This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tc7Fsb-YXI9StmPYZeX9JxBeX8g.roa File: tc7Fsb-YXI9StmPYZeX9JxBeX8g.roa (raw, json) Hash identifier: IBSRDQZ0xQPjnwxlRKdH/ijQAl2n2AK3Ivbn0CbU4gg= Subject key identifier: B5:CE:C5:B1:BF:98:5C:8F:52:B6:63:D8:65:E5:FD:27:10:5E:5F:C8 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E393239C95BAA8AFE78B48F03D46C6B Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tc7Fsb-YXI9StmPYZeX9JxBeX8g.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201670 IP address blocks: 2a0c:b641:3a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:32:39:c9:5b:aa:8a:fe:78:b4:8f:03:d4:6c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5cec5b1bf985c8f52b663d865e5fd27105e5fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:9d:d2:65:91:e6:14:28:6b:ae:f8:78:de: 4a:69:16:a0:f9:aa:06:01:65:dd:fd:f7:53:e3:de: 0d:4b:7f:e7:64:8d:c8:1b:fa:5d:a2:72:14:8b:79: 56:ea:1e:b2:29:9f:67:51:fe:59:92:74:bc:32:dd: 45:ff:7d:64:34:03:b5:8a:53:0c:a1:96:66:74:88: 17:ec:fa:08:aa:ea:12:1e:29:af:0c:7b:0e:f3:c2: 89:48:94:98:7d:c8:4e:df:84:ad:8d:2d:ba:10:69: b1:72:74:68:52:75:58:e6:14:23:e6:ae:44:ff:e2: c7:5f:ee:f4:cb:9a:80:ad:98:89:af:6c:7d:a1:e8: 27:16:03:e3:2f:7f:7c:eb:01:64:db:a8:0c:81:af: de:da:36:50:87:ca:42:63:1e:f4:0b:8d:44:6d:a0: bc:19:61:f2:5c:77:ea:fe:7e:37:90:e5:67:8f:d0: 09:40:a4:93:85:4d:60:90:5d:34:37:e4:a8:91:e5: 66:5c:ea:fc:08:52:cf:9f:f5:9b:78:09:08:7a:62: 35:7f:aa:77:27:fd:55:dc:a1:21:96:98:aa:9d:6e: 18:f2:62:c5:85:b0:0f:e9:60:5c:34:1f:6b:56:2d: 97:34:2f:4f:4b:c3:95:4f:54:fb:99:43:76:35:32: fe:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CE:C5:B1:BF:98:5C:8F:52:B6:63:D8:65:E5:FD:27:10:5E:5F:C8 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tc7Fsb-YXI9StmPYZeX9JxBeX8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:3a0::/44 Signature Algorithm: sha256WithRSAEncryption 92:27:32:e0:fa:0c:66:d2:c4:bc:f5:2c:77:e1:9f:97:f6:69: 28:95:6a:e7:58:fe:df:3c:91:c4:f2:c2:5f:a7:48:ea:32:cc: e9:82:68:f9:fa:5c:7c:0b:de:e5:3c:3c:50:6e:24:dc:48:4c: 38:83:bd:af:2f:0a:c1:0a:25:08:82:b2:35:71:c7:a8:c9:a7: 2d:b0:99:c2:e9:40:1d:12:a5:df:7a:53:a2:ee:db:15:97:39: 07:c4:65:e5:f0:04:74:1f:2e:22:4e:98:5d:a1:c2:0b:85:80: a2:8c:ee:27:46:15:b9:ad:4b:3a:ec:9a:64:58:2a:72:42:20: 90:ba:b6:f6:e6:70:38:b2:f3:fd:4f:9b:98:09:57:14:7b:d1: ef:df:d4:c6:8d:a4:e4:a8:59:bd:73:4e:f9:a6:bb:a0:2b:05: 08:d6:dc:1d:2b:4d:f3:9d:75:38:62:3d:c6:b2:56:b7:01:ce: 9a:33:b5:40:90:fe:08:1e:a4:d6:22:d6:c2:76:44:89:53:77: 94:fb:08:12:7d:a4:c4:b1:33:6c:78:c0:bd:1f:e7:93:54:c0: 83:a5:a3:1a:9e:7f:ed:b6:49:96:d1:67:94:ee:10:6b:79:a2: 66:09:fa:23:cf:1f:60:15:61:53:19:65:9d:97:f4:63:3a:b7: 6a:d0:5b:97 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTI5yVuqiv54tI8D1GxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWNlYzViMWJmOTg1YzhmNTJiNjYzZDg2NWU1ZmQyNzEwNWU1ZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNud0mWR5hQoa674eN5KaRag+aoG AWXd/fdT494NS3/nZI3IG/pdonIUi3lW6h6yKZ9nUf5ZknS8Mt1F/31kNAO1ilMM oZZmdIgX7PoIquoSHimvDHsO88KJSJSYfchO34StjS26EGmxcnRoUnVY5hQj5q5E /+LHX+70y5qArZiJr2x9oegnFgPjL3986wFk26gMga/e2jZQh8pCYx70C41EbaC8 GWHyXHfq/n43kOVnj9AJQKSThU1gkF00N+SokeVmXOr8CFLPn/WbeAkIemI1f6p3 J/1V3KEhlpiqnW4Y8mLFhbAP6WBcNB9rVi2XNC9PS8OVT1T7mUN2NTL+UwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLXOxbG/mFyPUrZj2GXl/ScQXl/IMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvdGM3RnNiLVlYSTlTdG1QWVplWDlKeEJlWDhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQOg MA0GCSqGSIb3DQEBCwUAA4IBAQCSJzLg+gxm0sS89Sx34Z+X9mkolWrnWP7fPJHE 8sJfp0jqMszpgmj5+lx8C97lPDxQbiTcSEw4g72vLwrBCiUIgrI1cceoyactsJnC 6UAdEqXfelOi7tsVlzkHxGXl8AR0Hy4iTphdocILhYCijO4nRhW5rUs67JpkWCpy QiCQurb25nA4svP9T5uYCVcUe9Hv39TGjaTkqFm9c075prugKwUI1twdK03znXU4 Yj3Gsla3Ac6aM7VAkP4IHqTWItbCdkSJU3eU+wgSfaTEsTNseMC9H+eTVMCDpaMa nn/ttkmW0WeU7hBreaJmCfojzx9gFWFTGWWdl/RjOrdq0FuX -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:23 2026 by rpki-client