This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/lnJ9vOr8ETSYVUHEypo9PXTqRE4.roa File: lnJ9vOr8ETSYVUHEypo9PXTqRE4.roa (raw, json) Hash identifier: wGYPgrW/Rb3F3pb2P1ToaUY92HKZdRqgb0g1DNQzNLQ= Subject key identifier: 96:72:7D:BC:EA:FC:11:34:98:55:41:C4:CA:9A:3D:3D:74:EA:44:4E Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3942FD5877EAE6EA4AFBCA792384E1 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/lnJ9vOr8ETSYVUHEypo9PXTqRE4.roa Signing time: Fri 02 Jan 2026 10:20:40 +0000 ROA not before: Fri 02 Jan 2026 10:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208029 IP address blocks: 2a0c:b642:5000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:42:fd:58:77:ea:e6:ea:4a:fb:ca:79:23:84:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96727dbceafc1134985541c4ca9a3d3d74ea444e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:70:bd:0d:75:9f:2f:bf:f2:a2:52:ae:84:d0: dd:ef:36:f4:1c:aa:bb:24:ba:8f:a9:36:25:35:51: b1:4a:89:5b:a4:e7:f7:d7:ff:17:63:23:fe:46:ad: 30:47:3f:0d:0d:66:42:ab:1e:24:27:6e:c4:05:4c: d4:fd:c4:95:75:76:38:2d:89:9b:d9:1f:79:2f:52: 6e:8b:fc:1a:60:2c:eb:8e:d3:ef:4e:e4:6e:35:59: 48:3f:aa:c8:8d:2e:8b:62:37:0e:a9:c6:92:0c:6b: 9a:63:8e:7d:f1:f1:70:f1:34:a6:a2:4c:6b:5c:3a: a1:98:ad:4e:d7:71:26:99:c5:97:3f:11:17:e3:10: b5:2f:e7:e1:3c:ce:45:40:99:0b:79:31:45:22:95: e7:30:12:08:e4:89:a1:f9:b2:74:5c:6b:55:66:4c: 8e:30:8b:1c:b9:26:27:d6:ab:a3:73:8b:9f:3f:11: 9c:e7:7d:c7:26:79:88:9f:14:24:af:49:de:6f:66: 16:fe:b1:a6:e4:69:62:ec:f1:69:da:31:f9:ee:a6: 9a:23:ba:34:83:44:6b:ea:29:ec:c6:6e:e0:41:ba: 5b:f5:e7:78:4f:10:a8:1b:2f:55:55:bc:1f:56:e6: 3b:d7:fd:43:28:0b:c3:78:d1:3e:fe:2b:02:1e:ca: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:72:7D:BC:EA:FC:11:34:98:55:41:C4:CA:9A:3D:3D:74:EA:44:4E X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/lnJ9vOr8ETSYVUHEypo9PXTqRE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:5000::/36 Signature Algorithm: sha256WithRSAEncryption 78:2a:d5:14:bd:a1:60:3a:50:02:a8:d5:8b:54:3f:14:52:a2: 64:4c:d0:58:c5:a4:e5:44:c6:75:90:48:a6:72:4d:e2:1b:e8: 2a:4e:1f:c0:9e:41:56:64:3d:52:44:eb:5e:8e:55:21:9a:96: c9:c6:a0:5d:56:80:b8:a3:e0:df:bc:b9:cb:68:3b:d9:cf:ec: 2d:59:e8:9b:a1:8c:94:ab:74:cd:53:4e:9d:0a:38:65:fe:b8: 2c:56:80:ba:47:a0:a6:c3:ec:54:d8:a5:a5:79:55:6f:36:5f: df:77:87:ac:b5:32:26:fa:e8:ad:ba:b9:24:68:21:3e:9f:e9: 19:98:a0:2a:bf:fa:da:b1:b3:5b:5c:99:2a:31:92:39:0e:f3: 0e:31:42:58:6b:b1:f1:ed:2d:b4:b9:6f:d9:e6:dc:df:fc:a2: 9e:a3:bd:77:34:0e:8f:ed:e8:ea:73:5f:6e:45:20:b3:cd:b4: c9:cc:56:56:45:4d:34:5a:c7:12:f3:0f:16:06:68:0d:22:0c: 2c:9a:12:38:37:49:d9:38:09:92:4a:c4:45:9c:10:18:90:0f: ea:5c:4e:c9:e7:a7:9e:31:07:02:ef:88:1f:1d:2a:01:62:22: a4:14:c6:54:dd:e1:72:2b:d9:6e:98:c1:93:71:a7:9e:56:b4: d2:d0:3a:47 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OUL9WHfq5upK+8p5I4ThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjcyN2RiY2VhZmMxMTM0OTg1NTQxYzRjYTlhM2QzZDc0ZWE0NDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnC9DXWfL7/yolKuhNDd7zb0HKq7 JLqPqTYlNVGxSolbpOf31/8XYyP+Rq0wRz8NDWZCqx4kJ27EBUzU/cSVdXY4LYmb 2R95L1Jui/waYCzrjtPvTuRuNVlIP6rIjS6LYjcOqcaSDGuaY4598fFw8TSmokxr XDqhmK1O13EmmcWXPxEX4xC1L+fhPM5FQJkLeTFFIpXnMBII5Imh+bJ0XGtVZkyO MIscuSYn1qujc4ufPxGc533HJnmInxQkr0neb2YW/rGm5Gli7PFp2jH57qaaI7o0 g0Rr6insxm7gQbpb9ed4TxCoGy9VVbwfVuY71/1DKAvDeNE+/isCHsqQ8QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJZyfbzq/BE0mFVBxMqaPT106kROMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvbG5KOXZPcjhFVFNZVlVIRXlwbzlQWFRxUkU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgy2QlAw DQYJKoZIhvcNAQELBQADggEBAHgq1RS9oWA6UAKo1YtUPxRSomRM0FjFpOVExnWQ SKZyTeIb6CpOH8CeQVZkPVJE616OVSGalsnGoF1WgLij4N+8uctoO9nP7C1Z6Juh jJSrdM1TTp0KOGX+uCxWgLpHoKbD7FTYpaV5VW82X993h6y1Mib66K26uSRoIT6f 6RmYoCq/+tqxs1tcmSoxkjkO8w4xQlhrsfHtLbS5b9nm3N/8op6jvXc0Do/t6Opz X25FILPNtMnMVlZFTTRaxxLzDxYGaA0iDCyaEjg3Sdk4CZJKxEWcEBiQD+pcTsnn p54xBwLviB8dKgFiIqQUxlTd4XIr2W6YwZNxp55WtNLQOkc= -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:52 2026 by rpki-client