This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/t11u2FzYqGIxFOkIZBhYYjKMs1o.roa File: t11u2FzYqGIxFOkIZBhYYjKMs1o.roa (raw, json) Hash identifier: VXjT04HvRKhJdzFHgoPbXjyMwvqHGSYC6XXDVv4sSoY= Subject key identifier: B7:5D:6E:D8:5C:D8:A8:62:31:14:E9:08:64:18:58:62:32:8C:B3:5A Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3942498C70977B675FCBDC86E81DAE Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/t11u2FzYqGIxFOkIZBhYYjKMs1o.roa Signing time: Fri 02 Jan 2026 10:20:40 +0000 ROA not before: Fri 02 Jan 2026 10:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207957 IP address blocks: 2a0c:b641:880::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:42:49:8c:70:97:7b:67:5f:cb:dc:86:e8:1d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b75d6ed85cd8a8623114e90864185862328cb35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:35:4c:4c:c6:93:83:02:8e:6d:6e:33:04: db:e5:34:40:e3:59:cb:47:08:9f:16:3b:74:1f:40: ec:9f:78:74:d2:3e:7a:71:d9:81:79:ff:fd:b3:e6: b5:a9:de:94:c5:c8:52:c5:10:43:93:09:80:34:ab: 02:49:14:00:3d:e2:5e:c4:69:d4:ed:48:41:64:b6: 26:db:a6:f3:77:04:62:f9:ec:e3:e3:7f:9f:c5:ae: e7:c5:a2:95:40:39:02:3f:a0:d3:a0:89:90:d0:a1: 7b:f5:33:36:97:57:b3:3f:54:91:a5:27:42:81:50: 5b:3b:d8:80:56:10:9d:e1:d0:9e:92:20:a6:a9:5a: 85:c1:a9:58:bb:58:ae:e5:84:56:9b:0e:8b:c1:6c: 7d:a8:3a:c7:c2:01:5d:a1:c5:8a:ba:e7:32:78:bb: b3:3a:a5:46:d1:6e:c6:20:0f:f6:36:61:e6:61:dc: 1f:9b:89:06:f2:c5:83:fc:15:91:d0:62:97:90:b5: 24:2e:ae:bb:e2:d2:aa:67:5b:6a:d6:e3:a5:0a:0d: 95:b3:df:50:db:75:09:9c:65:13:17:74:a6:3a:02: fa:82:28:0a:52:f5:8c:d7:c3:cf:54:2d:cf:07:b1: 3e:68:0d:ba:8f:a5:a9:b8:ec:00:b4:01:7d:24:45: 17:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5D:6E:D8:5C:D8:A8:62:31:14:E9:08:64:18:58:62:32:8C:B3:5A X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/t11u2FzYqGIxFOkIZBhYYjKMs1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:880::/44 Signature Algorithm: sha256WithRSAEncryption 83:f1:44:02:60:50:d5:c4:de:da:73:60:13:5c:e7:de:02:a8: aa:13:99:03:65:7b:a5:d1:fe:a6:19:88:b8:bb:82:49:8a:ce: 7c:2d:41:09:b3:40:19:44:db:5d:04:15:c8:48:cb:8b:66:00: f7:66:f0:c0:83:f4:d2:d8:99:93:f1:be:f8:58:36:4a:3d:79: 66:1c:ef:2b:47:ae:71:e9:31:98:22:d8:26:6b:84:49:56:14: 09:f6:ca:1e:b2:35:c7:4a:45:9c:f9:07:ab:36:a7:09:7d:b8: 88:c5:71:71:96:b9:da:8a:ae:07:9f:33:ee:79:0d:cd:3b:19: 24:96:55:c3:a8:62:31:e4:c0:cd:84:76:db:9b:1a:5f:9b:47: 95:cb:0d:56:94:32:f2:32:11:5b:e4:0f:da:58:1d:b8:af:ec: c3:b7:a3:c8:74:0a:4a:3d:5b:d8:57:e4:03:62:bb:89:9f:69: d9:5e:cd:78:b4:a3:a0:0e:43:03:8f:cf:47:ae:ef:d3:fd:c7: c7:e5:7c:e6:96:78:f5:8e:81:30:cf:2b:5b:50:59:56:8e:5a: f2:2f:54:38:ba:6d:93:36:2f:18:12:d8:8c:e6:27:9e:fa:f3: 68:a4:ee:03:31:01:14:52:51:79:3b:72:22:98:55:8d:39:d3: 5a:e0:df:ac -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OUJJjHCXe2dfy9yG6B2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzVkNmVkODVjZDhhODYyMzExNGU5MDg2NDE4NTg2MjMyOGNiMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsA1TEzGk4MCjm1uMwTb5TRA41nL RwifFjt0H0Dsn3h00j56cdmBef/9s+a1qd6UxchSxRBDkwmANKsCSRQAPeJexGnU 7UhBZLYm26bzdwRi+ezj43+fxa7nxaKVQDkCP6DToImQ0KF79TM2l1ezP1SRpSdC gVBbO9iAVhCd4dCekiCmqVqFwalYu1iu5YRWmw6LwWx9qDrHwgFdocWKuucyeLuz OqVG0W7GIA/2NmHmYdwfm4kG8sWD/BWR0GKXkLUkLq674tKqZ1tq1uOlCg2Vs99Q 23UJnGUTF3SmOgL6gigKUvWM18PPVC3PB7E+aA26j6WpuOwAtAF9JEUXLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLddbthc2KhiMRTpCGQYWGIyjLNaMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvdDExdTJGellxR0l4Rk9rSVpCaFlZaktNczFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQiA MA0GCSqGSIb3DQEBCwUAA4IBAQCD8UQCYFDVxN7ac2ATXOfeAqiqE5kDZXul0f6m GYi4u4JJis58LUEJs0AZRNtdBBXISMuLZgD3ZvDAg/TS2JmT8b74WDZKPXlmHO8r R65x6TGYItgma4RJVhQJ9soesjXHSkWc+QerNqcJfbiIxXFxlrnaiq4HnzPueQ3N OxkkllXDqGIx5MDNhHbbmxpfm0eVyw1WlDLyMhFb5A/aWB24r+zDt6PIdApKPVvY V+QDYruJn2nZXs14tKOgDkMDj89Hru/T/cfH5Xzmlnj1joEwzytbUFlWjlryL1Q4 um2TNi8YEtiM5iee+vNopO4DMQEUUlF5O3IimFWNOdNa4N+s -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:51 2026 by rpki-client