This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/liPudXcPa0ZQpEjLgharcl4RyDA.roa File: liPudXcPa0ZQpEjLgharcl4RyDA.roa (raw, json) Hash identifier: wBiZXxkMQLAYmKUmepqw4qciG1augIZ/cgpvMMZ2d5w= Subject key identifier: 96:23:EE:75:77:0F:6B:46:50:A4:48:CB:82:16:AB:72:5E:11:C8:30 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E396EF6AE46EB9D6C4DE3B6426CA2A8 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/liPudXcPa0ZQpEjLgharcl4RyDA.roa Signing time: Fri 02 Jan 2026 10:20:51 +0000 ROA not before: Fri 02 Jan 2026 10:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215527 IP address blocks: 2a0c:b641:bd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:6e:f6:ae:46:eb:9d:6c:4d:e3:b6:42:6c:a2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9623ee75770f6b4650a448cb8216ab725e11c830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:56:9d:66:cc:36:f5:ec:1b:18:d8:db:d8:14: 41:2b:8a:9c:47:68:f5:a2:6f:69:5c:a1:45:bb:a4: d7:73:ea:18:62:84:a7:f1:21:67:dd:15:f0:e9:35: c4:8a:07:da:24:81:5c:38:72:e0:09:71:59:74:c0: 60:a0:19:e3:ee:25:c0:69:f2:ea:ba:86:74:0c:f5: 94:16:74:13:96:ef:4d:90:ff:84:48:1d:24:31:bb: d4:98:10:49:65:e7:18:67:05:87:2f:fb:f7:bf:6b: 01:68:7a:ac:95:e0:4b:98:5f:af:cc:40:74:0b:61: 2d:7f:59:cb:0a:c4:8e:58:ea:3b:4b:48:fa:81:11: 5e:3b:85:ae:be:32:1d:3e:c1:3b:59:dc:55:56:79: 67:2f:84:54:de:bc:27:d0:6c:e0:15:ff:28:5d:05: 64:2a:53:1e:53:36:10:b3:b1:92:b3:b7:bb:a9:6a: 90:cb:a3:c2:4d:cb:3a:f2:82:b9:4e:d9:89:b2:8b: 93:98:8a:ea:d8:2b:4d:0e:7c:96:e6:d5:fb:09:80: a3:ae:80:79:12:61:c2:cc:8d:fe:18:d3:aa:95:fa: 31:22:9f:ca:55:d6:96:ba:5a:d3:3f:b3:c9:89:a9: 03:30:a3:6c:cb:e9:ed:06:9c:f8:87:14:12:f2:cd: a0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:23:EE:75:77:0F:6B:46:50:A4:48:CB:82:16:AB:72:5E:11:C8:30 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/liPudXcPa0ZQpEjLgharcl4RyDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:bd0::/44 Signature Algorithm: sha256WithRSAEncryption 7a:50:77:3f:72:a3:43:fc:79:e8:81:62:21:5a:fc:a8:77:a6: 92:e3:38:c9:38:77:96:bb:ad:d7:f8:40:bd:fe:3f:b1:f3:0b: 82:08:50:ad:e1:60:4f:de:fa:bb:11:59:a4:3e:1e:b4:dc:51: 9f:1e:98:99:93:6c:c3:4b:18:45:e6:72:22:da:ec:a6:1a:de: 1f:ff:41:df:36:08:cc:3b:ea:e2:49:e2:c4:bf:85:b4:fd:ea: 10:26:db:b0:64:34:96:86:b0:16:20:c4:f4:b1:ed:3e:dd:1a: eb:ac:6f:4e:72:23:7b:f9:20:34:cf:56:85:0f:33:73:fe:99: 44:3a:cb:a8:4f:c2:00:2c:ae:05:2c:ae:21:2d:62:1c:ba:6d: 20:5d:26:c6:86:26:23:57:0f:c5:7b:2e:a5:55:4c:b4:91:7d: 8c:37:42:f5:08:4e:d4:bd:d8:9e:83:36:d2:a2:bd:3a:95:1a: 40:ae:c8:b6:5c:d3:68:54:c8:02:e1:f7:db:84:d8:33:7d:8c: 49:82:1a:dd:53:23:0d:e1:fd:6b:9e:91:8b:d1:7d:1d:92:ee: e2:0a:e6:35:a0:a0:64:cd:ff:c0:4a:98:d8:bb:6f:e0:19:a2: 4e:80:9f:7e:f3:ef:85:2a:cf:0c:7e:6a:4c:08:86:e3:13:eb: 30:6e:8e:27 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OW72rkbrnWxN47ZCbKKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjIzZWU3NTc3MGY2YjQ2NTBhNDQ4Y2I4MjE2YWI3MjVlMTFjODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1adZsw29ewbGNjb2BRBK4qcR2j1 om9pXKFFu6TXc+oYYoSn8SFn3RXw6TXEigfaJIFcOHLgCXFZdMBgoBnj7iXAafLq uoZ0DPWUFnQTlu9NkP+ESB0kMbvUmBBJZecYZwWHL/v3v2sBaHqsleBLmF+vzEB0 C2Etf1nLCsSOWOo7S0j6gRFeO4WuvjIdPsE7WdxVVnlnL4RU3rwn0GzgFf8oXQVk KlMeUzYQs7GSs7e7qWqQy6PCTcs68oK5TtmJsouTmIrq2CtNDnyW5tX7CYCjroB5 EmHCzI3+GNOqlfoxIp/KVdaWulrTP7PJiakDMKNsy+ntBpz4hxQS8s2glQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJYj7nV3D2tGUKRIy4IWq3JeEcgwMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvbGlQdWRYY1BhMFpRcEVqTGdoYXJjbDRSeURBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQvQ MA0GCSqGSIb3DQEBCwUAA4IBAQB6UHc/cqND/HnogWIhWvyod6aS4zjJOHeWu63X +EC9/j+x8wuCCFCt4WBP3vq7EVmkPh603FGfHpiZk2zDSxhF5nIi2uymGt4f/0Hf NgjMO+riSeLEv4W0/eoQJtuwZDSWhrAWIMT0se0+3RrrrG9OciN7+SA0z1aFDzNz /plEOsuoT8IALK4FLK4hLWIcum0gXSbGhiYjVw/Fey6lVUy0kX2MN0L1CE7Uvdie gzbSor06lRpArsi2XNNoVMgC4ffbhNgzfYxJghrdUyMN4f1rnpGL0X0dku7iCuY1 oKBkzf/ASpjYu2/gGaJOgJ9+8++FKs8MfmpMCIbjE+swbo4n -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:41 2026 by rpki-client