This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/S4m6ISu2d-UQb0OxywO6iYcPmu8.roa File: S4m6ISu2d-UQb0OxywO6iYcPmu8.roa (raw, json) Hash identifier: 8JypXSIMXEvRsebDKDWlM4C8cOIKuGa1TOd8atLKOQg= Subject key identifier: 4B:89:BA:21:2B:B6:77:E5:10:6F:43:B1:CB:03:BA:89:87:0F:9A:EF Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E392BFC31BDC27C0486408750AAF8A1 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/S4m6ISu2d-UQb0OxywO6iYcPmu8.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57439 IP address blocks: 2a0c:b641:2d0::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2b:fc:31:bd:c2:7c:04:86:40:87:50:aa:f8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b89ba212bb677e5106f43b1cb03ba89870f9aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:7b:89:69:26:d7:4b:4f:3c:f9:9a:65:05: 08:e1:20:f3:87:1b:5e:15:bd:3f:89:f2:c6:24:f4: 16:c2:11:30:29:6d:c2:9c:68:9f:62:af:56:71:d1: 8f:77:16:24:ce:30:9c:0e:e4:59:ce:66:81:3a:a5: 76:33:e7:07:40:01:d9:e4:74:9d:28:7f:ed:dc:c4: b1:65:30:e1:48:f0:71:e4:91:ec:78:5d:af:bc:63: d8:60:6e:55:63:5f:9e:88:6a:57:e4:98:5a:5b:6d: 55:ff:75:99:e3:8c:d5:b1:36:79:f0:ba:67:b4:78: 33:2b:66:1f:2d:b5:5f:8e:9f:d9:06:a3:7d:9d:2c: ee:4e:0a:a5:bc:6b:f6:1b:14:bf:d2:20:42:44:f1: 13:b5:2f:43:c0:b3:0d:18:cb:19:75:6b:3e:dc:f1: 66:e9:c1:3f:7c:1d:90:6f:92:a0:cb:1c:48:fb:b6: e1:ff:e1:0f:14:3c:83:b5:16:7b:b8:c8:6c:4e:fc: 22:99:94:d2:22:1d:9e:5c:f8:25:96:9a:87:d6:1c: 25:b7:a7:0a:54:42:41:26:b9:7a:95:1f:2b:0d:ec: 1e:52:1d:a1:ef:21:58:70:83:c2:26:a2:e4:e3:62: f4:7f:90:f6:9b:04:63:8d:b0:25:88:c5:29:ef:f6: 21:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:89:BA:21:2B:B6:77:E5:10:6F:43:B1:CB:03:BA:89:87:0F:9A:EF X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/S4m6ISu2d-UQb0OxywO6iYcPmu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:2d0::/44 Signature Algorithm: sha256WithRSAEncryption 36:1d:89:e5:44:ce:34:a9:08:a9:de:c5:ab:24:a1:16:e4:64: 08:c3:55:b1:87:a1:cf:b2:0b:09:3d:9c:83:48:b9:ca:df:21: 3a:fc:e2:f7:53:88:c7:c4:c9:a6:d9:f0:88:d1:74:f4:83:9e: 8c:66:ff:19:13:cc:ff:7d:66:92:4f:74:f4:07:84:fe:07:56: 7a:a1:e6:a1:64:fc:64:55:fe:03:ee:7c:eb:15:9c:d5:52:60: 4e:df:44:fd:2b:c5:4c:09:a0:3e:34:aa:e7:29:c8:4e:09:cb: ef:2a:ba:b6:25:26:8a:3a:08:7a:e3:9a:ec:23:f0:44:f5:2b: 33:71:e6:09:f1:2f:2e:05:b7:ce:d0:d7:2e:5a:67:6d:ff:57: b2:88:9c:9e:9a:68:bf:5e:aa:16:ee:29:58:6c:0c:c4:d3:fa: bf:64:76:18:59:65:11:67:cf:4f:8d:55:34:b0:cb:75:2c:39: 20:0c:c3:91:30:89:34:60:da:22:3e:cc:e4:63:e7:eb:26:c2: 64:58:6f:4d:b0:42:c6:f0:50:eb:ef:34:2a:85:f7:82:93:08: 82:33:41:a2:56:a8:e5:89:b4:58:b9:77:c0:64:da:0e:c5:1a: 02:18:5e:4e:f2:3c:03:be:9f:01:7c:08:8c:cd:a3:11:03:b9: d4:ff:1f:bc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OSv8Mb3CfASGQIdQqvihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjg5YmEyMTJiYjY3N2U1MTA2ZjQzYjFjYjAzYmE4OTg3MGY5YWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTB7iWkm10tPPPmaZQUI4SDzhxte Fb0/ifLGJPQWwhEwKW3CnGifYq9WcdGPdxYkzjCcDuRZzmaBOqV2M+cHQAHZ5HSd KH/t3MSxZTDhSPBx5JHseF2vvGPYYG5VY1+eiGpX5JhaW21V/3WZ44zVsTZ58Lpn tHgzK2YfLbVfjp/ZBqN9nSzuTgqlvGv2GxS/0iBCRPETtS9DwLMNGMsZdWs+3PFm 6cE/fB2Qb5KgyxxI+7bh/+EPFDyDtRZ7uMhsTvwimZTSIh2eXPgllpqH1hwlt6cK VEJBJrl6lR8rDeweUh2h7yFYcIPCJqLk42L0f5D2mwRjjbAliMUp7/Yh8wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEuJuiErtnflEG9DscsDuomHD5rvMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvUzRtNklTdTJkLVVRYjBPeHl3TzZpWWNQbXU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQLQ MA0GCSqGSIb3DQEBCwUAA4IBAQA2HYnlRM40qQip3sWrJKEW5GQIw1Wxh6HPsgsJ PZyDSLnK3yE6/OL3U4jHxMmm2fCI0XT0g56MZv8ZE8z/fWaST3T0B4T+B1Z6oeah ZPxkVf4D7nzrFZzVUmBO30T9K8VMCaA+NKrnKchOCcvvKrq2JSaKOgh645rsI/BE 9SszceYJ8S8uBbfO0NcuWmdt/1eyiJyemmi/XqoW7ilYbAzE0/q/ZHYYWWURZ89P jVU0sMt1LDkgDMORMIk0YNoiPszkY+frJsJkWG9NsELG8FDr7zQqhfeCkwiCM0Gi VqjlibRYuXfAZNoOxRoCGF5O8jwDvp8BfAiMzaMRA7nU/x+8 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:32 2026 by rpki-client