This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/G3_XidxJVfwYHrr3bjASsE-F4sA.roa File: G3_XidxJVfwYHrr3bjASsE-F4sA.roa (raw, json) Hash identifier: XKujc3yUtJwXHOisUdhZJ5ohgHe1B1xrZPYLUXlevdI= Subject key identifier: 1B:7F:D7:89:DC:49:55:FC:18:1E:BA:F7:6E:30:12:B0:4F:85:E2:C0 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39638883B256636CCA2AB4A664D0FF Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/G3_XidxJVfwYHrr3bjASsE-F4sA.roa Signing time: Fri 02 Jan 2026 10:20:48 +0000 ROA not before: Fri 02 Jan 2026 10:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213550 IP address blocks: 2a0c:b641:1e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:63:88:83:b2:56:63:6c:ca:2a:b4:a6:64:d0:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b7fd789dc4955fc181ebaf76e3012b04f85e2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:59:17:d9:a4:df:53:62:d3:f9:0e:c6:56: 4f:c5:b0:97:54:d5:e4:9b:b8:27:ba:57:c4:97:12: ad:67:b8:f0:dd:22:e3:5d:2c:07:5c:b9:fd:7b:5e: 52:29:34:7b:2e:d0:d8:ae:5a:35:60:9f:4a:50:6a: fb:0e:c6:6b:39:d6:0f:af:ee:e9:82:26:86:a1:46: 3e:59:db:92:20:09:5c:d0:c5:3e:f0:b0:ad:c3:2f: 4b:0c:0b:44:23:60:ec:6d:50:89:77:13:79:0e:26: fe:0e:12:f5:06:b6:73:60:d2:b2:f2:2b:f1:7f:37: 05:f9:45:51:aa:b3:89:4c:20:d5:16:f9:48:db:cb: bc:2c:1f:41:56:fc:71:bf:f7:8e:12:36:50:7c:95: ae:19:1b:9e:b2:ff:f3:09:58:6c:ec:81:54:df:56: d5:e1:db:81:80:7c:18:30:2e:5e:f5:f4:6f:a8:89: 57:77:4c:53:66:76:05:3b:18:cb:12:e4:28:3c:f4: b1:5c:d3:be:f1:ee:89:b9:2f:eb:07:cf:6c:5a:e1: 43:ac:bf:36:8c:7b:66:84:b7:cb:31:bb:af:4c:72: 41:35:53:4d:e0:00:71:f9:68:84:8b:d9:70:36:62: 48:ae:2f:e0:38:36:cc:60:22:04:d7:83:26:f8:6d: 64:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7F:D7:89:DC:49:55:FC:18:1E:BA:F7:6E:30:12:B0:4F:85:E2:C0 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/G3_XidxJVfwYHrr3bjASsE-F4sA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:1e0::/44 Signature Algorithm: sha256WithRSAEncryption 76:8e:1e:ef:54:6b:b3:96:e1:8e:1c:d1:1f:f8:37:79:06:f4: c8:51:77:0f:7a:ed:b1:e2:5b:21:7e:00:7f:44:63:7b:49:05: 1b:c6:67:90:4f:02:86:91:6f:bd:f6:0e:b4:bc:4b:1e:33:0d: 4f:83:5a:53:86:3d:2d:c3:1f:de:09:81:f4:c3:e6:37:9f:12: d2:d6:05:a0:5a:f5:64:fc:0a:6f:e4:39:0a:b7:06:59:7b:e0: f2:de:13:fa:30:41:50:6a:e3:fa:d1:dd:54:97:96:57:b0:0f: b7:12:f4:0b:19:23:e8:69:38:a1:57:93:0f:e0:7f:c1:b8:b7: 5a:00:bc:d4:ff:95:6e:b6:c2:2a:72:b9:ff:e4:09:aa:fa:aa: 36:4b:1f:aa:74:7c:19:56:ed:31:3c:a7:25:80:1b:f8:33:c6: 5a:f8:ac:1d:e5:0e:98:01:05:02:32:bd:96:93:3f:1c:aa:56: 6b:41:1b:c3:45:8f:c5:90:bb:54:46:1b:dd:79:9f:d6:14:00: fc:c5:a5:dd:22:bc:66:a7:e0:92:9d:bd:2a:aa:ab:4a:f3:72: 1b:42:43:96:fc:4a:88:2d:2b:32:01:32:98:aa:6c:30:5e:d0: 05:95:39:2e:b9:51:2f:eb:34:18:c7:bb:17:a1:13:10:8b:2f: 04:9a:c9:b9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWOIg7JWY2zKKrSmZND/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjdmZDc4OWRjNDk1NWZjMTgxZWJhZjc2ZTMwMTJiMDRmODVlMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni1ZF9mk31Ni0/kOxlZPxbCXVNXk m7gnulfElxKtZ7jw3SLjXSwHXLn9e15SKTR7LtDYrlo1YJ9KUGr7DsZrOdYPr+7p giaGoUY+WduSIAlc0MU+8LCtwy9LDAtEI2DsbVCJdxN5Dib+DhL1BrZzYNKy8ivx fzcF+UVRqrOJTCDVFvlI28u8LB9BVvxxv/eOEjZQfJWuGRuesv/zCVhs7IFU31bV 4duBgHwYMC5e9fRvqIlXd0xTZnYFOxjLEuQoPPSxXNO+8e6JuS/rB89sWuFDrL82 jHtmhLfLMbuvTHJBNVNN4ABx+WiEi9lwNmJIri/gODbMYCIE14Mm+G1kEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBt/14ncSVX8GB66924wErBPheLAMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvRzNfWGlkeEpWZndZSHJyM2JqQVNzRS1GNHNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQHg MA0GCSqGSIb3DQEBCwUAA4IBAQB2jh7vVGuzluGOHNEf+Dd5BvTIUXcPeu2x4lsh fgB/RGN7SQUbxmeQTwKGkW+99g60vEseMw1Pg1pThj0twx/eCYH0w+Y3nxLS1gWg WvVk/Apv5DkKtwZZe+Dy3hP6MEFQauP60d1Ul5ZXsA+3EvQLGSPoaTihV5MP4H/B uLdaALzU/5VutsIqcrn/5Amq+qo2Sx+qdHwZVu0xPKclgBv4M8Za+Kwd5Q6YAQUC Mr2Wkz8cqlZrQRvDRY/FkLtURhvdeZ/WFAD8xaXdIrxmp+CSnb0qqqtK83IbQkOW /EqILSsyATKYqmwwXtAFlTkuuVEv6zQYx7sXoRMQiy8Emsm5 -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:19 2026 by rpki-client