This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/AcOpfwS0TwlUTKxC8Pv5iLmLEGs.roa File: AcOpfwS0TwlUTKxC8Pv5iLmLEGs.roa (raw, json) Hash identifier: 64odRiPv7ljQZIcLquPXiII0B0iRkT3tGQmKuHKlPc4= Subject key identifier: 01:C3:A9:7F:04:B4:4F:09:54:4C:AC:42:F0:FB:F9:88:B9:8B:10:6B Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B131A531CC9029E5540E499BBB9AE5744 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/AcOpfwS0TwlUTKxC8Pv5iLmLEGs.roa Signing time: Fri 12 Dec 2025 15:07:30 +0000 ROA not before: Fri 12 Dec 2025 15:07:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202831 IP address blocks: 2a0c:b641:610::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:1a:53:1c:c9:02:9e:55:40:e4:99:bb:b9:ae:57:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Dec 12 15:07:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=01c3a97f04b44f09544cac42f0fbf988b98b106b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:fd:c3:fd:13:10:a1:cf:e4:a3:20:59:06: 6d:db:18:6a:e6:15:2d:3f:b6:23:8d:41:37:fd:10: a7:59:ae:7e:94:03:74:ba:c8:1c:6d:fc:70:09:ef: aa:59:50:6e:7d:85:47:31:74:12:33:4c:50:9a:34: eb:ef:1f:7d:0f:ce:89:1a:fa:0a:b0:ad:2f:d8:d4: ce:8e:e4:12:94:64:dd:df:a7:66:47:f0:40:03:54: 05:f9:f1:17:9b:84:f0:73:d1:e5:83:59:a3:76:7e: ab:e4:61:df:35:bc:8b:ac:c7:2e:1a:de:4c:e6:f5: 0e:cc:4d:7f:98:3c:17:d5:3d:b8:d7:06:81:b3:e2: 61:fb:4a:5c:89:86:4c:b9:2e:2f:f2:60:e6:cd:40: b3:41:ed:c6:b7:f5:3a:bd:9f:09:34:ff:c8:82:49: e9:bd:d1:48:9c:76:8b:32:79:68:0f:bf:25:84:d6: 9c:57:21:14:8c:5b:c9:aa:2c:e8:48:64:58:7e:a8: 2a:ff:88:14:df:92:aa:01:eb:1e:22:e1:50:e7:aa: 08:84:52:e1:9c:7d:15:5c:35:cb:13:be:43:74:10: fc:a9:de:8e:d2:9b:dc:ce:3a:86:f4:b1:ce:39:44: da:58:9e:d1:20:ac:f7:7d:66:1c:07:e6:9a:17:33: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C3:A9:7F:04:B4:4F:09:54:4C:AC:42:F0:FB:F9:88:B9:8B:10:6B X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/AcOpfwS0TwlUTKxC8Pv5iLmLEGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:610::/44 Signature Algorithm: sha256WithRSAEncryption 93:00:4d:a5:05:70:b5:3b:28:aa:19:67:e2:b4:30:08:74:0f: e7:bf:f7:57:8e:de:11:a1:7a:4e:d4:90:5b:f1:51:05:c7:ad: bb:9e:e2:49:1b:78:db:15:92:3f:b8:5a:9f:e4:a6:3a:e8:04: 56:3f:19:3f:77:ee:71:b3:1a:b6:e8:3b:cf:0d:18:df:71:ad: 36:6c:fc:7b:56:1f:47:35:80:19:b3:64:1c:36:b0:cf:44:a1: 5b:cd:04:af:00:69:8d:d8:e8:fc:11:cb:3d:ce:2c:5f:01:1c: c2:69:bb:0b:b0:01:99:70:03:b3:0c:87:d1:40:5c:63:c3:f0: 0f:94:ac:f3:0d:41:9a:4e:e2:87:6a:e6:0a:25:db:15:ba:7a: 8b:ff:d1:0f:6c:a7:9e:75:a2:de:f9:0e:0e:0d:00:75:ea:41: 28:0a:95:fc:80:02:c8:0f:ff:50:14:e2:d7:39:f5:3f:94:ba: eb:37:d1:09:85:ff:06:69:1f:09:22:d2:0d:79:6a:91:94:9c: be:88:59:18:ba:de:57:73:1f:ac:85:ce:0b:d0:32:01:a0:39: 19:e5:8b:11:35:e9:69:d2:c8:9c:2f:dd:23:a1:da:42:12:f2: 47:d7:6b:5b:d6:18:d8:7a:8b:98:78:f5:c0:d3:30:b0:51:00: 6f:93:c9:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsTGlMcyQKeVUDkmbu5rldEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjUxMjEyMTUwNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWMzYTk3ZjA0YjQ0ZjA5NTQ0Y2FjNDJmMGZiZjk4OGI5OGIxMDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBH9w/0TEKHP5KMgWQZt2xhq5hUt P7YjjUE3/RCnWa5+lAN0usgcbfxwCe+qWVBufYVHMXQSM0xQmjTr7x99D86JGvoK sK0v2NTOjuQSlGTd36dmR/BAA1QF+fEXm4Twc9Hlg1mjdn6r5GHfNbyLrMcuGt5M 5vUOzE1/mDwX1T241waBs+Jh+0pciYZMuS4v8mDmzUCzQe3Gt/U6vZ8JNP/Igknp vdFInHaLMnloD78lhNacVyEUjFvJqizoSGRYfqgq/4gU35KqAeseIuFQ56oIhFLh nH0VXDXLE75DdBD8qd6O0pvczjqG9LHOOUTaWJ7RIKz3fWYcB+aaFzPe3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAHDqX8EtE8JVEysQvD7+Yi5ixBrMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvQWNPcGZ3UzBUd2xVVEt4QzhQdjVpTG1MRUdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQYQ MA0GCSqGSIb3DQEBCwUAA4IBAQCTAE2lBXC1OyiqGWfitDAIdA/nv/dXjt4RoXpO 1JBb8VEFx627nuJJG3jbFZI/uFqf5KY66ARWPxk/d+5xsxq26DvPDRjfca02bPx7 Vh9HNYAZs2QcNrDPRKFbzQSvAGmN2Oj8Ecs9zixfARzCabsLsAGZcAOzDIfRQFxj w/APlKzzDUGaTuKHauYKJdsVunqL/9EPbKeedaLe+Q4ODQB16kEoCpX8gALID/9Q FOLXOfU/lLrrN9EJhf8GaR8JItINeWqRlJy+iFkYut5Xcx+shc4L0DIBoDkZ5YsR Nelp0sicL90jodpCEvJH12tb1hjYeouYePXA0zCwUQBvk8lI -----END CERTIFICATE-----Generated at Sun Dec 14 18:52:14 2025 by rpki-client