This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/F0gM1QJL3Yvc4zJkrWtuCuM2CeI.roa File: F0gM1QJL3Yvc4zJkrWtuCuM2CeI.roa (raw, json) Hash identifier: 5upAXhdOlLWQYdimj3Lo7UcJm6WTvTi348ayKHcUsXY= Subject key identifier: 17:48:0C:D5:02:4B:DD:8B:DC:E3:32:64:AD:6B:6E:0A:E3:36:09:E2 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E391EB3B4575D9E5C27C6E5209A16D7 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/F0gM1QJL3Yvc4zJkrWtuCuM2CeI.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a0c:b641:1d0::/44 maxlen: 48 2a0c:b641:7b0::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 15:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1e:b3:b4:57:5d:9e:5c:27:c6:e5:20:9a:16:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17480cd5024bdd8bdce33264ad6b6e0ae33609e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:80:1a:63:85:59:c6:69:9b:2b:e3:3c:9a: b7:d2:e9:93:db:fb:ec:88:59:ac:e2:c8:bb:68:89: 07:fb:94:e6:87:44:0e:59:c0:f0:c0:4c:33:a6:58: 75:de:e1:4d:b3:1f:5e:97:cf:cf:01:b8:de:7a:99: ab:19:46:ad:8a:17:d8:de:ea:de:2a:fa:64:68:42: 6c:82:ab:ad:50:ef:1c:0d:2a:dd:6d:5f:6c:fc:0d: 6b:a7:4e:08:3d:9f:05:dd:01:95:0f:e7:2f:97:f1: bb:e2:8c:64:1c:e4:38:2f:83:8e:bb:09:c7:5d:ad: 98:f4:29:38:8c:6b:8e:ae:95:fd:36:71:7b:f6:b1: 84:dd:4d:62:96:0c:ac:f0:b9:3b:0a:f4:39:ba:4e: f0:b6:c7:e9:75:65:06:8d:32:e0:4e:57:2e:a9:47: 9e:3b:e2:55:85:1e:e7:5b:b1:90:f3:c7:52:bd:1c: 3d:a8:fd:c8:71:d1:73:ad:b7:ab:f6:ff:cd:35:93: e7:90:36:98:c5:72:b9:03:bd:4c:72:a6:57:91:54: 09:7c:34:7f:88:db:a6:6b:6d:d5:7f:0f:2a:51:5a: a0:7d:11:bb:60:dd:ce:df:6d:cd:e1:52:37:d0:a0: f6:fc:43:95:90:27:4f:f0:f5:6b:af:5a:b0:29:55: ee:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:48:0C:D5:02:4B:DD:8B:DC:E3:32:64:AD:6B:6E:0A:E3:36:09:E2 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/F0gM1QJL3Yvc4zJkrWtuCuM2CeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:1d0::/44 2a0c:b641:7b0::/44 Signature Algorithm: sha256WithRSAEncryption 8a:be:18:45:39:5e:46:1c:65:64:f8:9f:aa:05:60:31:df:27: 73:03:ae:74:6f:2e:68:21:21:d8:49:42:6c:e3:12:09:ce:76: 12:01:4c:9d:f7:a1:ed:bc:ce:8a:9f:fd:63:65:e3:86:66:4b: 22:4e:b5:17:51:ae:fd:49:9e:95:13:84:89:61:4f:ad:d7:24: 59:19:d8:ba:62:48:78:42:42:d0:7e:4f:1d:cc:35:d9:54:72: af:3d:5e:d3:e4:83:5d:b1:9c:54:24:ae:d2:20:94:e4:78:44: ab:fa:74:e6:e8:ce:ea:35:d8:ea:5e:61:89:f6:6d:10:0f:c7: f4:91:b1:b2:b4:0b:75:74:46:b4:e8:df:d2:a5:c6:bd:a8:f8: ee:fb:b9:70:8a:1f:2b:fb:90:4c:e5:59:5f:ee:c1:75:1d:ae: 00:26:cd:d0:b0:bf:da:69:e0:d2:b5:99:52:10:ab:3f:2a:89: d0:30:93:15:3f:bf:b6:2b:2b:4d:64:7c:4b:e9:ab:77:b5:fd: f1:62:7d:7f:2a:60:8a:36:d7:f1:d5:2d:5e:0a:af:bf:ca:40: 15:ec:d0:4f:2d:b2:64:c5:39:d7:30:97:87:2e:54:88:ae:21: cd:17:92:61:74:b9:88:e8:38:47:33:a7:60:a2:f5:fd:1f:34: ac:3a:d6:bb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OR6ztFddnlwnxuUgmhbXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzQ4MGNkNTAyNGJkZDhiZGNlMzMyNjRhZDZiNmUwYWUzMzYwOWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSqAGmOFWcZpmyvjPJq30umT2/vs iFms4si7aIkH+5Tmh0QOWcDwwEwzplh13uFNsx9el8/PAbjeepmrGUatihfY3ure KvpkaEJsgqutUO8cDSrdbV9s/A1rp04IPZ8F3QGVD+cvl/G74oxkHOQ4L4OOuwnH Xa2Y9Ck4jGuOrpX9NnF79rGE3U1ilgys8Lk7CvQ5uk7wtsfpdWUGjTLgTlcuqUee O+JVhR7nW7GQ88dSvRw9qP3IcdFzrber9v/NNZPnkDaYxXK5A71McqZXkVQJfDR/ iNuma23Vfw8qUVqgfRG7YN3O323N4VI30KD2/EOVkCdP8PVrr1qwKVXucwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBdIDNUCS92L3OMyZK1rbgrjNgniMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvRjBnTTFRSkwzWXZjNHpKa3JXdHVDdU0yQ2VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgy2QQHQ AwcEKgy2QQewMA0GCSqGSIb3DQEBCwUAA4IBAQCKvhhFOV5GHGVk+J+qBWAx3ydz A650by5oISHYSUJs4xIJznYSAUyd96HtvM6Kn/1jZeOGZksiTrUXUa79SZ6VE4SJ YU+t1yRZGdi6Ykh4QkLQfk8dzDXZVHKvPV7T5INdsZxUJK7SIJTkeESr+nTm6M7q NdjqXmGJ9m0QD8f0kbGytAt1dEa06N/Spca9qPju+7lwih8r+5BM5Vlf7sF1Ha4A Js3QsL/aaeDStZlSEKs/KonQMJMVP7+2KytNZHxL6at3tf3xYn1/KmCKNtfx1S1e Cq+/ykAV7NBPLbJkxTnXMJeHLlSIriHNF5JhdLmI6DhHM6dgovX9HzSsOta7 -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:31 2026 by rpki-client