This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/A-2oqB_z_L2ZqhUcWlTMFxQMCk4.roa File: A-2oqB_z_L2ZqhUcWlTMFxQMCk4.roa (raw, json) Hash identifier: OgW8WwkvD71pg4DR6WQFu44jN1WTmlDlfW7zfyca12c= Subject key identifier: 03:ED:A8:A8:1F:F3:FC:BD:99:AA:15:1C:5A:54:CC:17:14:0C:0A:4E Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3923EC4C950AD1314BB38F8E487A2D Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/A-2oqB_z_L2ZqhUcWlTMFxQMCk4.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34872 IP address blocks: 45.154.97.0/24 maxlen: 32 45.154.99.0/24 maxlen: 32 62.3.50.0/24 maxlen: 32 194.28.96.0/24 maxlen: 32 194.28.98.0/23 maxlen: 32 2a0c:b640::/32 maxlen: 128 2a0c:b641::/44 maxlen: 128 2a0c:b641:10::/44 maxlen: 128 2a0c:b641:50::/44 maxlen: 128 2a0c:b641:60::/44 maxlen: 128 2a0c:b641:530::/44 maxlen: 128 2a0c:b641:5e0::/44 maxlen: 48 2a0c:b641:660::/44 maxlen: 44 2a0c:b641:6d0::/44 maxlen: 128 2a0c:b641:70f::/48 maxlen: 128 2a0c:b641:730::/44 maxlen: 128 2a0c:b641:820::/44 maxlen: 128 2a0f:8400::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:23:ec:4c:95:0a:d1:31:4b:b3:8f:8e:48:7a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03eda8a81ff3fcbd99aa151c5a54cc17140c0a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:eb:10:fb:ee:97:e5:77:78:a3:b4:6e:f7:00: e6:4b:48:49:4b:a3:87:11:9c:c3:92:f7:fe:eb:c2: 9f:09:77:10:48:83:73:90:be:52:77:4c:fb:b2:83: b8:c1:a4:ee:22:3c:e8:70:4e:30:f6:db:b4:b4:d2: fb:96:13:1a:86:d7:90:dc:cb:dc:02:04:16:24:92: 74:c2:f1:6d:ac:4e:42:5f:22:03:cd:50:34:d6:9a: 7f:c2:73:b2:41:d8:80:9d:25:bf:c5:7d:e7:74:a2: 85:a7:19:a5:19:4d:f2:74:00:c8:e6:6c:68:7f:36: 34:f4:a7:4d:b2:df:c6:2f:27:9f:82:8e:e4:0e:60: 43:a8:2a:d5:ee:9d:02:be:67:52:67:ab:6f:7f:39: 8d:2a:23:30:d4:59:7c:f1:a2:bd:15:3a:02:62:6f: 91:9e:57:bf:4a:6e:84:01:d3:15:3f:eb:c6:65:99: f1:ef:40:b1:4d:70:8d:c3:bc:37:88:b6:28:a9:72: 3b:dd:0b:d5:4a:88:a1:76:2a:57:b1:9d:75:bb:40: 62:42:44:63:14:64:c6:61:60:48:62:9b:ac:24:b4: 98:32:00:3b:41:e1:43:cb:e8:7f:7c:3f:96:0e:9a: f1:fa:11:b2:c6:7b:d7:e6:dd:ca:a5:17:f5:3a:9a: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:ED:A8:A8:1F:F3:FC:BD:99:AA:15:1C:5A:54:CC:17:14:0C:0A:4E X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/A-2oqB_z_L2ZqhUcWlTMFxQMCk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.97.0/24 45.154.99.0/24 62.3.50.0/24 194.28.96.0/24 194.28.98.0/23 IPv6: 2a0c:b640::-2a0c:b641:1f:ffff:ffff:ffff:ffff:ffff 2a0c:b641:50::-2a0c:b641:6f:ffff:ffff:ffff:ffff:ffff 