This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Pax8UinmozAMT3DtC-6Ii3VPsOU.roa File: Pax8UinmozAMT3DtC-6Ii3VPsOU.roa (raw, json) Hash identifier: mFMj5nQfNYRjBSzJ1kwr74zhNvBB+tKO6jTj5l7L9fw= Subject key identifier: 3D:AC:7C:52:29:E6:A3:30:0C:4F:70:ED:0B:EE:88:8B:75:4F:B0:E5 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39409A91208F214FE57FABFE394804 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Pax8UinmozAMT3DtC-6Ii3VPsOU.roa Signing time: Fri 02 Jan 2026 10:20:39 +0000 ROA not before: Fri 02 Jan 2026 10:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207306 IP address blocks: 2a0c:b641:640::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:40:9a:91:20:8f:21:4f:e5:7f:ab:fe:39:48:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dac7c5229e6a3300c4f70ed0bee888b754fb0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:61:68:87:5e:87:fe:3b:58:fd:83:53:c4:8a: 5c:28:78:b2:d2:e7:95:0f:f7:78:f1:04:50:ac:07: 1f:7a:fe:9a:ea:ca:f1:b1:d4:3e:dc:95:29:a1:f5: 26:9a:82:76:d1:12:ac:29:98:1e:43:39:4c:13:bd: 75:bf:c9:49:6b:8c:c6:11:83:25:c6:8f:0c:ae:49: 82:81:fb:b8:c4:f1:97:b6:75:1a:a7:f8:64:65:82: 06:26:53:6c:82:88:12:7d:3a:c3:34:a1:0f:62:12: 58:0c:85:f3:ba:88:11:e0:88:f2:1d:e3:8a:af:16: 01:9d:3f:6e:57:9b:4e:05:01:85:69:8a:4e:f8:07: 55:93:a3:88:5c:17:7b:97:75:33:97:bf:0f:94:39: a9:24:28:0a:d3:54:24:bb:67:a1:45:30:18:90:4d: 1f:0a:79:c0:2e:42:49:05:9e:2b:54:b7:78:c7:aa: db:0b:4e:e3:56:0e:97:72:c4:b6:3d:1a:9f:ba:e9: 77:69:a4:54:3b:ef:f1:c5:00:ed:7f:23:77:9a:b7: 89:f0:20:18:07:82:44:70:76:07:12:33:24:58:48: 04:37:97:9e:11:22:2f:37:a2:cd:e5:8d:b1:2f:f9: 5f:13:71:d3:dc:03:2e:e8:00:05:50:9d:3f:c6:af: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AC:7C:52:29:E6:A3:30:0C:4F:70:ED:0B:EE:88:8B:75:4F:B0:E5 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Pax8UinmozAMT3DtC-6Ii3VPsOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:640::/44 Signature Algorithm: sha256WithRSAEncryption 24:be:8b:27:c0:a8:6f:d0:c2:11:57:94:65:56:98:d1:91:fd: 3c:f2:00:db:ae:85:66:ac:4e:21:e3:07:9c:ac:93:cb:c2:7d: 06:cc:79:87:0b:ef:05:ed:d6:ac:83:42:70:10:e0:bf:d8:41: 29:47:3b:bb:48:77:0e:c8:42:ab:04:75:87:bc:25:06:f9:13: a3:97:70:74:48:08:67:a2:8c:b3:76:fd:7b:ab:6a:cc:49:f1: d4:cd:5e:13:66:22:75:77:95:11:72:61:69:cf:99:6c:a1:07: f2:e7:02:b6:9e:00:d1:67:e3:14:96:dd:31:ec:88:02:fe:da: 69:4f:bb:72:a2:00:46:be:b7:18:49:80:dd:26:52:24:c0:13: e6:92:2b:70:6f:d2:73:18:1e:a3:37:ad:62:89:ec:86:15:83: 0c:81:58:4b:d2:39:13:b9:21:e3:43:bf:27:0b:ab:28:ed:de: 95:9c:3c:dc:1f:13:4c:59:e5:51:6d:7e:0e:51:dd:97:62:e3: ac:b4:ba:27:28:2d:3b:9d:7e:94:ee:65:30:ba:44:10:cc:8a: 93:2b:9d:74:18:f0:92:58:7d:a4:e7:f6:d6:c6:f1:c8:f8:a5: 85:ac:65:b1:96:6c:50:02:de:1d:94:be:60:c6:8b:fe:aa:33: 85:67:dd:40 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OUCakSCPIU/lf6v+OUgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGFjN2M1MjI5ZTZhMzMwMGM0ZjcwZWQwYmVlODg4Yjc1NGZiMGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mFoh16H/jtY/YNTxIpcKHiy0ueV D/d48QRQrAcfev6a6srxsdQ+3JUpofUmmoJ20RKsKZgeQzlME711v8lJa4zGEYMl xo8MrkmCgfu4xPGXtnUap/hkZYIGJlNsgogSfTrDNKEPYhJYDIXzuogR4IjyHeOK rxYBnT9uV5tOBQGFaYpO+AdVk6OIXBd7l3Uzl78PlDmpJCgK01Qku2ehRTAYkE0f CnnALkJJBZ4rVLd4x6rbC07jVg6XcsS2PRqfuul3aaRUO+/xxQDtfyN3mreJ8CAY B4JEcHYHEjMkWEgEN5eeESIvN6LN5Y2xL/lfE3HT3AMu6AAFUJ0/xq/E4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD2sfFIp5qMwDE9w7QvuiIt1T7DlMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvUGF4OFVpbm1vekFNVDNEdEMtNklpM1ZQc09VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQZA MA0GCSqGSIb3DQEBCwUAA4IBAQAkvosnwKhv0MIRV5RlVpjRkf088gDbroVmrE4h 4wecrJPLwn0GzHmHC+8F7dasg0JwEOC/2EEpRzu7SHcOyEKrBHWHvCUG+ROjl3B0 SAhnooyzdv17q2rMSfHUzV4TZiJ1d5URcmFpz5lsoQfy5wK2ngDRZ+MUlt0x7IgC /tppT7tyogBGvrcYSYDdJlIkwBPmkitwb9JzGB6jN61iieyGFYMMgVhL0jkTuSHj Q78nC6so7d6VnDzcHxNMWeVRbX4OUd2XYuOstLonKC07nX6U7mUwukQQzIqTK510 GPCSWH2k5/bWxvHI+KWFrGWxlmxQAt4dlL5gxov+qjOFZ91A -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:03 2026 by rpki-client