This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/b4eF_fRlGg6JqGQJom-BqV4wnaE.roa File: b4eF_fRlGg6JqGQJom-BqV4wnaE.roa (raw, json) Hash identifier: 3b2HQn428GO0sNs85sidUFl/dOBGsln9mWYwcq7H4r0= Subject key identifier: 6F:87:85:FD:F4:65:1A:0E:89:A8:64:09:A2:6F:81:A9:5E:30:9D:A1 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3964C9DB1767263788127665BF74A7 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/b4eF_fRlGg6JqGQJom-BqV4wnaE.roa Signing time: Fri 02 Jan 2026 10:20:49 +0000 ROA not before: Fri 02 Jan 2026 10:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213638 IP address blocks: 2a0c:b641:180::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:64:c9:db:17:67:26:37:88:12:76:65:bf:74:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f8785fdf4651a0e89a86409a26f81a95e309da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ed:22:a1:fd:92:0b:7f:fa:71:66:df:c8:37: a2:4e:12:21:5c:a4:73:98:34:ec:39:89:e3:35:62: cc:a4:6b:14:72:b0:a3:11:59:1d:c5:3f:6b:cb:4d: a7:c8:fd:06:8d:4d:68:64:90:e3:94:97:73:14:32: 5a:26:18:96:84:48:be:60:99:b3:29:d8:24:d9:91: 8d:a5:47:92:88:72:45:12:4c:b6:f7:5a:72:21:60: 4f:af:59:c8:2d:5e:66:86:f1:55:5f:d0:b7:45:45: b3:32:2a:5f:8c:5c:bb:78:2f:39:f0:10:ce:c4:07: bb:1a:5c:75:2a:58:94:49:f6:a7:07:f6:6d:f7:1e: 75:06:90:0e:4d:df:93:bd:24:e6:ad:4a:11:4f:0c: c8:03:db:23:de:33:07:b6:f1:e2:9a:c4:f9:69:1d: 5e:1d:12:6d:41:c0:a7:d0:1e:08:bc:63:58:66:1e: 5f:e9:cc:8e:53:dc:f8:06:10:ce:0a:86:06:aa:0c: 61:ee:60:cf:df:0a:bd:2a:dc:e3:bc:97:cc:e3:03: 50:f9:ec:e8:49:6e:19:7f:19:21:61:cc:8e:38:0b: f2:7f:b5:ef:f3:be:79:ed:15:74:7d:84:8a:a5:63: 4a:56:ba:bf:4a:43:0c:5c:ca:67:35:f4:40:ce:77: 64:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:87:85:FD:F4:65:1A:0E:89:A8:64:09:A2:6F:81:A9:5E:30:9D:A1 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/b4eF_fRlGg6JqGQJom-BqV4wnaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:180::/44 Signature Algorithm: sha256WithRSAEncryption 2b:fd:c5:22:50:91:3d:e2:e3:2e:a1:6f:9f:59:4e:fd:e3:d2: dd:ca:73:ff:42:a5:bf:1d:57:6f:f6:d8:66:24:7c:42:16:9c: a4:84:22:95:3b:db:fa:1f:ff:c6:16:1e:63:52:f4:dd:ba:9d: 24:c5:1e:b1:01:5b:48:ab:e8:67:c1:6c:62:e5:87:c5:7d:ce: 3c:0d:18:7f:4d:17:b2:80:c6:d2:75:f1:9f:34:48:b8:95:90: bd:60:cf:8c:04:ad:67:2d:28:78:6e:a4:5f:3c:55:b4:73:86: 07:e0:ed:16:79:93:c4:91:06:7d:d2:0e:42:28:ca:ed:b4:54: 4c:a0:44:b4:55:73:15:0c:e5:d0:60:e1:ea:34:e2:33:1e:92: 69:26:88:b5:39:fa:b8:e2:8c:15:ca:db:ac:3f:3f:91:2f:5b: a8:c9:8d:38:8b:69:b1:6e:31:27:b5:ad:4b:e2:95:73:eb:35: 22:7b:a9:7f:9f:ee:10:e2:92:c6:df:db:48:76:9d:45:59:6a: 8d:4c:76:63:38:12:d5:e0:e7:42:94:9f:2b:61:e6:03:fd:82: 04:77:c0:07:24:fd:37:21:34:ac:fc:5e:eb:0c:3d:26:0a:83: 8f:98:7c:d5:43:4b:29:cd:38:a3:96:41:75:f0:ca:58:53:88: f8:11:f6:6d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWTJ2xdnJjeIEnZlv3SnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Zjg3ODVmZGY0NjUxYTBlODlhODY0MDlhMjZmODFhOTVlMzA5ZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+0iof2SC3/6cWbfyDeiThIhXKRz mDTsOYnjNWLMpGsUcrCjEVkdxT9ry02nyP0GjU1oZJDjlJdzFDJaJhiWhEi+YJmz Kdgk2ZGNpUeSiHJFEky291pyIWBPr1nILV5mhvFVX9C3RUWzMipfjFy7eC858BDO xAe7Glx1KliUSfanB/Zt9x51BpAOTd+TvSTmrUoRTwzIA9sj3jMHtvHimsT5aR1e HRJtQcCn0B4IvGNYZh5f6cyOU9z4BhDOCoYGqgxh7mDP3wq9KtzjvJfM4wNQ+ezo SW4ZfxkhYcyOOAvyf7Xv87557RV0fYSKpWNKVrq/SkMMXMpnNfRAzndkGwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG+Hhf30ZRoOiahkCaJvgaleMJ2hMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvYjRlRl9mUmxHZzZKcUdRSm9tLUJxVjR3bmFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQGA MA0GCSqGSIb3DQEBCwUAA4IBAQAr/cUiUJE94uMuoW+fWU7949LdynP/QqW/HVdv 9thmJHxCFpykhCKVO9v6H//GFh5jUvTdup0kxR6xAVtIq+hnwWxi5YfFfc48DRh/ TReygMbSdfGfNEi4lZC9YM+MBK1nLSh4bqRfPFW0c4YH4O0WeZPEkQZ90g5CKMrt tFRMoES0VXMVDOXQYOHqNOIzHpJpJoi1Ofq44owVytusPz+RL1uoyY04i2mxbjEn ta1L4pVz6zUie6l/n+4Q4pLG39tIdp1FWWqNTHZjOBLV4OdClJ8rYeYD/YIEd8AH JP03ITSs/F7rDD0mCoOPmHzVQ0spzTijlkF18MpYU4j4EfZt -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:25 2026 by rpki-client