This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BlCNrjqn_Vlam1wlKuXbyUlh1J8.roa File: BlCNrjqn_Vlam1wlKuXbyUlh1J8.roa (raw, json) Hash identifier: rsImq1gZ71OHOOuH7TeGopcO6C8jsDxlqBmZwzcEPUw= Subject key identifier: 06:50:8D:AE:3A:A7:FD:59:5A:9B:5C:25:2A:E5:DB:C9:49:61:D4:9F Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3955000B6EC64B09A361D75C70F9E5 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BlCNrjqn_Vlam1wlKuXbyUlh1J8.roa Signing time: Fri 02 Jan 2026 10:20:45 +0000 ROA not before: Fri 02 Jan 2026 10:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211333 IP address blocks: 2a0c:b641:7c0::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:55:00:0b:6e:c6:4b:09:a3:61:d7:5c:70:f9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06508dae3aa7fd595a9b5c252ae5dbc94961d49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:cd:a5:18:93:e4:c4:d1:95:99:1c:7c:11: 4a:93:76:c8:7c:09:37:8e:22:8b:64:be:d6:f0:a1: de:68:8d:c6:db:eb:55:0b:32:87:4c:48:e4:1c:e7: d0:31:d8:c6:7d:96:70:74:e1:ea:7f:f5:ac:8f:bd: 35:e1:3f:e0:cd:85:07:d5:d9:af:f7:47:68:4d:f1: f8:e1:54:0d:a9:0b:3c:30:20:5d:49:9c:9b:7a:16: f0:69:62:14:9b:ef:b3:49:74:4d:ae:87:f3:2d:2b: 29:5f:38:21:43:dc:b1:97:fd:9a:33:d7:7a:d6:e9: a9:38:db:83:13:48:0f:ad:82:fa:7c:71:ac:f4:e2: cc:7d:8a:8c:87:15:73:e3:08:c6:c8:44:72:5c:7d: 30:4b:7c:4a:99:84:bf:6a:ae:5f:48:42:d8:1b:e4: 7f:aa:a8:d5:62:b4:ea:07:32:20:8f:57:eb:59:82: b3:3b:91:3c:d4:81:13:4d:2a:9b:96:18:30:41:36: cc:b4:46:42:93:62:51:3d:b2:7a:cb:d8:a7:76:7d: c7:54:a4:03:55:77:2b:60:09:ef:43:2a:43:f4:2a: 2d:a0:9a:6f:33:08:ab:0c:69:b2:2f:6f:5c:bf:56: c6:9b:e6:d2:53:01:7a:e0:29:fe:4d:0a:e1:87:15: 10:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:50:8D:AE:3A:A7:FD:59:5A:9B:5C:25:2A:E5:DB:C9:49:61:D4:9F X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BlCNrjqn_Vlam1wlKuXbyUlh1J8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:7c0::/44 Signature Algorithm: sha256WithRSAEncryption 32:04:2f:30:71:a1:e4:c8:a9:9b:81:81:cb:5f:30:da:27:9d: 1b:07:95:c9:29:b1:f7:6f:a8:d3:c5:98:54:54:a7:a1:94:e6: 58:cc:c2:e0:0a:e8:05:2d:3f:12:40:61:62:ad:59:9f:9b:b4: c0:4b:17:a4:d1:41:b8:f8:9b:1f:b3:a4:54:27:eb:b8:b1:3d: fb:fb:21:26:a6:6e:bb:ae:c1:91:e4:97:4a:19:34:e8:fb:11: ac:2f:93:fe:c3:8b:51:26:52:c6:b7:e2:fd:f7:b4:04:22:ce: e2:59:b4:f6:df:98:87:df:b5:4e:22:80:6a:cc:31:5d:43:f0: b2:36:79:23:cd:c0:77:61:1e:95:b9:0e:26:f3:ae:d6:21:ce: 1b:4b:c4:3f:26:60:eb:e7:83:b9:a3:a0:4c:d0:37:d7:0a:9b: ff:44:9f:eb:b6:ff:7b:db:a0:18:de:63:48:7b:86:e8:4e:15: a3:ee:d5:99:f3:d5:78:8a:51:e9:07:c3:69:0b:d9:48:a7:f0: cf:f0:66:cf:db:c6:e7:58:f3:88:c6:09:1b:e7:4b:e7:a7:c6: 1b:fc:db:c4:03:89:85:70:16:fb:26:f1:69:96:2f:58:ed:90: e1:5b:1f:25:26:c6:1a:3d:45:8d:b4:3e:fe:d9:6a:bf:15:c4: b2:86:74:b0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVUAC27GSwmjYddccPnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjUwOGRhZTNhYTdmZDU5NWE5YjVjMjUyYWU1ZGJjOTQ5NjFkNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRvNpRiT5MTRlZkcfBFKk3bIfAk3 jiKLZL7W8KHeaI3G2+tVCzKHTEjkHOfQMdjGfZZwdOHqf/Wsj7014T/gzYUH1dmv 90doTfH44VQNqQs8MCBdSZybehbwaWIUm++zSXRNrofzLSspXzghQ9yxl/2aM9d6 1umpONuDE0gPrYL6fHGs9OLMfYqMhxVz4wjGyERyXH0wS3xKmYS/aq5fSELYG+R/ qqjVYrTqBzIgj1frWYKzO5E81IETTSqblhgwQTbMtEZCk2JRPbJ6y9indn3HVKQD VXcrYAnvQypD9CotoJpvMwirDGmyL29cv1bGm+bSUwF64Cn+TQrhhxUQFwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAZQja46p/1ZWptcJSrl28lJYdSfMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvQmxDTnJqcW5fVmxhbTF3bEt1WGJ5VWxoMUo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQfA MA0GCSqGSIb3DQEBCwUAA4IBAQAyBC8wcaHkyKmbgYHLXzDaJ50bB5XJKbH3b6jT xZhUVKehlOZYzMLgCugFLT8SQGFirVmfm7TASxek0UG4+Jsfs6RUJ+u4sT37+yEm pm67rsGR5JdKGTTo+xGsL5P+w4tRJlLGt+L997QEIs7iWbT235iH37VOIoBqzDFd Q/CyNnkjzcB3YR6VuQ4m867WIc4bS8Q/JmDr54O5o6BM0DfXCpv/RJ/rtv9726AY 3mNIe4boThWj7tWZ89V4ilHpB8NpC9lIp/DP8GbP28bnWPOIxgkb50vnp8Yb/NvE A4mFcBb7JvFpli9Y7ZDhWx8lJsYaPUWNtD7+2Wq/FcSyhnSw -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:26 2026 by rpki-client