This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/nK52KlfRvoDV2Ci0jfjyTSc1J1Q.roa File: nK52KlfRvoDV2Ci0jfjyTSc1J1Q.roa (raw, json) Hash identifier: rrgPeNNbl/81QRKG6qe90ZZwe7wGDKCAjaZKaXWnqwk= Subject key identifier: 9C:AE:76:2A:57:D1:BE:80:D5:D8:28:B4:8D:F8:F2:4D:27:35:27:54 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3953FD7FE3957877FB01BEF72EAF33 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/nK52KlfRvoDV2Ci0jfjyTSc1J1Q.roa Signing time: Fri 02 Jan 2026 10:20:44 +0000 ROA not before: Fri 02 Jan 2026 10:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211123 IP address blocks: 2a0c:b641:360::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:53:fd:7f:e3:95:78:77:fb:01:be:f7:2e:af:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cae762a57d1be80d5d828b48df8f24d27352754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:7d:56:e0:21:16:b2:25:90:65:ec:af:16: cc:35:02:4e:db:a0:25:4d:bd:a2:db:1c:eb:60:53: 5b:70:e5:42:1a:62:96:26:c5:d2:a0:84:db:d6:60: d3:75:5d:84:6f:30:a3:3b:da:98:c8:09:3d:00:52: a6:d9:87:5a:c5:10:d1:5f:d8:d3:39:43:cb:61:98: 73:f6:83:b3:28:ed:28:d9:0c:db:cb:b1:4b:82:ab: 45:bd:bb:f6:bb:0f:c3:be:4f:80:5e:d5:cc:34:0c: e2:33:0e:a0:20:ea:d4:ff:41:c1:46:78:ae:d2:1b: c3:73:2f:69:73:bb:44:e1:b9:0f:a1:6c:40:75:4f: 95:c2:f7:7e:6e:5f:c6:dc:be:ce:35:18:53:0d:73: 36:48:6f:34:fc:72:06:3e:22:f8:d4:db:3d:fa:73: 89:4d:1a:45:5e:d1:63:c5:e5:41:9b:dc:17:a3:f7: 08:24:35:33:ff:36:ac:76:a0:79:79:8c:13:92:b8: a0:83:f9:39:9e:8b:9a:78:a9:9f:70:41:01:8f:ee: c8:cd:0c:19:ae:1f:66:fd:d0:e8:af:a0:4b:18:df: 2e:78:62:da:8e:68:85:f1:5a:d1:c7:55:71:6c:53: d1:eb:e9:01:67:2d:44:35:f6:48:dc:ae:04:33:55: 39:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AE:76:2A:57:D1:BE:80:D5:D8:28:B4:8D:F8:F2:4D:27:35:27:54 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/nK52KlfRvoDV2Ci0jfjyTSc1J1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:360::/44 Signature Algorithm: sha256WithRSAEncryption 0a:5d:67:64:8c:94:ae:b1:1d:0f:76:65:bb:bd:2f:4d:ae:bb: b8:38:80:30:f9:51:67:ee:4b:fd:d7:6a:32:37:00:41:9b:07: 3e:1c:b5:ab:da:e0:46:c2:11:42:d8:b4:03:4d:e3:8a:9e:f7: fd:ce:d8:df:b8:d1:25:a3:68:60:80:5d:bd:5c:04:f4:2b:4c: 7f:b3:32:45:46:8c:d8:ec:8c:ca:81:00:d8:a5:7d:94:aa:ce: 56:38:06:c6:58:95:71:2e:e8:3c:1d:4f:ad:bd:1d:4a:5d:cb: 6b:e6:9f:67:ca:80:bc:d6:76:70:39:df:21:7d:2c:19:02:6b: 53:a7:00:8d:85:2e:1e:4c:87:d3:df:1a:fa:51:86:ce:63:38: 43:f4:27:e2:68:34:3d:20:87:93:ec:51:b9:af:47:f3:25:86: 72:5c:6e:6d:f4:e1:2e:70:a4:02:8c:dc:eb:be:7c:07:b1:21: 3f:09:d1:23:71:42:7b:86:a6:81:42:01:7e:95:86:10:8d:2d: 79:bb:48:1d:de:67:24:46:c8:42:04:a3:0a:92:2a:5e:c1:de: d7:b9:89:3e:dd:b6:15:28:b8:25:00:5a:4d:cf:47:fc:ee:a8: 30:9d:3d:cd:f6:0c:8b:6b:5c:56:ae:81:95:76:3c:ec:4b:42: a4:41:8d:a4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVP9f+OVeHf7Ab73Lq8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2FlNzYyYTU3ZDFiZTgwZDVkODI4YjQ4ZGY4ZjI0ZDI3MzUyNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6l9VuAhFrIlkGXsrxbMNQJO26Al Tb2i2xzrYFNbcOVCGmKWJsXSoITb1mDTdV2EbzCjO9qYyAk9AFKm2YdaxRDRX9jT OUPLYZhz9oOzKO0o2Qzby7FLgqtFvbv2uw/Dvk+AXtXMNAziMw6gIOrU/0HBRniu 0hvDcy9pc7tE4bkPoWxAdU+Vwvd+bl/G3L7ONRhTDXM2SG80/HIGPiL41Ns9+nOJ TRpFXtFjxeVBm9wXo/cIJDUz/zasdqB5eYwTkrigg/k5nouaeKmfcEEBj+7IzQwZ rh9m/dDor6BLGN8ueGLajmiF8VrRx1VxbFPR6+kBZy1ENfZI3K4EM1U5NQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJyudipX0b6A1dgotI348k0nNSdUMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvbks1MktsZlJ2b0RWMkNpMGpmanlUU2MxSjFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQNg MA0GCSqGSIb3DQEBCwUAA4IBAQAKXWdkjJSusR0PdmW7vS9Nrru4OIAw+VFn7kv9 12oyNwBBmwc+HLWr2uBGwhFC2LQDTeOKnvf9ztjfuNElo2hggF29XAT0K0x/szJF RozY7IzKgQDYpX2Uqs5WOAbGWJVxLug8HU+tvR1KXctr5p9nyoC81nZwOd8hfSwZ AmtTpwCNhS4eTIfT3xr6UYbOYzhD9CfiaDQ9IIeT7FG5r0fzJYZyXG5t9OEucKQC jNzrvnwHsSE/CdEjcUJ7hqaBQgF+lYYQjS15u0gd3mckRshCBKMKkipewd7XuYk+ 3bYVKLglAFpNz0f87qgwnT3N9gyLa1xWroGVdjzsS0KkQY2k -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:33 2026 by rpki-client