This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/__cOI3eV4yb0Sbyicn_wY4S-9zI.roa File: __cOI3eV4yb0Sbyicn_wY4S-9zI.roa (raw, json) Hash identifier: mCmkyBMNtbgTfcVUAUx/kx2N7wYNa7Q8mk7DSyErPYQ= Subject key identifier: FF:F7:0E:23:77:95:E3:26:F4:49:BC:A2:72:7F:F0:63:84:BE:F7:32 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E396E4F024A1D34B119A51C232B0A3D Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/__cOI3eV4yb0Sbyicn_wY4S-9zI.roa Signing time: Fri 02 Jan 2026 10:20:51 +0000 ROA not before: Fri 02 Jan 2026 10:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215230 IP address blocks: 2a0c:b641:710::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:6e:4f:02:4a:1d:34:b1:19:a5:1c:23:2b:0a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fff70e237795e326f449bca2727ff06384bef732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a8:d8:71:c4:e1:f9:4e:f0:f1:38:d7:ec:60: 27:e8:f3:7a:88:43:86:72:88:77:af:cb:64:b4:2e: 35:f0:89:40:ec:58:f3:8f:19:23:83:72:29:45:74: 0d:51:e1:08:4e:98:02:3c:19:26:b9:db:86:53:e6: ef:68:4a:3b:a5:f7:9e:51:7f:59:d1:e2:81:13:3a: 69:b6:6b:26:1e:0d:23:4b:60:e5:9b:b0:61:06:88: 39:09:43:07:9e:42:39:c7:1c:85:cb:db:bf:50:99: 21:8c:7b:34:19:11:51:33:77:7a:45:db:ee:af:18: ea:9d:ff:07:2f:1d:b4:73:28:4a:1f:25:76:03:27: 32:7f:08:36:c0:8e:7f:55:6f:3c:9e:4c:58:74:10: 0e:1d:4a:2e:cb:8f:bc:65:a7:8f:5c:86:59:97:97: f0:69:ca:40:f3:9d:6c:23:37:f5:01:ec:4d:58:01: 4f:71:b1:e0:c4:f1:7b:c4:c2:3a:0c:9a:c0:50:d9: 75:29:3b:e5:5a:72:a0:83:4e:b1:a0:3e:ff:14:d7: da:d9:88:9c:19:f0:19:b6:f0:c4:ea:fa:3c:1f:90: 63:a0:17:fc:be:bf:44:97:fa:28:1c:6c:35:05:a2: c8:c8:83:21:9a:d6:ec:31:ed:4b:a0:53:b0:9b:5f: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F7:0E:23:77:95:E3:26:F4:49:BC:A2:72:7F:F0:63:84:BE:F7:32 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/__cOI3eV4yb0Sbyicn_wY4S-9zI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:710::/44 Signature Algorithm: sha256WithRSAEncryption 77:18:70:2f:91:e6:50:cf:64:9a:b0:1f:aa:73:c1:70:e1:d2: fd:f6:e9:99:8d:91:09:66:fa:46:42:73:c9:27:c2:8b:0e:7b: e3:db:21:29:69:27:dc:98:25:ae:e9:d8:67:0f:32:b1:ea:86: 39:d3:61:34:25:13:0e:34:79:a2:3e:fe:96:ac:b6:84:9f:11: 2a:59:6b:29:c0:33:87:cc:bf:58:8f:0c:2a:f3:bd:8f:38:82: 62:d5:70:11:76:c4:d0:ca:7a:a8:4a:72:fe:71:ee:28:6f:c8: 6f:5a:c8:d7:7e:08:3b:b7:6e:fe:d7:a4:46:d5:0d:a0:c7:21: 30:7c:87:28:66:68:8d:92:94:cf:8e:06:4e:08:b1:e0:5f:28: 29:0c:cc:6a:b2:78:a0:f4:9f:b0:bd:9c:e3:5e:77:4b:41:f5: 79:8f:87:0d:51:72:98:6c:09:01:49:de:7b:35:7d:fc:49:4e: 2f:6b:df:21:a0:c2:75:eb:a9:af:13:47:63:ec:8a:04:e2:10: 89:a4:3b:b7:fd:2a:b0:e4:0e:a9:b7:8b:cc:27:79:34:48:08: af:eb:a6:ac:0a:5d:c4:63:aa:52:43:83:42:f4:fd:44:7d:e3: 7d:d7:ef:2c:41:70:6e:99:4c:f9:e8:70:09:36:61:9f:ba:6c: c1:21:dc:b4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OW5PAkodNLEZpRwjKwo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmY3MGUyMzc3OTVlMzI2ZjQ0OWJjYTI3MjdmZjA2Mzg0YmVmNzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ajYccTh+U7w8TjX7GAn6PN6iEOG coh3r8tktC418IlA7Fjzjxkjg3IpRXQNUeEITpgCPBkmuduGU+bvaEo7pfeeUX9Z 0eKBEzpptmsmHg0jS2Dlm7BhBog5CUMHnkI5xxyFy9u/UJkhjHs0GRFRM3d6Rdvu rxjqnf8HLx20cyhKHyV2Aycyfwg2wI5/VW88nkxYdBAOHUouy4+8ZaePXIZZl5fw acpA851sIzf1AexNWAFPcbHgxPF7xMI6DJrAUNl1KTvlWnKgg06xoD7/FNfa2Yic GfAZtvDE6vo8H5BjoBf8vr9El/ooHGw1BaLIyIMhmtbsMe1LoFOwm1/5JwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP/3DiN3leMm9Em8onJ/8GOEvvcyMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvX19jT0kzZVY0eWIwU2J5aWNuX3dZNFMtOXpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQcQ MA0GCSqGSIb3DQEBCwUAA4IBAQB3GHAvkeZQz2SasB+qc8Fw4dL99umZjZEJZvpG QnPJJ8KLDnvj2yEpaSfcmCWu6dhnDzKx6oY502E0JRMONHmiPv6WrLaEnxEqWWsp wDOHzL9Yjwwq872POIJi1XARdsTQynqoSnL+ce4ob8hvWsjXfgg7t27+16RG1Q2g xyEwfIcoZmiNkpTPjgZOCLHgXygpDMxqsnig9J+wvZzjXndLQfV5j4cNUXKYbAkB Sd57NX38SU4va98hoMJ166mvE0dj7IoE4hCJpDu3/Sqw5A6pt4vMJ3k0SAiv66as Cl3EY6pSQ4NC9P1EfeN91+8sQXBumUz56HAJNmGfumzBIdy0 -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:03 2026 by rpki-client