This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/24GylCqg-txZlfXh0dPu6qMgsjQ.roa File: 24GylCqg-txZlfXh0dPu6qMgsjQ.roa (raw, json) Hash identifier: DxCNvH4dSuqNIL9bs/2A6W8ri1XE/Zi8NUgRkFcJ+Ew= Subject key identifier: DB:81:B2:94:2A:A0:FA:DC:59:95:F5:E1:D1:D3:EE:EA:A3:20:B2:34 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3928CA37381F65376ACF591198CCCF Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/24GylCqg-txZlfXh0dPu6qMgsjQ.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48646 IP address blocks: 2a0c:b642:1a09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:28:ca:37:38:1f:65:37:6a:cf:59:11:98:cc:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db81b2942aa0fadc5995f5e1d1d3eeeaa320b234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d9:4b:9b:b2:d4:fe:d1:ea:33:fd:23:00:bd: 9c:99:0e:d8:a5:79:60:73:ad:3c:fd:39:bc:1c:cb: b6:c2:25:c3:db:df:90:29:bf:91:5a:40:92:21:21: d7:77:35:6e:a1:f5:8b:4f:ef:33:be:8b:88:39:b1: a6:d7:be:07:4d:4d:88:ac:25:b4:d3:9d:0a:a8:16: 63:55:bf:1f:03:c5:92:19:a6:7a:fb:97:c9:77:eb: 4d:e0:44:6b:45:6e:f3:07:ee:11:5c:6b:7f:e7:01: 12:f4:07:ac:cb:39:65:a3:02:2a:2c:cb:3d:9b:59: a9:ab:10:7e:f5:08:ff:2f:ce:43:d9:7c:1f:2f:c7: 28:72:49:d1:1b:8f:9a:71:45:f8:03:72:b3:cc:47: dd:13:85:3c:fc:d8:e1:f0:1c:f6:f2:34:e2:c4:41: 45:54:64:b0:16:d7:96:61:5a:9b:66:cd:4e:fa:73: 61:d0:f6:cf:b4:b4:cc:83:73:c2:e7:84:4b:90:cb: c7:36:f5:29:a2:36:67:05:92:a2:8f:04:52:5f:02: 8b:c5:f9:55:55:13:6d:17:fa:26:0a:71:c9:e6:fc: 0b:0b:1a:54:cc:2e:dd:ea:78:3f:3e:db:dd:ff:9a: 84:65:43:46:36:d2:80:1d:c9:d6:f7:d4:4c:cb:34: ff:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:81:B2:94:2A:A0:FA:DC:59:95:F5:E1:D1:D3:EE:EA:A3:20:B2:34 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/24GylCqg-txZlfXh0dPu6qMgsjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:1a09::/48 Signature Algorithm: sha256WithRSAEncryption 95:b2:ef:17:86:d1:37:cb:fb:0f:11:4e:65:ed:79:c0:67:6e: 1c:84:1d:4b:03:fd:9d:2e:99:16:64:e7:d8:32:8c:ca:e3:60: c5:9f:e8:e6:54:c6:46:5b:a8:f5:19:c3:42:ef:68:00:6a:d0: f2:7c:9a:17:19:1d:7f:39:8a:b9:0d:17:ec:35:c6:c0:b5:c6: 52:13:ca:ab:2b:51:4b:c1:a0:24:07:7f:11:a4:90:4c:91:bc: 64:fe:2a:d9:5e:ef:c3:63:ce:d4:96:95:79:85:8d:e4:bc:2e: ae:f2:93:8f:22:e0:f3:aa:27:ca:0e:7b:7b:a9:0f:2d:59:c1: 15:dd:f9:47:92:54:61:ad:3a:91:24:0f:92:81:d3:27:9d:b8: 76:a8:1c:83:16:8d:bb:fd:ec:6f:2f:d4:e4:f9:fd:e1:b6:7e: a6:84:7d:77:bc:f9:f0:a4:db:c0:4e:2e:a9:c0:f7:9a:e1:f7: d6:11:6e:c6:59:50:9a:61:1f:b7:fb:c1:97:fc:2d:41:30:2c: a8:95:90:d8:af:e5:ba:2f:43:a4:07:6e:a1:42:80:1e:3a:53: 1d:fc:6a:2f:24:26:f9:49:b3:69:5f:f5:0a:09:4b:54:2b:18: 2a:a5:0f:e6:b9:0e:6c:c5:72:dc:d1:4a:aa:fe:5c:55:01:dc: 44:ee:25:ff -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OSjKNzgfZTdqz1kRmMzPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjgxYjI5NDJhYTBmYWRjNTk5NWY1ZTFkMWQzZWVlYWEzMjBiMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9lLm7LU/tHqM/0jAL2cmQ7YpXlg c608/Tm8HMu2wiXD29+QKb+RWkCSISHXdzVuofWLT+8zvouIObGm174HTU2IrCW0 050KqBZjVb8fA8WSGaZ6+5fJd+tN4ERrRW7zB+4RXGt/5wES9AesyzllowIqLMs9 m1mpqxB+9Qj/L85D2XwfL8cocknRG4+acUX4A3KzzEfdE4U8/Njh8Bz28jTixEFF VGSwFteWYVqbZs1O+nNh0PbPtLTMg3PC54RLkMvHNvUpojZnBZKijwRSXwKLxflV VRNtF/omCnHJ5vwLCxpUzC7d6ng/Ptvd/5qEZUNGNtKAHcnW99RMyzT/2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNuBspQqoPrcWZX14dHT7uqjILI0MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvMjRHeWxDcWctdHhabGZYaDBkUHU2cU1nc2pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoJ MA0GCSqGSIb3DQEBCwUAA4IBAQCVsu8XhtE3y/sPEU5l7XnAZ24chB1LA/2dLpkW ZOfYMozK42DFn+jmVMZGW6j1GcNC72gAatDyfJoXGR1/OYq5DRfsNcbAtcZSE8qr K1FLwaAkB38RpJBMkbxk/irZXu/DY87UlpV5hY3kvC6u8pOPIuDzqifKDnt7qQ8t WcEV3flHklRhrTqRJA+SgdMnnbh2qByDFo27/exvL9Tk+f3htn6mhH13vPnwpNvA Ti6pwPea4ffWEW7GWVCaYR+3+8GX/C1BMCyolZDYr+W6L0OkB26hQoAeOlMd/Gov JCb5SbNpX/UKCUtUKxgqpQ/muQ5sxXLc0Uqq/lxVAdxE7iX/ -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:26 2026 by rpki-client