This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/10bTf7P-yxg879lIWoX3tb2cn1s.roa File: 10bTf7P-yxg879lIWoX3tb2cn1s.roa (raw, json) Hash identifier: Xvb2EZEaUGq11siA+/ou7lh8c25MIoOblgq4dEHtkYY= Subject key identifier: D7:46:D3:7F:B3:FE:CB:18:3C:EF:D9:48:5A:85:F7:B5:BD:9C:9F:5B Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019BA22B71F5B4A5DDFD2BB57E8B78CF8BDC Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/10bTf7P-yxg879lIWoX3tb2cn1s.roa Signing time: Fri 09 Jan 2026 09:51:54 +0000 ROA not before: Fri 09 Jan 2026 09:51:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202476 IP address blocks: 2a0c:b641:8d0::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:2b:71:f5:b4:a5:dd:fd:2b:b5:7e:8b:78:cf:8b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 9 09:51:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d746d37fb3fecb183cefd9485a85f7b5bd9c9f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e3:0b:de:cc:66:a9:ef:43:42:8f:74:41:0d: 63:0b:b0:a4:34:f4:a1:bb:c7:c6:39:6f:ce:f5:60: ae:83:56:fd:89:f0:a1:49:5d:87:dc:55:b7:7c:7b: 31:8b:59:d4:53:67:40:40:80:9b:b0:7a:77:7d:71: 14:ab:b1:e2:ed:84:b2:e5:5b:26:59:d5:ed:f6:08: d1:0b:9f:ca:93:21:15:e2:e7:c9:e4:b5:e9:81:6a: 4f:76:84:dc:2a:08:9f:e5:9e:01:37:9e:07:8d:8c: 57:36:ba:29:49:65:23:6d:4b:40:d2:8b:71:45:ad: 63:1b:92:3f:d6:d7:3a:e6:38:fd:02:44:84:fe:74: 02:43:dc:dc:1a:90:e0:6c:93:18:db:96:9e:dd:5e: 5e:49:1f:fe:6c:b9:d7:a3:00:4c:07:98:4b:0c:f5: c3:ee:d7:b6:df:90:38:2c:ca:95:85:80:dc:cd:6f: d4:3b:18:12:43:6b:96:76:c4:71:d8:67:02:e5:cd: 45:be:be:8c:21:01:be:32:d0:06:8b:7f:2f:d9:66: 5c:87:f0:e0:9f:c6:96:15:3b:52:67:f4:9b:04:28: b6:25:c7:d3:73:59:6c:7b:26:44:87:61:f2:23:c3: b1:61:7f:3d:f0:46:11:54:e0:9e:15:fd:38:a1:0c: d4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:46:D3:7F:B3:FE:CB:18:3C:EF:D9:48:5A:85:F7:B5:BD:9C:9F:5B X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/10bTf7P-yxg879lIWoX3tb2cn1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:8d0::/44 Signature Algorithm: sha256WithRSAEncryption 27:84:e9:89:4e:50:6c:e3:67:fe:12:c3:63:d4:7c:b1:df:d3: b0:d1:d0:ed:67:2b:61:e4:51:4b:1d:be:69:ec:2a:dd:ad:d8: fa:ce:57:f2:f3:a6:c1:e5:07:5d:03:58:91:7e:56:52:d3:0e: 93:a1:d7:21:6c:be:20:e1:25:b3:03:f8:68:5f:90:15:b4:0a: 81:74:dc:90:86:ae:48:06:20:20:b9:74:8e:45:51:1c:27:95: b0:e1:ad:fc:14:84:93:55:41:c9:dc:51:c0:67:09:5f:84:20: 33:96:8a:c9:d6:c4:fd:47:ca:3f:a2:00:8f:fb:f8:79:c0:48: 0e:b7:75:ce:7a:e9:94:93:6c:35:76:f8:35:dd:73:15:f0:e7: 35:35:3b:34:db:5c:8c:64:62:d1:ee:0c:e4:42:f3:7e:97:89: e1:c2:01:fe:79:e5:4e:49:e5:b7:fe:de:cd:ff:3f:74:ff:54: 0a:d6:af:bd:da:9b:d3:f2:9d:c0:73:50:3f:48:f1:a3:cf:f0: 21:06:cf:f0:26:01:7d:b4:ad:f7:88:40:94:1e:d9:c0:ca:ba: d1:c2:63:91:34:8b:ba:c0:3b:b1:78:c7:23:c6:ed:8d:64:23: 22:dd:6d:ba:22:f4:a7:b3:9e:17:96:b8:64:6a:81:13:11:19: be:a0:74:31 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuiK3H1tKXd/Su1fot4z4vcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTA5MDk1MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzQ2ZDM3ZmIzZmVjYjE4M2NlZmQ5NDg1YTg1ZjdiNWJkOWM5ZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+ML3sxmqe9DQo90QQ1jC7CkNPSh u8fGOW/O9WCug1b9ifChSV2H3FW3fHsxi1nUU2dAQICbsHp3fXEUq7Hi7YSy5Vsm WdXt9gjRC5/KkyEV4ufJ5LXpgWpPdoTcKgif5Z4BN54HjYxXNropSWUjbUtA0otx Ra1jG5I/1tc65jj9AkSE/nQCQ9zcGpDgbJMY25ae3V5eSR/+bLnXowBMB5hLDPXD 7te235A4LMqVhYDczW/UOxgSQ2uWdsRx2GcC5c1Fvr6MIQG+MtAGi38v2WZch/Dg n8aWFTtSZ/SbBCi2JcfTc1lseyZEh2HyI8OxYX898EYRVOCeFf04oQzUywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNdG03+z/ssYPO/ZSFqF97W9nJ9bMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvMTBiVGY3UC15eGc4NzlsSVdvWDN0YjJjbjFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQjQ MA0GCSqGSIb3DQEBCwUAA4IBAQAnhOmJTlBs42f+EsNj1Hyx39Ow0dDtZyth5FFL Hb5p7Crdrdj6zlfy86bB5QddA1iRflZS0w6TodchbL4g4SWzA/hoX5AVtAqBdNyQ hq5IBiAguXSORVEcJ5Ww4a38FISTVUHJ3FHAZwlfhCAzlorJ1sT9R8o/ogCP+/h5 wEgOt3XOeumUk2w1dvg13XMV8Oc1NTs021yMZGLR7gzkQvN+l4nhwgH+eeVOSeW3 /t7N/z90/1QK1q+92pvT8p3Ac1A/SPGjz/AhBs/wJgF9tK33iECUHtnAyrrRwmOR NIu6wDuxeMcjxu2NZCMi3W26IvSns54XlrhkaoETERm+oHQx -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:59 2026 by rpki-client