This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LXavINHTkn6R6QyZlBJ7G_oC3I0.roa File: LXavINHTkn6R6QyZlBJ7G_oC3I0.roa (raw, json) Hash identifier: myR20ZKZOBP46i3T4WZvSz1Mne9l0VBqGPy73kkFKXA= Subject key identifier: 2D:76:AF:20:D1:D3:92:7E:91:E9:0C:99:94:12:7B:1B:FA:02:DC:8D Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E395A6B2458D89EC8281E2E37E01FF9 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LXavINHTkn6R6QyZlBJ7G_oC3I0.roa Signing time: Fri 02 Jan 2026 10:20:46 +0000 ROA not before: Fri 02 Jan 2026 10:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212715 IP address blocks: 2a0c:b641:4e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:5a:6b:24:58:d8:9e:c8:28:1e:2e:37:e0:1f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d76af20d1d3927e91e90c9994127b1bfa02dc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:78:0c:ce:08:08:3f:a2:33:5a:74:cd:b2:c9: d0:48:b8:1d:4a:98:71:23:05:00:46:c6:50:91:bb: 57:4d:2c:35:57:5f:0d:66:69:60:fe:3d:71:09:4f: 0b:c5:c7:a5:12:1a:78:0c:43:91:56:8d:00:32:41: 40:0e:a4:3b:81:c7:f1:fa:71:33:82:8a:6e:68:a9: ae:f6:99:9a:a0:e2:9f:aa:17:a0:34:54:05:d5:92: 1c:4c:66:6d:83:62:9c:5d:6e:54:12:d8:96:73:c1: fe:e3:be:5e:0d:a2:c7:93:29:48:73:1b:08:fe:82: 8b:f0:9c:9b:b1:59:1c:dc:d5:5a:bd:6b:40:31:ba: 27:cc:32:0c:36:9d:28:6b:ff:27:f3:e5:6a:7d:f7: 63:67:95:46:78:64:7c:19:1b:59:34:64:f4:0a:c6: 47:2c:d1:35:93:8e:56:60:b5:35:8c:41:8e:3e:73: 70:54:43:db:57:29:5b:a1:18:48:d8:7b:7b:db:56: 21:dc:22:47:33:56:a9:c7:bd:fb:75:c1:22:2f:15: a6:17:5b:ec:1c:3c:12:ac:ec:31:f6:66:67:c2:3b: d4:56:b0:e8:db:4b:86:b0:93:3f:d1:5f:87:14:5b: e0:30:d5:c8:5b:1d:31:31:eb:80:36:74:e5:8e:ca: 9f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:76:AF:20:D1:D3:92:7E:91:E9:0C:99:94:12:7B:1B:FA:02:DC:8D X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LXavINHTkn6R6QyZlBJ7G_oC3I0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:4e0::/44 Signature Algorithm: sha256WithRSAEncryption 8c:8d:85:8d:29:be:1f:60:dc:97:a9:7f:f6:3e:96:56:33:33: bd:fd:5a:d2:dc:d3:c6:2b:7e:94:a6:4e:4d:af:e7:a9:a2:03: b8:e4:7b:f2:1f:8b:c0:6b:e1:b8:7d:36:05:0f:7c:bd:74:fd: 84:80:f4:86:eb:d5:7e:79:b0:be:c8:5b:05:ba:77:5b:2e:bc: 3b:0a:f1:70:c4:0e:c7:d9:dd:9f:97:65:c9:ed:42:19:f7:a5: f2:74:aa:a2:17:e3:ee:86:26:c1:43:46:fa:48:84:61:6b:bc: 0b:f7:49:90:b6:57:05:37:11:9b:11:a4:fe:a7:e8:93:86:b2: 1a:ed:82:35:6a:c5:da:1c:80:82:51:70:42:24:63:73:79:e7: db:97:db:c4:e2:a5:b3:da:df:a8:70:46:84:30:d1:40:87:f6: 02:00:d5:54:37:09:31:0c:01:08:ef:90:a4:20:0f:0a:d7:95: 67:0b:bc:23:50:67:97:0d:77:4f:33:eb:a4:e1:aa:74:cb:c4: 2a:6e:a4:f8:5c:d6:cc:f8:1b:c4:d2:30:44:40:e2:2c:ef:f4: f4:cd:e2:e9:cf:67:a8:a3:4d:9b:3d:88:53:93:51:ba:3b:75: 4b:26:42:b3:6e:86:d8:cf:af:11:78:90:5a:8f:e0:38:d3:75: 2c:eb:29:fd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVprJFjYnsgoHi434B/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDc2YWYyMGQxZDM5MjdlOTFlOTBjOTk5NDEyN2IxYmZhMDJkYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HgMzggIP6IzWnTNssnQSLgdSphx IwUARsZQkbtXTSw1V18NZmlg/j1xCU8LxcelEhp4DEORVo0AMkFADqQ7gcfx+nEz gopuaKmu9pmaoOKfqhegNFQF1ZIcTGZtg2KcXW5UEtiWc8H+475eDaLHkylIcxsI /oKL8JybsVkc3NVavWtAMbonzDIMNp0oa/8n8+VqffdjZ5VGeGR8GRtZNGT0CsZH LNE1k45WYLU1jEGOPnNwVEPbVylboRhI2Ht721Yh3CJHM1apx737dcEiLxWmF1vs HDwSrOwx9mZnwjvUVrDo20uGsJM/0V+HFFvgMNXIWx0xMeuANnTljsqfhQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC12ryDR05J+kekMmZQSexv6AtyNMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvTFhhdklOSFRrbjZSNlF5WmxCSjdHX29DM0kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQTg MA0GCSqGSIb3DQEBCwUAA4IBAQCMjYWNKb4fYNyXqX/2PpZWMzO9/VrS3NPGK36U pk5Nr+epogO45HvyH4vAa+G4fTYFD3y9dP2EgPSG69V+ebC+yFsFundbLrw7CvFw xA7H2d2fl2XJ7UIZ96XydKqiF+PuhibBQ0b6SIRha7wL90mQtlcFNxGbEaT+p+iT hrIa7YI1asXaHICCUXBCJGNzeefbl9vE4qWz2t+ocEaEMNFAh/YCANVUNwkxDAEI 75CkIA8K15VnC7wjUGeXDXdPM+uk4ap0y8QqbqT4XNbM+BvE0jBEQOIs7/T0zeLp z2eoo02bPYhTk1G6O3VLJkKzbobYz68ReJBaj+A403Us6yn9 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:00 2026 by rpki-client