This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/t5E56Ed7fP2FLQSzhdLYlMsiIsY.roa File: t5E56Ed7fP2FLQSzhdLYlMsiIsY.roa (raw, json) Hash identifier: GyFWsa1YaywEA0YESTPmZ0qEdXAgA4RN7EBoxsZLR+I= Subject key identifier: B7:91:39:E8:47:7B:7C:FD:85:2D:04:B3:85:D2:D8:94:CB:22:22:C6 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39335FBFD4D9A6E0FFDAF0655B9524 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/t5E56Ed7fP2FLQSzhdLYlMsiIsY.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202641 IP address blocks: 2a0c:b641:860::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:33:5f:bf:d4:d9:a6:e0:ff:da:f0:65:5b:95:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b79139e8477b7cfd852d04b385d2d894cb2222c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:78:93:d3:de:dc:81:ab:6d:26:59:3c:2f: ff:fe:39:91:60:f8:24:c8:37:93:24:6b:ed:a4:90: 05:e6:6b:5e:4f:30:bb:fd:d0:38:02:96:df:9e:6a: 19:ec:e1:9b:c7:04:7d:67:b8:a0:f2:13:79:8a:1b: e3:4b:39:3e:ce:ba:72:b8:6d:50:ee:dc:cd:7a:9c: 2b:08:72:74:55:c9:af:bd:84:66:98:bf:d9:d1:a6: f1:31:59:e1:bd:86:4d:24:c1:44:13:ab:31:25:fc: 6c:bd:c1:e4:83:e5:52:14:64:f0:3c:51:22:de:74: bc:7b:96:5a:78:b2:6e:ef:11:95:4d:0d:24:11:99: ef:b2:50:4e:fe:57:0e:5f:3c:7d:a4:95:79:89:a3: 56:ab:25:8e:28:a8:02:20:3f:d0:e5:c8:d5:07:ff: b1:37:7c:dd:8b:db:96:58:61:7e:e0:46:27:3b:1f: 10:85:7e:6d:cf:61:10:b6:e3:63:11:22:88:df:f6: 40:ea:05:40:83:80:54:b3:96:65:6c:4b:8a:3c:4c: ad:8e:82:8b:79:b7:22:80:f7:28:1a:34:b7:5a:30: 7f:91:e9:65:18:1b:ee:a1:96:3b:08:2a:59:d1:50: 3e:e6:21:34:c5:d9:78:a7:06:c2:be:6f:8e:0b:58: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:91:39:E8:47:7B:7C:FD:85:2D:04:B3:85:D2:D8:94:CB:22:22:C6 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/t5E56Ed7fP2FLQSzhdLYlMsiIsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:860::/44 Signature Algorithm: sha256WithRSAEncryption 7d:18:e0:ea:cb:67:8d:bf:7d:75:3d:4e:fc:be:ad:b7:03:7d: 03:a2:16:6c:8e:fa:c8:4a:0f:c6:e0:61:46:2d:0a:18:0e:00: 21:1e:95:d5:c2:d0:10:ef:fa:3e:da:a6:8a:d3:35:0f:1f:17: 43:d7:3f:18:54:c8:cc:6a:8c:a4:a2:8c:52:eb:81:3f:0d:a1: 28:be:8a:4b:b7:05:f5:fd:92:74:d5:7a:f9:e2:5e:8e:25:05: 9a:5c:ea:01:80:be:00:77:c1:db:44:14:56:92:89:b1:8a:f2: 9d:4e:f1:20:7e:cb:97:4c:2f:d8:92:a0:11:a9:2b:6e:d2:f9: ad:02:71:af:9f:b6:dc:06:c0:dc:fa:48:13:a3:63:21:9b:55: 1a:71:57:63:30:5a:17:06:4a:03:7f:9d:8a:0a:4f:c6:44:20: 37:ea:01:af:97:9b:9e:14:30:94:f4:ac:c2:3a:86:29:17:cd: 16:67:23:e0:72:f6:17:8f:15:0c:84:2a:95:d3:e1:61:47:0f: 4a:75:2d:4e:53:10:61:1e:2b:87:4e:b9:5d:59:77:b1:d3:a8: d9:72:da:8a:05:7b:e2:50:cd:dc:c5:a2:a4:25:b0:89:ca:40: 12:1d:40:00:90:d2:69:13:3d:cb:55:01:a4:78:06:7c:a6:cf: 07:4a:2a:80 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTNfv9TZpuD/2vBlW5UkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzkxMzllODQ3N2I3Y2ZkODUyZDA0YjM4NWQyZDg5NGNiMjIyMmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqt4k9Pe3IGrbSZZPC///jmRYPgk yDeTJGvtpJAF5mteTzC7/dA4ApbfnmoZ7OGbxwR9Z7ig8hN5ihvjSzk+zrpyuG1Q 7tzNepwrCHJ0VcmvvYRmmL/Z0abxMVnhvYZNJMFEE6sxJfxsvcHkg+VSFGTwPFEi 3nS8e5ZaeLJu7xGVTQ0kEZnvslBO/lcOXzx9pJV5iaNWqyWOKKgCID/Q5cjVB/+x N3zdi9uWWGF+4EYnOx8QhX5tz2EQtuNjESKI3/ZA6gVAg4BUs5ZlbEuKPEytjoKL ebcigPcoGjS3WjB/kellGBvuoZY7CCpZ0VA+5iE0xdl4pwbCvm+OC1gilwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLeROehHe3z9hS0Es4XS2JTLIiLGMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvdDVFNTZFZDdmUDJGTFFTemhkTFlsTXNpSXNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQhg MA0GCSqGSIb3DQEBCwUAA4IBAQB9GODqy2eNv311PU78vq23A30DohZsjvrISg/G 4GFGLQoYDgAhHpXVwtAQ7/o+2qaK0zUPHxdD1z8YVMjMaoykooxS64E/DaEovopL twX1/ZJ01Xr54l6OJQWaXOoBgL4Ad8HbRBRWkomxivKdTvEgfsuXTC/YkqARqStu 0vmtAnGvn7bcBsDc+kgTo2Mhm1UacVdjMFoXBkoDf52KCk/GRCA36gGvl5ueFDCU 9KzCOoYpF80WZyPgcvYXjxUMhCqV0+FhRw9KdS1OUxBhHiuHTrldWXex06jZctqK BXviUM3cxaKkJbCJykASHUAAkNJpEz3LVQGkeAZ8ps8HSiqA -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:56 2026 by rpki-client