This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kVgBfpdABcXTJXwPTJfc38pGkC4.roa File: kVgBfpdABcXTJXwPTJfc38pGkC4.roa (raw, json) Hash identifier: HF9bpc/prFCVQzBPBPf1g+f5BYf6caiwvCofqsiEgs0= Subject key identifier: 91:58:01:7E:97:40:05:C5:D3:25:7C:0F:4C:97:DC:DF:CA:46:90:2E Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3925889CA06C723F94C824125EDA40 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kVgBfpdABcXTJXwPTJfc38pGkC4.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35913 IP address blocks: 2a0c:b642:1a08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:25:88:9c:a0:6c:72:3f:94:c8:24:12:5e:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9158017e974005c5d3257c0f4c97dcdfca46902e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:d6:47:85:8c:8a:bd:24:97:d9:a0:49:2a: 48:6f:9b:d1:2c:32:39:7a:52:20:30:2a:0c:c5:ae: c9:52:85:81:5d:0b:95:4d:23:c8:6a:55:e5:d2:68: b0:64:fb:fc:f1:7d:0c:92:c3:69:39:a5:75:eb:e9: 7c:a5:24:c3:d0:45:02:69:61:2a:c2:e9:03:ab:61: 71:fa:ed:36:73:47:cf:34:3c:c7:73:6d:e3:d0:11: 2b:d2:51:18:48:42:f3:d8:d0:cc:da:26:db:3f:13: d3:62:c8:69:1f:ef:a9:cb:5a:79:17:f9:00:c6:f1: 45:bd:b7:a5:1b:9e:37:2d:a5:33:08:53:b0:3c:5b: 77:ba:01:d7:d6:0c:c9:ca:73:0a:9a:da:e8:e4:b2: 11:47:0f:ee:9c:e3:f4:b1:93:f4:54:b7:ac:86:04: 96:16:11:08:fa:d5:41:e5:7d:61:45:eb:f1:8c:22: 46:4e:0c:43:01:62:4e:d3:d1:bf:d5:70:b7:be:d8: d1:0e:97:5b:09:67:9c:f1:7e:4e:e1:fc:08:b0:f5: a7:5c:2b:06:c0:cf:9f:35:2c:80:02:13:84:e6:ec: 3b:bc:10:c7:ef:19:43:61:d7:f2:03:3f:3d:59:30: 5b:f5:90:97:4d:ad:bd:4b:c8:84:93:e2:6c:60:29: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:58:01:7E:97:40:05:C5:D3:25:7C:0F:4C:97:DC:DF:CA:46:90:2E X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kVgBfpdABcXTJXwPTJfc38pGkC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:1a08::/48 Signature Algorithm: sha256WithRSAEncryption 2a:bf:6a:77:4b:6f:b8:54:8e:7a:66:0e:7a:f9:4f:cf:ec:ab: e6:f6:61:1d:60:90:24:5b:0d:c8:cb:ae:9e:b5:36:e2:02:b6: 70:17:cb:21:6a:9b:77:15:c6:98:6a:d9:14:f6:8b:0c:95:54: f0:f0:28:6a:ed:22:27:6f:3b:4a:86:ee:9c:6a:39:bf:6b:b5: b2:4e:e9:58:18:6f:f3:8d:c0:32:ef:11:cc:d4:d8:c3:52:dd: 0b:6c:1b:92:9c:fb:73:38:a5:d5:5c:ff:78:d6:2f:4c:3a:bd: 61:a4:29:73:87:40:a0:8e:a0:bd:3e:5e:30:14:ce:10:14:74: a4:69:74:2f:37:fe:10:ba:c1:b5:cd:02:63:74:f0:05:df:4a: 09:09:3b:53:e0:67:5c:93:2f:b5:e4:50:40:8d:94:29:ff:45: 68:60:9c:c5:9b:84:38:f8:72:93:87:7b:80:16:24:a7:56:bb: c4:6b:9e:f4:c3:8a:f1:18:ce:87:3d:70:63:f6:c2:e8:81:c5: e0:46:b0:01:89:61:99:6a:b8:a1:35:e7:9c:05:18:0a:93:fd: 06:04:76:00:27:1c:5f:31:a6:91:97:dc:bd:c9:4c:f7:93:86: 80:3d:f4:f9:f1:ce:59:1f:c3:a1:fe:7d:de:ba:a5:67:80:6e: 2f:38:b8:d7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OSWInKBscj+UyCQSXtpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTU4MDE3ZTk3NDAwNWM1ZDMyNTdjMGY0Yzk3ZGNkZmNhNDY5MDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxTWR4WMir0kl9mgSSpIb5vRLDI5 elIgMCoMxa7JUoWBXQuVTSPIalXl0miwZPv88X0MksNpOaV16+l8pSTD0EUCaWEq wukDq2Fx+u02c0fPNDzHc23j0BEr0lEYSELz2NDM2ibbPxPTYshpH++py1p5F/kA xvFFvbelG543LaUzCFOwPFt3ugHX1gzJynMKmtro5LIRRw/unOP0sZP0VLeshgSW FhEI+tVB5X1hRevxjCJGTgxDAWJO09G/1XC3vtjRDpdbCWec8X5O4fwIsPWnXCsG wM+fNSyAAhOE5uw7vBDH7xlDYdfyAz89WTBb9ZCXTa29S8iEk+JsYCkOZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJFYAX6XQAXF0yV8D0yX3N/KRpAuMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEva1ZnQmZwZEFCY1hUSlh3UFRKZmMzOHBHa0M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoI MA0GCSqGSIb3DQEBCwUAA4IBAQAqv2p3S2+4VI56Zg56+U/P7Kvm9mEdYJAkWw3I y66etTbiArZwF8shapt3FcaYatkU9osMlVTw8Chq7SInbztKhu6cajm/a7WyTulY GG/zjcAy7xHM1NjDUt0LbBuSnPtzOKXVXP941i9MOr1hpClzh0CgjqC9Pl4wFM4Q FHSkaXQvN/4QusG1zQJjdPAF30oJCTtT4Gdcky+15FBAjZQp/0VoYJzFm4Q4+HKT h3uAFiSnVrvEa570w4rxGM6HPXBj9sLogcXgRrABiWGZarihNeecBRgKk/0GBHYA JxxfMaaRl9y9yUz3k4aAPfT58c5ZH8Oh/n3euqVngG4vOLjX -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:52 2026 by rpki-client