This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Iiadef5Z8Sp5hgj9njNAQVqBv4E.roa File: Iiadef5Z8Sp5hgj9njNAQVqBv4E.roa (raw, json) Hash identifier: iCp26i9ezZ1Oe3/f9y3YprApsLVCeN9cPP5q7w9VYfY= Subject key identifier: 22:26:9D:79:FE:59:F1:2A:79:86:08:FD:9E:33:40:41:5A:81:BF:81 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E394F96D8A6BD0821F0C952A4299AD3 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Iiadef5Z8Sp5hgj9njNAQVqBv4E.roa Signing time: Fri 02 Jan 2026 10:20:43 +0000 ROA not before: Fri 02 Jan 2026 10:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210554 IP address blocks: 2a0c:b641:390::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 06:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:4f:96:d8:a6:bd:08:21:f0:c9:52:a4:29:9a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22269d79fe59f12a798608fd9e3340415a81bf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:ab:a3:6e:56:2d:53:d4:b5:65:82:d7:b6: 42:af:e1:c5:da:9a:74:50:67:71:25:fa:f5:70:dc: f6:11:4a:5f:45:8c:b0:5a:58:dd:07:ba:6c:c6:d1: 78:16:69:6d:bb:5d:7a:fb:10:53:b7:8a:8e:07:a8: 68:b4:5e:c2:73:95:56:bf:b5:17:8a:72:cb:98:ec: a1:43:ca:99:de:98:4a:22:d6:05:69:5a:18:2a:31: a0:54:d4:4c:31:49:8a:8c:bf:7d:15:82:b8:12:a5: 69:8e:ae:79:b0:c8:b4:19:ee:96:0f:d5:a3:6e:5b: 11:9d:4b:5a:a2:fe:a4:44:6f:79:14:0a:64:b5:5a: c2:19:ee:7b:47:d2:de:bd:3f:d4:34:13:9c:b7:f4: b9:cc:b5:29:fa:f6:53:b9:1e:66:83:67:93:08:3a: 97:51:1f:d0:01:37:b5:fd:57:c9:39:91:3f:42:6b: 24:2b:ca:63:0d:58:62:4e:6b:77:29:30:0c:f6:71: cf:d4:86:42:b8:17:19:73:33:63:7d:a3:79:08:15: 50:ba:83:1c:aa:92:a8:19:77:a0:3a:3b:fa:2f:22: 0d:03:95:1e:85:5e:c3:8f:dc:f3:93:6b:7b:f9:68: c6:2e:76:42:82:9a:d8:ee:4d:c8:b3:6e:1b:d5:78: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:26:9D:79:FE:59:F1:2A:79:86:08:FD:9E:33:40:41:5A:81:BF:81 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Iiadef5Z8Sp5hgj9njNAQVqBv4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:390::/44 Signature Algorithm: sha256WithRSAEncryption 78:f2:85:71:8e:4d:c3:84:ee:d8:6b:61:8e:2b:6f:1f:35:f0: 7e:90:dd:5d:03:27:05:ab:27:04:3d:f7:c7:bb:49:11:68:97: 0d:7e:64:45:f6:9a:5d:a6:0f:9c:3b:bb:ff:f9:37:cc:63:9e: 55:f9:32:f0:cc:1e:a7:e5:3c:3e:9d:1b:77:b7:91:07:23:5e: 07:64:c3:d8:3a:a9:e8:89:89:90:ca:bd:99:50:2e:eb:d5:ca: ad:12:bd:be:f7:25:3e:1a:32:d3:de:62:3b:08:e1:33:a8:9a: 1c:88:c7:57:ef:6f:e4:68:48:69:79:8a:9b:b0:0a:04:eb:77: 16:6a:3f:aa:c0:10:83:18:cb:1e:17:07:d8:9f:0c:36:a8:6e: 60:57:a0:25:37:83:15:25:6a:c1:ff:06:61:58:08:f2:f3:fc: a7:df:16:cd:41:da:fc:03:a6:92:45:db:d8:25:04:3a:60:41: 99:70:d1:04:16:d0:29:11:24:30:01:05:8b:05:4f:04:ca:8b: e1:8e:a9:4f:fe:c6:ba:31:42:e6:be:ad:dd:6a:03:69:c5:fa: 0a:f5:23:e4:70:c6:33:44:0c:36:bc:59:b3:18:6a:e8:7a:9f: c0:f1:83:5c:91:a1:01:7c:17:3f:9c:d1:08:2b:17:49:72:4a: 89:ea:05:4f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OU+W2Ka9CCHwyVKkKZrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjI2OWQ3OWZlNTlmMTJhNzk4NjA4ZmQ5ZTMzNDA0MTVhODFiZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjSro25WLVPUtWWC17ZCr+HF2pp0 UGdxJfr1cNz2EUpfRYywWljdB7psxtF4Fmltu116+xBTt4qOB6hotF7Cc5VWv7UX inLLmOyhQ8qZ3phKItYFaVoYKjGgVNRMMUmKjL99FYK4EqVpjq55sMi0Ge6WD9Wj blsRnUtaov6kRG95FApktVrCGe57R9LevT/UNBOct/S5zLUp+vZTuR5mg2eTCDqX UR/QATe1/VfJOZE/QmskK8pjDVhiTmt3KTAM9nHP1IZCuBcZczNjfaN5CBVQuoMc qpKoGXegOjv6LyINA5UehV7Dj9zzk2t7+WjGLnZCgprY7k3Is24b1XjKfwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCImnXn+WfEqeYYI/Z4zQEFagb+BMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvSWlhZGVmNVo4U3A1aGdqOW5qTkFRVnFCdjRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQOQ MA0GCSqGSIb3DQEBCwUAA4IBAQB48oVxjk3DhO7Ya2GOK28fNfB+kN1dAycFqycE PffHu0kRaJcNfmRF9ppdpg+cO7v/+TfMY55V+TLwzB6n5Tw+nRt3t5EHI14HZMPY OqnoiYmQyr2ZUC7r1cqtEr2+9yU+GjLT3mI7COEzqJociMdX72/kaEhpeYqbsAoE 63cWaj+qwBCDGMseFwfYnww2qG5gV6AlN4MVJWrB/wZhWAjy8/yn3xbNQdr8A6aS RdvYJQQ6YEGZcNEEFtApESQwAQWLBU8EyovhjqlP/sa6MULmvq3dagNpxfoK9SPk cMYzRAw2vFmzGGroep/A8YNckaEBfBc/nNEIKxdJckqJ6gVP -----END CERTIFICATE-----Generated at Sun Jan 11 16:13:04 2026 by rpki-client