This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/b1eGaJ9tOZFqP8O9CRm_pc4Jr_A.roa File: b1eGaJ9tOZFqP8O9CRm_pc4Jr_A.roa (raw, json) Hash identifier: UV3z2UXNprVRfvGusyYE8ucB7imFyuwwB0TIZWgVMGY= Subject key identifier: 6F:57:86:68:9F:6D:39:91:6A:3F:C3:BD:09:19:BF:A5:CE:09:AF:F0 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E394EA83A2638979792EE6D16E0AA27 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/b1eGaJ9tOZFqP8O9CRm_pc4Jr_A.roa Signing time: Fri 02 Jan 2026 10:20:43 +0000 ROA not before: Fri 02 Jan 2026 10:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210466 IP address blocks: 2a0c:b641:5c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:4e:a8:3a:26:38:97:97:92:ee:6d:16:e0:aa:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f5786689f6d39916a3fc3bd0919bfa5ce09aff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:2d:60:cd:9b:ed:85:1b:b5:40:4d:6e:8c: 1e:c8:ca:20:20:d8:42:71:4c:d5:ca:0a:18:19:e0: 1d:d3:2b:d7:2d:6f:22:fc:4e:fc:80:88:a5:bd:68: 05:c8:4f:9b:66:78:aa:b7:ac:59:ed:4c:2f:51:84: 57:ea:4d:5c:7a:18:fb:32:e0:4f:03:1c:95:4b:ca: 3c:80:21:d4:8a:c1:4c:ba:c0:3f:ce:49:94:0b:a3: b9:28:93:e3:e1:0d:04:b6:09:2b:b8:bb:d9:8e:72: 6a:02:b2:6d:f4:f0:cf:c9:8a:7f:a1:8f:b5:57:6c: 2d:dc:93:55:10:15:7d:a5:17:2b:bb:d5:45:a8:4e: 42:1d:54:63:10:51:b1:c4:26:3c:5e:12:18:08:ba: c2:05:9f:99:4c:11:ce:84:39:2a:39:79:99:07:61: 08:3b:41:4b:8a:66:a1:c4:83:8b:86:77:78:db:70: 31:4d:a5:14:e9:80:b6:d1:48:a5:a6:8a:11:e2:5c: a1:d0:0a:29:8e:9f:f2:14:17:9a:9e:5a:9f:5a:89: ba:89:d0:c0:55:75:b7:8c:5e:a5:70:9e:d4:2b:13: e5:64:a6:eb:99:20:a2:45:90:9e:ad:40:ba:14:69: fe:95:ec:15:2f:83:35:5e:51:3a:e7:2a:4a:dc:d5: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:57:86:68:9F:6D:39:91:6A:3F:C3:BD:09:19:BF:A5:CE:09:AF:F0 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/b1eGaJ9tOZFqP8O9CRm_pc4Jr_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:5c0::/44 Signature Algorithm: sha256WithRSAEncryption 3c:71:08:ae:9e:30:84:38:03:d9:57:8d:49:ca:92:d0:bd:59: cb:de:c0:d0:81:8d:23:34:a9:fd:29:4f:0a:46:d5:93:d5:7c: c6:53:b5:a8:03:95:90:a7:db:ac:4f:60:74:a8:74:e3:64:5c: c3:c1:8c:b2:e9:ca:37:17:f3:48:5f:66:ea:0b:59:08:b2:7d: c2:a3:ac:d6:24:3c:a5:13:93:ac:f9:c4:0f:f4:eb:da:e8:4f: a3:97:0f:72:57:a2:f0:9b:3e:b4:87:41:e8:b5:9a:d2:bc:42: aa:70:d5:31:a1:8c:c5:83:59:a8:65:d4:03:aa:41:0a:89:e4: 88:18:17:92:b3:51:71:17:e4:ae:79:4c:b8:16:b7:7c:cb:c5: a0:7c:46:e1:29:64:60:c0:e5:d0:45:3a:c2:0b:b7:85:b6:68: eb:b8:b9:ea:7a:bd:ab:7c:d9:0c:86:72:45:c5:26:3c:79:10: a5:19:bb:0b:d3:25:10:aa:d4:1d:55:ba:09:fe:0f:bd:55:af: 10:40:ff:42:d4:f9:1d:59:19:39:82:10:d8:68:2d:a9:6e:cd: d5:52:ef:12:92:b0:24:42:13:b1:79:00:e5:c8:05:cc:fe:6d: 92:03:87:35:21:2e:96:9f:2f:c7:da:fa:9a:73:53:ec:e4:25: f8:a5:79:f9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OU6oOiY4l5eS7m0W4KonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjU3ODY2ODlmNmQzOTkxNmEzZmMzYmQwOTE5YmZhNWNlMDlhZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBQtYM2b7YUbtUBNboweyMogINhC cUzVygoYGeAd0yvXLW8i/E78gIilvWgFyE+bZniqt6xZ7UwvUYRX6k1cehj7MuBP AxyVS8o8gCHUisFMusA/zkmUC6O5KJPj4Q0EtgkruLvZjnJqArJt9PDPyYp/oY+1 V2wt3JNVEBV9pRcru9VFqE5CHVRjEFGxxCY8XhIYCLrCBZ+ZTBHOhDkqOXmZB2EI O0FLimahxIOLhnd423AxTaUU6YC20UilpooR4lyh0Aopjp/yFBeanlqfWom6idDA VXW3jF6lcJ7UKxPlZKbrmSCiRZCerUC6FGn+lewVL4M1XlE65ypK3NU8HQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG9XhmifbTmRaj/DvQkZv6XOCa/wMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvYjFlR2FKOXRPWkZxUDhPOUNSbV9wYzRKcl9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQXA MA0GCSqGSIb3DQEBCwUAA4IBAQA8cQiunjCEOAPZV41JypLQvVnL3sDQgY0jNKn9 KU8KRtWT1XzGU7WoA5WQp9usT2B0qHTjZFzDwYyy6co3F/NIX2bqC1kIsn3Co6zW JDylE5Os+cQP9Ova6E+jlw9yV6Lwmz60h0HotZrSvEKqcNUxoYzFg1moZdQDqkEK ieSIGBeSs1FxF+SueUy4Frd8y8WgfEbhKWRgwOXQRTrCC7eFtmjruLnqer2rfNkM hnJFxSY8eRClGbsL0yUQqtQdVboJ/g+9Va8QQP9C1PkdWRk5ghDYaC2pbs3VUu8S krAkQhOxeQDlyAXM/m2SA4c1IS6Wny/H2vqac1Ps5CX4pXn5 -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:53 2026 by rpki-client