This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/7kv5JW9ADadCqInTd6uE5I0lJ6c.roa File: 7kv5JW9ADadCqInTd6uE5I0lJ6c.roa (raw, json) Hash identifier: F/5lAZFl8GxsWDDoxgmJijPOlS+ngFOHw4rphqX+M60= Subject key identifier: EE:4B:F9:25:6F:40:0D:A7:42:A8:89:D3:77:AB:84:E4:8D:25:27:A7 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3936D186A48C0C8379BB9EB04A5B74 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/7kv5JW9ADadCqInTd6uE5I0lJ6c.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203731 IP address blocks: 2a0c:b641:450::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:36:d1:86:a4:8c:0c:83:79:bb:9e:b0:4a:5b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee4bf9256f400da742a889d377ab84e48d2527a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:b0:68:73:c9:e8:02:cf:fe:01:64:cd:7a: 68:c4:63:b9:6c:d7:80:c3:c2:45:81:fc:24:de:69: b9:d3:5f:63:00:41:ba:12:79:c8:28:df:32:17:fe: c7:f3:03:54:bf:83:35:d6:6a:9d:58:44:50:6f:68: 3d:c3:a1:0e:72:1a:4f:7d:05:eb:1c:0f:aa:4a:19: f3:9d:dc:63:02:9d:1a:0d:f6:e0:14:a5:9c:a0:55: 4c:39:c3:8e:07:de:0a:50:82:b4:fc:fa:15:ed:ac: b7:32:0a:da:94:8b:b4:e6:25:81:f7:01:e0:22:c1: 2b:1b:de:50:67:c0:13:f4:26:9e:18:a5:08:62:9c: da:f6:91:9a:ef:95:bd:ba:83:76:fa:4e:63:9d:b3: 8a:63:12:86:80:f3:16:f0:2a:50:7b:bf:8e:fa:b2: c8:07:d2:63:22:07:6b:e9:a8:ab:5e:4f:59:fa:fa: dc:1e:29:51:1b:f4:b3:85:85:69:8e:49:de:34:7e: b6:44:b6:02:8d:f7:16:04:96:17:52:3d:0c:7a:31: 0a:db:a0:77:fb:72:1a:ea:16:73:e8:98:d7:19:db: b7:41:2d:87:46:03:ab:96:de:1b:15:73:6b:88:0e: bb:70:95:6f:96:96:d6:19:b6:a8:f2:b0:19:b6:8f: 82:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4B:F9:25:6F:40:0D:A7:42:A8:89:D3:77:AB:84:E4:8D:25:27:A7 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/7kv5JW9ADadCqInTd6uE5I0lJ6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:450::/44 Signature Algorithm: sha256WithRSAEncryption 5e:9e:c8:8d:11:5d:97:bf:5f:50:04:f7:e4:38:5e:18:8a:a3: 42:1f:72:63:fa:2c:5c:ed:e5:13:87:c2:69:ee:32:4a:48:bf: 09:07:c0:db:a3:83:9c:0a:62:4e:80:20:3d:b1:d2:65:60:9a: 32:9e:d9:9a:4f:97:83:2d:b1:a5:42:ab:7c:1e:3c:fe:09:eb: 82:22:35:05:3d:41:7c:d8:c1:ff:3c:54:04:f7:c4:ed:d1:fa: 78:1f:2f:c5:77:97:0f:44:fa:c4:3f:98:bf:b9:d3:a8:78:3e: ae:ce:25:b0:4a:a2:29:f5:07:a3:c9:09:e3:37:79:6a:dc:f4: 1d:7e:67:12:32:4c:c3:aa:ff:d9:56:d2:e1:04:a2:5c:73:e3: 58:86:58:54:f4:54:72:66:8f:a2:f4:57:11:ca:9b:c1:77:c5: 10:e6:f4:94:e8:0d:08:59:46:76:f2:ae:97:ac:03:c0:3e:d9: d3:d3:3e:e7:72:88:b7:d1:c3:25:17:d2:ab:6d:32:d8:50:2c: cb:28:73:a4:e0:fd:e9:10:93:7c:b8:41:1f:a2:1e:aa:1a:55: b7:d5:f6:0e:d4:4f:c6:53:e9:6b:f3:cd:15:00:15:e1:ed:e6: 09:39:dd:82:b0:8c:cd:b8:5e:d4:20:14:12:16:d4:57:16:2b: c0:4a:0f:09 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTbRhqSMDIN5u56wSlt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTRiZjkyNTZmNDAwZGE3NDJhODg5ZDM3N2FiODRlNDhkMjUyN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwmwaHPJ6ALP/gFkzXpoxGO5bNeA w8JFgfwk3mm5019jAEG6EnnIKN8yF/7H8wNUv4M11mqdWERQb2g9w6EOchpPfQXr HA+qShnzndxjAp0aDfbgFKWcoFVMOcOOB94KUIK0/PoV7ay3MgralIu05iWB9wHg IsErG95QZ8AT9CaeGKUIYpza9pGa75W9uoN2+k5jnbOKYxKGgPMW8CpQe7+O+rLI B9JjIgdr6airXk9Z+vrcHilRG/SzhYVpjkneNH62RLYCjfcWBJYXUj0MejEK26B3 +3Ia6hZz6JjXGdu3QS2HRgOrlt4bFXNriA67cJVvlpbWGbao8rAZto+CZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO5L+SVvQA2nQqiJ03erhOSNJSenMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvN2t2NUpXOUFEYWRDcUluVGQ2dUU1STBsSjZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQRQ MA0GCSqGSIb3DQEBCwUAA4IBAQBensiNEV2Xv19QBPfkOF4YiqNCH3Jj+ixc7eUT h8Jp7jJKSL8JB8Dbo4OcCmJOgCA9sdJlYJoyntmaT5eDLbGlQqt8Hjz+CeuCIjUF PUF82MH/PFQE98Tt0fp4Hy/Fd5cPRPrEP5i/udOoeD6uziWwSqIp9QejyQnjN3lq 3PQdfmcSMkzDqv/ZVtLhBKJcc+NYhlhU9FRyZo+i9FcRypvBd8UQ5vSU6A0IWUZ2 8q6XrAPAPtnT0z7ncoi30cMlF9KrbTLYUCzLKHOk4P3pEJN8uEEfoh6qGlW31fYO 1E/GU+lr880VABXh7eYJOd2CsIzNuF7UIBQSFtRXFivASg8J -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:22 2026 by rpki-client