This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/CZxDjwoqB4QOFIsQCNDw_dKDo2o.roa File: CZxDjwoqB4QOFIsQCNDw_dKDo2o.roa (raw, json) Hash identifier: fKvo/tgzhzmSFkdOZO8OEhheB3WyD+MYf7ggWIjBrww= Subject key identifier: 09:9C:43:8F:0A:2A:07:84:0E:14:8B:10:08:D0:F0:FD:D2:83:A3:6A Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20 Certificate serial: 019B7DC9ADEE2C085A0433C869E3C29B9E20 Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/CZxDjwoqB4QOFIsQCNDw_dKDo2o.roa Signing time: Fri 02 Jan 2026 08:18:47 +0000 ROA not before: Fri 02 Jan 2026 08:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 2a0c:4a00:2b::/48 maxlen: 48 2a0c:4a01:1b::/48 maxlen: 48 2a0c:4a01:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ad:ee:2c:08:5a:04:33:c8:69:e3:c2:9b:9e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20 Validity Not Before: Jan 2 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=099c438f0a2a07840e148b1008d0f0fdd283a36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:f9:1f:a5:a6:6d:80:51:1c:6c:c7:11:3a: 02:59:50:32:2b:06:1b:fd:49:28:92:a1:b2:fe:e1: 0e:62:5b:9b:ec:e6:ef:d5:94:49:58:80:1a:11:26: cb:43:e8:71:31:2d:80:1c:d0:6d:4d:1b:4e:4e:02: 02:74:6f:42:6c:29:b6:bc:19:11:f9:93:36:e8:27: c3:db:04:b2:be:e3:96:fe:1a:d8:33:19:d1:21:c4: da:60:51:68:94:c1:6b:4c:4e:94:44:78:86:f5:8b: 43:91:6f:57:35:6d:34:2e:29:a8:80:c2:96:0e:7a: e9:89:d8:ca:5c:b3:83:df:9d:78:8c:09:d1:2a:42: 20:a8:17:63:4d:2c:38:08:16:71:51:6c:17:39:81: 46:ad:0b:bc:41:3f:c4:df:1e:31:70:a5:da:ed:eb: 38:4f:6b:7e:74:ba:d4:f2:53:27:29:fb:11:37:63: 86:7f:81:2c:c0:f9:c8:2a:49:ec:bc:4e:d6:a5:cf: 34:c5:05:60:d6:d7:83:4e:1f:72:76:a8:12:5f:64: 20:c9:3d:4f:63:d9:e9:49:51:11:ad:09:2f:6f:fe: 4e:5b:a0:1a:1e:bd:13:ea:57:02:c2:a5:9a:61:81: 98:4a:b8:d0:05:b8:82:7f:c2:f7:c3:b6:eb:d3:36: c2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9C:43:8F:0A:2A:07:84:0E:14:8B:10:08:D0:F0:FD:D2:83:A3:6A X509v3 Authority Key Identifier: keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/CZxDjwoqB4QOFIsQCNDw_dKDo2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:4a00:2b::/48 2a0c:4a01:1b::/48 2a0c:4a01:3b::/48 Signature Algorithm: sha256WithRSAEncryption 1e:07:c0:2c:b8:f4:e5:08:80:04:a1:94:f7:8f:bf:4a:ed:95: 7e:79:f7:be:b7:f8:76:37:01:46:69:f2:d3:57:4a:c7:ca:61: bc:7b:dd:6d:cf:b3:26:f8:9b:fa:89:63:b9:83:d9:8c:2d:f6: f3:0f:fb:e5:9a:9b:1e:30:ec:77:f0:1e:04:f9:f8:66:87:85: 1a:d2:10:e2:ad:c9:10:29:92:ea:ad:dc:ba:a7:d0:9a:05:9a: f0:96:34:cf:08:f9:43:e5:92:82:58:37:35:99:ad:f9:c1:1d: 95:de:f2:fa:a6:ac:91:b8:32:9e:41:f8:4c:e0:e6:ec:e7:1e: 18:51:47:32:e3:c7:5b:3a:b2:ca:62:9f:c8:ba:d6:70:e0:14: fc:44:91:74:b9:fc:10:75:5a:89:a0:19:3a:16:f1:f5:c7:b7: 87:37:bc:47:76:94:c6:96:55:e7:e0:55:49:83:e2:60:e8:b9: 85:bc:b2:3d:22:72:88:24:db:6d:77:4a:5d:37:43:87:a5:e0: 67:88:16:58:d0:d3:64:b5:4f:c4:e5:c3:2f:ec:d3:5d:0c:8d: b7:d6:e8:f5:35:14:46:3a:b0:c1:c9:c3:f7:78:cb:be:eb:40: 84:a4:54:16:24:18:18:f8:07:d5:22:34:44:ed:b0:64:86:c1: 78:3f:05:5f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ya3uLAhaBDPIaePCm54gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzI2YmI1NzRiODliOGMxODY2Zjg0NzRiYjFjYjAwMzI2 NGVjMjAwHhcNMjYwMTAyMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTljNDM4ZjBhMmEwNzg0MGUxNDhiMTAwOGQwZjBmZGQyODNhMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/75H6WmbYBRHGzHEToCWVAyKwYb /UkokqGy/uEOYlub7Obv1ZRJWIAaESbLQ+hxMS2AHNBtTRtOTgICdG9CbCm2vBkR +ZM26CfD2wSyvuOW/hrYMxnRIcTaYFFolMFrTE6URHiG9YtDkW9XNW00LimogMKW DnrpidjKXLOD3514jAnRKkIgqBdjTSw4CBZxUWwXOYFGrQu8QT/E3x4xcKXa7es4 T2t+dLrU8lMnKfsRN2OGf4EswPnIKknsvE7Wpc80xQVg1teDTh9ydqgSX2QgyT1P Y9npSVERrQkvb/5OW6AaHr0T6lcCwqWaYYGYSrjQBbiCf8L3w7br0zbC0wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAmcQ48KKgeEDhSLEAjQ8P3Sg6NqMB8GA1UdIwQY MBaAFMHCa7V0uJuMGGb4R0uxywAyZOwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgt ZjJhMmE1ZDUwNDVlLzEvQ1p4RGp3b3FCNFFPRklzUUNORHdfZEtEbzJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgtZjJhMmE1ZDUwNDVl LzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgxKAAAr AwcAKgxKAQAbAwcAKgxKAQA7MA0GCSqGSIb3DQEBCwUAA4IBAQAeB8AsuPTlCIAE oZT3j79K7ZV+efe+t/h2NwFGafLTV0rHymG8e91tz7Mm+Jv6iWO5g9mMLfbzD/vl mpseMOx38B4E+fhmh4Ua0hDirckQKZLqrdy6p9CaBZrwljTPCPlD5ZKCWDc1ma35 wR2V3vL6pqyRuDKeQfhM4Obs5x4YUUcy48dbOrLKYp/IutZw4BT8RJF0ufwQdVqJ oBk6FvH1x7eHN7xHdpTGllXn4FVJg+Jg6LmFvLI9InKIJNttd0pdN0OHpeBniBZY 0NNktU/E5cMv7NNdDI231uj1NRRGOrDBycP3eMu+60CEpFQWJBgY+AfVIjRE7bBk hsF4PwVf -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:37 2026 by rpki-client