This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kP0AfJETNyJQFXe1YiVuhcDQkdo.roa File: kP0AfJETNyJQFXe1YiVuhcDQkdo.roa (raw, json) Hash identifier: RECey1t6+C1rkcTNI1yySA8/MXh4OgilkkWyL3XE+WQ= Subject key identifier: 90:FD:00:7C:91:13:37:22:50:15:77:B5:62:25:6E:85:C0:D0:91:DA Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E395E441BD5498163A7AD86310386C3 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kP0AfJETNyJQFXe1YiVuhcDQkdo.roa Signing time: Fri 02 Jan 2026 10:20:47 +0000 ROA not before: Fri 02 Jan 2026 10:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213201 IP address blocks: 2a0c:b641:6e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:5e:44:1b:d5:49:81:63:a7:ad:86:31:03:86:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90fd007c91133722501577b562256e85c0d091da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d7:1a:76:4f:eb:bb:e2:74:0e:05:12:c0:e5: 42:5c:2d:71:ae:a5:1a:37:50:c4:e6:b4:53:d6:ca: 67:80:bb:06:4c:4a:49:dc:4a:c1:b9:e5:b1:91:62: a7:b7:11:b4:b2:e4:8d:99:31:5c:ad:f7:fa:fc:45: ea:b8:2d:c7:29:64:10:81:e7:ba:6d:6d:0f:6c:bc: 13:4f:fa:5d:5c:ba:6f:e0:ed:a9:e0:7d:2f:93:6a: 33:ea:ff:6a:4c:ef:fd:69:8e:8e:52:9d:30:1b:88: a9:d0:1d:c6:1c:c7:61:f0:b6:ae:a9:de:02:4e:8a: 73:69:58:8c:d9:97:17:5a:ff:c0:0c:a1:98:0d:7d: 1e:5f:8d:8e:e7:82:e1:d7:62:26:8c:16:f3:a8:a1: 7d:eb:de:37:a1:c6:e5:ef:ee:27:2b:04:0d:b6:d0: d6:e0:c5:97:44:c1:fe:cf:d9:3e:3b:6d:5d:f6:c8: b1:b5:62:b4:86:41:08:fd:c4:ee:f5:c6:db:99:d8: 5a:aa:a4:32:76:e0:62:9a:13:71:c2:36:41:c6:8e: c1:f5:31:41:d9:9c:bc:20:dc:9e:8f:c4:5f:1b:48: 73:64:f2:6c:cc:5d:d2:0a:39:7a:b7:5d:2f:c1:a2: f6:a6:a2:dd:6c:77:e7:60:84:a0:6b:59:d6:3a:16: 20:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FD:00:7C:91:13:37:22:50:15:77:B5:62:25:6E:85:C0:D0:91:DA X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kP0AfJETNyJQFXe1YiVuhcDQkdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:6e0::/44 Signature Algorithm: sha256WithRSAEncryption 58:0d:0f:65:86:b9:91:bb:a4:b2:48:c5:4b:29:4b:ea:3f:71: 4e:55:1a:60:50:37:51:c4:03:0a:33:c5:61:e7:07:5e:93:95: 51:33:23:bf:8a:bd:8b:dd:da:66:7d:32:33:c4:df:31:37:81: 03:f4:68:fb:06:bd:74:36:87:bb:04:7b:88:e3:9e:39:df:c7: a5:10:5d:d6:23:5e:2d:06:ec:de:7c:de:65:c5:01:a2:fc:40: 63:80:d0:88:43:b7:f3:31:0d:45:1d:9d:83:46:13:3e:02:6d: 73:51:e8:f3:a3:35:dd:d4:8d:09:a5:a7:b7:e4:13:28:76:5e: e4:2a:84:4d:52:05:92:8a:16:fa:fb:e4:10:f5:d4:32:97:44: 8f:52:f2:bf:55:f9:4e:ac:68:9c:d3:94:21:16:45:08:48:b9: ad:5e:47:3e:84:58:b3:ff:38:ae:5a:de:95:62:8e:15:48:45: 4b:93:38:89:f4:ab:e0:a6:26:b0:63:89:da:16:00:3a:2d:44: ff:d4:b7:61:07:9b:65:07:2b:2f:52:b3:e0:cc:f4:f7:e7:d8: 2d:7d:b7:f7:07:fc:bb:44:a0:b9:1c:28:1d:75:73:8a:0c:22: a8:cd:9c:da:a0:dd:69:69:de:82:5b:cc:c6:2c:99:f1:64:1b: af:e6:d2:a6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OV5EG9VJgWOnrYYxA4bDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGZkMDA3YzkxMTMzNzIyNTAxNTc3YjU2MjI1NmU4NWMwZDA5MWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ncadk/ru+J0DgUSwOVCXC1xrqUa N1DE5rRT1spngLsGTEpJ3ErBueWxkWKntxG0suSNmTFcrff6/EXquC3HKWQQgee6 bW0PbLwTT/pdXLpv4O2p4H0vk2oz6v9qTO/9aY6OUp0wG4ip0B3GHMdh8Lauqd4C TopzaViM2ZcXWv/ADKGYDX0eX42O54Lh12ImjBbzqKF96943ocbl7+4nKwQNttDW 4MWXRMH+z9k+O21d9sixtWK0hkEI/cTu9cbbmdhaqqQyduBimhNxwjZBxo7B9TFB 2Zy8INyej8RfG0hzZPJszF3SCjl6t10vwaL2pqLdbHfnYISga1nWOhYg6QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJD9AHyREzciUBV3tWIlboXA0JHaMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEva1AwQWZKRVROeUpRRlhlMVlpVnVoY0RRa2RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQbg MA0GCSqGSIb3DQEBCwUAA4IBAQBYDQ9lhrmRu6SySMVLKUvqP3FOVRpgUDdRxAMK M8Vh5wdek5VRMyO/ir2L3dpmfTIzxN8xN4ED9Gj7Br10Noe7BHuI454538elEF3W I14tBuzefN5lxQGi/EBjgNCIQ7fzMQ1FHZ2DRhM+Am1zUejzozXd1I0Jpae35BMo dl7kKoRNUgWSihb6++QQ9dQyl0SPUvK/VflOrGic05QhFkUISLmtXkc+hFiz/ziu Wt6VYo4VSEVLkziJ9KvgpiawY4naFgA6LUT/1LdhB5tlBysvUrPgzPT359gtfbf3 B/y7RKC5HCgddXOKDCKozZzaoN1pad6CW8zGLJnxZBuv5tKm -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:09 2026 by rpki-client