This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/XxV2SKX6diqbBiNhKkO0juOyalw.roa File: XxV2SKX6diqbBiNhKkO0juOyalw.roa (raw, json) Hash identifier: K3HuQsXDUPhFu8KyEm3j+asW1MGpLUhefHjOHw14wp0= Subject key identifier: 5F:15:76:48:A5:FA:76:2A:9B:06:23:61:2A:43:B4:8E:E3:B2:6A:5C Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E395B02D5EECE1FA0315CD5A7ECB026 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/XxV2SKX6diqbBiNhKkO0juOyalw.roa Signing time: Fri 02 Jan 2026 10:20:46 +0000 ROA not before: Fri 02 Jan 2026 10:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212832 IP address blocks: 2a0c:b641:5f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:5b:02:d5:ee:ce:1f:a0:31:5c:d5:a7:ec:b0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f157648a5fa762a9b0623612a43b48ee3b26a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:ee:ae:b4:97:ca:08:99:6c:f3:73:d9:da: a7:fa:e4:71:f0:4c:95:fa:00:75:5c:be:37:63:81: 6a:be:cb:82:ac:cd:a7:d2:06:86:b6:ec:46:66:85: 15:46:f6:6a:0b:0c:93:5f:1a:c9:b1:2e:25:3d:57: 85:ed:e7:36:31:0a:06:63:7d:0b:7c:ec:fd:48:93: 21:fc:0c:49:25:44:f5:d4:31:d3:63:7c:e1:0f:b8: d9:6e:00:cc:56:54:2f:64:fa:f1:cb:95:4f:bf:52: 17:f2:fc:cc:8a:9c:e4:68:c2:9c:75:3d:ce:a2:fa: 14:9b:87:db:ec:d6:43:8a:3d:ee:bd:13:84:47:3f: 0e:89:d2:42:c1:f8:63:c2:64:ab:f4:0f:72:e8:ad: e2:17:52:83:31:96:1c:4e:de:db:a7:08:17:e9:78: 22:2e:3a:c1:fc:15:00:39:8a:a5:cf:74:aa:40:3d: 38:a2:ad:7d:35:56:8e:3e:2e:06:ff:b6:8e:e9:01: 21:43:6d:ef:be:29:7a:9e:97:83:cc:50:28:b1:b6: 75:e4:6b:be:aa:cf:43:ab:91:5a:43:53:de:ec:13: e3:af:8e:f0:c3:02:2b:04:b3:af:77:c2:b7:33:9c: c7:7b:a8:2f:92:ad:51:ac:43:74:01:c2:5a:e9:22: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:15:76:48:A5:FA:76:2A:9B:06:23:61:2A:43:B4:8E:E3:B2:6A:5C X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/XxV2SKX6diqbBiNhKkO0juOyalw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:5f0::/44 Signature Algorithm: sha256WithRSAEncryption 53:f8:22:f2:78:42:2b:7e:b8:62:9a:6c:16:fb:84:8b:90:0e: 63:c7:ed:5f:fb:e8:19:58:22:eb:39:b3:9e:a4:99:f7:b9:ae: 7e:23:12:95:24:cb:a0:60:5a:94:b0:bf:76:ec:2c:e7:95:f6: 96:c4:97:75:0b:40:3b:f2:b5:f7:5e:ca:f2:1e:a3:fb:7b:48: 2b:fc:24:74:03:92:0b:dc:4d:f7:0e:d6:22:b9:00:f7:17:77: de:bb:75:38:64:f7:b5:08:96:13:e1:48:ef:9b:ae:55:cd:d1: b3:09:a3:40:e3:b7:38:cf:f9:84:e3:dd:71:07:b0:52:4f:11: 1e:95:76:7f:55:fb:40:5c:f6:d2:0a:a2:b1:a0:22:0f:db:6d: 74:64:2b:76:9c:1b:1e:a6:5e:28:fc:c4:01:7c:93:ee:de:86: 8d:4b:06:59:1b:5d:8c:07:59:75:bf:b1:af:23:e8:3a:ef:7a: 1b:f5:2a:38:48:88:ad:55:d2:a0:ab:57:00:92:8b:56:b8:df: 03:72:c5:48:45:3e:d6:1a:36:a4:d7:d5:67:c8:8a:0b:9e:ac: 84:cf:24:82:03:70:d4:ee:69:c7:f2:c9:42:08:bf:a7:73:00: 93:c9:c5:f8:5f:33:82:d5:bb:2f:52:20:ed:bf:63:f3:68:ee: 39:41:b9:21 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVsC1e7OH6AxXNWn7LAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjE1NzY0OGE1ZmE3NjJhOWIwNjIzNjEyYTQzYjQ4ZWUzYjI2YTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9DurrSXygiZbPNz2dqn+uRx8EyV +gB1XL43Y4FqvsuCrM2n0gaGtuxGZoUVRvZqCwyTXxrJsS4lPVeF7ec2MQoGY30L fOz9SJMh/AxJJUT11DHTY3zhD7jZbgDMVlQvZPrxy5VPv1IX8vzMipzkaMKcdT3O ovoUm4fb7NZDij3uvROERz8OidJCwfhjwmSr9A9y6K3iF1KDMZYcTt7bpwgX6Xgi LjrB/BUAOYqlz3SqQD04oq19NVaOPi4G/7aO6QEhQ23vvil6npeDzFAosbZ15Gu+ qs9Dq5FaQ1Pe7BPjr47wwwIrBLOvd8K3M5zHe6gvkq1RrEN0AcJa6SJTpwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF8Vdkil+nYqmwYjYSpDtI7jsmpcMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvWHhWMlNLWDZkaXFiQmlOaEtrTzBqdU95YWx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQXw MA0GCSqGSIb3DQEBCwUAA4IBAQBT+CLyeEIrfrhimmwW+4SLkA5jx+1f++gZWCLr ObOepJn3ua5+IxKVJMugYFqUsL927CznlfaWxJd1C0A78rX3XsryHqP7e0gr/CR0 A5IL3E33DtYiuQD3F3feu3U4ZPe1CJYT4Ujvm65VzdGzCaNA47c4z/mE491xB7BS TxEelXZ/VftAXPbSCqKxoCIP2210ZCt2nBsepl4o/MQBfJPu3oaNSwZZG12MB1l1 v7GvI+g673ob9So4SIitVdKgq1cAkotWuN8DcsVIRT7WGjak19VnyIoLnqyEzySC A3DU7mnH8slCCL+ncwCTycX4XzOC1bsvUiDtv2PzaO45Qbkh -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:23 2026 by rpki-client