This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/bCj8yrH62mcAhFlR7FsZ0UUTo_U.roa File: bCj8yrH62mcAhFlR7FsZ0UUTo_U.roa (raw, json) Hash identifier: x2htBIcN4hLuccNw08vJoY9CDL7x+KTS0Q/Nm/Up+Co= Subject key identifier: 6C:28:FC:CA:B1:FA:DA:67:00:84:59:51:EC:5B:19:D1:45:13:A3:F5 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39582610F6B12C2F59A3AD1DCBEA27 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/bCj8yrH62mcAhFlR7FsZ0UUTo_U.roa Signing time: Fri 02 Jan 2026 10:20:45 +0000 ROA not before: Fri 02 Jan 2026 10:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a0c:b641:420::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:58:26:10:f6:b1:2c:2f:59:a3:ad:1d:cb:ea:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c28fccab1fada6700845951ec5b19d14513a3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:48:7b:ed:eb:01:dc:08:65:c9:e6:00:71:50: c8:ee:11:c9:f8:78:29:b4:97:f4:70:cd:6e:17:dc: 21:31:b3:56:c3:82:20:28:60:91:fb:cf:9a:06:3f: 46:1c:a3:51:24:43:1a:2e:b8:a4:65:76:7f:bd:f0: ff:70:5f:89:72:1a:de:9b:a0:63:86:6b:5a:72:f0: 77:d4:3a:47:2d:7a:8c:83:ac:c6:c4:0e:7c:7f:0d: b8:bd:06:d1:ab:03:ca:57:af:63:53:83:ec:04:a2: 3e:36:b1:6d:8a:b9:10:b2:6d:4b:ca:d4:39:ca:7b: cc:ab:8b:cb:eb:2f:12:27:6c:f6:53:e5:39:9b:74: f5:69:fc:cc:b5:e6:85:d8:71:76:86:da:71:90:65: 0a:87:16:66:d2:aa:4e:64:64:9f:e1:52:d5:67:40: 6a:b8:be:ea:94:85:7f:e3:ac:4b:f3:9c:56:e4:80: c8:52:3b:dc:ad:5c:fd:35:ec:e0:cd:22:b9:62:63: c9:c6:fc:96:a7:ad:ad:a8:1f:d8:7e:0c:9d:78:c0: 16:19:cd:d9:87:b6:fc:e6:14:6e:ed:54:91:a5:70: 01:8a:cd:05:c7:48:a6:c3:e7:a6:18:c5:37:e3:7f: 5c:d7:3a:8a:aa:f9:c1:e5:73:b4:b0:09:ae:61:fb: d8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:28:FC:CA:B1:FA:DA:67:00:84:59:51:EC:5B:19:D1:45:13:A3:F5 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/bCj8yrH62mcAhFlR7FsZ0UUTo_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:420::/44 Signature Algorithm: sha256WithRSAEncryption 4d:fd:28:81:ad:f3:eb:77:6a:f4:34:ae:ee:a1:9c:ab:99:41: a3:dd:a5:ed:49:8e:d6:c2:1e:2a:d9:4d:1b:20:5d:1d:90:e5: 3e:63:b7:d3:90:a3:75:ed:a6:67:2f:de:11:c9:72:85:f0:5d: 76:ab:04:78:1c:fc:56:2d:d8:bb:a5:8c:d0:b1:67:ce:2a:20: fe:01:a7:20:02:ac:b1:d2:62:d6:27:94:ca:ae:cf:de:dc:90: d5:a7:de:32:af:65:24:5d:6a:9a:98:f6:3d:f3:1c:c9:70:43: 90:4a:a3:0f:12:eb:4a:5c:d6:31:c2:ff:0f:87:5a:d2:e8:be: 49:31:65:a3:73:71:8f:de:e1:39:bc:3a:24:af:6a:7b:2c:48: 13:c9:78:72:68:f8:e5:e7:43:91:10:6f:69:36:20:9c:d0:1a: 7f:e4:1e:5b:b5:be:7e:51:b4:55:4a:c3:30:cd:d6:50:8a:ef: d0:9b:59:06:dd:7a:e4:f8:92:70:36:5f:4e:d5:2a:f9:8c:ec: 1e:d4:b9:7f:54:82:69:5e:d6:2d:7e:ff:a6:e9:44:f8:06:42: d3:75:ef:5d:65:5f:c8:b8:e5:59:89:81:76:a9:9a:d5:e5:b7: e9:d6:16:18:28:e8:98:db:10:19:0a:7b:82:aa:63:48:18:57: 46:55:b7:33 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVgmEPaxLC9Zo60dy+onMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzI4ZmNjYWIxZmFkYTY3MDA4NDU5NTFlYzViMTlkMTQ1MTNhM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkh77esB3AhlyeYAcVDI7hHJ+Hgp tJf0cM1uF9whMbNWw4IgKGCR+8+aBj9GHKNRJEMaLrikZXZ/vfD/cF+Jchrem6Bj hmtacvB31DpHLXqMg6zGxA58fw24vQbRqwPKV69jU4PsBKI+NrFtirkQsm1LytQ5 ynvMq4vL6y8SJ2z2U+U5m3T1afzMteaF2HF2htpxkGUKhxZm0qpOZGSf4VLVZ0Bq uL7qlIV/46xL85xW5IDIUjvcrVz9NezgzSK5YmPJxvyWp62tqB/YfgydeMAWGc3Z h7b85hRu7VSRpXABis0Fx0imw+emGMU3439c1zqKqvnB5XO0sAmuYfvYKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGwo/Mqx+tpnAIRZUexbGdFFE6P1MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvYkNqOHlySDYybWNBaEZsUjdGc1owVVVUb19VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQQg MA0GCSqGSIb3DQEBCwUAA4IBAQBN/SiBrfPrd2r0NK7uoZyrmUGj3aXtSY7Wwh4q 2U0bIF0dkOU+Y7fTkKN17aZnL94RyXKF8F12qwR4HPxWLdi7pYzQsWfOKiD+Aacg Aqyx0mLWJ5TKrs/e3JDVp94yr2UkXWqamPY98xzJcEOQSqMPEutKXNYxwv8Ph1rS 6L5JMWWjc3GP3uE5vDokr2p7LEgTyXhyaPjl50OREG9pNiCc0Bp/5B5btb5+UbRV SsMwzdZQiu/Qm1kG3Xrk+JJwNl9O1Sr5jOwe1Ll/VIJpXtYtfv+m6UT4BkLTde9d ZV/IuOVZiYF2qZrV5bfp1hYYKOiY2xAZCnuCqmNIGFdGVbcz -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:58 2026 by rpki-client