This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/79lnBIcGQVz3ZlhqkYQxhpJOuwk.roa File: 79lnBIcGQVz3ZlhqkYQxhpJOuwk.roa (raw, json) Hash identifier: mTKsT3DwZRUXVMluE1gmSz3BMQsSAi+7hj/UX0kAPLM= Subject key identifier: EF:D9:67:04:87:06:41:5C:F7:66:58:6A:91:84:31:86:92:4E:BB:09 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E393C28EF57DECC6076225CB4868010 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/79lnBIcGQVz3ZlhqkYQxhpJOuwk.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205840 IP address blocks: 2a0c:b641:680::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3c:28:ef:57:de:cc:60:76:22:5c:b4:86:80:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efd967048706415cf766586a91843186924ebb09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:e4:c0:cd:3f:dc:4d:de:7f:3d:76:fe:9e: f8:3c:a7:a2:d9:5b:8b:4f:7e:9d:0d:0a:2f:49:de: 44:6d:48:0a:36:8f:09:5f:78:92:9f:e3:7d:a4:84: a5:33:99:23:55:dd:6b:85:1b:be:47:df:94:38:a5: af:de:63:a8:74:a6:d2:05:d5:72:d8:55:1c:6b:c0: 1f:d8:36:c5:a2:56:13:2a:03:c7:d9:f8:63:bc:19: 0b:c0:0b:db:0c:9b:1e:d0:e2:4c:a4:d6:e5:34:28: b8:df:ee:9e:4c:dd:39:62:41:19:da:0a:55:f2:86: 4f:fa:01:4a:70:15:2b:8e:b1:2d:74:59:f1:5a:f3: ad:cd:8a:c0:4f:40:d6:a7:a5:02:d3:a2:d1:a3:a8: bf:58:1e:f5:1a:79:23:97:73:e5:8c:4f:a1:e6:3c: 11:47:96:c5:4a:73:be:2f:db:fc:f4:87:2d:91:50: 7f:77:04:1a:9b:83:3c:00:40:13:7a:9b:1c:f2:6e: 5f:3b:dc:3f:00:0c:06:ec:07:5c:d0:2d:1e:e1:7a: ec:39:a3:53:f4:0f:a7:3f:6f:b0:f6:d3:b0:b2:8f: ff:95:63:8c:48:3a:ef:91:e3:18:4c:98:75:cb:bf: fc:20:6f:a1:23:78:e7:2d:fa:17:ce:29:a8:a9:01: d9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D9:67:04:87:06:41:5C:F7:66:58:6A:91:84:31:86:92:4E:BB:09 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/79lnBIcGQVz3ZlhqkYQxhpJOuwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:680::/44 Signature Algorithm: sha256WithRSAEncryption 01:19:b4:e6:82:57:a5:cb:d5:be:c8:37:9d:74:43:25:a2:9c: a4:c6:10:57:ee:66:ee:68:9f:51:5a:10:89:7a:1d:8e:90:d9: 48:da:d7:f7:03:ee:d8:8e:3d:81:a8:a1:8e:b3:f5:55:f0:91: 87:85:95:df:e8:50:58:c0:9a:6a:d2:95:05:55:cf:de:f7:e9: d5:93:8c:cf:4c:be:71:02:ac:fc:6b:6d:71:eb:59:50:8f:02: 3a:e5:d7:35:e7:b3:2a:28:0b:0c:d6:8c:40:e0:d3:b7:11:50: 77:52:61:94:85:a2:c5:97:7e:5b:4c:e2:f9:00:88:ae:70:1a: 23:4d:49:d4:c1:88:0d:5f:9d:73:87:37:86:b3:2a:6c:25:06: 7f:e4:a6:87:bc:c6:39:b1:64:55:d4:6d:b0:e4:2e:31:c1:3c: b1:c8:4c:bb:43:1e:fe:ff:b6:6d:0d:cc:60:da:69:2b:26:cb: ed:b0:43:b0:6c:94:ed:30:f5:8f:93:f1:af:d7:0e:54:ab:51: 51:b6:2b:d7:0f:4c:5b:a1:25:5e:19:b1:73:b2:4c:b8:73:2e: ab:c0:9c:46:16:0c:47:14:5f:be:f1:8a:40:30:00:45:bd:3f: 85:e7:83:b0:15:ff:9b:67:70:82:75:b7:3e:0e:60:dd:0d:6b: 84:6b:f9:c8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTwo71fezGB2Ily0hoAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmQ5NjcwNDg3MDY0MTVjZjc2NjU4NmE5MTg0MzE4NjkyNGViYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunHkwM0/3E3efz12/p74PKei2VuL T36dDQovSd5EbUgKNo8JX3iSn+N9pISlM5kjVd1rhRu+R9+UOKWv3mOodKbSBdVy 2FUca8Af2DbFolYTKgPH2fhjvBkLwAvbDJse0OJMpNblNCi43+6eTN05YkEZ2gpV 8oZP+gFKcBUrjrEtdFnxWvOtzYrAT0DWp6UC06LRo6i/WB71Gnkjl3PljE+h5jwR R5bFSnO+L9v89IctkVB/dwQam4M8AEATepsc8m5fO9w/AAwG7Adc0C0e4XrsOaNT 9A+nP2+w9tOwso//lWOMSDrvkeMYTJh1y7/8IG+hI3jnLfoXzimoqQHZiQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO/ZZwSHBkFc92ZYapGEMYaSTrsJMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvNzlsbkJJY0dRVnozWmxocWtZUXhocEpPdXdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQaA MA0GCSqGSIb3DQEBCwUAA4IBAQABGbTmglely9W+yDeddEMlopykxhBX7mbuaJ9R WhCJeh2OkNlI2tf3A+7Yjj2BqKGOs/VV8JGHhZXf6FBYwJpq0pUFVc/e9+nVk4zP TL5xAqz8a21x61lQjwI65dc157MqKAsM1oxA4NO3EVB3UmGUhaLFl35bTOL5AIiu cBojTUnUwYgNX51zhzeGsypsJQZ/5KaHvMY5sWRV1G2w5C4xwTyxyEy7Qx7+/7Zt Dcxg2mkrJsvtsEOwbJTtMPWPk/Gv1w5Uq1FRtivXD0xboSVeGbFzsky4cy6rwJxG FgxHFF++8YpAMABFvT+F54OwFf+bZ3CCdbc+DmDdDWuEa/nI -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:25 2026 by rpki-client