This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/CE2nEA4054fuXHq80QdVoCDWRYc.roa File: CE2nEA4054fuXHq80QdVoCDWRYc.roa (raw, json) Hash identifier: VMtCf51Jcc151nPbYOhjA/Ik42nF+NDOyuFFnu8sMwU= Subject key identifier: 08:4D:A7:10:0E:34:E7:87:EE:5C:7A:BC:D1:07:55:A0:20:D6:45:87 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3949C957022C4654C97FA99600A218 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/CE2nEA4054fuXHq80QdVoCDWRYc.roa Signing time: Fri 02 Jan 2026 10:20:42 +0000 ROA not before: Fri 02 Jan 2026 10:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209642 IP address blocks: 2a0c:b641:740::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:49:c9:57:02:2c:46:54:c9:7f:a9:96:00:a2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=084da7100e34e787ee5c7abcd10755a020d64587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:f5:9b:3e:54:47:13:23:01:d3:5f:bd:bc: 00:37:00:cc:9c:3d:5e:37:75:5e:e1:94:f2:8e:4e: e3:cf:0d:6e:06:1c:a5:a7:69:fa:08:f3:68:9d:14: ff:ad:fd:8b:28:f5:55:75:ed:df:91:39:dd:08:ff: 74:31:53:45:ba:4b:de:ba:a4:6a:37:8c:48:4d:4d: 4e:77:88:4d:c4:ef:24:15:a9:20:c2:dd:9d:52:f6: 51:8c:5c:e4:5e:6c:3d:59:1a:7d:30:00:2b:df:5c: 7d:89:9a:3a:af:da:f4:de:32:5c:ef:69:b1:19:e9: ee:1f:97:6f:5e:b8:2a:ab:48:54:95:e5:ed:f5:16: 26:a8:ab:d9:45:65:af:69:22:bf:5f:a1:8a:ab:84: 2b:52:92:fb:ee:5e:1e:4a:4d:67:34:78:18:30:a1: 1f:c0:d6:95:68:6e:b9:71:f0:8d:cf:26:a3:4a:7d: 86:b4:6b:eb:f2:01:25:44:bb:44:82:6f:1b:d6:c6: 0e:94:3f:a0:14:ab:0e:7a:f1:34:80:57:1e:e2:ac: 47:29:64:a5:ca:77:c6:2e:61:15:3c:74:75:ae:97: 3a:30:00:6b:9e:c4:74:91:84:9e:22:79:68:1a:8e: 7c:02:2a:30:7a:7f:d2:84:1d:ce:27:40:0b:e8:6c: dc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4D:A7:10:0E:34:E7:87:EE:5C:7A:BC:D1:07:55:A0:20:D6:45:87 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/CE2nEA4054fuXHq80QdVoCDWRYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:740::/44 Signature Algorithm: sha256WithRSAEncryption 8b:9d:02:f6:ad:04:b8:66:bb:25:4e:e0:9f:8a:58:ab:b6:4b: 45:6d:66:7e:93:b2:e9:0e:90:62:b9:dd:fd:10:4f:a4:8f:bf: 55:48:4c:5c:0f:f9:88:7b:e9:33:a9:e9:54:00:1d:73:83:af: 47:33:e3:33:df:0e:cc:5a:79:a0:f3:4e:9a:4a:30:9c:88:81: 1f:86:61:30:f5:7f:12:3c:d9:91:4d:80:cf:d7:7e:c6:29:f3: e9:0b:52:e4:0e:44:a9:aa:8c:48:07:90:2f:0d:5a:4e:c7:84: 96:67:32:1d:f5:68:ee:d7:d7:e7:28:af:ab:1f:d2:03:77:ba: a2:42:95:68:6f:5f:b3:15:9d:53:a4:43:cc:02:32:7e:a6:ad: 1a:91:e5:c2:4d:41:6b:fe:90:6f:ea:41:57:b9:e3:dc:04:94: 93:96:0e:47:51:f8:53:fd:17:0f:44:43:1c:98:b6:80:6d:7a: 10:0a:6b:82:e4:46:ff:d0:eb:e2:25:71:79:cf:5d:9b:46:e4: 06:f8:8b:f7:86:1f:d1:92:a9:0c:57:8b:05:19:b3:3f:b8:1d: ac:b6:22:3f:a7:26:81:78:b2:c0:e2:6e:e4:2f:cb:4b:76:71: 5e:fa:a8:a3:e7:32:db:20:2d:98:9e:c3:16:27:a5:20:35:54: af:60:ae:1c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OUnJVwIsRlTJf6mWAKIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODRkYTcxMDBlMzRlNzg3ZWU1YzdhYmNkMTA3NTVhMDIwZDY0NTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhD1mz5URxMjAdNfvbwANwDMnD1e N3Ve4ZTyjk7jzw1uBhylp2n6CPNonRT/rf2LKPVVde3fkTndCP90MVNFukveuqRq N4xITU1Od4hNxO8kFakgwt2dUvZRjFzkXmw9WRp9MAAr31x9iZo6r9r03jJc72mx GenuH5dvXrgqq0hUleXt9RYmqKvZRWWvaSK/X6GKq4QrUpL77l4eSk1nNHgYMKEf wNaVaG65cfCNzyajSn2GtGvr8gElRLtEgm8b1sYOlD+gFKsOevE0gFce4qxHKWSl ynfGLmEVPHR1rpc6MABrnsR0kYSeInloGo58Aiowen/ShB3OJ0AL6GzcRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAhNpxAONOeH7lx6vNEHVaAg1kWHMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvQ0UybkVBNDA1NGZ1WEhxODBRZFZvQ0RXUlljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQdA MA0GCSqGSIb3DQEBCwUAA4IBAQCLnQL2rQS4ZrslTuCfilirtktFbWZ+k7LpDpBi ud39EE+kj79VSExcD/mIe+kzqelUAB1zg69HM+Mz3w7MWnmg806aSjCciIEfhmEw 9X8SPNmRTYDP137GKfPpC1LkDkSpqoxIB5AvDVpOx4SWZzId9Wju19fnKK+rH9ID d7qiQpVob1+zFZ1TpEPMAjJ+pq0akeXCTUFr/pBv6kFXuePcBJSTlg5HUfhT/RcP REMcmLaAbXoQCmuC5Eb/0OviJXF5z12bRuQG+Iv3hh/RkqkMV4sFGbM/uB2stiI/ pyaBeLLA4m7kL8tLdnFe+qij5zLbIC2YnsMWJ6UgNVSvYK4c -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:48 2026 by rpki-client