This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cH1MAU6z37jMZjeGWSbla42DJXo.roa File: cH1MAU6z37jMZjeGWSbla42DJXo.roa (raw, json) Hash identifier: Q5xy23oPADaW/eKBMiHQq1thyS9J0yMClUZsKHlVlcM= Subject key identifier: 70:7D:4C:01:4E:B3:DF:B8:CC:66:37:86:59:26:E5:6B:8D:83:25:7A Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3966085D64AF992CDD3801AB333C51 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cH1MAU6z37jMZjeGWSbla42DJXo.roa Signing time: Fri 02 Jan 2026 10:20:49 +0000 ROA not before: Fri 02 Jan 2026 10:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213748 IP address blocks: 2a0c:b641:20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:66:08:5d:64:af:99:2c:dd:38:01:ab:33:3c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=707d4c014eb3dfb8cc6637865926e56b8d83257a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:6f:8c:af:7b:36:09:cd:3a:07:c2:bb:45: 2f:31:75:55:61:76:1f:49:de:39:72:dc:08:e4:fc: 23:8f:ee:e0:8b:d1:2a:2d:5a:c3:85:08:60:6a:dc: 5a:11:dd:7e:20:c7:a4:da:cb:7e:88:3b:f2:f6:7f: f5:40:72:c4:30:bd:d5:bf:98:1b:07:66:ea:9c:a2: 69:d9:f5:be:1d:c2:a8:f4:3b:0b:69:7e:95:59:7f: 3c:f8:21:b3:4a:1d:fe:d6:d5:d5:00:00:11:a0:9a: 4d:17:2e:8f:12:db:93:97:21:fa:e4:1d:a2:a1:4f: 51:52:3f:61:91:b7:20:cb:1f:d0:ad:bc:c4:9b:7d: d7:84:17:93:5d:f7:dc:a8:90:81:9e:c4:59:f7:e2: 5b:d6:55:fa:02:0d:74:19:3e:81:60:14:99:c0:f7: 80:17:7d:30:8b:27:58:ac:f6:b0:7e:59:32:71:c8: 05:2b:4e:2c:08:9e:26:63:78:de:31:dd:b4:4c:9a: 76:bd:28:dc:bc:74:7d:28:d5:b3:a8:b8:3f:87:42: 63:41:39:31:6a:0b:78:96:42:1e:99:41:28:05:23: 39:c6:91:d8:3f:c1:86:50:25:85:6f:bd:0d:14:19: ae:26:a5:9d:32:64:67:51:b1:d4:5c:ca:fa:16:29: da:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7D:4C:01:4E:B3:DF:B8:CC:66:37:86:59:26:E5:6B:8D:83:25:7A X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cH1MAU6z37jMZjeGWSbla42DJXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:20::/44 Signature Algorithm: sha256WithRSAEncryption 46:39:7e:af:76:39:b0:ac:eb:4d:de:46:6d:6b:e1:f4:5f:5e: eb:28:6b:f3:15:c2:70:a9:3e:70:6d:25:55:b9:4c:2b:be:77: 86:8b:90:35:be:ce:f0:ef:0d:4c:1e:a3:fe:ec:d0:8f:42:6a: 66:d0:7b:12:0f:ac:00:3e:71:2b:3c:ff:c4:38:da:2d:4b:f7: 31:b5:55:fa:4f:0c:83:99:07:ad:c8:6c:0d:41:1b:9e:23:b0: 55:fc:c0:69:98:a4:7c:fa:31:ee:9b:64:9c:5e:d1:5e:07:15: 6a:31:af:38:96:00:e9:55:94:ca:8a:f0:71:8f:95:5f:da:1c: 98:d4:26:93:3a:ed:c1:18:00:0f:7c:52:52:b0:e8:51:58:f7: 09:ef:cf:91:d8:31:b0:30:59:bd:ce:d6:e0:96:8c:ea:86:5d: 8f:36:fd:35:cf:60:b0:0a:ec:19:85:1c:5e:30:d6:54:f0:ad: 0d:74:bb:52:b3:fd:ef:b9:7e:41:b7:a3:e4:28:2d:38:e3:9b: 64:fb:2d:ba:01:08:ef:8d:42:6f:5f:5b:71:a5:49:5c:a0:51: ef:8a:1a:de:d2:7b:ca:98:c7:1d:c8:1f:bf:1e:18:32:ba:ae: a4:d0:c4:a8:c4:e0:dc:23:31:df:4e:90:4a:2e:10:d6:12:e9: fa:00:a8:5a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWYIXWSvmSzdOAGrMzxRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDdkNGMwMTRlYjNkZmI4Y2M2NjM3ODY1OTI2ZTU2YjhkODMyNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOVvjK97NgnNOgfCu0UvMXVVYXYf Sd45ctwI5Pwjj+7gi9EqLVrDhQhgatxaEd1+IMek2st+iDvy9n/1QHLEML3Vv5gb B2bqnKJp2fW+HcKo9DsLaX6VWX88+CGzSh3+1tXVAAARoJpNFy6PEtuTlyH65B2i oU9RUj9hkbcgyx/QrbzEm33XhBeTXffcqJCBnsRZ9+Jb1lX6Ag10GT6BYBSZwPeA F30wiydYrPawflkyccgFK04sCJ4mY3jeMd20TJp2vSjcvHR9KNWzqLg/h0JjQTkx agt4lkIemUEoBSM5xpHYP8GGUCWFb70NFBmuJqWdMmRnUbHUXMr6FinaBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHB9TAFOs9+4zGY3hlkm5WuNgyV6MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvY0gxTUFVNnozN2pNWmplR1dTYmxhNDJESlhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQAg MA0GCSqGSIb3DQEBCwUAA4IBAQBGOX6vdjmwrOtN3kZta+H0X17rKGvzFcJwqT5w bSVVuUwrvneGi5A1vs7w7w1MHqP+7NCPQmpm0HsSD6wAPnErPP/EONotS/cxtVX6 TwyDmQetyGwNQRueI7BV/MBpmKR8+jHum2ScXtFeBxVqMa84lgDpVZTKivBxj5Vf 2hyY1CaTOu3BGAAPfFJSsOhRWPcJ78+R2DGwMFm9ztbglozqhl2PNv01z2CwCuwZ hRxeMNZU8K0NdLtSs/3vuX5Bt6PkKC0445tk+y26AQjvjUJvX1txpUlcoFHvihre 0nvKmMcdyB+/Hhgyuq6k0MSoxODcIzHfTpBKLhDWEun6AKha -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:40 2026 by rpki-client