This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/purZ-X0rwPx_y_Xar1xWLbudZ2M.roa File: purZ-X0rwPx_y_Xar1xWLbudZ2M.roa (raw, json) Hash identifier: kjw2lOsp7BznzLmOD77hPuT12Qi4HTeDXlcKRcERCIA= Subject key identifier: A6:EA:D9:F9:7D:2B:C0:FC:7F:CB:F5:DA:AF:5C:56:2D:BB:9D:67:63 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E394B9B2BFBD4FAB57D7590BE976A13 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/purZ-X0rwPx_y_Xar1xWLbudZ2M.roa Signing time: Fri 02 Jan 2026 10:20:42 +0000 ROA not before: Fri 02 Jan 2026 10:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209978 IP address blocks: 2a0c:b641:6b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:4b:9b:2b:fb:d4:fa:b5:7d:75:90:be:97:6a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6ead9f97d2bc0fc7fcbf5daaf5c562dbb9d6763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:c1:21:9a:0a:1b:93:72:bb:82:07:bc:0b: 22:fd:04:17:6b:4d:6d:38:34:18:4f:16:65:12:c0: 7d:1a:18:53:5b:d7:22:3b:75:78:fc:97:48:79:bd: 71:80:70:49:57:ed:99:7d:34:85:d8:df:83:ec:41: 65:11:91:c7:77:9e:28:2b:14:00:3a:73:ba:32:c5: 9b:66:6d:75:70:2a:a0:ad:d8:ac:12:11:e3:96:03: 53:ec:65:33:0a:fd:1f:8d:2a:08:b1:26:ea:b3:f8: dd:66:f4:bc:83:e4:6a:27:6b:fe:6c:d1:fd:89:64: b2:27:c7:76:83:96:06:76:c7:c4:81:bb:4b:fb:09: 41:0d:96:24:01:6a:a1:2b:85:cf:d0:01:f8:36:48: 04:d0:b6:dd:dc:54:80:f7:df:fb:9b:f5:19:64:17: 3c:6e:b8:d4:44:af:60:e9:5d:d8:c2:e0:d8:11:40: 99:4d:63:93:b3:55:78:89:05:bb:ed:cf:31:96:24: 40:89:10:06:98:77:ed:8d:bc:c9:70:cd:22:5f:e7: 52:1a:e2:75:60:29:1a:d2:3f:72:37:9c:41:f8:fa: 9e:09:91:87:37:b0:8b:5c:b8:8f:4d:e9:f6:a9:de: 46:64:f3:82:7d:20:89:6f:78:91:39:fc:d0:c9:92: ff:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EA:D9:F9:7D:2B:C0:FC:7F:CB:F5:DA:AF:5C:56:2D:BB:9D:67:63 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/purZ-X0rwPx_y_Xar1xWLbudZ2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:6b0::/44 Signature Algorithm: sha256WithRSAEncryption 06:3a:3f:0b:8e:00:31:de:e6:c9:ee:fe:e9:ed:b4:f7:98:18: 53:bc:08:8d:63:17:e9:35:db:6a:66:3d:64:44:f0:24:d3:83: e3:54:d7:d1:b4:f6:0e:48:c1:d2:9f:3b:e0:1c:22:a0:ac:05: 1b:59:36:31:a1:c5:e8:93:13:84:10:2e:64:2d:42:4c:14:e5: 99:5e:89:eb:d5:ec:c4:ee:ca:6f:fa:51:a0:49:0b:42:d1:37: ec:a3:c7:e7:c7:d2:de:3c:29:49:bc:45:f7:6b:b0:d6:6c:8e: 9a:80:1b:f7:9e:c8:eb:1c:1c:ba:dd:2f:5f:df:57:c5:04:1a: ef:fb:62:23:d1:6c:cd:34:f5:77:3e:74:20:3b:fc:96:e5:4f: db:55:cb:5e:38:29:6a:2e:df:28:46:90:83:8a:cc:3b:72:60: 11:32:d5:b7:aa:14:51:1b:13:28:36:69:76:61:af:2d:7b:a7: 9c:be:59:dc:77:9c:24:1a:fa:ea:6e:a3:00:00:99:15:5a:e9: dd:7e:90:e7:2d:f2:29:2e:43:86:f8:63:ce:50:48:dd:70:ef: 2a:d2:40:90:45:59:0b:24:4a:0d:46:ef:34:17:60:46:2e:e2: 4b:6d:a8:f5:b3:5d:fa:9e:48:c1:fe:e4:0c:ee:87:d3:90:40: 5a:13:26:eb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OUubK/vU+rV9dZC+l2oTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmVhZDlmOTdkMmJjMGZjN2ZjYmY1ZGFhZjVjNTYyZGJiOWQ2NzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNPBIZoKG5Nyu4IHvAsi/QQXa01t ODQYTxZlEsB9GhhTW9ciO3V4/JdIeb1xgHBJV+2ZfTSF2N+D7EFlEZHHd54oKxQA OnO6MsWbZm11cCqgrdisEhHjlgNT7GUzCv0fjSoIsSbqs/jdZvS8g+RqJ2v+bNH9 iWSyJ8d2g5YGdsfEgbtL+wlBDZYkAWqhK4XP0AH4NkgE0Lbd3FSA99/7m/UZZBc8 brjURK9g6V3YwuDYEUCZTWOTs1V4iQW77c8xliRAiRAGmHftjbzJcM0iX+dSGuJ1 YCka0j9yN5xB+PqeCZGHN7CLXLiPTen2qd5GZPOCfSCJb3iROfzQyZL/iwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKbq2fl9K8D8f8v12q9cVi27nWdjMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvcHVyWi1YMHJ3UHhfeV9YYXIxeFdMYnVkWjJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQaw MA0GCSqGSIb3DQEBCwUAA4IBAQAGOj8LjgAx3ubJ7v7p7bT3mBhTvAiNYxfpNdtq Zj1kRPAk04PjVNfRtPYOSMHSnzvgHCKgrAUbWTYxocXokxOEEC5kLUJMFOWZXonr 1ezE7spv+lGgSQtC0Tfso8fnx9LePClJvEX3a7DWbI6agBv3nsjrHBy63S9f31fF BBrv+2Ij0WzNNPV3PnQgO/yW5U/bVcteOClqLt8oRpCDisw7cmARMtW3qhRRGxMo Nml2Ya8te6ecvlncd5wkGvrqbqMAAJkVWundfpDnLfIpLkOG+GPOUEjdcO8q0kCQ RVkLJEoNRu80F2BGLuJLbaj1s136nkjB/uQM7ofTkEBaEybr -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:57 2026 by rpki-client