This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1CRFeZZUZFjTkYtd1SH-alR0_hE.roa File: 1CRFeZZUZFjTkYtd1SH-alR0_hE.roa (raw, json) Hash identifier: vNnWQRb1nD6pOvDumN5p2I5S/Plfualq62PAKNM8bqI= Subject key identifier: D4:24:45:79:96:54:64:58:D3:91:8B:5D:D5:21:FE:6A:54:74:FE:11 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E396FEC8894DDA55957A841965B5A0D Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1CRFeZZUZFjTkYtd1SH-alR0_hE.roa Signing time: Fri 02 Jan 2026 10:20:51 +0000 ROA not before: Fri 02 Jan 2026 10:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215637 IP address blocks: 2a0c:b641:bb0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:6f:ec:88:94:dd:a5:59:57:a8:41:96:5b:5a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d424457996546458d3918b5dd521fe6a5474fe11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a6:3e:76:a2:88:d0:d2:cc:e7:f9:81:a4:05: 3a:5f:ab:83:f9:db:d9:94:59:f5:f2:11:00:66:6d: d8:b7:f0:7b:d2:49:9b:58:e7:d9:73:e0:00:26:5c: 5e:0e:11:ab:ad:2c:17:98:14:3e:41:bf:57:2b:e4: de:ca:82:1b:fb:1c:87:ee:22:d2:dd:94:da:1f:20: 33:70:0d:05:7a:6d:70:e6:1f:fd:a4:00:cc:e9:0b: bc:f5:b8:d8:39:f0:4a:6c:5f:d3:80:31:45:6f:4f: fe:f2:e9:c3:83:94:57:98:0d:72:48:67:37:98:f3: fa:e1:ae:6f:d2:1e:ac:99:7a:b3:bd:66:7c:13:d7: df:60:93:d3:c8:a3:d3:40:fb:5f:a5:80:de:ff:48: 19:4c:0f:cd:e2:64:09:e1:1e:76:24:91:7a:56:68: dd:d8:be:ad:b4:52:ea:41:ff:67:9b:37:bb:d4:d3: c0:37:ad:c8:91:92:89:91:b3:c7:4c:38:d3:49:51: 13:75:33:fd:44:78:4b:5a:15:d2:54:a5:00:e1:6a: 05:a1:e3:c3:e2:73:c9:96:08:94:40:c7:cc:d2:42: 75:7c:c2:f9:12:aa:98:aa:61:37:ae:9e:38:de:e2: 0c:4d:f1:cd:fd:3b:6a:2c:d1:ba:21:82:51:93:82: 4b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:24:45:79:96:54:64:58:D3:91:8B:5D:D5:21:FE:6A:54:74:FE:11 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1CRFeZZUZFjTkYtd1SH-alR0_hE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:bb0::/44 Signature Algorithm: sha256WithRSAEncryption 25:df:dd:3f:d7:46:ab:43:34:5d:53:06:2b:24:d8:32:88:76: 91:a5:db:a0:ac:1f:17:af:f3:54:94:dd:76:fc:69:56:32:46: ac:c9:dd:26:8d:39:b2:a0:df:82:02:d2:61:cc:b8:1e:aa:69: 3c:b3:e6:e7:5c:ae:e6:39:aa:68:eb:62:84:46:dd:02:b4:ce: 10:9f:ac:3e:1d:59:d1:9f:8d:93:e6:7d:e0:8f:a9:99:a6:43: 6c:7e:d7:76:70:8b:53:30:20:35:35:e2:8b:40:9d:40:5f:52: de:d0:28:c4:97:70:cd:e7:e2:df:e4:d1:2e:e7:9c:e9:c9:34: 61:6c:e8:59:f4:c7:2c:a1:a3:22:73:78:eb:d1:03:83:b2:cb: d0:7a:09:c0:b6:12:18:3e:a2:f9:7f:75:4f:dd:42:3e:ae:4a: d2:72:d6:dd:03:11:c1:0a:5d:ae:3e:e2:9f:ac:91:80:7f:73: 05:ba:dc:65:3e:06:29:29:15:46:81:37:00:bf:4f:19:fc:83: 33:94:97:5e:40:40:08:51:ab:c2:85:01:ef:80:dc:0b:46:be: 1b:40:9a:d7:c0:c8:2f:cc:ec:34:e7:c6:13:2a:5e:33:52:e5: d8:04:f0:6c:47:a6:97:5c:14:68:dd:de:82:40:6e:d7:18:fa: 8f:dc:a4:bb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OW/siJTdpVlXqEGWW1oNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDI0NDU3OTk2NTQ2NDU4ZDM5MThiNWRkNTIxZmU2YTU0NzRmZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqY+dqKI0NLM5/mBpAU6X6uD+dvZ lFn18hEAZm3Yt/B70kmbWOfZc+AAJlxeDhGrrSwXmBQ+Qb9XK+TeyoIb+xyH7iLS 3ZTaHyAzcA0Fem1w5h/9pADM6Qu89bjYOfBKbF/TgDFFb0/+8unDg5RXmA1ySGc3 mPP64a5v0h6smXqzvWZ8E9ffYJPTyKPTQPtfpYDe/0gZTA/N4mQJ4R52JJF6Vmjd 2L6ttFLqQf9nmze71NPAN63IkZKJkbPHTDjTSVETdTP9RHhLWhXSVKUA4WoFoePD 4nPJlgiUQMfM0kJ1fML5EqqYqmE3rp443uIMTfHN/TtqLNG6IYJRk4JL1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNQkRXmWVGRY05GLXdUh/mpUdP4RMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvMUNSRmVaWlVaRmpUa1l0ZDFTSC1hbFIwX2hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQuw MA0GCSqGSIb3DQEBCwUAA4IBAQAl390/10arQzRdUwYrJNgyiHaRpdugrB8Xr/NU lN12/GlWMkasyd0mjTmyoN+CAtJhzLgeqmk8s+bnXK7mOapo62KERt0CtM4Qn6w+ HVnRn42T5n3gj6mZpkNsftd2cItTMCA1NeKLQJ1AX1Le0CjEl3DN5+Lf5NEu55zp yTRhbOhZ9McsoaMic3jr0QODssvQegnAthIYPqL5f3VP3UI+rkrSctbdAxHBCl2u PuKfrJGAf3MFutxlPgYpKRVGgTcAv08Z/IMzlJdeQEAIUavChQHvgNwLRr4bQJrX wMgvzOw058YTKl4zUuXYBPBsR6aXXBRo3d6CQG7XGPqP3KS7 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:14 2026 by rpki-client