This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Or5tAbn5lfa_GTYYNt2qnjPa-dw.roa File: Or5tAbn5lfa_GTYYNt2qnjPa-dw.roa (raw, json) Hash identifier: hoJO4CFsz1R36ZudVVEVVj9Etm9G7e1zoOlw9pWrIAg= Subject key identifier: 3A:BE:6D:01:B9:F9:95:F6:BF:19:36:18:36:DD:AA:9E:33:DA:F9:DC Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39564960AB50D1EA4F7D1C8604069E Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Or5tAbn5lfa_GTYYNt2qnjPa-dw.roa Signing time: Fri 02 Jan 2026 10:20:45 +0000 ROA not before: Fri 02 Jan 2026 10:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211640 IP address blocks: 2a0c:b641:670::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:56:49:60:ab:50:d1:ea:4f:7d:1c:86:04:06:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3abe6d01b9f995f6bf19361836ddaa9e33daf9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0c:63:e1:4e:ef:02:86:a3:7a:f3:c7:53:51: 43:99:02:2d:2c:05:2f:75:62:71:5f:5a:30:a0:58: c5:92:1a:32:16:ea:7c:16:2f:f0:bb:7d:b6:a8:8c: f8:2b:ae:c6:88:22:f4:51:8c:54:19:d1:f7:d2:00: 29:ea:fc:55:5d:3a:4d:dc:43:ea:c0:fd:43:08:b7: d7:5e:13:22:34:3d:2c:f6:ab:e2:3a:e8:6d:7f:5a: f8:7a:08:2d:14:66:b8:44:62:33:8c:b3:b7:f0:d1: 4b:5f:35:48:71:39:95:af:c8:31:79:cb:d0:94:d8: 97:80:45:b0:84:10:03:a7:56:2d:10:13:e4:f1:2c: d1:a4:81:ac:5e:68:bc:ee:05:5e:18:9d:0b:f7:89: 8f:be:6a:81:19:b1:b3:17:55:67:ac:46:24:08:dd: 29:3a:9a:2d:ee:4c:9c:b2:cf:60:c1:f9:0f:61:5d: 10:4d:7a:fa:aa:42:53:29:8e:17:4c:b8:d3:d5:24: 55:b3:dc:c3:34:ef:ba:82:6f:11:8e:bc:eb:cc:e8: 91:78:2a:9e:ac:04:bd:71:d9:cd:74:7f:7a:e5:7b: c1:ef:59:d0:4b:ea:a0:11:0a:c7:ad:44:78:1c:ed: 9e:37:e1:c6:fd:e9:d9:20:17:e0:65:ef:1e:f8:32: f9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BE:6D:01:B9:F9:95:F6:BF:19:36:18:36:DD:AA:9E:33:DA:F9:DC X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Or5tAbn5lfa_GTYYNt2qnjPa-dw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:670::/44 Signature Algorithm: sha256WithRSAEncryption 10:18:b7:cf:4d:38:b6:34:82:6a:33:0d:99:d5:2d:97:29:02: 8c:de:f1:7f:4f:0b:fe:9c:5b:c9:0a:ec:ba:b7:b0:cd:61:2d: 80:b6:da:2c:79:c1:8f:69:b4:3f:f4:09:74:f3:67:d8:ad:c5: 41:ba:8e:e0:28:54:73:24:fd:c8:97:56:7c:28:1d:ae:32:26: 21:fc:f4:3b:f4:a3:09:6d:8b:88:ee:8f:99:87:30:e9:23:78: da:5a:04:64:10:d8:a0:eb:9c:73:3c:ee:59:77:70:4e:68:61: c5:7f:56:ae:7a:12:1c:2c:d2:42:6c:ec:0a:4a:ae:76:9e:f5: 6a:74:ae:df:53:f2:76:91:04:a0:18:ca:e0:65:81:18:44:72: 93:bb:5f:09:c6:df:33:f2:68:08:21:29:a7:ba:57:e9:8b:fe: f9:3d:6a:ac:18:e9:de:d8:cd:5e:cc:03:75:3d:f0:82:a5:d3: 91:f8:4f:c7:06:0b:dc:dc:1b:47:d5:c8:45:8d:aa:22:d4:1b: f8:1d:7d:e9:f8:80:ae:f1:72:37:ee:e4:67:24:62:15:01:5c: db:f2:36:7b:36:02:56:c7:3f:65:eb:3f:a1:dd:00:e4:7c:ea: 03:af:18:d3:17:3c:f7:8d:8b:b5:67:95:a7:63:9a:2b:b0:fb: a1:b1:71:65 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVZJYKtQ0epPfRyGBAaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWJlNmQwMWI5Zjk5NWY2YmYxOTM2MTgzNmRkYWE5ZTMzZGFmOWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gxj4U7vAoajevPHU1FDmQItLAUv dWJxX1owoFjFkhoyFup8Fi/wu322qIz4K67GiCL0UYxUGdH30gAp6vxVXTpN3EPq wP1DCLfXXhMiND0s9qviOuhtf1r4eggtFGa4RGIzjLO38NFLXzVIcTmVr8gxecvQ lNiXgEWwhBADp1YtEBPk8SzRpIGsXmi87gVeGJ0L94mPvmqBGbGzF1VnrEYkCN0p Opot7kycss9gwfkPYV0QTXr6qkJTKY4XTLjT1SRVs9zDNO+6gm8RjrzrzOiReCqe rAS9cdnNdH965XvB71nQS+qgEQrHrUR4HO2eN+HG/enZIBfgZe8e+DL5MQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDq+bQG5+ZX2vxk2GDbdqp4z2vncMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvT3I1dEFibjVsZmFfR1RZWU50MnFualBhLWR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQZw MA0GCSqGSIb3DQEBCwUAA4IBAQAQGLfPTTi2NIJqMw2Z1S2XKQKM3vF/Twv+nFvJ Cuy6t7DNYS2AttosecGPabQ/9Al082fYrcVBuo7gKFRzJP3Il1Z8KB2uMiYh/PQ7 9KMJbYuI7o+ZhzDpI3jaWgRkENig65xzPO5Zd3BOaGHFf1auehIcLNJCbOwKSq52 nvVqdK7fU/J2kQSgGMrgZYEYRHKTu18Jxt8z8mgIISmnulfpi/75PWqsGOne2M1e zAN1PfCCpdOR+E/HBgvc3BtH1chFjaoi1Bv4HX3p+ICu8XI37uRnJGIVAVzb8jZ7 NgJWxz9l6z+h3QDkfOoDrxjTFzz3jYu1Z5WnY5orsPuhsXFl -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:51 2026 by rpki-client