This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/P277e8FgdX73K4s64wcgS0VPngY.roa File: P277e8FgdX73K4s64wcgS0VPngY.roa (raw, json) Hash identifier: igOQE42c3iyjtuGEU6a6N3DEJQAWfihECvPgEzw4p4g= Subject key identifier: 3F:6E:FB:7B:C1:60:75:7E:F7:2B:8B:3A:E3:07:20:4B:45:4F:9E:06 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3972FFA99919E906B9EB1CD20BFEEB Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/P277e8FgdX73K4s64wcgS0VPngY.roa Signing time: Fri 02 Jan 2026 10:20:52 +0000 ROA not before: Fri 02 Jan 2026 10:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216075 IP address blocks: 2a0c:b641:1a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:72:ff:a9:99:19:e9:06:b9:eb:1c:d2:0b:fe:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f6efb7bc160757ef72b8b3ae307204b454f9e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:a4:c9:4e:43:0d:2b:7e:57:77:be:8d:16: 13:fb:fa:df:ab:af:a0:00:83:00:e9:2b:fa:ad:bd: aa:23:d5:63:f2:3a:d6:b9:09:75:a5:a5:dc:b5:96: 72:6d:65:b1:43:e5:e3:84:c6:6f:a7:6d:82:2c:ad: 05:bd:3b:92:29:47:fd:48:d4:ef:67:22:92:cc:b3: 88:5b:88:52:dc:54:16:58:c8:19:09:ee:74:1f:ba: 1a:d3:9b:d0:f1:9d:8b:70:b8:8f:fe:9b:01:f4:0b: ca:17:b4:3d:c5:1b:41:4f:db:21:34:1d:c9:e6:f5: c5:0d:6a:c7:f9:fc:e8:51:55:3f:19:be:99:28:42: 50:97:d0:fc:b3:ee:37:70:44:c9:f6:a2:de:b6:e6: 74:f1:84:26:e7:3b:e6:1d:04:0a:77:ba:de:f7:6e: a0:63:2c:72:b9:66:e2:9e:4c:8e:b0:9c:02:5f:88: 3e:2b:74:a3:57:2c:04:95:25:75:9b:b7:f2:93:15: 86:d4:6c:41:65:2b:e0:a8:30:01:b4:e2:83:76:8c: e7:bc:d4:29:6b:db:28:43:60:02:d4:18:5d:2d:a1: cf:0e:1b:73:c2:22:86:a5:21:a4:b7:e6:8e:63:58: 06:77:a7:7e:4e:26:6a:12:28:f8:ac:ab:ee:f0:68: 5d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6E:FB:7B:C1:60:75:7E:F7:2B:8B:3A:E3:07:20:4B:45:4F:9E:06 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/P277e8FgdX73K4s64wcgS0VPngY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:1a0::/44 Signature Algorithm: sha256WithRSAEncryption 51:47:f7:b8:62:56:b7:c6:f9:31:53:32:74:a0:c2:19:15:2c: 9a:a7:32:8a:b0:95:77:53:63:74:76:c0:9a:3b:d6:01:e0:cd: 5d:2c:26:fa:c8:46:ca:c3:b8:e1:de:42:a8:b3:33:47:03:a1: 67:f5:84:3f:bf:ff:d7:33:f3:db:7f:8b:c6:bc:ab:f8:e8:3e: df:99:32:89:23:f4:c5:ed:60:88:7f:53:d7:d4:39:50:a8:c7: 2a:9e:d7:6d:a8:ec:b9:bc:cc:45:2e:2f:16:99:e6:0d:95:76: a9:b9:d8:57:7a:bc:68:34:e8:6b:42:8f:96:d0:36:27:0c:fa: c6:6e:0a:95:94:ce:5a:46:9c:0d:3e:65:ba:e1:39:10:43:fc: d7:19:51:b2:58:17:ae:5e:41:de:6c:97:c0:fc:4b:d3:2e:aa: 31:43:a3:b2:00:67:60:2e:28:34:b2:f5:b3:07:04:9c:f8:e9: fe:81:55:cf:d5:38:d8:0a:8f:b7:3d:3d:fb:aa:b9:28:49:04: 51:02:0a:eb:82:19:db:8e:26:f4:ed:59:3a:66:bb:54:d1:c2: 5a:63:0a:61:c9:ac:cb:9b:74:79:c8:62:c4:8e:e0:ee:4b:cf: d2:82:34:4e:61:64:cd:14:5f:23:11:2e:27:99:92:e5:29:0d: 86:37:f2:88 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OXL/qZkZ6Qa56xzSC/7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjZlZmI3YmMxNjA3NTdlZjcyYjhiM2FlMzA3MjA0YjQ1NGY5ZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxGkyU5DDSt+V3e+jRYT+/rfq6+g AIMA6Sv6rb2qI9Vj8jrWuQl1paXctZZybWWxQ+XjhMZvp22CLK0FvTuSKUf9SNTv ZyKSzLOIW4hS3FQWWMgZCe50H7oa05vQ8Z2LcLiP/psB9AvKF7Q9xRtBT9shNB3J 5vXFDWrH+fzoUVU/Gb6ZKEJQl9D8s+43cETJ9qLetuZ08YQm5zvmHQQKd7re926g YyxyuWbinkyOsJwCX4g+K3SjVywElSV1m7fykxWG1GxBZSvgqDABtOKDdoznvNQp a9soQ2AC1BhdLaHPDhtzwiKGpSGkt+aOY1gGd6d+TiZqEij4rKvu8GhdsQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD9u+3vBYHV+9yuLOuMHIEtFT54GMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvUDI3N2U4RmdkWDczSzRzNjR3Y2dTMFZQbmdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQGg MA0GCSqGSIb3DQEBCwUAA4IBAQBRR/e4Yla3xvkxUzJ0oMIZFSyapzKKsJV3U2N0 dsCaO9YB4M1dLCb6yEbKw7jh3kKoszNHA6Fn9YQ/v//XM/Pbf4vGvKv46D7fmTKJ I/TF7WCIf1PX1DlQqMcqntdtqOy5vMxFLi8WmeYNlXapudhXerxoNOhrQo+W0DYn DPrGbgqVlM5aRpwNPmW64TkQQ/zXGVGyWBeuXkHebJfA/EvTLqoxQ6OyAGdgLig0 svWzBwSc+On+gVXP1TjYCo+3PT37qrkoSQRRAgrrghnbjib07Vk6ZrtU0cJaYwph yazLm3R5yGLEjuDuS8/SgjROYWTNFF8jES4nmZLlKQ2GN/KI -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:02 2026 by rpki-client