This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/X61EWHsB27vBfLugk_bOrpPw3Ws.roa File: X61EWHsB27vBfLugk_bOrpPw3Ws.roa (raw, json) Hash identifier: i1KeorTr3IxrFuu9DTfta+5WRzEaFOABrMRGycrEwsE= Subject key identifier: 5F:AD:44:58:7B:01:DB:BB:C1:7C:BB:A0:93:F6:CE:AE:93:F0:DD:6B Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E394941881E7F9AAA927371650C8958 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/X61EWHsB27vBfLugk_bOrpPw3Ws.roa Signing time: Fri 02 Jan 2026 10:20:42 +0000 ROA not before: Fri 02 Jan 2026 10:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209612 IP address blocks: 2a0c:b641:3f0::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:49:41:88:1e:7f:9a:aa:92:73:71:65:0c:89:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fad44587b01dbbbc17cbba093f6ceae93f0dd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:e3:08:85:04:4b:08:bf:e9:9f:b9:7a:71: 6e:7b:dd:16:19:af:29:97:93:9e:e8:e9:be:be:63: 24:e7:2f:23:db:3a:24:96:62:12:de:50:31:55:50: ba:8f:e3:9c:ad:32:84:1c:a8:f4:ff:11:2f:cc:0e: 29:c5:e1:3b:5d:24:88:a9:36:1e:17:f0:72:d5:dc: 0c:f9:43:bd:af:f7:ae:08:23:9d:ae:97:95:6f:4d: 62:70:cc:3e:a1:99:37:ae:da:58:60:7b:b5:e5:13: 6a:b0:1e:6f:1e:04:5a:fd:75:3a:06:af:08:d5:be: 2c:0c:6c:fe:84:46:be:80:ec:a4:32:13:ff:9b:33: 59:8d:4e:50:db:7b:d4:00:33:14:46:ee:9e:fe:bb: 2f:b0:b5:33:1a:9c:e3:99:76:bb:38:2a:af:26:f1: 85:12:d8:0f:d9:6a:ee:f7:f8:55:80:d4:4b:d1:23: 6b:05:3e:e3:75:ec:1a:0e:c5:b9:c3:fe:76:b0:5f: f6:e1:5c:5f:8f:8b:11:8e:2d:28:94:28:4b:4a:4e: 9a:04:dc:41:50:4f:d6:8d:01:27:85:7b:e1:62:59: cd:8b:de:e4:cb:36:58:7c:5f:bd:03:1c:00:98:66: 3b:0e:98:07:bb:c2:51:72:98:24:47:ac:64:69:56: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AD:44:58:7B:01:DB:BB:C1:7C:BB:A0:93:F6:CE:AE:93:F0:DD:6B X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/X61EWHsB27vBfLugk_bOrpPw3Ws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:3f0::/44 Signature Algorithm: sha256WithRSAEncryption 85:36:6c:63:3d:e7:be:b9:e7:63:b8:0a:37:ec:b9:3a:57:a5: 8d:7c:af:38:5a:20:50:56:e8:b4:91:6a:43:80:04:3b:20:b5: be:26:dd:3c:90:db:26:7b:20:74:70:72:1b:3f:d2:1b:71:d2: fe:59:6b:1f:6c:a8:7f:53:ec:c4:f2:8d:4c:cb:d8:20:4e:89: 57:f6:91:c0:9f:96:6c:84:40:a3:9c:03:dc:fe:ad:57:6d:1a: c4:34:7c:92:8c:50:8d:bf:3a:70:29:15:35:d9:91:c4:3f:e4: 3c:cd:fe:df:d6:f1:3b:a7:08:ac:1a:39:f4:78:50:0d:8d:bd: b9:4b:90:f7:e5:48:46:93:35:f2:31:ed:24:75:a4:c5:ce:44: f5:d5:56:83:78:5d:d3:07:1a:96:97:3c:24:86:7c:e0:fc:6d: 3b:91:b6:4c:15:df:9d:b3:77:bd:a0:da:a6:d0:9f:71:39:2d: f3:34:0c:78:6e:66:f0:b7:f5:a7:e1:40:57:f7:71:1f:d6:e6: 42:3d:8e:62:02:8e:06:5c:70:0c:be:bb:7f:94:a0:71:52:24: 2e:cb:eb:cf:e4:eb:d8:f1:cc:89:91:91:7d:78:3f:d7:6d:ed: 31:75:a0:02:85:55:b1:05:0c:12:f8:28:14:60:b8:f3:bd:f1: b5:3c:e2:8b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OUlBiB5/mqqSc3FlDIlYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmFkNDQ1ODdiMDFkYmJiYzE3Y2JiYTA5M2Y2Y2VhZTkzZjBkZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfvjCIUESwi/6Z+5enFue90WGa8p l5Oe6Om+vmMk5y8j2zoklmIS3lAxVVC6j+OcrTKEHKj0/xEvzA4pxeE7XSSIqTYe F/By1dwM+UO9r/euCCOdrpeVb01icMw+oZk3rtpYYHu15RNqsB5vHgRa/XU6Bq8I 1b4sDGz+hEa+gOykMhP/mzNZjU5Q23vUADMURu6e/rsvsLUzGpzjmXa7OCqvJvGF EtgP2Wru9/hVgNRL0SNrBT7jdewaDsW5w/52sF/24Vxfj4sRji0olChLSk6aBNxB UE/WjQEnhXvhYlnNi97kyzZYfF+9AxwAmGY7DpgHu8JRcpgkR6xkaVYPDQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF+tRFh7Adu7wXy7oJP2zq6T8N1rMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvWDYxRVdIc0IyN3ZCZkx1Z2tfYk9ycFB3M1dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQPw MA0GCSqGSIb3DQEBCwUAA4IBAQCFNmxjPee+uedjuAo37Lk6V6WNfK84WiBQVui0 kWpDgAQ7ILW+Jt08kNsmeyB0cHIbP9IbcdL+WWsfbKh/U+zE8o1My9ggTolX9pHA n5ZshECjnAPc/q1XbRrENHySjFCNvzpwKRU12ZHEP+Q8zf7f1vE7pwisGjn0eFAN jb25S5D35UhGkzXyMe0kdaTFzkT11VaDeF3TBxqWlzwkhnzg/G07kbZMFd+ds3e9 oNqm0J9xOS3zNAx4bmbwt/Wn4UBX93Ef1uZCPY5iAo4GXHAMvrt/lKBxUiQuy+vP 5OvY8cyJkZF9eD/Xbe0xdaAChVWxBQwS+CgUYLjzvfG1POKL -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:51 2026 by rpki-client