This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/k04ZQwj4Qy-AaBdBgMWKxU9fgvY.roa File: k04ZQwj4Qy-AaBdBgMWKxU9fgvY.roa (raw, json) Hash identifier: uR7iUdntqgvYbxjGg0LRjOSv3Af4gl63LTMT6Ln3YG8= Subject key identifier: 93:4E:19:43:08:F8:43:2F:80:68:17:41:80:C5:8A:C5:4F:5F:82:F6 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3967677D2B77A40F65C9F2942A57F9 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/k04ZQwj4Qy-AaBdBgMWKxU9fgvY.roa Signing time: Fri 02 Jan 2026 10:20:49 +0000 ROA not before: Fri 02 Jan 2026 10:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213984 IP address blocks: 2a0c:b641:d50::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:67:67:7d:2b:77:a4:0f:65:c9:f2:94:2a:57:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=934e194308f8432f8068174180c58ac54f5f82f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:d3:79:45:90:57:07:9e:d4:3a:46:2f:ab: cc:8b:22:30:ac:0b:de:c7:2c:68:38:44:2b:89:61: 62:84:f1:19:76:d3:85:9c:4d:ca:37:a8:35:4e:f2: ce:4e:97:51:4a:35:c9:c4:1b:07:80:bf:32:d9:16: 6e:43:58:cd:ed:a2:48:73:35:99:18:13:a6:5b:6e: ed:51:b4:fc:47:cc:07:3f:31:e4:e9:4a:0e:72:05: de:db:10:d8:2f:4e:ba:02:dd:f0:c0:ea:6c:af:63: 7f:d8:9f:d3:05:46:ae:bd:92:35:4b:97:0a:4d:36: 83:87:86:62:fc:2b:2c:68:7f:84:5c:1f:6a:a3:7c: 05:cb:7a:69:4d:b8:df:69:e8:8a:d8:47:d8:8d:6a: 0f:fe:28:22:0f:3a:21:22:d5:2b:4d:2c:c4:8b:3c: 75:34:8a:2d:6f:56:fd:3d:c6:f7:f5:85:55:70:68: a0:ec:2d:42:09:65:eb:e5:e3:43:65:ab:fd:57:de: bf:f8:dd:e3:38:34:2e:69:98:1a:1a:9f:c7:12:b1: 93:8e:90:7a:2f:b5:c8:17:5d:59:da:24:7b:bd:de: 51:e9:b8:c9:af:49:37:2b:9d:d3:e8:2c:f2:77:16: 01:08:e4:ec:20:a5:c2:a0:2c:f1:f2:3f:79:84:98: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4E:19:43:08:F8:43:2F:80:68:17:41:80:C5:8A:C5:4F:5F:82:F6 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/k04ZQwj4Qy-AaBdBgMWKxU9fgvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:d50::/44 Signature Algorithm: sha256WithRSAEncryption 7e:00:82:28:98:15:dc:62:16:f5:56:85:19:77:ab:31:84:29: 00:4b:fd:72:c4:c4:eb:cf:9f:26:b1:01:d9:83:a9:84:e2:b7: 59:e2:1c:45:fe:b2:ab:3c:9f:df:90:f2:71:2b:ac:16:8a:ab: 0a:8b:da:1a:4a:33:16:eb:27:02:f8:d3:59:f3:57:7d:e7:a3: 9a:63:10:16:46:ac:50:05:f3:d7:37:f3:90:e4:eb:2e:11:8b: f1:56:10:7e:e5:b5:16:6f:bd:7e:75:88:42:3e:2e:d4:80:05: 80:c5:39:1a:fc:eb:13:bb:e2:9f:bf:0c:af:17:d6:c9:75:d5: f8:e7:0e:b8:b9:f8:0a:11:cc:b4:62:e2:02:d5:b5:91:66:9e: 01:7f:46:e8:0d:50:01:96:5e:c5:a4:54:b4:61:35:78:23:0c: ea:c7:95:69:39:44:b7:c0:ae:b1:68:2e:5e:2d:e0:d3:84:77: 0a:21:10:66:cc:3d:5c:14:7e:f1:99:14:e6:7c:74:a1:0e:2e: 35:a4:ed:2e:b9:bd:fa:39:ac:f3:dd:a3:df:a0:b3:22:95:bb: 54:44:c9:89:1c:a2:86:34:58:ef:cc:94:ed:04:d8:88:d4:15: b3:98:74:a2:41:4d:ea:a0:31:eb:98:a3:1c:2b:d4:63:d0:f4: a9:1c:77:db -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWdnfSt3pA9lyfKUKlf5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzRlMTk0MzA4Zjg0MzJmODA2ODE3NDE4MGM1OGFjNTRmNWY4MmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU7TeUWQVwee1DpGL6vMiyIwrAve xyxoOEQriWFihPEZdtOFnE3KN6g1TvLOTpdRSjXJxBsHgL8y2RZuQ1jN7aJIczWZ GBOmW27tUbT8R8wHPzHk6UoOcgXe2xDYL066At3wwOpsr2N/2J/TBUauvZI1S5cK TTaDh4Zi/CssaH+EXB9qo3wFy3ppTbjfaeiK2EfYjWoP/igiDzohItUrTSzEizx1 NIotb1b9Pcb39YVVcGig7C1CCWXr5eNDZav9V96/+N3jODQuaZgaGp/HErGTjpB6 L7XIF11Z2iR7vd5R6bjJr0k3K53T6CzydxYBCOTsIKXCoCzx8j95hJijiQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJNOGUMI+EMvgGgXQYDFisVPX4L2MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvazA0WlF3ajRReS1BYUJkQmdNV0t4VTlmZ3ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQ1Q MA0GCSqGSIb3DQEBCwUAA4IBAQB+AIIomBXcYhb1VoUZd6sxhCkAS/1yxMTrz58m sQHZg6mE4rdZ4hxF/rKrPJ/fkPJxK6wWiqsKi9oaSjMW6ycC+NNZ81d956OaYxAW RqxQBfPXN/OQ5OsuEYvxVhB+5bUWb71+dYhCPi7UgAWAxTka/OsTu+KfvwyvF9bJ ddX45w64ufgKEcy0YuIC1bWRZp4Bf0boDVABll7FpFS0YTV4Iwzqx5VpOUS3wK6x aC5eLeDThHcKIRBmzD1cFH7xmRTmfHShDi41pO0uub36Oazz3aPfoLMilbtURMmJ HKKGNFjvzJTtBNiI1BWzmHSiQU3qoDHrmKMcK9Rj0PSpHHfb -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:29 2026 by rpki-client