This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/DleT8LPyR-GIZa8xvxvY0VLF4Wc.roa File: DleT8LPyR-GIZa8xvxvY0VLF4Wc.roa (raw, json) Hash identifier: FZ9XeDUjMPGXxM7x+p7ivj3ZOahDjbRmhUEsPaChAWc= Subject key identifier: 0E:57:93:F0:B3:F2:47:E1:88:65:AF:31:BF:1B:D8:D1:52:C5:E1:67 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E393D64246342EEFA2442EDB801E9E4 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/DleT8LPyR-GIZa8xvxvY0VLF4Wc.roa Signing time: Fri 02 Jan 2026 10:20:39 +0000 ROA not before: Fri 02 Jan 2026 10:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206831 IP address blocks: 2a0c:b641:620::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3d:64:24:63:42:ee:fa:24:42:ed:b8:01:e9:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e5793f0b3f247e18865af31bf1bd8d152c5e167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:33:f0:67:e3:d4:6a:c9:b2:64:cf:25:78: b5:76:8b:11:50:63:5e:4c:8c:ad:7b:80:f3:45:a1: fa:72:23:e5:08:db:d1:5b:96:ad:17:5c:1c:c4:e4: 9f:e8:9d:4d:6c:58:be:d2:84:34:f8:48:f8:31:3c: 64:0e:a8:44:27:af:e6:58:bd:da:6d:cb:e7:4f:69: 66:05:3d:c6:b8:ec:1d:f0:95:3d:e0:10:df:30:54: 3d:39:1b:cf:63:d3:8b:bc:51:a9:38:ed:8f:ee:36: 48:cb:65:f3:8b:37:55:b3:4e:c1:2f:ff:0e:84:92: 89:6a:d6:d3:e5:5c:48:dc:c5:e6:8d:f7:9c:d6:c3: f3:f4:fb:ae:63:81:55:ea:13:cf:4a:1e:32:9d:ed: 05:e5:08:d3:1c:63:da:b9:d8:1a:f1:be:bb:81:b7: 76:1c:2c:1d:c8:a5:ec:10:81:eb:bc:5f:6f:57:1a: a9:38:47:12:d9:67:c4:8e:34:75:5d:51:94:21:81: 80:e8:b7:f9:f0:67:2c:d4:8c:35:41:dd:22:ca:a4: d8:78:50:8a:f8:4e:22:60:79:ae:53:19:3e:b1:ca: 6f:4c:43:cf:d9:ea:af:e2:c6:90:ab:e6:82:05:54: 53:fc:43:56:34:b0:aa:83:09:b7:a8:a1:9e:b8:41: ee:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:57:93:F0:B3:F2:47:E1:88:65:AF:31:BF:1B:D8:D1:52:C5:E1:67 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/DleT8LPyR-GIZa8xvxvY0VLF4Wc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:620::/44 Signature Algorithm: sha256WithRSAEncryption 95:d8:fc:75:f5:03:6a:81:fa:68:ff:3c:5d:23:a0:84:f5:73: 97:6f:e9:2b:c8:49:2f:e6:cb:b6:de:dc:db:5d:9d:56:11:fe: ab:34:5e:83:53:7e:22:9f:16:35:1b:0e:41:16:75:b6:ed:4e: 06:ee:29:5e:9c:61:b4:d6:57:f9:ab:d8:db:6a:81:fa:3c:8a: 45:5c:2f:88:08:b7:1a:cc:72:13:7f:55:89:b5:5e:d1:c0:c4: cc:4d:06:88:fa:e9:11:b2:96:6e:df:62:43:6f:d2:d1:05:1b: d5:90:be:dd:59:f7:87:ac:f1:f4:7c:cf:90:f9:cf:6b:2e:0c: 09:a0:6e:d8:09:5f:ff:94:79:79:ed:91:6b:d6:aa:a3:e8:c8: 17:f7:b9:26:a0:a3:10:f4:c5:d1:3c:84:49:9e:b8:c9:ab:f8: 94:41:64:87:e5:e0:06:35:bd:02:15:84:01:78:a5:68:a5:b3: 6b:45:32:b9:9b:86:45:3c:1a:c2:b7:89:f1:00:61:95:1b:47: 9d:c6:8f:86:a6:61:ed:11:cd:5c:d3:ca:a4:36:7c:d4:05:65: 00:c6:e4:64:c5:d5:22:a0:98:da:77:ff:74:6c:76:bd:09:1f: d3:e0:72:aa:ec:fd:4b:e3:f7:24:7c:84:c6:87:22:17:bf:b4: 78:ca:aa:e0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OT1kJGNC7vokQu24AenkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTU3OTNmMGIzZjI0N2UxODg2NWFmMzFiZjFiZDhkMTUyYzVlMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zgz8Gfj1GrJsmTPJXi1dosRUGNe TIyte4DzRaH6ciPlCNvRW5atF1wcxOSf6J1NbFi+0oQ0+Ej4MTxkDqhEJ6/mWL3a bcvnT2lmBT3GuOwd8JU94BDfMFQ9ORvPY9OLvFGpOO2P7jZIy2XzizdVs07BL/8O hJKJatbT5VxI3MXmjfec1sPz9PuuY4FV6hPPSh4yne0F5QjTHGPaudga8b67gbd2 HCwdyKXsEIHrvF9vVxqpOEcS2WfEjjR1XVGUIYGA6Lf58Gcs1Iw1Qd0iyqTYeFCK +E4iYHmuUxk+scpvTEPP2eqv4saQq+aCBVRT/ENWNLCqgwm3qKGeuEHusQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA5Xk/Cz8kfhiGWvMb8b2NFSxeFnMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvRGxlVDhMUHlSLUdJWmE4eHZ4dlkwVkxGNFdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQYg MA0GCSqGSIb3DQEBCwUAA4IBAQCV2Px19QNqgfpo/zxdI6CE9XOXb+kryEkv5su2 3tzbXZ1WEf6rNF6DU34inxY1Gw5BFnW27U4G7ilenGG01lf5q9jbaoH6PIpFXC+I CLcazHITf1WJtV7RwMTMTQaI+ukRspZu32JDb9LRBRvVkL7dWfeHrPH0fM+Q+c9r LgwJoG7YCV//lHl57ZFr1qqj6MgX97kmoKMQ9MXRPIRJnrjJq/iUQWSH5eAGNb0C FYQBeKVopbNrRTK5m4ZFPBrCt4nxAGGVG0edxo+GpmHtEc1c08qkNnzUBWUAxuRk xdUioJjad/90bHa9CR/T4HKq7P1L4/ckfITGhyIXv7R4yqrg -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:00 2026 by rpki-client