This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hdb88l8cYKrZyMZhSIizj1IN11Y.roa File: hdb88l8cYKrZyMZhSIizj1IN11Y.roa (raw, json) Hash identifier: 0lqjPzrcWhnQAJcyHEX7K8dbClqU4m3FpH2+LImxl4M= Subject key identifier: 85:D6:FC:F2:5F:1C:60:AA:D9:C8:C6:61:48:88:B3:8F:52:0D:D7:56 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E396B7E74C1425E2221BB9FD562E65A Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hdb88l8cYKrZyMZhSIizj1IN11Y.roa Signing time: Fri 02 Jan 2026 10:20:50 +0000 ROA not before: Fri 02 Jan 2026 10:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214549 IP address blocks: 2a0c:b641:750::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:6b:7e:74:c1:42:5e:22:21:bb:9f:d5:62:e6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85d6fcf25f1c60aad9c8c6614888b38f520dd756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:bc:ce:9d:85:63:14:30:a9:6e:24:87:69: 05:ac:c0:fa:4d:93:56:a6:9e:96:1c:c9:1c:4f:06: c8:45:e0:cc:f0:63:b7:fa:3d:e0:ba:ff:3a:0c:b7: 70:52:13:3a:a0:45:7e:31:d6:71:33:ed:1b:06:d4: f5:3c:5e:c5:93:57:c4:66:8d:cd:b1:fb:e3:44:b9: db:8c:56:1b:6c:02:fe:72:f2:5f:8b:c9:f1:88:83: e4:fa:ea:aa:b2:30:52:39:74:61:8e:3d:84:d9:a6: 7d:59:fe:28:de:1a:03:ee:be:ea:0b:f7:a8:13:f8: ab:3d:e6:44:6b:5e:0b:84:a1:35:e5:25:b5:0d:11: 65:4f:37:a8:59:f2:dc:3b:f7:62:9e:d2:81:4e:24: cf:28:1e:00:1b:1c:52:2f:58:21:51:bf:c7:f9:e8: 69:4d:cb:ef:54:64:86:f1:15:53:d9:71:b2:0e:a6: e8:6a:46:0a:d9:95:25:c1:83:2e:34:19:91:fa:7e: 04:95:f2:af:ca:85:c9:8a:dd:28:d5:b8:c5:a3:6f: c3:00:3e:21:1e:92:f8:86:1f:79:2e:8b:de:1b:d2: 6f:52:60:bc:68:11:0e:35:e2:bd:75:82:4c:c4:e7: 1e:96:f1:64:d9:0d:9b:14:a6:fb:81:88:18:43:6e: 14:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:FC:F2:5F:1C:60:AA:D9:C8:C6:61:48:88:B3:8F:52:0D:D7:56 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hdb88l8cYKrZyMZhSIizj1IN11Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:750::/44 Signature Algorithm: sha256WithRSAEncryption 69:42:7e:fa:76:28:46:ca:e0:1f:60:4c:4b:0c:a4:84:05:6e: df:bf:b5:cc:29:0a:65:5f:1f:33:f9:50:f8:ba:ef:21:49:bf: 33:d4:58:a3:dd:ff:1d:4c:a5:d5:95:69:3f:16:0f:ad:85:73: 9f:77:69:6d:ea:c5:81:52:2a:94:53:c3:ad:25:b6:d5:a3:c3: 47:5a:04:41:ca:aa:db:f1:74:ff:c5:2b:67:29:b0:42:5b:6c: 7e:5c:9d:0f:16:2c:3c:5c:5f:62:8f:92:b9:63:d6:8c:44:cf: 32:0f:09:27:09:c2:42:58:62:59:1d:c9:01:68:10:74:30:50: 80:ba:44:60:5b:d5:67:4b:c3:f7:da:7e:25:05:32:eb:df:42: 39:18:83:83:af:80:75:7c:4b:1d:ea:f0:3f:fe:26:fc:48:9f: 24:eb:8c:4c:3d:44:1c:57:e3:ea:29:02:c2:90:65:8e:a6:97: 63:67:bc:e7:67:8a:13:2a:68:ff:df:a3:52:f9:4f:9a:b0:1e: 58:cd:3c:46:bb:da:3d:a6:ab:8d:26:2b:c6:21:5e:eb:a8:97: 49:4f:e0:9d:dc:5b:1b:fb:cb:70:1d:12:2b:4f:dd:40:53:2e: 58:99:05:0b:6a:93:ec:00:02:e0:3a:43:05:28:f3:80:61:15: 2b:88:45:ea -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWt+dMFCXiIhu5/VYuZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWQ2ZmNmMjVmMWM2MGFhZDljOGM2NjE0ODg4YjM4ZjUyMGRkNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCq8zp2FYxQwqW4kh2kFrMD6TZNW pp6WHMkcTwbIReDM8GO3+j3guv86DLdwUhM6oEV+MdZxM+0bBtT1PF7Fk1fEZo3N sfvjRLnbjFYbbAL+cvJfi8nxiIPk+uqqsjBSOXRhjj2E2aZ9Wf4o3hoD7r7qC/eo E/irPeZEa14LhKE15SW1DRFlTzeoWfLcO/dintKBTiTPKB4AGxxSL1ghUb/H+ehp TcvvVGSG8RVT2XGyDqboakYK2ZUlwYMuNBmR+n4ElfKvyoXJit0o1bjFo2/DAD4h HpL4hh95LoveG9JvUmC8aBEONeK9dYJMxOcelvFk2Q2bFKb7gYgYQ24UiwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIXW/PJfHGCq2cjGYUiIs49SDddWMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvaGRiODhsOGNZS3JaeU1aaFNJaXpqMUlOMTFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQdQ MA0GCSqGSIb3DQEBCwUAA4IBAQBpQn76dihGyuAfYExLDKSEBW7fv7XMKQplXx8z +VD4uu8hSb8z1Fij3f8dTKXVlWk/Fg+thXOfd2lt6sWBUiqUU8OtJbbVo8NHWgRB yqrb8XT/xStnKbBCW2x+XJ0PFiw8XF9ij5K5Y9aMRM8yDwknCcJCWGJZHckBaBB0 MFCAukRgW9VnS8P32n4lBTLr30I5GIODr4B1fEsd6vA//ib8SJ8k64xMPUQcV+Pq KQLCkGWOppdjZ7znZ4oTKmj/36NS+U+asB5YzTxGu9o9pquNJivGIV7rqJdJT+Cd 3Fsb+8twHRIrT91AUy5YmQULapPsAALgOkMFKPOAYRUriEXq -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:21 2026 by rpki-client