This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yFbs3svPZdmxqUqaU-8rSMYqA20.roa File: yFbs3svPZdmxqUqaU-8rSMYqA20.roa (raw, json) Hash identifier: iIQVxUUUJ3XVlmVge9qH0LwUKQqV5XBzTI+u8OeUt7E= Subject key identifier: C8:56:EC:DE:CB:CF:65:D9:B1:A9:4A:9A:53:EF:2B:48:C6:2A:03:6D Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E395D229E9C08C35C8E9DFD94138637 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yFbs3svPZdmxqUqaU-8rSMYqA20.roa Signing time: Fri 02 Jan 2026 10:20:47 +0000 ROA not before: Fri 02 Jan 2026 10:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213034 IP address blocks: 2a0c:b642:fc0::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:5d:22:9e:9c:08:c3:5c:8e:9d:fd:94:13:86:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c856ecdecbcf65d9b1a94a9a53ef2b48c62a036d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:31:8d:83:7a:14:e9:fd:85:a4:a4:79:71:49: dd:c2:85:fc:54:f4:c3:47:7d:24:54:3b:7e:d5:45: b9:25:ec:7c:d2:6f:6b:2a:ab:15:6b:1a:97:be:54: 49:6c:6f:88:b8:de:7a:2a:b8:0b:63:45:66:c7:3c: a1:3d:29:a3:1a:d9:9d:c5:65:52:fd:9d:4b:38:c3: 9b:9a:ee:3d:6d:25:49:e1:b3:93:f4:13:f6:dc:fd: 3d:4d:02:f3:e7:f9:4c:25:81:a1:75:cd:60:c2:39: 80:ae:84:4f:bd:d9:b2:a9:77:86:85:b2:3f:59:0a: bb:e3:2b:d4:e9:f9:99:1b:e0:c8:f8:e3:3f:b5:7e: 29:7d:32:99:85:50:bd:03:40:42:69:d4:82:d4:cd: 68:92:b1:a3:2d:f8:d0:ac:4e:cc:ed:6a:b5:48:ff: 3d:6e:6d:c4:61:45:7a:51:1f:23:6c:a9:68:e7:c1: 39:5d:b4:e5:42:4f:4e:60:5f:1b:da:1c:40:9e:8f: e0:7a:46:b8:db:47:7c:c4:76:70:74:b9:ef:bc:ea: 0d:04:3d:3d:6d:30:25:03:f7:9c:ce:0f:25:a5:2a: ca:84:6e:ca:a2:ac:1c:19:03:8f:9e:09:15:8d:1d: 22:e4:4c:81:2c:04:f8:fa:85:1e:d2:2b:63:af:95: c4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:56:EC:DE:CB:CF:65:D9:B1:A9:4A:9A:53:EF:2B:48:C6:2A:03:6D X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/yFbs3svPZdmxqUqaU-8rSMYqA20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:fc0::/43 Signature Algorithm: sha256WithRSAEncryption 19:f8:94:c1:ef:47:6c:66:24:b2:2c:a1:28:80:58:53:81:35: 64:1e:80:bf:70:67:5e:ea:77:4a:b7:29:87:35:ea:3e:68:88: 42:8c:b9:4d:a8:05:d9:f4:ac:73:8c:89:46:b4:0e:48:1f:3b: bf:ae:10:fe:7f:23:1d:74:1a:0c:8f:58:6b:3d:7d:0c:d7:4a: 5f:c9:ea:b3:48:2b:91:0a:9e:36:99:0e:79:68:3a:83:0e:72: 01:89:cd:95:0c:e2:eb:85:7b:2a:a4:80:0b:23:8f:c1:88:91: f8:e7:98:e4:35:3c:73:39:44:b8:a2:09:b5:da:e6:29:83:59: 20:4a:72:ab:c8:63:79:d2:20:d9:d7:c2:8c:27:4c:f4:55:44: 68:5a:66:3b:18:e7:5a:a8:be:b1:99:ef:01:96:10:77:1d:e0: b5:4b:08:bb:e0:74:ec:ce:a7:5b:3e:b8:b6:4a:80:a3:52:f1: 25:53:80:b3:b3:9f:ae:81:eb:4a:f0:49:22:c9:aa:d3:5b:23: 8d:b7:bc:c0:2b:48:ac:ce:71:72:08:35:41:ba:b7:66:d2:d9: 38:23:e4:78:04:65:98:e8:2b:d5:f9:b2:64:da:ff:d3:d1:45: 24:6e:3d:ef:3a:52:5e:b0:89:9c:bb:22:49:56:79:aa:94:af: c8:8a:3b:a0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OV0inpwIw1yOnf2UE4Y3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODU2ZWNkZWNiY2Y2NWQ5YjFhOTRhOWE1M2VmMmI0OGM2MmEwMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTGNg3oU6f2FpKR5cUndwoX8VPTD R30kVDt+1UW5Jex80m9rKqsVaxqXvlRJbG+IuN56KrgLY0VmxzyhPSmjGtmdxWVS /Z1LOMObmu49bSVJ4bOT9BP23P09TQLz5/lMJYGhdc1gwjmAroRPvdmyqXeGhbI/ WQq74yvU6fmZG+DI+OM/tX4pfTKZhVC9A0BCadSC1M1okrGjLfjQrE7M7Wq1SP89 bm3EYUV6UR8jbKlo58E5XbTlQk9OYF8b2hxAno/geka420d8xHZwdLnvvOoNBD09 bTAlA/eczg8lpSrKhG7KoqwcGQOPngkVjR0i5EyBLAT4+oUe0itjr5XE/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMhW7N7Lz2XZsalKmlPvK0jGKgNtMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEveUZiczNzdlBaZG14cVVxYVUtOHJTTVlxQTIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKgy2Qg/A MA0GCSqGSIb3DQEBCwUAA4IBAQAZ+JTB70dsZiSyLKEogFhTgTVkHoC/cGde6ndK tymHNeo+aIhCjLlNqAXZ9KxzjIlGtA5IHzu/rhD+fyMddBoMj1hrPX0M10pfyeqz SCuRCp42mQ55aDqDDnIBic2VDOLrhXsqpIALI4/BiJH455jkNTxzOUS4ogm12uYp g1kgSnKryGN50iDZ18KMJ0z0VURoWmY7GOdaqL6xme8BlhB3HeC1Swi74HTszqdb Pri2SoCjUvElU4Czs5+ugetK8EkiyarTWyONt7zAK0isznFyCDVBurdm0tk4I+R4 BGWY6CvV+bJk2v/T0UUkbj3vOlJesImcuyJJVnmqlK/Iijug -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:25 2026 by rpki-client