This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/G78aFC6daxjba9-nwZYzzPZscEI.roa File: G78aFC6daxjba9-nwZYzzPZscEI.roa (raw, json) Hash identifier: ppM6gjLOE8/7qFddiusIPYoRtJoOYWNzkFO9E1zeYf4= Subject key identifier: 1B:BF:1A:14:2E:9D:6B:18:DB:6B:DF:A7:C1:96:33:CC:F6:6C:70:42 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3943E94CB0FE2158847D3A501FF4FC Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/G78aFC6daxjba9-nwZYzzPZscEI.roa Signing time: Fri 02 Jan 2026 10:20:40 +0000 ROA not before: Fri 02 Jan 2026 10:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208709 IP address blocks: 194.28.97.0/24 maxlen: 24 2a0c:b641:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:43:e9:4c:b0:fe:21:58:84:7d:3a:50:1f:f4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bbf1a142e9d6b18db6bdfa7c19633ccf66c7042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fa:1b:4d:d3:a7:55:64:6d:65:33:74:2b:f2: 24:c9:7f:c8:78:03:bb:77:29:55:c8:36:33:cf:91: af:61:34:68:28:98:90:31:29:c5:e9:c3:a9:7c:60: 65:bd:0f:95:51:2e:61:d9:e4:6a:81:0c:f0:cb:7d: 20:a8:18:7d:a2:91:56:6a:ef:89:c6:ce:9c:b1:77: 77:4c:2c:ac:fa:90:75:28:14:98:59:56:be:a4:fe: 9c:30:44:64:64:17:5b:9e:a5:33:72:3e:bc:11:fe: ba:ed:ae:e7:1c:68:33:6d:49:aa:41:a2:5d:e9:f8: 13:74:87:1a:62:f1:ee:d1:bf:8d:52:8d:93:97:f0: 3f:29:41:40:d9:cf:0d:3d:8d:d1:4f:a3:39:d5:14: 05:de:c8:36:8b:7a:66:48:50:3d:a5:fa:86:13:9e: 30:3e:a1:34:9c:71:31:88:c0:4f:98:9b:00:d7:ea: 15:35:7d:16:36:51:2b:88:c7:a6:41:e0:4e:4b:df: b6:82:d0:f1:a6:ef:7c:85:d6:8c:e5:3f:89:ac:67: b3:86:9a:e9:af:1d:3d:51:d8:17:69:3e:4c:56:db: de:38:3b:9b:c6:8c:da:da:bf:3c:9c:bc:74:51:15: 2f:8f:9c:87:38:ff:7b:b6:cc:e0:8b:b3:5a:88:b1: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BF:1A:14:2E:9D:6B:18:DB:6B:DF:A7:C1:96:33:CC:F6:6C:70:42 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/G78aFC6daxjba9-nwZYzzPZscEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.28.97.0/24 IPv6: 2a0c:b641:400::/44 Signature Algorithm: sha256WithRSAEncryption 36:0b:a7:3e:32:4e:e9:4c:dc:2e:ab:8f:c2:e9:62:52:d5:24: b5:bf:fb:d4:0e:e1:03:5c:83:bc:09:f6:35:7d:ed:61:78:24: 60:7d:d7:3e:2f:0a:ca:8f:0f:80:b1:c6:96:aa:2a:91:b8:73: 61:5e:08:01:60:3a:40:d4:53:25:fb:fa:71:11:be:b0:4d:7b: ed:49:3d:c6:e6:8c:ef:36:25:e9:d1:63:c3:ab:a2:fa:ca:fd: 20:10:d4:4e:ba:82:f2:b7:e6:21:57:4e:95:98:9f:83:0d:b2: d4:91:2c:cb:c3:7a:cf:a8:95:16:29:20:86:a0:8e:7d:ea:7e: d4:b6:44:51:16:22:c5:a4:7d:cb:bc:9e:37:17:1f:be:72:9f: 8b:7c:db:01:bc:49:e3:9a:a2:e8:78:cc:91:0c:e1:f7:2c:80: 1b:95:54:17:a7:e5:ec:4d:6c:d5:bc:16:fd:a8:60:d6:82:2e: c5:e7:a5:80:0e:1e:75:a6:5e:74:b1:6f:05:c4:f4:80:b2:f6: 3d:e7:3d:b5:a4:69:02:d2:34:cb:b8:83:9a:14:83:62:43:30: 8e:3d:53:8e:f8:3a:b4:45:46:93:ec:15:7c:45:3d:29:fb:98: 5a:f6:2a:1b:56:64:dc:94:df:c4:57:11:35:d7:5b:25:3b:13: b9:9c:bb:60 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OUPpTLD+IViEfTpQH/T8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmJmMWExNDJlOWQ2YjE4ZGI2YmRmYTdjMTk2MzNjY2Y2NmM3MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvobTdOnVWRtZTN0K/IkyX/IeAO7 dylVyDYzz5GvYTRoKJiQMSnF6cOpfGBlvQ+VUS5h2eRqgQzwy30gqBh9opFWau+J xs6csXd3TCys+pB1KBSYWVa+pP6cMERkZBdbnqUzcj68Ef667a7nHGgzbUmqQaJd 6fgTdIcaYvHu0b+NUo2Tl/A/KUFA2c8NPY3RT6M51RQF3sg2i3pmSFA9pfqGE54w PqE0nHExiMBPmJsA1+oVNX0WNlEriMemQeBOS9+2gtDxpu98hdaM5T+JrGezhprp rx09UdgXaT5MVtveODubxoza2r88nLx0URUvj5yHOP97tszgi7NaiLH/BQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBu/GhQunWsY22vfp8GWM8z2bHBCMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvRzc4YUZDNmRheGpiYTktbndaWXp6UFpzY0VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwhxhMA8E AgACMAkDBwQqDLZBBAAwDQYJKoZIhvcNAQELBQADggEBADYLpz4yTulM3C6rj8Lp YlLVJLW/+9QO4QNcg7wJ9jV97WF4JGB91z4vCsqPD4CxxpaqKpG4c2FeCAFgOkDU UyX7+nERvrBNe+1JPcbmjO82JenRY8OrovrK/SAQ1E66gvK35iFXTpWYn4MNstSR LMvDes+olRYpIIagjn3qftS2RFEWIsWkfcu8njcXH75yn4t82wG8SeOaouh4zJEM 4fcsgBuVVBen5exNbNW8Fv2oYNaCLsXnpYAOHnWmXnSxbwXE9ICy9j3nPbWkaQLS NMu4g5oUg2JDMI49U474OrRFRpPsFXxFPSn7mFr2KhtWZNyU38RXETXXWyU7E7mc u2A= -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:53 2026 by rpki-client