This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/59s8eNqYwVH5ydf7xyV2eJR3_TU.roa File: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (raw, json) Hash identifier: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw= Subject key identifier: E7:DB:3C:78:DA:98:C1:51:F9:C9:D7:FB:C7:25:76:78:94:77:FD:35 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019B797F1A7ACB91CCEDC8CAFCBC51D7C258 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/59s8eNqYwVH5ydf7xyV2eJR3_TU.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216213 IP address blocks: 2a14:c880::/29 maxlen: 34 2a14:c880::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1a:7a:cb:91:cc:ed:c8:ca:fc:bc:51:d7:c2:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7db3c78da98c151f9c9d7fbc72576789477fd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:5c:0d:83:6c:f7:37:e3:b8:49:91:6a:4c: 62:a8:b8:0a:a5:99:69:60:3c:77:96:95:37:b4:99: 5a:aa:90:07:84:11:ab:b6:5a:4a:9d:e3:1f:69:f9: b6:a4:76:cb:93:b5:ca:b9:87:4f:97:45:8e:84:cd: a2:64:8a:7b:f1:6b:c7:d1:3f:7f:64:62:fc:bc:a8: 5d:73:a9:49:f9:07:ed:82:9e:09:7e:ce:82:9c:a5: a6:63:e6:cb:fb:6e:07:5c:3d:73:4f:da:d3:91:b7: 33:95:79:da:e3:39:27:98:f9:97:ee:17:7d:cc:23: 4f:3c:d8:59:83:36:64:ee:57:01:8c:57:36:7f:5d: ac:59:bc:ba:47:5a:51:bc:9e:85:1c:49:06:db:18: 61:f6:8b:92:f0:57:c8:72:bf:a4:13:2e:8c:dc:37: d9:65:62:f5:64:e7:c1:d5:3f:4d:2a:63:24:84:d2: fa:61:6f:df:fa:08:6f:46:a4:a1:1d:1a:1f:92:55: 3a:45:94:46:11:41:6c:28:b3:26:47:b5:03:cc:93: a0:5c:76:de:f5:1b:4d:1c:85:bf:96:88:e0:f5:f9: e8:a6:ac:a8:45:cc:65:63:b5:c8:75:95:ef:db:59: 35:21:b3:d6:fe:2c:87:ad:85:0a:6a:00:e8:8a:ea: 71:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DB:3C:78:DA:98:C1:51:F9:C9:D7:FB:C7:25:76:78:94:77:FD:35 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/59s8eNqYwVH5ydf7xyV2eJR3_TU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c880::/29 Signature Algorithm: sha256WithRSAEncryption 4f:8d:22:ca:99:3e:d1:3e:a0:ac:7d:10:58:f6:c8:94:89:57: 44:6e:01:14:d1:36:f9:24:c5:5d:32:8c:15:bc:2c:35:bc:59: c5:83:42:9c:74:98:a3:5d:3b:a5:e2:48:a1:c7:21:f6:6e:c3: a0:15:9f:db:9a:da:db:12:10:6f:10:f6:b0:4a:0c:f4:9f:cc: f4:7c:a6:29:ad:76:c4:3f:92:e1:77:71:b0:85:90:fe:cb:86: ce:41:62:08:0e:4c:50:92:9a:cc:08:51:bf:3a:9d:9d:53:0a: b8:43:a5:d0:b2:da:ba:24:32:cf:1e:74:02:ca:73:2a:4a:25: 51:f9:45:24:4f:c8:ac:57:e7:b8:92:1d:c0:6c:e9:f0:22:f4: 20:d2:57:0f:3e:e9:2e:76:ae:d1:a1:01:78:11:0b:bd:2a:ff: 0f:73:5c:2b:36:13:55:8e:dd:4c:1d:e3:3b:7b:46:6a:a9:96: 07:95:36:a0:a9:5e:73:7b:5d:4f:b0:40:82:5b:0f:f1:de:86: 7a:ff:35:b7:d0:ac:d3:46:f4:42:f5:6c:a5:b2:10:00:cb:43: 08:6b:0b:2c:c4:0e:41:95:c1:e5:2f:f4:c4:49:48:4a:f8:fd: f2:b0:5f:42:f6:c9:03:60:12:a6:a4:da:09:a4:87:92:80:ec: 9a:fe:79:40 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fxp6y5HM7cjK/LxR18JYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2RiM2M3OGRhOThjMTUxZjljOWQ3ZmJjNzI1NzY3ODk0NzdmZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H1cDYNs9zfjuEmRakxiqLgKpZlp YDx3lpU3tJlaqpAHhBGrtlpKneMfafm2pHbLk7XKuYdPl0WOhM2iZIp78WvH0T9/ ZGL8vKhdc6lJ+Qftgp4Jfs6CnKWmY+bL+24HXD1zT9rTkbczlXna4zknmPmX7hd9 zCNPPNhZgzZk7lcBjFc2f12sWby6R1pRvJ6FHEkG2xhh9ouS8FfIcr+kEy6M3DfZ ZWL1ZOfB1T9NKmMkhNL6YW/f+ghvRqShHRofklU6RZRGEUFsKLMmR7UDzJOgXHbe 9RtNHIW/lojg9fnopqyoRcxlY7XIdZXv21k1IbPW/iyHrYUKagDoiupx0QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOfbPHjamMFR+cnX+8cldniUd/01MB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvNTlzOGVOcVl3Vkg1eWRmN3h5VjJlSlIzX1RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhTIgDAN BgkqhkiG9w0BAQsFAAOCAQEAT40iypk+0T6grH0QWPbIlIlXRG4BFNE2+STFXTKM FbwsNbxZxYNCnHSYo107peJIocch9m7DoBWf25ra2xIQbxD2sEoM9J/M9HymKa12 xD+S4XdxsIWQ/suGzkFiCA5MUJKazAhRvzqdnVMKuEOl0LLauiQyzx50AspzKkol UflFJE/IrFfnuJIdwGzp8CL0INJXDz7pLnau0aEBeBELvSr/D3NcKzYTVY7dTB3j O3tGaqmWB5U2oKlec3tdT7BAglsP8d6Gev81t9Cs00b0QvVspbIQAMtDCGsLLMQO QZXB5S/0xElISvj98rBfQvbJA2ASpqTaCaSHkoDsmv55QA== -----END CERTIFICATE-----Generated at Sun Jan 25 03:13:50 2026 by rpki-client