This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/9W7DDCvrwJCNccgQGdKm1AR5EDQ.roa File: 9W7DDCvrwJCNccgQGdKm1AR5EDQ.roa (raw, json) Hash identifier: 7kktB6sWWiQ8/rLvtlvdlDrayLLLWLRTvt1NNCVOd7Q= Subject key identifier: F5:6E:C3:0C:2B:EB:C0:90:8D:71:C8:10:19:D2:A6:D4:04:79:10:34 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E396061CBA78B2D8309FC299EBF2D9B Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/9W7DDCvrwJCNccgQGdKm1AR5EDQ.roa Signing time: Fri 02 Jan 2026 10:20:48 +0000 ROA not before: Fri 02 Jan 2026 10:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213344 IP address blocks: 2a0c:b641:280::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:60:61:cb:a7:8b:2d:83:09:fc:29:9e:bf:2d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f56ec30c2bebc0908d71c81019d2a6d404791034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:43:4f:ca:bd:99:11:06:f0:9c:a6:25:16: f3:dc:3e:f2:64:6f:3b:cb:74:5c:ca:cf:04:20:84: 37:52:a0:df:97:9a:de:d0:4d:14:38:10:7d:26:5e: e2:a8:92:0b:f3:dd:c6:90:ca:07:ba:62:51:37:55: 9c:15:a0:b4:45:5e:26:1f:bc:03:e1:41:52:b6:98: ac:e1:4e:b0:6e:e1:50:5f:c0:73:7c:16:c4:9c:00: d9:8d:a3:cc:27:7f:aa:6e:51:95:62:f9:c2:40:3c: c9:bc:00:87:a6:d1:e3:2a:b3:a3:3f:5c:3d:9c:c0: 6b:ec:bc:da:5a:04:71:22:ff:c5:d5:71:57:46:ca: 9a:b6:40:6d:7a:b0:59:05:e2:4c:87:dc:31:55:84: a1:a6:e0:69:ff:fb:31:74:1b:22:2d:10:b0:56:d0: d6:5b:91:e7:3d:30:9e:d2:2f:42:58:96:ce:ae:a6: 0e:45:66:f8:25:a7:4e:74:70:0f:a3:de:f9:a7:a1: 70:9e:d5:91:e1:c6:6f:55:78:96:93:7e:2d:94:e7: 44:06:28:75:0e:a1:cc:78:01:8e:22:b7:c7:f2:af: 48:2c:36:c0:ec:17:2c:c5:8d:67:4d:28:b4:ea:9b: 61:69:1f:4e:43:78:12:1b:0e:3b:8f:7a:15:55:5b: 50:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6E:C3:0C:2B:EB:C0:90:8D:71:C8:10:19:D2:A6:D4:04:79:10:34 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/9W7DDCvrwJCNccgQGdKm1AR5EDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:280::/44 Signature Algorithm: sha256WithRSAEncryption 5d:17:1b:d6:c5:0b:db:c3:2c:f4:0d:61:6e:25:dd:f6:a6:f9: f9:a5:d5:db:10:63:02:73:ee:f3:59:d4:4d:fe:0e:d6:03:b9: ac:a4:9a:b6:97:bb:78:cb:de:54:2e:9e:40:07:69:34:79:3a: 02:df:d8:03:8a:0d:2b:83:e2:eb:c4:78:2c:eb:65:70:e5:b5: 5f:91:fa:c0:da:37:31:50:59:2f:0d:ac:3b:62:4b:d1:67:72: 14:1c:6e:c5:6e:63:0f:6c:f0:6c:78:af:8e:bb:ed:17:92:a5: 1f:a7:a1:c5:f5:79:b6:e8:31:ad:ff:97:32:a0:94:f2:ae:3b: b4:82:02:cf:e6:3f:58:f7:e9:3e:47:7d:ed:6e:51:59:a6:c4: 70:29:ed:7d:60:c8:55:a8:98:9a:b8:ae:13:22:b9:22:a0:f8: ec:ef:6d:fe:df:65:8a:59:34:55:88:31:6c:2b:29:b0:d8:ff: a5:01:83:c3:5a:95:07:e5:b4:d1:4e:b0:6b:fc:a6:83:09:68: 0c:23:c0:96:22:58:91:92:46:83:0e:8c:26:78:b8:cb:14:33: 44:7d:43:19:f4:c9:a7:1e:d8:f7:ec:58:6c:ab:13:8d:ea:45: f9:71:82:06:67:a2:e6:44:97:5e:7e:e2:25:4f:5d:9c:23:17: f0:9e:53:a0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWBhy6eLLYMJ/Cmevy2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTZlYzMwYzJiZWJjMDkwOGQ3MWM4MTAxOWQyYTZkNDA0NzkxMDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCBDT8q9mREG8JymJRbz3D7yZG87 y3Rcys8EIIQ3UqDfl5re0E0UOBB9Jl7iqJIL893GkMoHumJRN1WcFaC0RV4mH7wD 4UFStpis4U6wbuFQX8BzfBbEnADZjaPMJ3+qblGVYvnCQDzJvACHptHjKrOjP1w9 nMBr7LzaWgRxIv/F1XFXRsqatkBterBZBeJMh9wxVYShpuBp//sxdBsiLRCwVtDW W5HnPTCe0i9CWJbOrqYORWb4JadOdHAPo975p6FwntWR4cZvVXiWk34tlOdEBih1 DqHMeAGOIrfH8q9ILDbA7BcsxY1nTSi06pthaR9OQ3gSGw47j3oVVVtQAwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPVuwwwr68CQjXHIEBnSptQEeRA0MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvOVc3RERDdnJ3SkNOY2NnUUdkS20xQVI1RURRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQKA MA0GCSqGSIb3DQEBCwUAA4IBAQBdFxvWxQvbwyz0DWFuJd32pvn5pdXbEGMCc+7z WdRN/g7WA7mspJq2l7t4y95ULp5AB2k0eToC39gDig0rg+LrxHgs62Vw5bVfkfrA 2jcxUFkvDaw7YkvRZ3IUHG7FbmMPbPBseK+Ou+0XkqUfp6HF9Xm26DGt/5cyoJTy rju0ggLP5j9Y9+k+R33tblFZpsRwKe19YMhVqJiauK4TIrkioPjs723+32WKWTRV iDFsKymw2P+lAYPDWpUH5bTRTrBr/KaDCWgMI8CWIliRkkaDDowmeLjLFDNEfUMZ 9MmnHtj37FhsqxON6kX5cYIGZ6LmRJdefuIlT12cIxfwnlOg -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:06 2026 by rpki-client