This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/eBD9zuPra1vGvZplG-e64kRdREM.roa File: eBD9zuPra1vGvZplG-e64kRdREM.roa (raw, json) Hash identifier: SbNZNmk9rDOAhIqPpszsnCw4U4MLVMOLEAIxO9yF1dY= Subject key identifier: 78:10:FD:CE:E3:EB:6B:5B:C6:BD:9A:65:1B:E7:BA:E2:44:5D:44:43 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3948A8241D711CD280847016EDB2EB Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/eBD9zuPra1vGvZplG-e64kRdREM.roa Signing time: Fri 02 Jan 2026 10:20:41 +0000 ROA not before: Fri 02 Jan 2026 10:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209542 IP address blocks: 2a0c:b641:470::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:48:a8:24:1d:71:1c:d2:80:84:70:16:ed:b2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7810fdcee3eb6b5bc6bd9a651be7bae2445d4443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:30:36:07:e1:d6:83:da:b5:77:5b:e4:87: ac:7e:06:0a:88:62:8e:6c:32:f8:4b:6f:72:ca:ef: aa:41:eb:c2:11:7d:11:fd:3a:79:cd:1d:84:db:c4: 39:b7:f5:d2:c6:4a:d2:e6:7f:8e:ab:41:bb:b0:eb: 9d:3a:46:bb:6b:8a:66:3b:6a:e7:4f:64:06:17:c1: 40:e0:59:e9:95:5f:ec:aa:9f:1e:a4:4e:1c:28:34: 1f:cc:9c:8d:82:8e:d9:d3:b7:5b:ba:b7:56:72:36: 7a:70:db:9d:9c:cb:6f:7d:a0:52:48:bf:7a:24:83: 8b:3b:e2:21:5d:ca:cb:28:79:6e:89:93:5e:e1:9f: 8d:4a:b5:2e:2c:e0:dd:03:1e:bd:18:17:7e:9b:7b: ac:4f:41:a8:5d:1f:74:86:63:e5:d0:aa:79:89:71: 9c:97:74:44:eb:67:c7:15:56:d2:67:e3:e0:d5:e8: d2:85:ea:98:22:ae:40:18:01:37:1a:6b:4f:dc:37: bd:28:a6:36:cc:7f:2f:4c:6e:c6:1a:54:d8:ab:a8: 1b:a6:29:b3:78:f0:03:cb:52:13:52:23:3a:c6:fe: 80:e8:7a:7e:33:71:1d:14:57:26:0e:59:10:18:72: ec:71:d4:bb:dd:ac:ee:ed:9a:38:6e:42:1a:84:e3: 08:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:10:FD:CE:E3:EB:6B:5B:C6:BD:9A:65:1B:E7:BA:E2:44:5D:44:43 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/eBD9zuPra1vGvZplG-e64kRdREM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:470::/44 Signature Algorithm: sha256WithRSAEncryption 21:15:88:94:b8:aa:68:d6:e1:8d:3e:e7:1d:33:0a:18:e5:e1: e7:11:a5:a7:41:12:b8:a5:45:21:22:b3:77:cd:a4:a0:95:bb: 61:6c:81:14:ad:7e:0a:54:8c:89:96:a6:91:54:c5:ca:c7:27: 7b:0a:e4:22:8f:43:e5:e0:48:40:0b:a3:e5:2f:00:ba:45:f0: 4d:2e:71:67:8c:de:72:9e:1e:ad:98:b1:4a:58:a8:e7:ed:73: 16:d9:14:f3:a2:a5:bb:66:a5:8a:4c:e8:d9:0c:51:a2:9e:7e: 80:59:20:0b:05:27:6a:27:f4:58:0e:b7:ee:2a:cf:35:ed:4d: b1:31:29:f2:6b:0c:d4:10:50:2a:51:a4:fc:8d:fb:6f:8b:9d: 9d:e6:98:18:92:74:35:39:ab:bb:54:42:25:84:fd:6e:ca:62: 57:c5:20:5d:10:6d:16:f4:f4:dc:15:8a:09:ee:62:11:24:10: b9:b0:ca:ac:be:ba:c6:63:22:96:16:fa:c5:ad:b0:61:e9:0f: 21:54:6e:aa:2b:9b:aa:21:b0:3b:24:80:59:6a:5c:81:8f:25: 00:61:03:af:db:f9:e0:02:33:ba:c7:28:42:c7:80:08:09:f9: bc:b4:de:96:84:45:56:83:12:b1:79:1a:a9:6d:81:71:65:09: d4:81:07:89 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OUioJB1xHNKAhHAW7bLrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODEwZmRjZWUzZWI2YjViYzZiZDlhNjUxYmU3YmFlMjQ0NWQ0NDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tMwNgfh1oPatXdb5IesfgYKiGKO bDL4S29yyu+qQevCEX0R/Tp5zR2E28Q5t/XSxkrS5n+Oq0G7sOudOka7a4pmO2rn T2QGF8FA4FnplV/sqp8epE4cKDQfzJyNgo7Z07dburdWcjZ6cNudnMtvfaBSSL96 JIOLO+IhXcrLKHluiZNe4Z+NSrUuLODdAx69GBd+m3usT0GoXR90hmPl0Kp5iXGc l3RE62fHFVbSZ+Pg1ejSheqYIq5AGAE3GmtP3De9KKY2zH8vTG7GGlTYq6gbpimz ePADy1ITUiM6xv6A6Hp+M3EdFFcmDlkQGHLscdS73azu7Zo4bkIahOMIhQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHgQ/c7j62tbxr2aZRvnuuJEXURDMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvZUJEOXp1UHJhMXZHdlpwbEctZTY0a1JkUkVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQRw MA0GCSqGSIb3DQEBCwUAA4IBAQAhFYiUuKpo1uGNPucdMwoY5eHnEaWnQRK4pUUh IrN3zaSglbthbIEUrX4KVIyJlqaRVMXKxyd7CuQij0Pl4EhAC6PlLwC6RfBNLnFn jN5ynh6tmLFKWKjn7XMW2RTzoqW7ZqWKTOjZDFGinn6AWSALBSdqJ/RYDrfuKs81 7U2xMSnyawzUEFAqUaT8jftvi52d5pgYknQ1Oau7VEIlhP1uymJXxSBdEG0W9PTc FYoJ7mIRJBC5sMqsvrrGYyKWFvrFrbBh6Q8hVG6qK5uqIbA7JIBZalyBjyUAYQOv 2/ngAjO6xyhCx4AICfm8tN6WhEVWgxKxeRqpbYFxZQnUgQeJ -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:01 2026 by rpki-client