This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/dC3pgV7ysZRlCBbNt5Ig2oQA5DA.roa File: dC3pgV7ysZRlCBbNt5Ig2oQA5DA.roa (raw, json) Hash identifier: gaQq7SM9ywQr+FfG24V78JQKHnjzYLtL/lhNjpAQc98= Subject key identifier: 74:2D:E9:81:5E:F2:B1:94:65:08:16:CD:B7:92:20:DA:84:00:E4:30 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3958C52D9835CF465EE624BCE0D938 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/dC3pgV7ysZRlCBbNt5Ig2oQA5DA.roa Signing time: Fri 02 Jan 2026 10:20:46 +0000 ROA not before: Fri 02 Jan 2026 10:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212424 IP address blocks: 2a0c:b641:2f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:58:c5:2d:98:35:cf:46:5e:e6:24:bc:e0:d9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=742de9815ef2b194650816cdb79220da8400e430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:cf:8f:10:fc:fc:21:fb:0b:e6:ee:cc:29: 93:f3:9c:43:e4:ee:9a:c6:06:a7:6b:7d:08:d6:ea: 2c:8e:8c:5b:68:67:49:6d:eb:85:d0:76:d7:c7:bf: 6a:5e:f4:b8:1b:80:6c:83:ce:fd:2a:40:db:11:6d: 09:43:5f:52:1b:67:cd:f2:33:b6:14:6a:16:70:f7: 10:99:07:b2:7d:ba:6d:59:b9:f7:e1:cb:13:9b:4e: 26:ec:5b:e8:08:71:cc:d4:f8:c9:f7:64:2e:d1:de: 7c:b0:a1:94:ef:fe:8b:8a:8f:e3:6b:e7:b9:10:9c: 7d:8b:87:53:3d:a1:01:f3:b6:f4:cd:49:07:50:54: 32:77:59:12:b4:d0:0b:de:8d:36:11:04:a2:74:00: c5:31:e0:2c:5e:1e:17:ef:6c:6b:b5:fb:f6:e8:51: 23:3c:7f:81:27:31:a6:a0:a5:17:a0:35:d0:0f:f3: 20:08:c9:ea:ee:e0:38:10:c1:c5:bc:a4:e6:31:99: 42:6a:ba:09:95:5c:0b:12:4d:53:69:5e:fe:a4:b1: 68:6a:97:c2:84:b8:53:2c:19:01:3d:cb:17:f4:a9: 91:8a:aa:9f:8f:48:a5:2c:b9:a9:6a:8e:4f:b4:d2: d6:7a:4f:0a:75:f5:02:fa:d3:19:61:33:8d:8d:cb: 18:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2D:E9:81:5E:F2:B1:94:65:08:16:CD:B7:92:20:DA:84:00:E4:30 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/dC3pgV7ysZRlCBbNt5Ig2oQA5DA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:2f0::/44 Signature Algorithm: sha256WithRSAEncryption 59:d0:af:c1:d5:fd:63:e0:9d:17:e5:c1:e9:f3:51:2f:01:28: be:b2:12:11:6e:fe:83:d9:d6:a4:1c:a5:c6:26:6f:a8:cc:6a: 5a:2e:9f:1b:99:1e:84:98:31:3e:87:0d:1f:78:de:80:f7:bf: fe:3d:37:39:c5:8d:c0:09:d3:c2:c1:d1:81:79:77:c0:39:02: d8:79:eb:6c:a6:f8:fd:db:85:bb:7d:0e:f3:61:7e:76:95:7d: 7b:56:71:aa:f7:37:2c:84:95:81:59:98:95:40:c7:c3:50:44: 35:c3:0c:49:39:32:7a:f0:9a:52:01:4f:84:2d:f7:8a:c5:84: ae:92:9c:fe:f4:20:26:94:52:aa:92:51:8c:46:21:39:08:eb: 52:a4:89:90:34:2b:67:e4:17:b4:91:a8:7f:9c:8f:fb:10:18: 41:75:7a:bb:3a:60:0e:01:0f:c2:64:cc:18:cb:cf:c9:8d:17: 2f:e2:bf:5b:92:03:eb:ef:2c:af:15:2a:e4:15:1e:33:a7:50: 2b:36:b4:c0:dd:94:39:7d:12:30:95:38:30:9a:96:f5:a5:e0: 06:9a:e6:c1:d7:f8:c7:b2:33:82:0f:79:30:0c:58:f7:f7:66: 11:51:1f:2a:6d:64:27:c4:0a:cb:71:29:0e:66:a3:1a:50:96: 9f:6b:6b:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVjFLZg1z0Ze5iS84Nk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDJkZTk4MTVlZjJiMTk0NjUwODE2Y2RiNzkyMjBkYTg0MDBlNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PfPjxD8/CH7C+buzCmT85xD5O6a xgana30I1uosjoxbaGdJbeuF0HbXx79qXvS4G4Bsg879KkDbEW0JQ19SG2fN8jO2 FGoWcPcQmQeyfbptWbn34csTm04m7FvoCHHM1PjJ92Qu0d58sKGU7/6Lio/ja+e5 EJx9i4dTPaEB87b0zUkHUFQyd1kStNAL3o02EQSidADFMeAsXh4X72xrtfv26FEj PH+BJzGmoKUXoDXQD/MgCMnq7uA4EMHFvKTmMZlCaroJlVwLEk1TaV7+pLFoapfC hLhTLBkBPcsX9KmRiqqfj0ilLLmpao5PtNLWek8KdfUC+tMZYTONjcsY4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHQt6YFe8rGUZQgWzbeSINqEAOQwMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvZEMzcGdWN3lzWlJsQ0JiTnQ1SWcyb1FBNURBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQLw MA0GCSqGSIb3DQEBCwUAA4IBAQBZ0K/B1f1j4J0X5cHp81EvASi+shIRbv6D2dak HKXGJm+ozGpaLp8bmR6EmDE+hw0feN6A97/+PTc5xY3ACdPCwdGBeXfAOQLYeets pvj924W7fQ7zYX52lX17VnGq9zcshJWBWZiVQMfDUEQ1wwxJOTJ68JpSAU+ELfeK xYSukpz+9CAmlFKqklGMRiE5COtSpImQNCtn5Be0kah/nI/7EBhBdXq7OmAOAQ/C ZMwYy8/JjRcv4r9bkgPr7yyvFSrkFR4zp1ArNrTA3ZQ5fRIwlTgwmpb1peAGmubB 1/jHsjOCD3kwDFj392YRUR8qbWQnxArLcSkOZqMaUJafa2vT -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:55 2026 by rpki-client