This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/7d0wch3_BELDFFpar8cWDtEMQFU.roa File: 7d0wch3_BELDFFpar8cWDtEMQFU.roa (raw, json) Hash identifier: +WkzRLKaEv+OHzGYv5PFDQRW8JayYyNsMA6Jd9KXfF0= Subject key identifier: ED:DD:30:72:1D:FF:04:42:C3:14:5A:5A:AF:C7:16:0E:D1:0C:40:55 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E393BA82EE5B2AA97473E27151EE9AC Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/7d0wch3_BELDFFpar8cWDtEMQFU.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205539 IP address blocks: 2a0c:b641:840::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3b:a8:2e:e5:b2:aa:97:47:3e:27:15:1e:e9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eddd30721dff0442c3145a5aafc7160ed10c4055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3b:0d:2f:57:d9:46:60:47:5a:d9:bc:fe:41: ee:72:16:53:c3:73:fc:36:7d:95:d3:dc:f6:dc:d3: ba:9b:2c:57:e1:65:58:94:46:19:cb:c6:0d:42:84: 96:ae:26:b4:17:d0:d5:29:6b:2d:f0:af:fb:16:78: 1a:44:e2:76:60:e8:5f:6f:7a:34:db:73:94:65:da: 85:de:e4:4e:f5:28:cf:78:1c:d2:86:2f:fa:0c:a0: a2:e0:1e:6c:e6:04:9f:b2:98:6c:ad:1d:0a:8d:ca: ab:e0:f3:33:14:a1:3d:59:e0:b8:b2:ba:c6:4b:08: 8d:7a:fb:e2:f6:4d:2d:26:fe:48:3e:ac:2a:71:01: f7:70:aa:4b:22:e6:32:c4:fd:3d:70:ef:8c:de:4c: e7:bd:35:fe:c6:62:ec:27:83:d5:77:d7:95:7d:09: 2b:f9:bd:f5:01:90:fa:0b:5a:3c:13:76:71:38:3a: d9:d5:6d:7d:1f:31:a4:7c:35:43:a1:5f:52:8f:53: b3:82:6e:f8:72:5a:34:41:08:a7:78:34:0f:bf:3e: 94:04:0e:0f:07:5f:e5:ad:b7:f2:d7:55:df:d5:7b: 5d:41:ca:de:cc:21:79:b8:25:ba:36:b3:49:f1:4b: b9:73:a6:68:b0:f4:9a:2d:09:e1:e0:25:c8:39:cb: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DD:30:72:1D:FF:04:42:C3:14:5A:5A:AF:C7:16:0E:D1:0C:40:55 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/7d0wch3_BELDFFpar8cWDtEMQFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:840::/44 Signature Algorithm: sha256WithRSAEncryption 61:34:60:fa:4a:c6:37:31:9b:2f:52:71:93:15:08:36:3b:43: 4e:00:ce:22:15:72:77:aa:cb:cf:af:da:85:6c:2b:bf:54:71: eb:ea:da:7b:3b:7b:b9:9f:cf:10:31:83:94:45:3b:64:49:ae: ce:e4:22:62:7c:3c:fc:9f:df:ca:7a:02:1c:da:67:9c:e3:cf: ce:c0:f5:c8:46:7a:cf:0c:92:3f:64:7a:a6:aa:e8:9c:77:69: 62:57:e3:2b:0e:74:98:70:6a:f1:0d:3a:ad:89:b3:5a:d0:39: c6:50:75:e3:da:ab:ea:36:43:76:ce:18:80:ac:ac:42:3e:fc: 60:cd:1b:bd:ee:57:24:47:7f:8a:76:e6:eb:c8:2a:61:0d:4e: a0:7a:29:c1:07:be:c2:dd:aa:97:50:20:4e:eb:84:b1:3f:5e: 35:32:3c:92:26:c8:e7:b0:de:07:e6:32:94:ee:b2:76:4a:9b: 56:4a:92:36:20:cf:c2:c6:34:91:e3:6b:f3:78:72:e3:ff:5d: f3:f8:f9:6f:48:ac:39:11:30:92:9a:67:87:7c:84:7c:db:64: 8f:ca:08:87:de:75:26:a6:d5:cd:48:7c:01:6d:e6:5e:24:db: 5c:f0:e2:fd:8b:25:bc:85:8c:89:6e:eb:6c:79:15:b7:da:4b: 62:80:98:f3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTuoLuWyqpdHPicVHumsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGRkMzA3MjFkZmYwNDQyYzMxNDVhNWFhZmM3MTYwZWQxMGM0MDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TsNL1fZRmBHWtm8/kHuchZTw3P8 Nn2V09z23NO6myxX4WVYlEYZy8YNQoSWria0F9DVKWst8K/7FngaROJ2YOhfb3o0 23OUZdqF3uRO9SjPeBzShi/6DKCi4B5s5gSfsphsrR0Kjcqr4PMzFKE9WeC4srrG SwiNevvi9k0tJv5IPqwqcQH3cKpLIuYyxP09cO+M3kznvTX+xmLsJ4PVd9eVfQkr +b31AZD6C1o8E3ZxODrZ1W19HzGkfDVDoV9Sj1Ozgm74clo0QQineDQPvz6UBA4P B1/lrbfy11Xf1XtdQcrezCF5uCW6NrNJ8Uu5c6ZosPSaLQnh4CXIOct2ZwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO3dMHId/wRCwxRaWq/HFg7RDEBVMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvN2Qwd2NoM19CRUxERkZwYXI4Y1dEdEVNUUZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQhA MA0GCSqGSIb3DQEBCwUAA4IBAQBhNGD6SsY3MZsvUnGTFQg2O0NOAM4iFXJ3qsvP r9qFbCu/VHHr6tp7O3u5n88QMYOURTtkSa7O5CJifDz8n9/KegIc2mec48/OwPXI RnrPDJI/ZHqmquicd2liV+MrDnSYcGrxDTqtibNa0DnGUHXj2qvqNkN2zhiArKxC PvxgzRu97lckR3+KdubryCphDU6geinBB77C3aqXUCBO64SxP141MjySJsjnsN4H 5jKU7rJ2SptWSpI2IM/CxjSR42vzeHLj/13z+PlvSKw5ETCSmmeHfIR822SPygiH 3nUmptXNSHwBbeZeJNtc8OL9iyW8hYyJbutseRW32ktigJjz -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:00 2026 by rpki-client