8a:7c:8d:5f:f2:54:5e:4c:80:35:d1:ad:bf:b7:98: 8e:f0:e0:1d:c3:2f:6d:f2:b0:65:8e:8b:33:d0:d4:56:cb:33: fe:3e:d6:be:4d:65:78:75:c3:cc:16:23:db:f3:dc:11:ab:d9: 7c:be:db:d2:d7:bf:7f:78:c3:c0:91:22:3c:11:ad:54:64:5d: f1:b0:cc:fb:89:2b:8e:17:28:d0:65:d5:31:ef:54:43:ea:04: 13:36:d5:1d:ce:68:92:21:63:ae:b8:c2:65:5d:af:59:c8:06: 43:b0:c9:e9:4e:89:1f:aa:95:cc:33:3e:8a:08:45:fa:e2:02: 5c:8b:f5:e4:6e:96:6e:63:83:d3:3a:8d:ab:b9:e5:c2:d7:f5: 60:8a:8f:1a:7c:6a:d2:93:d6:e8:d7:86:51:c8:08:0c:f9:5e: 5d:c7:2e:89 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt+OSyzqwk7ZYf2rGXVPWyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmMzNGM2MDI1ZTM5YTJjZTFiODNmZjZmYTBmNGJkMDdkY2IyN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg7FJUNaLKeGA0NEWJyzLmiozZI+ qbs6XaSUPDXXExJlGAauzj2qJYSqUKfg07pvEQDBHMQJ6OcB38b7ndo2a74sWsu9 BGFDEpre4iinHxAtqWMOSRFQC0ll6KlRGOCejFfCif8BN0MNTgn4APt149rb+R5x wb7yRm0HA8/Fxel5/kmC8tpxAu2/3GuuIGmzu33QEIzy9ELI8hzMzikOz0xBwSY7 qJ2EG8PaqJm7IRbIedmk7hRELqGvP/lX2ZMD74441PY+RJNEYKQJyaWV3YPaMnxU 72jIDdF+oLm5QwCE8CqaF+wmqlMMXJJh7XIV4SuoqniXNSfbQwxqLCUNdwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPvDTGAl45os4bg/9voPS9B9yyfBMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvMS04Tk1ZQ1hqbWl6aHVEXzItZzlMMEgzTEo4RS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjkvMmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBm ZC8xL0JaZG9BVFk5TjFlR0ZTNU5CaDUxeUw2elVGZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoMtkIa DjANBgkqhkiG9w0BAQsFAAOCAQEAcrXFyHHZ4hS26UNO9PrdoOZwfTfR7eDw6bnr 91UZm0O1XqxN5SuYjB8V2tyeS0lzJeLPMCeQDYk5owaR+CTOpvkB/chrAIWiZbbB kNo4IRNpB56PiM1QL9G0AZqUinyNX/JUXkyANdGtv7eYjvDgHcMvbfKwZY6LM9DU Vssz/j7Wvk1leHXDzBYj2/PcEavZfL7b0te/f3jDwJEiPBGtVGRd8bDM+4krjhco 0GXVMe9UQ+oEEzbVHc5okiFjrrjCZV2vWcgGQ7DJ6U6JH6qVzDM+ighF+uICXIv1 5G6WbmOD0zqNq7nlwtf1YIqPGnxq0pPW6NeGUcgIDPleXccuiQ== -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:33 2026 by rpki-client