This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/9DzZBU_qNSaPGUoDmDlPbNLHye8.roa File: 9DzZBU_qNSaPGUoDmDlPbNLHye8.roa (raw, json) Hash identifier: 0crFhN3Pc5i7iS4fTmQBPF2LZwNbJiDM+1YmLTz2SQA= Subject key identifier: F4:3C:D9:05:4F:EA:35:26:8F:19:4A:03:98:39:4F:6C:D2:C7:C9:EF Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E392D4C4F8B2112B473E8C6233BDBC9 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/9DzZBU_qNSaPGUoDmDlPbNLHye8.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136620 IP address blocks: 2a0c:b642:1a04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2d:4c:4f:8b:21:12:b4:73:e8:c6:23:3b:db:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f43cd9054fea35268f194a0398394f6cd2c7c9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:3d:b0:3c:82:44:c1:b3:ce:a1:82:94:fd: fe:c7:b7:6d:06:87:17:1a:ec:a2:74:6f:a2:1a:a6: 7b:49:76:19:53:bf:d5:75:9e:d3:8c:f4:a4:87:90: d9:2e:71:9b:ac:7e:c6:6c:35:15:17:50:39:c4:c0: 51:64:79:14:5b:6b:a4:43:2b:8f:25:d4:b5:67:d4: e5:97:8f:75:ca:7b:97:ec:87:1e:90:a4:1a:bb:29: 88:fe:d9:35:0c:6f:55:04:aa:95:8c:af:f3:b5:a7: 3a:43:07:ad:c4:27:57:47:aa:22:28:ff:ca:1b:ad: 1b:17:e3:0f:e4:db:e8:74:23:02:db:7c:cf:e2:24: 21:97:68:b6:ac:13:f9:55:ea:a4:db:b4:75:5f:18: 37:29:a7:96:3b:48:80:76:4f:39:04:c2:dd:86:52: 7b:29:b6:53:a4:6a:6a:79:b9:1a:55:ae:7f:6a:1c: 67:9d:42:ef:b1:eb:43:29:9b:5f:a1:7b:75:15:5d: 1a:a6:3e:c8:ae:40:6c:47:11:f0:31:5c:be:31:63: a7:35:3d:8f:82:97:78:ee:e4:62:6e:e8:7e:cc:f4: 02:4b:1b:ea:20:8e:73:1b:d1:52:59:fe:ca:ba:7b: cb:02:67:78:4a:b3:92:0d:ff:04:e8:3b:49:48:a4: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3C:D9:05:4F:EA:35:26:8F:19:4A:03:98:39:4F:6C:D2:C7:C9:EF X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/9DzZBU_qNSaPGUoDmDlPbNLHye8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:1a04::/48 Signature Algorithm: sha256WithRSAEncryption 5e:49:7c:16:9d:b5:55:07:13:8d:89:09:5e:6e:43:52:ac:cb: ce:14:f1:9a:99:c9:64:7d:a8:16:ab:10:9b:4c:ad:2f:76:f5: e8:1f:a5:30:ca:d9:50:3d:3d:db:9e:f9:3b:f3:d0:62:c4:7b: c5:db:f2:3d:8d:b2:c6:c6:ca:50:6f:f2:2a:c7:8a:0f:91:c8: 6e:08:1b:17:6c:89:97:9e:2c:3e:e0:99:58:6a:8f:08:b4:46: d0:d6:b1:f9:03:5f:12:b3:01:4d:66:c2:bd:2a:98:6d:15:09: b2:f5:86:2c:69:7f:2f:72:99:c1:aa:43:d7:dd:61:9a:ef:ad: a0:52:3f:b2:6a:1d:d1:80:ad:79:c5:5a:91:11:8b:d7:d5:f7: c7:e4:76:e7:92:98:18:09:9e:9b:69:26:49:32:ca:23:82:2b: 3c:17:4d:f6:43:7d:76:11:2a:ff:5d:fe:7a:f3:9a:1d:8a:ff: 7c:09:58:57:d3:01:a5:6b:d2:0f:35:a8:e0:0d:8c:a8:92:43: 2c:e1:91:fa:f5:0e:23:42:9f:47:f8:96:23:84:49:38:27:72: 38:6f:9b:66:96:01:7d:c8:ee:1e:f1:e9:e0:04:e5:cd:8f:0c: f0:e4:e1:de:aa:c2:65:8c:c6:36:6b:ae:52:5f:e7:c0:d0:90: a8:e1:da:cf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OS1MT4shErRz6MYjO9vJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDNjZDkwNTRmZWEzNTI2OGYxOTRhMDM5ODM5NGY2Y2QyYzdjOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRE9sDyCRMGzzqGClP3+x7dtBocX GuyidG+iGqZ7SXYZU7/VdZ7TjPSkh5DZLnGbrH7GbDUVF1A5xMBRZHkUW2ukQyuP JdS1Z9Tll491ynuX7IcekKQauymI/tk1DG9VBKqVjK/ztac6QwetxCdXR6oiKP/K G60bF+MP5NvodCMC23zP4iQhl2i2rBP5Veqk27R1Xxg3KaeWO0iAdk85BMLdhlJ7 KbZTpGpqebkaVa5/ahxnnULvsetDKZtfoXt1FV0apj7IrkBsRxHwMVy+MWOnNT2P gpd47uRibuh+zPQCSxvqII5zG9FSWf7KunvLAmd4SrOSDf8E6DtJSKSnuwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPQ82QVP6jUmjxlKA5g5T2zSx8nvMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvOUR6WkJVX3FOU2FQR1VvRG1EbFBiTkxIeWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoE MA0GCSqGSIb3DQEBCwUAA4IBAQBeSXwWnbVVBxONiQlebkNSrMvOFPGamclkfagW qxCbTK0vdvXoH6UwytlQPT3bnvk789BixHvF2/I9jbLGxspQb/Iqx4oPkchuCBsX bImXniw+4JlYao8ItEbQ1rH5A18SswFNZsK9KphtFQmy9YYsaX8vcpnBqkPX3WGa 762gUj+yah3RgK15xVqREYvX1ffH5HbnkpgYCZ6baSZJMsojgis8F032Q312ESr/ Xf5685odiv98CVhX0wGla9IPNajgDYyokkMs4ZH69Q4jQp9H+JYjhEk4J3I4b5tm lgF9yO4e8engBOXNjwzw5OHeqsJljMY2a65SX+fA0JCo4drP -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:09 2026 by rpki-client