This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tBstWZ7y_6PWu-SOONkVGeTZozs.roa File: tBstWZ7y_6PWu-SOONkVGeTZozs.roa (raw, json) Hash identifier: PGNGZ04ATc10OcvIko8SMNl65sGPEY5lU21FMugJmis= Subject key identifier: B4:1B:2D:59:9E:F2:FF:A3:D6:BB:E4:8E:38:D9:15:19:E4:D9:A3:3B Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E393129EC96AF9E70A89790E222A135 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tBstWZ7y_6PWu-SOONkVGeTZozs.roa Signing time: Fri 02 Jan 2026 10:20:35 +0000 ROA not before: Fri 02 Jan 2026 10:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200385 IP address blocks: 2a0c:b641:f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:31:29:ec:96:af:9e:70:a8:97:90:e2:22:a1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b41b2d599ef2ffa3d6bbe48e38d91519e4d9a33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:14:c3:73:57:1b:35:9b:5a:8c:cc:76:e9: ea:e5:03:8e:4f:3e:dd:29:6d:cb:ca:6a:e0:02:d6: a0:7a:fe:b4:43:fd:43:10:8c:6a:30:67:91:5e:92: 7a:86:31:bb:a0:b8:36:0d:38:e8:37:a8:4f:4f:9f: 69:8c:64:bc:24:d6:ed:3a:ee:0d:0d:98:80:a9:54: 83:48:de:4c:48:9e:a7:57:9b:cf:b8:b1:10:21:97: 03:10:72:0b:f0:21:10:03:cf:cc:9d:62:e1:41:a5: c3:83:8c:fa:15:2f:ac:df:45:e1:b1:8d:87:fa:e7: 10:e0:50:cf:67:0a:bc:1a:d0:8c:c2:16:00:98:86: d8:30:ab:a4:ac:52:e1:b7:2b:76:45:d4:b2:a0:1d: 21:d9:59:df:f7:51:19:28:c8:4e:a4:69:81:0f:7b: e2:e1:ab:50:11:75:66:89:75:34:b8:5c:7a:d4:d8: c6:2e:2c:07:e6:38:01:dd:7e:2f:f7:20:df:89:30: 81:fa:30:66:0d:4a:8e:fc:e4:fe:49:0e:ab:dd:3e: 96:dc:bc:48:e2:9c:fe:1d:49:b8:1f:20:43:c9:41: 9e:fc:96:4f:a3:4b:4a:5d:c4:a7:b2:a1:32:4a:5c: d5:b7:ea:7d:18:7f:ae:18:bf:c7:28:26:89:72:1a: 5c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1B:2D:59:9E:F2:FF:A3:D6:BB:E4:8E:38:D9:15:19:E4:D9:A3:3B X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tBstWZ7y_6PWu-SOONkVGeTZozs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:f0::/44 Signature Algorithm: sha256WithRSAEncryption 60:53:b1:2e:5a:6d:3a:3e:d6:58:7c:99:54:c5:3b:c8:9f:a6: d8:cb:82:6a:7f:39:83:30:c9:0c:80:5b:49:89:9a:3d:1f:4f: 1e:65:ec:8c:31:1a:e4:6b:a6:21:61:d6:e7:82:27:3e:9a:26: 42:80:15:4e:63:ef:33:9a:0d:93:43:6c:45:01:ad:7e:d1:bb: 40:de:af:69:b2:de:36:21:c7:9a:fb:f6:38:e6:13:cf:64:8d: df:a1:3c:e9:79:a2:09:df:eb:c6:95:4d:7a:22:b4:d7:ee:19: 1b:21:39:2b:33:0d:5e:fb:d5:bb:73:93:5f:f9:a5:c6:a4:11: 52:0f:6d:1a:ad:78:2c:04:03:fe:c1:95:c6:8a:77:50:b0:d8: ad:6f:08:58:de:6a:d9:1c:f5:df:a1:15:ea:f8:ff:db:a3:cd: 8d:d9:5d:29:9e:5d:b2:0e:85:8a:ea:36:4c:a7:f1:20:4a:c0: 4f:07:9f:ee:db:82:a1:8d:c1:d3:92:bb:f2:e5:cb:8d:2b:82: 5d:9a:d3:4d:a0:b8:a0:6b:b1:29:71:4a:0d:20:3e:61:15:3a: c1:74:b0:fa:ba:36:e1:f8:9f:3b:c8:04:79:68:c8:22:8e:65: 4d:1a:b3:c8:75:f2:a6:4f:32:8b:3b:ed:9d:1b:4f:e9:ad:48: c5:d0:b4:8a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTEp7JavnnCol5DiIqE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDFiMmQ1OTllZjJmZmEzZDZiYmU0OGUzOGQ5MTUxOWU0ZDlhMzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIwUw3NXGzWbWozMdunq5QOOTz7d KW3LymrgAtagev60Q/1DEIxqMGeRXpJ6hjG7oLg2DTjoN6hPT59pjGS8JNbtOu4N DZiAqVSDSN5MSJ6nV5vPuLEQIZcDEHIL8CEQA8/MnWLhQaXDg4z6FS+s30XhsY2H +ucQ4FDPZwq8GtCMwhYAmIbYMKukrFLhtyt2RdSyoB0h2Vnf91EZKMhOpGmBD3vi 4atQEXVmiXU0uFx61NjGLiwH5jgB3X4v9yDfiTCB+jBmDUqO/OT+SQ6r3T6W3LxI 4pz+HUm4HyBDyUGe/JZPo0tKXcSnsqEySlzVt+p9GH+uGL/HKCaJchpcowIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLQbLVme8v+j1rvkjjjZFRnk2aM7MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvdEJzdFdaN3lfNlBXdS1TT09Oa1ZHZVRab3pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQDw MA0GCSqGSIb3DQEBCwUAA4IBAQBgU7EuWm06PtZYfJlUxTvIn6bYy4JqfzmDMMkM gFtJiZo9H08eZeyMMRrka6YhYdbngic+miZCgBVOY+8zmg2TQ2xFAa1+0btA3q9p st42Icea+/Y45hPPZI3foTzpeaIJ3+vGlU16IrTX7hkbITkrMw1e+9W7c5Nf+aXG pBFSD20arXgsBAP+wZXGindQsNitbwhY3mrZHPXfoRXq+P/bo82N2V0pnl2yDoWK 6jZMp/EgSsBPB5/u24KhjcHTkrvy5cuNK4JdmtNNoLiga7EpcUoNID5hFTrBdLD6 ujbh+J87yAR5aMgijmVNGrPIdfKmTzKLO+2dG0/prUjF0LSK -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:06 2026 by rpki-client