This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ta8cUy4SWIhJYwynRS5cCt4y4iU.roa File: ta8cUy4SWIhJYwynRS5cCt4y4iU.roa (raw, json) Hash identifier: pXsi02H4SFEJJyfXCGnmGOVTdLaAfa5XAOPkreqgddQ= Subject key identifier: B5:AF:1C:53:2E:12:58:88:49:63:0C:A7:45:2E:5C:0A:DE:32:E2:25 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3963BFF88ED626596CA41346423F62 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ta8cUy4SWIhJYwynRS5cCt4y4iU.roa Signing time: Fri 02 Jan 2026 10:20:48 +0000 ROA not before: Fri 02 Jan 2026 10:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213560 IP address blocks: 2a0c:b641:1d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:63:bf:f8:8e:d6:26:59:6c:a4:13:46:42:3f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5af1c532e12588849630ca7452e5c0ade32e225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:85:d0:9e:e6:73:ad:52:55:4e:06:36:9a:e7: 4d:20:49:e7:6e:ef:d1:8d:36:b6:2e:9d:fe:9c:ce: e8:5a:90:3d:02:ba:30:cf:49:5e:6f:ba:35:0e:3f: 93:34:6b:a4:9c:dd:4c:e5:a2:11:07:4f:1e:a6:1d: e9:8f:96:d2:f6:23:96:74:49:33:10:c2:2d:9a:4d: 40:0e:cf:12:ff:d5:f1:0c:7c:51:69:c9:a0:26:25: 95:42:31:35:21:cd:00:cf:1b:87:d5:b6:1b:38:9a: 30:ca:83:29:58:20:a1:61:83:52:31:a7:81:3b:25: 84:c8:ac:e5:b2:44:f2:b2:f3:88:c0:c2:96:de:75: f4:44:6e:5c:68:3a:84:83:ab:e1:cf:52:be:f7:fd: 5c:61:44:74:48:e6:e1:3d:be:79:fa:3d:3b:93:29: 05:e0:b3:a6:c3:a0:d1:09:c7:9a:ce:fc:0b:1a:c2: e8:78:24:ab:9d:d2:6d:fc:7a:7b:80:98:33:47:f9: 0f:25:7d:69:2e:1e:29:80:74:34:a8:aa:63:1e:76: ec:cc:c8:39:81:72:9e:e6:26:28:71:2f:6a:fd:fa: b9:cc:01:36:73:e3:23:ff:98:a2:c1:bb:6c:55:f4: 0f:28:e8:c8:91:02:ce:60:8b:46:b0:c6:74:3b:47: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AF:1C:53:2E:12:58:88:49:63:0C:A7:45:2E:5C:0A:DE:32:E2:25 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ta8cUy4SWIhJYwynRS5cCt4y4iU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:1d0::/44 Signature Algorithm: sha256WithRSAEncryption 88:f3:38:1f:b7:56:40:da:09:60:8e:7d:ef:72:1c:83:a5:6f: 50:08:f7:7a:b5:67:ce:a7:5d:1b:c2:9b:20:85:26:a4:4b:6e: 15:3e:68:60:07:9b:33:99:32:44:d4:3f:fa:e8:d2:6c:6e:fd: 8d:27:fa:93:1d:c1:38:bc:00:0c:1f:0e:07:bf:de:1b:c1:55: ef:e4:85:38:af:c3:a8:d6:a5:26:93:19:4c:f4:fa:68:b4:55: 86:05:6a:62:b8:d1:32:5b:c8:2b:da:fb:64:5b:85:7a:47:f3: 9e:56:1a:3e:f9:20:ca:9d:68:d8:e5:06:b2:6c:86:39:32:cd: 44:b3:f6:40:a8:ad:9e:83:57:6d:11:18:e6:f8:e5:9d:e7:6b: 40:22:8a:4d:c2:ed:72:80:2e:65:1d:83:ef:7f:32:17:75:a0: 7f:26:0c:64:f1:b9:82:ba:92:35:ca:dd:1b:38:b7:b4:4a:95: ff:86:82:c1:b9:d0:5c:cb:c5:b3:1a:8d:10:f1:d1:13:5d:cf: 08:98:8f:1f:ee:38:9e:2b:c8:68:1e:b1:62:76:e8:80:b9:7d: 65:97:22:f4:ad:68:97:a9:9d:07:5a:89:79:91:ce:e3:7a:c9: 3b:08:5e:4d:6e:f2:9a:91:a3:6d:fc:a0:0d:d9:e4:7c:04:7b: e0:72:1b:66 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWO/+I7WJllspBNGQj9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWFmMWM1MzJlMTI1ODg4NDk2MzBjYTc0NTJlNWMwYWRlMzJlMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIXQnuZzrVJVTgY2mudNIEnnbu/R jTa2Lp3+nM7oWpA9Arowz0leb7o1Dj+TNGuknN1M5aIRB08eph3pj5bS9iOWdEkz EMItmk1ADs8S/9XxDHxRacmgJiWVQjE1Ic0AzxuH1bYbOJowyoMpWCChYYNSMaeB OyWEyKzlskTysvOIwMKW3nX0RG5caDqEg6vhz1K+9/1cYUR0SObhPb55+j07kykF 4LOmw6DRCceazvwLGsLoeCSrndJt/Hp7gJgzR/kPJX1pLh4pgHQ0qKpjHnbszMg5 gXKe5iYocS9q/fq5zAE2c+Mj/5iiwbtsVfQPKOjIkQLOYItGsMZ0O0d3nwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLWvHFMuEliISWMMp0UuXAreMuIlMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvdGE4Y1V5NFNXSWhKWXd5blJTNWNDdDR5NGlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQHQ MA0GCSqGSIb3DQEBCwUAA4IBAQCI8zgft1ZA2glgjn3vchyDpW9QCPd6tWfOp10b wpsghSakS24VPmhgB5szmTJE1D/66NJsbv2NJ/qTHcE4vAAMHw4Hv94bwVXv5IU4 r8Oo1qUmkxlM9PpotFWGBWpiuNEyW8gr2vtkW4V6R/OeVho++SDKnWjY5QaybIY5 Ms1Es/ZAqK2eg1dtERjm+OWd52tAIopNwu1ygC5lHYPvfzIXdaB/Jgxk8bmCupI1 yt0bOLe0SpX/hoLBudBcy8WzGo0Q8dETXc8ImI8f7jieK8hoHrFiduiAuX1llyL0 rWiXqZ0HWol5kc7jesk7CF5NbvKakaNt/KAN2eR8BHvgchtm -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:11 2026 by rpki-client