This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cXTjZlh4U6bjKx1joWcfs4EtDQc.roa File: cXTjZlh4U6bjKx1joWcfs4EtDQc.roa (raw, json) Hash identifier: ho6S3LRhNhRIMJd5aYgfto5BJiiANgdN2qZexyIjRMw= Subject key identifier: 71:74:E3:66:58:78:53:A6:E3:2B:1D:63:A1:67:1F:B3:81:2D:0D:07 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3966ADB34CC64BDC0A36604A366DFA Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cXTjZlh4U6bjKx1joWcfs4EtDQc.roa Signing time: Fri 02 Jan 2026 10:20:49 +0000 ROA not before: Fri 02 Jan 2026 10:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213791 IP address blocks: 2a0c:b641:d60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:66:ad:b3:4c:c6:4b:dc:0a:36:60:4a:36:6d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7174e366587853a6e32b1d63a1671fb3812d0d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:56:6b:62:ba:ad:43:71:51:bc:ee:22:1b:e4: 7c:e9:cc:8c:bd:f4:ce:9d:8d:20:56:8c:3c:e7:a9: 42:c2:d2:38:67:66:88:f4:97:de:59:54:80:15:d4: de:68:cc:36:c9:06:9b:56:29:80:c8:1d:f8:d2:d9: 72:dd:75:b5:42:1e:c1:56:bd:0d:74:19:c3:e3:46: 2b:c1:61:57:4d:c2:d2:a1:d6:91:e3:30:4c:4e:16: 5d:94:bd:7e:47:f7:95:58:9a:cf:7c:7b:2f:7f:99: 9b:10:25:f6:8d:35:96:45:2f:df:fe:2e:40:17:e8: e4:bb:0c:5e:f3:19:3b:ef:27:8e:ec:29:fb:d1:8e: 71:6a:a7:d7:52:30:20:83:1c:b9:71:0c:ae:b5:a5: 15:e0:29:45:48:df:f8:d3:1f:f7:16:30:7b:6f:7f: 37:4f:b8:70:74:a3:79:84:23:10:ba:7f:19:82:f5: 7f:48:58:e9:a0:d6:af:89:6f:24:13:bb:9b:b2:6c: c6:07:1d:19:c4:e7:ba:2e:d7:f8:00:35:03:1f:d7: ca:51:1d:4c:25:8d:b4:b4:05:aa:31:d2:82:30:62: 68:72:d3:4b:1d:7b:c7:9b:77:46:a5:c5:f1:2a:e7: e1:73:6f:e6:85:cc:e9:2a:ea:42:27:67:f9:df:69: fd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:74:E3:66:58:78:53:A6:E3:2B:1D:63:A1:67:1F:B3:81:2D:0D:07 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cXTjZlh4U6bjKx1joWcfs4EtDQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:d60::/44 Signature Algorithm: sha256WithRSAEncryption 7d:29:af:d3:04:4c:a6:f2:13:65:31:e0:ff:77:b4:c5:10:f2: 30:cd:4f:36:c6:2f:e3:ed:a2:ff:ba:7d:2e:86:ee:9c:dd:c2: 17:30:ad:1b:b7:ec:b4:5c:26:7d:fc:be:c6:57:0f:b9:55:ff: 71:f8:2b:9d:86:ba:2d:da:03:74:bc:35:9c:79:dd:d2:8b:17: a2:1d:de:e9:f7:37:60:63:cb:6b:0f:fa:24:36:36:a6:97:91: aa:d4:04:91:b4:51:54:2b:76:15:55:42:45:78:5f:b6:7c:f6: 41:6c:4e:ba:74:9a:64:2a:f9:34:dd:85:59:ad:fb:11:c5:96: 5f:a8:35:46:46:7b:b2:4f:71:d9:f7:f2:4e:0c:e2:09:3b:4d: cd:48:dd:e7:d0:d7:04:a4:b5:f2:3a:70:c5:ed:a3:ee:48:65: f1:28:aa:e5:24:bc:e4:0f:4f:12:fe:52:57:a4:55:92:9d:26: 8f:0d:7f:b8:d0:88:00:a2:b4:cc:b1:9d:41:4f:cf:e5:5a:f4: 25:6e:a3:64:da:41:25:a2:d0:8e:7c:0a:59:70:82:a3:0b:b6: 8f:ea:e5:75:08:dd:61:4e:8d:0e:40:e5:ff:61:70:bd:82:7f: 02:a0:ca:f5:f2:70:4a:40:b7:73:b3:b8:9d:20:18:a7:f8:8a: bd:a5:ff:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWats0zGS9wKNmBKNm36MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTc0ZTM2NjU4Nzg1M2E2ZTMyYjFkNjNhMTY3MWZiMzgxMmQwZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFZrYrqtQ3FRvO4iG+R86cyMvfTO nY0gVow856lCwtI4Z2aI9JfeWVSAFdTeaMw2yQabVimAyB340tly3XW1Qh7BVr0N dBnD40YrwWFXTcLSodaR4zBMThZdlL1+R/eVWJrPfHsvf5mbECX2jTWWRS/f/i5A F+jkuwxe8xk77yeO7Cn70Y5xaqfXUjAggxy5cQyutaUV4ClFSN/40x/3FjB7b383 T7hwdKN5hCMQun8ZgvV/SFjpoNaviW8kE7ubsmzGBx0ZxOe6Ltf4ADUDH9fKUR1M JY20tAWqMdKCMGJoctNLHXvHm3dGpcXxKufhc2/mhczpKupCJ2f532n9LQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHF042ZYeFOm4ysdY6FnH7OBLQ0HMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvY1hUalpsaDRVNmJqS3gxam9XY2ZzNEV0RFFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQ1g MA0GCSqGSIb3DQEBCwUAA4IBAQB9Ka/TBEym8hNlMeD/d7TFEPIwzU82xi/j7aL/ un0uhu6c3cIXMK0bt+y0XCZ9/L7GVw+5Vf9x+Cudhrot2gN0vDWced3SixeiHd7p 9zdgY8trD/okNjaml5Gq1ASRtFFUK3YVVUJFeF+2fPZBbE66dJpkKvk03YVZrfsR xZZfqDVGRnuyT3HZ9/JODOIJO03NSN3n0NcEpLXyOnDF7aPuSGXxKKrlJLzkD08S /lJXpFWSnSaPDX+40IgAorTMsZ1BT8/lWvQlbqNk2kElotCOfApZcIKjC7aP6uV1 CN1hTo0OQOX/YXC9gn8CoMr18nBKQLdzs7idIBin+Iq9pf+S -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:34 2026 by rpki-client