This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/szygBXo3IXPSxkyCbt8WJWNhCXQ.roa File: szygBXo3IXPSxkyCbt8WJWNhCXQ.roa (raw, json) Hash identifier: Gm9RvRR0nmp3Wufk9S9NBOP1hImYl4g/Sj/JZ/hngA0= Subject key identifier: B3:3C:A0:05:7A:37:21:73:D2:C6:4C:82:6E:DF:16:25:63:61:09:74 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E396D4763D6E13E7BE5F95CA62EA9E2 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/szygBXo3IXPSxkyCbt8WJWNhCXQ.roa Signing time: Fri 02 Jan 2026 10:20:51 +0000 ROA not before: Fri 02 Jan 2026 10:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215016 IP address blocks: 2a0c:b641:c40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:6d:47:63:d6:e1:3e:7b:e5:f9:5c:a6:2e:a9:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b33ca0057a372173d2c64c826edf162563610974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:98:40:d7:8e:4d:d6:45:ea:c0:c7:24:6e: 9f:b5:26:a1:51:d2:80:e2:e1:e0:86:d4:ec:d5:39: a7:c7:51:43:b6:d1:04:53:a6:51:83:32:b1:eb:02: bb:3b:40:04:35:0b:97:21:28:ac:86:80:55:15:d3: 9a:47:fe:a5:03:14:aa:c5:dc:9f:e8:fe:e8:6b:33: 3e:a9:87:00:66:2c:ef:6f:b4:8c:de:f2:77:db:38: 52:6b:14:91:2a:66:ba:ce:f5:82:7b:f7:9c:71:5e: 04:6f:eb:ca:b4:d8:84:8e:fa:9c:be:14:cb:d2:cc: 5a:05:85:0e:e6:e3:aa:51:78:a2:24:19:90:e8:c3: 7e:ad:af:cb:18:b2:07:40:d1:f9:d3:70:b4:3b:65: 7e:b0:08:c8:f5:3e:8e:c9:bc:67:51:c0:2b:7c:fb: 28:a9:23:77:ef:55:3b:f4:bc:37:da:65:bb:6f:e5: f5:ad:48:7a:ae:4b:aa:fc:7c:46:22:3e:41:ec:40: 0c:95:0b:31:5b:fe:ba:93:df:d2:fc:8c:62:f8:e7: d9:49:62:c4:18:01:c6:ba:08:49:d0:f6:7e:11:5e: cc:c5:d9:45:90:4a:77:c4:9b:df:e7:42:e2:93:5c: 42:a6:e7:83:4e:ad:af:e2:06:4a:88:7b:9d:ac:0a: 5e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3C:A0:05:7A:37:21:73:D2:C6:4C:82:6E:DF:16:25:63:61:09:74 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/szygBXo3IXPSxkyCbt8WJWNhCXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:c40::/44 Signature Algorithm: sha256WithRSAEncryption 85:5b:98:25:38:40:ce:e5:ab:78:5b:4d:ed:c1:b1:9b:a7:55: dd:96:65:8d:73:83:d0:be:7e:d1:08:a7:66:33:4d:62:ce:0a: 64:dd:e5:f5:09:96:ae:2c:4f:a3:f2:d0:d9:4a:77:03:35:3c: 24:20:0c:9d:11:7f:e8:4f:9e:2c:df:ba:1d:8b:68:6c:c1:19: 87:c4:1c:6f:be:fa:f3:da:72:b1:17:3b:96:7e:cc:73:66:39: 8f:d3:9c:f7:2c:38:88:bc:4c:8b:22:8a:21:50:98:84:a1:41: 92:0d:86:41:7d:1f:c5:01:94:43:06:c0:fc:e5:22:03:49:da: 79:51:1c:96:5d:8b:c7:f4:8d:8e:a3:dd:aa:8b:5c:b7:fe:03: 2b:fd:b7:33:6b:ee:be:f8:ab:32:3f:37:3f:3c:13:f1:03:84: fe:09:7b:16:c6:fd:02:59:ad:dd:0e:2f:d4:57:de:01:82:bd: 55:9d:67:ae:35:b2:6a:7e:af:78:09:90:c9:a6:36:80:bc:54: 76:7e:84:15:1f:9e:33:6c:6f:0f:0a:8a:20:87:6f:aa:4a:1b: ca:75:f4:8f:2b:71:8a:e1:55:42:11:55:c7:3f:d1:46:78:32: 65:71:fa:74:61:db:ba:61:09:4c:7c:3e:9b:f6:1c:b8:84:e9: 8d:fb:50:3e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OW1HY9bhPnvl+VymLqniMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzNjYTAwNTdhMzcyMTczZDJjNjRjODI2ZWRmMTYyNTYzNjEwOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudyYQNeOTdZF6sDHJG6ftSahUdKA 4uHghtTs1Tmnx1FDttEEU6ZRgzKx6wK7O0AENQuXISishoBVFdOaR/6lAxSqxdyf 6P7oazM+qYcAZizvb7SM3vJ32zhSaxSRKma6zvWCe/eccV4Eb+vKtNiEjvqcvhTL 0sxaBYUO5uOqUXiiJBmQ6MN+ra/LGLIHQNH503C0O2V+sAjI9T6OybxnUcArfPso qSN371U79Lw32mW7b+X1rUh6rkuq/HxGIj5B7EAMlQsxW/66k9/S/Ixi+OfZSWLE GAHGughJ0PZ+EV7MxdlFkEp3xJvf50Lik1xCpueDTq2v4gZKiHudrApe8wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLM8oAV6NyFz0sZMgm7fFiVjYQl0MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvc3p5Z0JYbzNJWFBTeGt5Q2J0OFdKV05oQ1hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQxA MA0GCSqGSIb3DQEBCwUAA4IBAQCFW5glOEDO5at4W03twbGbp1XdlmWNc4PQvn7R CKdmM01izgpk3eX1CZauLE+j8tDZSncDNTwkIAydEX/oT54s37odi2hswRmHxBxv vvrz2nKxFzuWfsxzZjmP05z3LDiIvEyLIoohUJiEoUGSDYZBfR/FAZRDBsD85SID Sdp5URyWXYvH9I2Oo92qi1y3/gMr/bcza+6++KsyPzc/PBPxA4T+CXsWxv0CWa3d Di/UV94Bgr1VnWeuNbJqfq94CZDJpjaAvFR2foQVH54zbG8PCoogh2+qShvKdfSP K3GK4VVCEVXHP9FGeDJlcfp0Ydu6YQlMfD6b9hy4hOmN+1A+ -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:25 2026 by rpki-client