This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rXAQoJ9b9oz-mtUvDYLuNpwHLnE.roa File: rXAQoJ9b9oz-mtUvDYLuNpwHLnE.roa (raw, json) Hash identifier: GEu23q4yPIE3QAuTVOG3xI7TQtd5hl0lc3lbzcGdmSc= Subject key identifier: AD:70:10:A0:9F:5B:F6:8C:FE:9A:D5:2F:0D:82:EE:36:9C:07:2E:71 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3959B089999B7FF9FCAF8BA740EA96 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rXAQoJ9b9oz-mtUvDYLuNpwHLnE.roa Signing time: Fri 02 Jan 2026 10:20:46 +0000 ROA not before: Fri 02 Jan 2026 10:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212625 IP address blocks: 2a0c:b641:2b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:59:b0:89:99:9b:7f:f9:fc:af:8b:a7:40:ea:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad7010a09f5bf68cfe9ad52f0d82ee369c072e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:ed:52:0a:cc:ea:ab:d9:9f:9c:c2:da:d7: dd:72:7c:f8:12:9d:9a:e4:52:be:41:b0:83:90:a6: 47:c9:e7:fe:aa:77:64:3f:6d:28:d1:88:3c:99:5a: 2b:26:92:02:9c:2f:3b:1b:f8:7f:ec:69:6f:62:13: 74:bd:b6:37:15:c9:7a:7d:aa:be:84:13:ba:28:5b: d4:fe:0d:86:38:52:1a:56:b3:ff:ae:b4:17:fd:7f: fb:44:7b:76:21:37:9e:2a:aa:05:ef:3f:cf:4c:6a: 49:78:0c:89:30:bf:5b:0f:7d:16:e4:92:c4:2a:eb: bc:9f:ab:b0:4e:78:21:29:72:73:99:d8:4e:a1:fe: 9b:74:de:0e:70:7d:18:ef:bb:b6:53:b7:cb:13:04: a5:b8:34:49:6b:31:29:19:15:45:96:91:51:68:f7: cc:f3:49:9e:a8:4d:d5:13:48:93:08:ae:95:0b:d6: d0:23:17:21:ed:67:33:48:e2:38:d1:1c:09:cb:91: 27:9f:81:df:5d:2f:c9:cf:c4:72:ac:8b:f3:b2:0d: e4:ed:c7:4c:85:da:ea:d9:3c:fd:c6:7f:b0:5d:f1: 1e:50:f2:e7:77:da:00:72:8b:29:2b:92:7b:04:a9: 27:7f:f0:26:b8:a8:30:59:fd:ba:d1:25:11:5d:8c: 3a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:70:10:A0:9F:5B:F6:8C:FE:9A:D5:2F:0D:82:EE:36:9C:07:2E:71 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rXAQoJ9b9oz-mtUvDYLuNpwHLnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:2b0::/44 Signature Algorithm: sha256WithRSAEncryption 78:5a:8a:83:07:6e:3e:e9:0c:9d:e9:2a:1c:27:41:75:9a:16: b6:56:9a:57:ce:90:d2:53:84:e9:76:37:9f:27:93:00:4c:c9: af:68:45:e1:42:9c:88:c6:4e:5e:e0:4b:d3:df:48:78:80:d8: 9d:4a:b6:39:af:e1:3c:67:fe:ec:b4:39:7f:77:2c:e7:f5:b0: d8:16:bf:7d:07:fa:2e:6e:55:2f:d8:a0:9f:6d:9b:e0:a2:f6: 98:e4:75:58:09:4f:1b:9c:05:01:84:77:bf:1f:ad:97:2e:18: 20:82:28:fa:75:00:80:33:76:5f:39:88:e0:34:62:1a:ba:af: 7a:8b:5e:03:e8:3b:02:a2:84:e8:57:7d:7c:03:b8:df:de:f4: 0e:e2:bf:d5:fe:60:32:7e:0c:05:72:1e:8f:5d:24:76:83:0d: 92:7f:5f:f9:28:69:44:b0:55:9f:af:82:26:00:99:90:f7:37: 5c:13:a3:a1:29:5d:27:04:5b:21:44:3b:4e:73:a2:81:b1:36: 26:73:d0:db:e8:75:45:1d:f3:ad:cd:42:a4:00:5a:99:fc:3e: 86:68:b6:10:ad:1f:3a:75:da:87:6c:0d:4c:64:5f:bd:09:a2: b5:cd:2f:b2:d2:7d:52:e0:fb:1c:d3:f6:33:10:32:d2:2d:5c: 5b:8f:a4:eb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVmwiZmbf/n8r4unQOqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDcwMTBhMDlmNWJmNjhjZmU5YWQ1MmYwZDgyZWUzNjljMDcyZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm3tUgrM6qvZn5zC2tfdcnz4Ep2a 5FK+QbCDkKZHyef+qndkP20o0Yg8mVorJpICnC87G/h/7GlvYhN0vbY3Fcl6faq+ hBO6KFvU/g2GOFIaVrP/rrQX/X/7RHt2ITeeKqoF7z/PTGpJeAyJML9bD30W5JLE Kuu8n6uwTnghKXJzmdhOof6bdN4OcH0Y77u2U7fLEwSluDRJazEpGRVFlpFRaPfM 80meqE3VE0iTCK6VC9bQIxch7WczSOI40RwJy5Enn4HfXS/Jz8RyrIvzsg3k7cdM hdrq2Tz9xn+wXfEeUPLnd9oAcospK5J7BKknf/AmuKgwWf260SURXYw60wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK1wEKCfW/aM/prVLw2C7jacBy5xMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvclhBUW9KOWI5b3otbXRVdkRZTHVOcHdITG5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQKw MA0GCSqGSIb3DQEBCwUAA4IBAQB4WoqDB24+6Qyd6SocJ0F1mha2VppXzpDSU4Tp djefJ5MATMmvaEXhQpyIxk5e4EvT30h4gNidSrY5r+E8Z/7stDl/dyzn9bDYFr99 B/oublUv2KCfbZvgovaY5HVYCU8bnAUBhHe/H62XLhgggij6dQCAM3ZfOYjgNGIa uq96i14D6DsCooToV318A7jf3vQO4r/V/mAyfgwFch6PXSR2gw2Sf1/5KGlEsFWf r4ImAJmQ9zdcE6OhKV0nBFshRDtOc6KBsTYmc9Db6HVFHfOtzUKkAFqZ/D6GaLYQ rR86ddqHbA1MZF+9CaK1zS+y0n1S4Psc0/YzEDLSLVxbj6Tr -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:27 2026 by rpki-client