2a0c:b641:530::/44 2a0c:b641:5e0::/44 2a0c:b641:660::/44 2a0c:b641:6d0::/44 2a0c:b641:70f::/48 2a0c:b641:730::/44 2a0c:b641:820::/44 2a0f:8400::/32 Signature Algorithm: sha256WithRSAEncryption 2e:34:36:03:0f:22:99:9e:79:33:5e:6b:be:5e:7d:66:ea:3f: a0:a8:20:03:c7:d1:e8:e7:21:dc:6d:76:87:7d:22:35:c1:45: c6:35:68:d5:bf:bd:34:54:0f:84:8f:ca:ff:ff:89:5e:b5:5d: f4:09:2d:db:57:b2:34:67:f4:a4:77:b1:e6:eb:ec:4b:45:52: 43:3b:93:f0:58:99:a4:83:ba:6e:3f:a0:9f:c4:96:30:e9:39: 60:2c:e6:7a:84:17:67:67:7d:11:e7:c5:8c:e5:c0:c6:2a:98: a5:f0:94:97:b7:50:60:9f:fa:e2:95:6b:56:0c:2c:3f:64:82: be:1e:65:2c:b6:4d:82:8f:e3:84:92:c5:7e:4c:19:3f:17:04: 4f:40:b2:f5:4e:75:da:41:3c:fe:f6:e7:6f:2a:e0:50:c3:33: 0e:17:d2:3b:2b:be:38:0a:bd:9e:79:b7:7d:5a:52:ce:98:61: 22:30:84:20:ba:38:cd:dd:b4:d4:4c:b1:21:5a:8d:a7:42:48: 38:d8:13:61:e6:d4:f2:63:42:8c:60:0c:a5:28:b1:29:41:bd: af:68:8d:2f:ce:78:6a:e2:30:3a:3a:e8:0f:bd:04:1f:44:6f: 7f:78:9f:71:dc:b2:34:3b:d2:47:65:e8:c0:53:35:9b:88:0e: c4:0d:98:59 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt+OSPsTJUK0TFLs4+OSHotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2VkYThhODFmZjNmY2JkOTlhYTE1MWM1YTU0Y2MxNzE0MGMwYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OsQ++6X5Xd4o7Ru9wDmS0hJS6OH EZzDkvf+68KfCXcQSINzkL5Sd0z7soO4waTuIjzocE4w9tu0tNL7lhMahteQ3Mvc AgQWJJJ0wvFtrE5CXyIDzVA01pp/wnOyQdiAnSW/xX3ndKKFpxmlGU3ydADI5mxo fzY09KdNst/GLyefgo7kDmBDqCrV7p0CvmdSZ6tvfzmNKiMw1Fl88aK9FToCYm+R nle/Sm6EAdMVP+vGZZnx70CxTXCNw7w3iLYoqXI73QvVSoihdipXsZ11u0BiQkRj FGTGYWBIYpusJLSYMgA7QeFDy+h/fD+WDprx+hGyxnvX5t3KpRf1OppOIwIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFAPtqKgf8/y9maoVHFpUzBcUDApOMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvQS0yb3FCX3pfTDJacWhVY1dsVE1GeFFNQ2s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjAkBAIAATAeAwQALZph AwQALZpjAwQAPgMyAwQAwhxgAwQBwhxiMHIEAgACMGwwEAMFBioMtkADBwUqDLZB AAAwEgMHBCoMtkEAUAMHBCoMtkEAYAMHBCoMtkEFMAMHBCoMtkEF4AMHBCoMtkEG YAMHBCoMtkEG0AMHACoMtkEHDwMHBCoMtkEHMAMHBCoMtkEIIAMFACoPhAAwDQYJ KoZIhvcNAQELBQADggEBAC40NgMPIpmeeTNea75efWbqP6CoIAPH0ejnIdxtdod9 IjXBRcY1aNW/vTRUD4SPyv//iV61XfQJLdtXsjRn9KR3sebr7EtFUkM7k/BYmaSD um4/oJ/EljDpOWAs5nqEF2dnfRHnxYzlwMYqmKXwlJe3UGCf+uKVa1YMLD9kgr4e ZSy2TYKP44SSxX5MGT8XBE9AsvVOddpBPP72528q4FDDMw4X0jsrvjgKvZ55t31a Us6YYSIwhCC6OM3dtNRMsSFajadCSDjYE2Hm1PJjQoxgDKUosSlBva9ojS/OeGri MDo66A+9BB9Eb394n3HcsjQ70kdl6MBTNZuIDsQNmFk= -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:20 2026 by rpki-client