This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/PDw0GMuLszDTyPQ6rZnN9x7xEr0.roa File: PDw0GMuLszDTyPQ6rZnN9x7xEr0.roa (raw, json) Hash identifier: qXk9x61sk77d9o0njXHuIS6abvqPoZb1kI5lyv+w7Cg= Subject key identifier: 3C:3C:34:18:CB:8B:B3:30:D3:C8:F4:3A:AD:99:CD:F7:1E:F1:12:BD Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3945A8EF9E483EEECF63B8AB7C125C Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/PDw0GMuLszDTyPQ6rZnN9x7xEr0.roa Signing time: Fri 02 Jan 2026 10:20:41 +0000 ROA not before: Fri 02 Jan 2026 10:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209261 IP address blocks: 2a0c:b641:cd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:45:a8:ef:9e:48:3e:ee:cf:63:b8:ab:7c:12:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c3c3418cb8bb330d3c8f43aad99cdf71ef112bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:b1:33:e5:ee:f1:2d:e9:44:de:24:7a:ac: a1:63:15:81:ed:55:aa:69:76:7d:e0:81:8c:e3:b4: 4f:40:4b:bd:4a:33:71:f4:0a:72:9e:22:bb:da:8d: a0:e8:a5:85:af:72:f4:c1:c0:38:5e:5c:6d:62:ca: e5:ae:4c:6f:0a:87:eb:d7:17:f3:d6:2b:86:4e:c1: 6c:33:ef:26:4c:ea:79:8e:a1:d7:44:18:89:8a:41: 60:26:f5:d5:82:90:e3:ee:52:70:0e:f6:74:b4:ff: ca:42:77:ce:5e:f4:5e:19:db:f5:51:65:ee:7b:74: 03:ef:ea:9f:3c:f5:f7:60:eb:7c:09:46:43:7c:6d: f0:82:cc:84:8a:f3:0b:30:cf:89:9f:c1:7a:bf:0f: 9e:29:04:8f:89:86:81:22:15:12:65:6d:c9:37:34: 33:bf:12:1e:ea:24:1a:c4:d0:b6:12:38:23:91:44: 48:4b:41:6e:47:fb:1b:18:1b:9e:ec:4a:b6:03:5a: f9:c6:9d:68:d9:31:b3:7d:c0:80:b4:18:a6:47:36: 85:06:95:00:fc:6a:ec:41:bf:0d:58:7b:7c:98:77: 71:ab:bd:bb:dd:a3:31:ea:9e:64:a3:ca:0a:92:1b: b4:c2:4d:c4:7d:fc:c5:59:cd:5d:38:3c:df:5e:ce: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3C:34:18:CB:8B:B3:30:D3:C8:F4:3A:AD:99:CD:F7:1E:F1:12:BD X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/PDw0GMuLszDTyPQ6rZnN9x7xEr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:cd0::/44 Signature Algorithm: sha256WithRSAEncryption 30:f3:5b:81:ad:9e:1d:cc:65:64:eb:0b:46:cd:f6:3c:02:f3: 68:b6:c4:14:62:26:80:e9:6e:0f:39:ae:65:b7:fb:9a:53:8f: 52:a6:87:94:4f:58:4b:29:54:e7:c2:b2:d3:7b:86:3b:60:56: 97:96:cf:56:2c:cd:5d:9a:56:78:22:3b:e8:32:2b:45:65:d4: 63:89:2e:02:9a:b1:71:bc:3b:32:d3:e9:c1:29:ac:1d:6d:f5: ab:0d:a1:0b:57:b9:fb:24:7b:64:b4:9c:65:c4:07:30:50:5f: 59:3c:e1:d4:9f:6e:69:a8:b9:7f:f7:ad:94:3b:1b:eb:82:d5: 0d:e8:63:d3:7c:b5:6d:78:72:c8:3a:0f:36:b4:cf:bc:21:4d: d0:de:47:b6:25:c0:fc:89:68:36:e4:83:28:72:7d:23:d0:bc: 72:b9:87:d8:8e:91:c2:39:a1:eb:17:75:0e:7e:6b:80:01:af: 49:f7:8e:44:04:6c:b3:44:b2:62:3d:88:da:0a:bf:d2:73:ef: 47:74:b0:72:bc:61:3e:69:54:b5:bc:00:cc:cd:ee:c5:d1:3f: 9f:66:4a:68:a8:7f:94:b9:70:7d:5b:ca:42:9b:92:35:32:32: bf:54:94:93:b7:3f:47:ca:25:73:ea:5e:c0:41:b1:b1:c9:01: 76:26:8b:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OUWo755IPu7PY7irfBJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzNjMzQxOGNiOGJiMzMwZDNjOGY0M2FhZDk5Y2RmNzFlZjExMmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmSxM+Xu8S3pRN4keqyhYxWB7VWq aXZ94IGM47RPQEu9SjNx9ApyniK72o2g6KWFr3L0wcA4XlxtYsrlrkxvCofr1xfz 1iuGTsFsM+8mTOp5jqHXRBiJikFgJvXVgpDj7lJwDvZ0tP/KQnfOXvReGdv1UWXu e3QD7+qfPPX3YOt8CUZDfG3wgsyEivMLMM+Jn8F6vw+eKQSPiYaBIhUSZW3JNzQz vxIe6iQaxNC2EjgjkURIS0FuR/sbGBue7Eq2A1r5xp1o2TGzfcCAtBimRzaFBpUA /GrsQb8NWHt8mHdxq7273aMx6p5ko8oKkhu0wk3EffzFWc1dODzfXs4FxQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDw8NBjLi7Mw08j0Oq2Zzfce8RK9MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvUER3MEdNdUxzekRUeVBRNnJabk45eDd4RXIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQzQ MA0GCSqGSIb3DQEBCwUAA4IBAQAw81uBrZ4dzGVk6wtGzfY8AvNotsQUYiaA6W4P Oa5lt/uaU49SpoeUT1hLKVTnwrLTe4Y7YFaXls9WLM1dmlZ4IjvoMitFZdRjiS4C mrFxvDsy0+nBKawdbfWrDaELV7n7JHtktJxlxAcwUF9ZPOHUn25pqLl/962UOxvr gtUN6GPTfLVteHLIOg82tM+8IU3Q3ke2JcD8iWg25IMocn0j0LxyuYfYjpHCOaHr F3UOfmuAAa9J945EBGyzRLJiPYjaCr/Sc+9HdLByvGE+aVS1vADMze7F0T+fZkpo qH+UuXB9W8pCm5I1MjK/VJSTtz9HyiVz6l7AQbGxyQF2JotN -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:23 2026 by rpki-client