This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/heXwvkuUpujfYaXS3HbTeSY1gVE.roa File: heXwvkuUpujfYaXS3HbTeSY1gVE.roa (raw, json) Hash identifier: RmlH27/nG/dgJCjXrWS7/rjGrh+yomIk7Ut2ucp7g00= Subject key identifier: 85:E5:F0:BE:4B:94:A6:E8:DF:61:A5:D2:DC:76:D3:79:26:35:81:51 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39445918107454627C92CF4BF8AC5E Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/heXwvkuUpujfYaXS3HbTeSY1gVE.roa Signing time: Fri 02 Jan 2026 10:20:40 +0000 ROA not before: Fri 02 Jan 2026 10:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208753 IP address blocks: 2a0c:b642:a00::/44 maxlen: 48 2a0c:b642:ace::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:44:59:18:10:74:54:62:7c:92:cf:4b:f8:ac:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85e5f0be4b94a6e8df61a5d2dc76d37926358151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d6:13:b2:bd:f9:71:18:63:0b:fb:a9:ba:6a: 27:44:6a:6f:99:6b:95:30:44:e0:cc:0a:b9:bd:83: 6a:22:9f:2d:78:52:6b:e3:26:1f:b7:78:a5:d8:7b: 30:0e:ce:75:93:ff:9a:83:74:eb:15:b5:ef:39:c8: bc:17:0d:99:00:7b:f1:55:c2:10:2e:9e:b0:c1:b4: 48:fe:81:2f:d9:b2:18:24:b4:de:d6:93:91:6d:5d: 4a:85:04:b2:8a:6d:c3:70:0e:a5:22:17:29:ef:13: 24:e8:25:41:9d:7e:dd:3a:35:9f:fe:80:0a:be:b8: 08:25:c6:75:7e:37:68:2c:f0:05:dc:be:ec:aa:8d: 35:a1:24:02:df:34:76:0a:0c:0b:7e:0e:9b:70:91: a9:01:34:1e:ab:aa:6a:93:2c:55:9e:c3:e8:6f:4b: 12:e1:67:07:57:51:a6:2c:08:bd:fc:93:ce:66:69: 5b:e8:a0:53:5e:c4:64:7c:59:63:13:9b:d0:44:b4: 7d:5f:7f:14:c8:df:d6:a5:12:42:7d:ba:4f:da:8c: 24:38:8b:44:ee:24:13:08:07:86:3d:83:65:c0:73: 81:59:a9:9c:38:64:b3:c0:72:db:8f:f5:a8:ce:44: 23:80:24:66:94:e5:ab:b7:92:3a:8a:e6:8f:c7:6b: 0d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E5:F0:BE:4B:94:A6:E8:DF:61:A5:D2:DC:76:D3:79:26:35:81:51 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/heXwvkuUpujfYaXS3HbTeSY1gVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:a00::/44 2a0c:b642:ace::/48 Signature Algorithm: sha256WithRSAEncryption 75:d6:65:2e:c6:13:a1:84:24:75:02:b0:66:22:44:6a:36:4f: 28:ad:d3:d4:69:d4:c3:54:60:ff:93:c4:dd:6e:84:26:46:ea: 98:96:05:3c:4a:ed:ac:9b:df:94:ae:fd:77:83:a6:7e:83:4e: 73:1a:aa:98:66:c1:f0:8a:ab:c4:31:96:e2:27:1b:c9:b5:28: f6:29:1a:a8:fa:b7:4e:fc:55:77:bf:a6:53:92:53:6e:e8:0b: fb:24:23:bd:b8:c1:94:c7:e0:19:6c:b0:f0:7e:77:6e:86:c0: ec:f9:a3:ce:b9:ac:a1:8c:09:c4:b2:66:fa:c2:83:d1:08:c9: a3:5c:90:92:d9:ce:e9:9f:e5:8f:03:ce:6e:54:f7:ec:ed:ce: 5d:92:a5:47:b3:2e:02:e3:a7:da:a5:49:bd:38:1d:a1:c4:ab: ec:3b:3d:6c:b5:59:42:d7:0c:34:3a:93:39:26:0c:39:6e:e7: f2:3f:d2:c6:fe:03:3f:d3:e7:c8:cf:fd:0c:95:25:c1:d4:7c: ed:94:90:de:f7:52:2c:07:87:41:8e:f7:73:fd:a8:81:8a:f9: 3d:87:1b:ac:32:d7:66:55:ea:78:32:0e:68:9d:c2:c3:80:a6: df:c0:50:fe:c2:b5:1d:b1:2a:64:20:23:bb:fe:76:fd:5c:0d: 37:9e:8a:68 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OURZGBB0VGJ8ks9L+KxeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWU1ZjBiZTRiOTRhNmU4ZGY2MWE1ZDJkYzc2ZDM3OTI2MzU4MTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dYTsr35cRhjC/upumonRGpvmWuV METgzAq5vYNqIp8teFJr4yYft3il2HswDs51k/+ag3TrFbXvOci8Fw2ZAHvxVcIQ Lp6wwbRI/oEv2bIYJLTe1pORbV1KhQSyim3DcA6lIhcp7xMk6CVBnX7dOjWf/oAK vrgIJcZ1fjdoLPAF3L7sqo01oSQC3zR2CgwLfg6bcJGpATQeq6pqkyxVnsPob0sS 4WcHV1GmLAi9/JPOZmlb6KBTXsRkfFljE5vQRLR9X38UyN/WpRJCfbpP2owkOItE 7iQTCAeGPYNlwHOBWamcOGSzwHLbj/WozkQjgCRmlOWrt5I6iuaPx2sNTQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIXl8L5LlKbo32Gl0tx203kmNYFRMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvaGVYd3ZrdVVwdWpmWWFYUzNIYlRlU1kxZ1ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgy2QgoA AwcAKgy2QgrOMA0GCSqGSIb3DQEBCwUAA4IBAQB11mUuxhOhhCR1ArBmIkRqNk8o rdPUadTDVGD/k8TdboQmRuqYlgU8Su2sm9+Urv13g6Z+g05zGqqYZsHwiqvEMZbi JxvJtSj2KRqo+rdO/FV3v6ZTklNu6Av7JCO9uMGUx+AZbLDwfnduhsDs+aPOuayh jAnEsmb6woPRCMmjXJCS2c7pn+WPA85uVPfs7c5dkqVHsy4C46fapUm9OB2hxKvs Oz1stVlC1ww0OpM5Jgw5bufyP9LG/gM/0+fIz/0MlSXB1HztlJDe91IsB4dBjvdz /aiBivk9hxusMtdmVep4Mg5oncLDgKbfwFD+wrUdsSpkICO7/nb9XA03nopo -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:47 2026 by rpki-client