This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UwRbbDGXs-EjcrjLZqdE9_UD1wM.roa File: UwRbbDGXs-EjcrjLZqdE9_UD1wM.roa (raw, json) Hash identifier: uXddeom5lQGL3iCu1UHrJr6Gm9npbN3Uos4qu1CFl0s= Subject key identifier: 53:04:5B:6C:31:97:B3:E1:23:72:B8:CB:66:A7:44:F7:F5:03:D7:03 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39622F906BAA1B63F298E251ED3849 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UwRbbDGXs-EjcrjLZqdE9_UD1wM.roa Signing time: Fri 02 Jan 2026 10:20:48 +0000 ROA not before: Fri 02 Jan 2026 10:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213517 IP address blocks: 2a0c:b641:230::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 06:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:62:2f:90:6b:aa:1b:63:f2:98:e2:51:ed:38:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53045b6c3197b3e12372b8cb66a744f7f503d703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4d:43:93:38:c3:60:e3:1f:97:a4:ea:3b:6b: 66:62:7a:06:6d:18:a5:1d:75:65:58:72:a5:40:35: 70:0c:16:94:bd:79:44:5e:33:a8:99:f4:c4:0b:3a: 0b:db:c5:dc:99:40:7d:79:92:67:42:90:3e:83:00: 80:45:ff:98:4e:e4:2b:e0:53:32:3e:ed:d0:f1:1d: d0:4d:10:ec:32:11:5a:b9:07:d7:1c:f0:dd:af:fc: 01:c1:ee:28:4d:c6:b3:1e:da:72:75:da:7b:77:f8: e5:e0:57:fa:09:49:4c:a2:90:db:ff:08:a7:79:d4: d0:93:85:d5:d0:2c:e0:07:79:fa:94:fe:c6:fa:bb: eb:55:3c:ee:10:ff:ff:e8:70:11:20:9a:49:2c:d3: 89:b0:61:3e:5c:2e:b2:9d:86:40:7b:5c:bf:28:e6: c0:88:a6:d0:40:b8:78:ed:66:95:b0:6d:34:30:99: 71:44:f8:fe:76:0c:76:a8:5e:da:89:a1:ac:bc:c2: 1a:04:e7:1f:74:08:bf:e6:34:5b:85:90:24:0f:42: d7:b9:60:9d:c2:90:d7:17:1a:79:86:1d:6f:8f:26: 0a:f6:b4:19:df:6f:25:e2:1d:e7:0b:f6:ab:90:52: 71:cc:f0:57:32:f4:53:5e:bf:f5:00:e9:75:ad:c6: 18:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:04:5B:6C:31:97:B3:E1:23:72:B8:CB:66:A7:44:F7:F5:03:D7:03 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UwRbbDGXs-EjcrjLZqdE9_UD1wM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:230::/44 Signature Algorithm: sha256WithRSAEncryption 40:1d:2a:74:0b:dc:b3:10:f3:4b:ce:84:10:84:cf:12:33:b9: ea:77:35:81:7a:2b:3b:ce:51:5b:4b:79:50:8a:b3:cf:81:3a: 81:36:e5:03:66:ce:74:1f:84:63:ce:2a:6c:6c:b6:c4:b3:b3: e3:f9:e7:11:82:9c:e0:83:12:76:84:c5:f8:de:14:13:08:69: 07:11:ec:8a:bf:37:eb:00:ff:e2:5f:15:c2:e9:6a:b7:a3:46: fe:46:6c:62:79:22:a0:a3:69:83:68:a4:db:b4:38:9a:27:7e: 6b:b7:d8:82:b5:d8:4a:cf:1f:8b:7a:c9:3a:98:31:e9:fc:5a: 05:39:40:92:68:fc:87:a7:dc:9b:e7:84:b6:b0:22:e8:c6:ab: 43:29:6a:5a:22:b8:de:ad:fd:c7:07:e2:77:bf:77:bd:fb:42: 29:28:88:c2:fa:27:fc:22:ef:d1:66:27:b6:7d:db:08:7c:a6: d2:ef:19:04:92:b5:bd:b6:e5:c7:a2:d0:09:55:26:7d:5c:b5: 29:5d:53:86:b0:27:c2:9b:74:10:4a:32:2a:ff:9e:b8:ab:32: f1:a3:29:47:60:62:32:9c:9e:dc:95:f5:82:87:6e:39:15:b7: 08:80:83:c8:19:17:9e:3d:6d:46:71:41:9d:57:98:c1:20:e4: e0:42:97:20 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWIvkGuqG2PymOJR7ThJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzA0NWI2YzMxOTdiM2UxMjM3MmI4Y2I2NmE3NDRmN2Y1MDNkNzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E1DkzjDYOMfl6TqO2tmYnoGbRil HXVlWHKlQDVwDBaUvXlEXjOomfTECzoL28XcmUB9eZJnQpA+gwCARf+YTuQr4FMy Pu3Q8R3QTRDsMhFauQfXHPDdr/wBwe4oTcazHtpyddp7d/jl4Ff6CUlMopDb/win edTQk4XV0CzgB3n6lP7G+rvrVTzuEP//6HARIJpJLNOJsGE+XC6ynYZAe1y/KObA iKbQQLh47WaVsG00MJlxRPj+dgx2qF7aiaGsvMIaBOcfdAi/5jRbhZAkD0LXuWCd wpDXFxp5hh1vjyYK9rQZ328l4h3nC/arkFJxzPBXMvRTXr/1AOl1rcYYvwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFMEW2wxl7PhI3K4y2anRPf1A9cDMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvVXdSYmJER1hzLUVqY3JqTFpxZEU5X1VEMXdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQIw MA0GCSqGSIb3DQEBCwUAA4IBAQBAHSp0C9yzEPNLzoQQhM8SM7nqdzWBeis7zlFb S3lQirPPgTqBNuUDZs50H4RjzipsbLbEs7Pj+ecRgpzggxJ2hMX43hQTCGkHEeyK vzfrAP/iXxXC6Wq3o0b+RmxieSKgo2mDaKTbtDiaJ35rt9iCtdhKzx+Lesk6mDHp /FoFOUCSaPyHp9yb54S2sCLoxqtDKWpaIrjerf3HB+J3v3e9+0IpKIjC+if8Iu/R Zie2fdsIfKbS7xkEkrW9tuXHotAJVSZ9XLUpXVOGsCfCm3QQSjIq/564qzLxoylH YGIynJ7clfWCh245FbcIgIPIGReePW1GcUGdV5jBIOTgQpcg -----END CERTIFICATE-----Generated at Sun Jan 11 11:38:28 2026 by rpki-client