This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/S8ACu-Zuvkqeq35MTUO2MqCJUDs.roa File: S8ACu-Zuvkqeq35MTUO2MqCJUDs.roa (raw, json) Hash identifier: D9K4e9y1gEB2JetsWIqZKa/g+NjlXsxuGVJi2EZKJEE= Subject key identifier: 4B:C0:02:BB:E6:6E:BE:4A:9E:AB:7E:4C:4D:43:B6:32:A0:89:50:3B Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3929299AAE19AE7DFFC84F013A81E2 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/S8ACu-Zuvkqeq35MTUO2MqCJUDs.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49367 IP address blocks: 2a0c:b642:1a05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:29:29:9a:ae:19:ae:7d:ff:c8:4f:01:3a:81:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bc002bbe66ebe4a9eab7e4c4d43b632a089503b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:3e:27:ae:bb:9d:01:63:63:45:ef:bf:71: 06:37:e1:58:6f:64:8b:e9:fa:0d:e2:d7:24:31:07: 76:9f:16:aa:bb:ec:02:6a:9d:2d:15:e7:2a:e4:86: c7:c9:85:bb:e0:61:32:ed:16:e6:be:c0:ed:f5:ec: 89:8d:c9:07:99:c8:a0:b7:ba:9a:b0:52:10:28:be: 92:2f:1c:e5:67:90:17:e3:18:e3:3a:18:56:c0:6f: 88:06:79:b7:bd:41:fa:87:16:ec:77:3e:97:6d:0e: a0:ea:f9:c3:ad:f8:90:2d:7f:7e:e1:8b:c9:d3:01: 0b:70:18:33:ee:06:a2:f5:f7:e2:38:59:b8:2e:f6: 27:d2:c9:dd:86:d6:75:f3:96:48:54:e1:f2:7f:1a: 5f:5c:f8:49:13:48:77:ff:da:d2:08:15:3e:59:ef: 43:47:2e:d7:05:82:a0:b8:5a:e6:85:e1:57:fb:e6: 65:ba:57:36:c2:c6:7c:f9:9f:78:3a:be:c6:09:bb: 26:3d:fb:b8:da:19:b4:09:60:ef:39:bf:ce:a4:79: 7b:16:13:03:62:9b:ff:f8:57:c6:7a:b9:52:b4:ea: 44:07:45:1c:35:08:90:46:1b:17:5c:45:a0:41:24: b4:83:2c:9d:7d:92:4e:ca:6c:13:2d:e6:ea:f0:98: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C0:02:BB:E6:6E:BE:4A:9E:AB:7E:4C:4D:43:B6:32:A0:89:50:3B X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/S8ACu-Zuvkqeq35MTUO2MqCJUDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:1a05::/48 Signature Algorithm: sha256WithRSAEncryption 65:21:65:66:48:b5:d6:64:ec:9a:be:05:e3:2c:ab:74:2b:ac: ad:41:1f:9a:40:f7:84:5e:3a:6c:98:2b:9d:d1:4c:f9:e3:32: 51:8f:e6:31:40:15:f8:b5:b4:38:b8:b3:fd:44:b5:0c:7c:db: 7a:78:60:a2:e7:20:3b:32:bb:1a:0c:13:d6:7c:88:f3:03:91: 81:02:a6:2d:c7:1f:af:1f:32:7c:e5:33:83:6b:be:39:13:fc: f3:5c:c4:49:71:dc:4d:13:d1:06:0f:b4:6c:3b:d4:c2:29:a8: 81:e0:ff:e2:58:8c:9c:1e:54:01:5a:4e:4b:30:37:b3:5a:9a: 1e:e7:c0:c5:fa:b8:5b:77:a2:c1:82:27:aa:62:be:d7:a5:4c: 33:b5:7a:76:25:2e:d4:fc:42:9c:71:03:62:54:2f:b0:16:13: f4:08:85:ea:19:9b:87:e5:fa:16:88:77:eb:3d:37:1f:fe:ed: 66:67:28:fe:1b:b9:48:36:a0:8f:7c:86:fa:cc:11:33:91:fa: d1:72:bf:5e:b8:97:87:e2:66:8b:42:61:09:da:62:a4:09:bb: 8d:d5:8e:54:ca:f0:26:32:35:15:d9:a8:9e:1f:f5:f5:6b:ec: 22:21:82:51:1a:ff:7e:31:05:3c:09:d5:12:4c:81:37:8f:8e: 5e:81:31:c1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OSkpmq4Zrn3/yE8BOoHiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmMwMDJiYmU2NmViZTRhOWVhYjdlNGM0ZDQzYjYzMmEwODk1MDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iY+J667nQFjY0Xvv3EGN+FYb2SL 6foN4tckMQd2nxaqu+wCap0tFecq5IbHyYW74GEy7RbmvsDt9eyJjckHmcigt7qa sFIQKL6SLxzlZ5AX4xjjOhhWwG+IBnm3vUH6hxbsdz6XbQ6g6vnDrfiQLX9+4YvJ 0wELcBgz7gai9ffiOFm4LvYn0sndhtZ185ZIVOHyfxpfXPhJE0h3/9rSCBU+We9D Ry7XBYKguFrmheFX++Zlulc2wsZ8+Z94Or7GCbsmPfu42hm0CWDvOb/OpHl7FhMD Ypv/+FfGerlStOpEB0UcNQiQRhsXXEWgQSS0gyydfZJOymwTLebq8Ji8mQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEvAArvmbr5Knqt+TE1DtjKgiVA7MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvUzhBQ3UtWnV2a3FlcTM1TVRVTzJNcUNKVURzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoF MA0GCSqGSIb3DQEBCwUAA4IBAQBlIWVmSLXWZOyavgXjLKt0K6ytQR+aQPeEXjps mCud0Uz54zJRj+YxQBX4tbQ4uLP9RLUMfNt6eGCi5yA7MrsaDBPWfIjzA5GBAqYt xx+vHzJ85TODa745E/zzXMRJcdxNE9EGD7RsO9TCKaiB4P/iWIycHlQBWk5LMDez Wpoe58DF+rhbd6LBgieqYr7XpUwztXp2JS7U/EKccQNiVC+wFhP0CIXqGZuH5foW iHfrPTcf/u1mZyj+G7lINqCPfIb6zBEzkfrRcr9euJeH4maLQmEJ2mKkCbuN1Y5U yvAmMjUV2aieH/X1a+wiIYJRGv9+MQU8CdUSTIE3j45egTHB -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:01 2026 by rpki-client