This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1o57KFgFD1moFf-YftZahq7MQCs.roa File: 1o57KFgFD1moFf-YftZahq7MQCs.roa (raw, json) Hash identifier: RND/dKo+yQ8H0C6RvEak9Pgc3YaWk4GvpAjilgMuff8= Subject key identifier: D6:8E:7B:28:58:05:0F:59:A8:15:FF:98:7E:D6:5A:86:AE:CC:40:2B Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B6FBE18E25433BB93E4CC57A0229207F9 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1o57KFgFD1moFf-YftZahq7MQCs.roa Signing time: Tue 30 Dec 2025 14:51:27 +0000 ROA not before: Tue 30 Dec 2025 14:51:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210688 IP address blocks: 2a0c:b641:1b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:be:18:e2:54:33:bb:93:e4:cc:57:a0:22:92:07:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Dec 30 14:51:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d68e7b2858050f59a815ff987ed65a86aecc402b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:65:41:de:82:33:71:b1:2b:15:89:df:09:75: b3:5f:30:71:6f:ab:ab:f7:82:37:1e:06:af:29:ce: 8b:74:59:f3:8c:5d:47:7e:19:f8:ac:ae:21:26:d8: 9e:7b:4b:b1:ee:81:13:6f:0c:c8:04:cf:cb:35:f8: 4f:79:c9:e9:f3:78:a0:f4:db:2e:9c:3d:96:a2:e1: 43:79:3d:3e:15:bf:86:68:31:94:f5:b2:2b:ac:8d: 94:09:d7:da:22:e4:16:a4:7d:06:50:00:15:2e:d0: 8b:90:cd:7b:95:6d:38:aa:7d:3e:72:90:42:ae:aa: fc:ad:c8:a1:ac:76:29:5a:d4:9d:e5:13:af:97:a9: 1a:d0:84:05:8d:dd:b6:fd:d2:c8:7d:87:fb:30:45: 96:96:7f:81:21:93:50:8b:5b:ba:15:0f:e3:53:66: 08:20:19:4a:60:41:85:de:47:53:eb:1d:a4:3b:70: a4:29:08:43:bf:ba:7e:4e:67:12:a0:39:1f:e0:2d: f4:50:be:67:4e:29:35:28:bc:29:75:dc:52:e3:ad: 0a:e2:9a:60:4f:28:e3:93:32:b8:8f:e7:81:1b:84: 83:19:ff:39:02:3d:56:3a:33:ad:74:95:55:c3:e0: 33:5d:1e:31:c9:fe:cd:34:ab:8c:95:0c:f4:02:b7: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8E:7B:28:58:05:0F:59:A8:15:FF:98:7E:D6:5A:86:AE:CC:40:2B X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1o57KFgFD1moFf-YftZahq7MQCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:1b0::/44 Signature Algorithm: sha256WithRSAEncryption 66:56:08:0a:88:f8:0a:78:70:7e:bb:61:7d:45:bc:33:2b:f5: 14:13:8a:53:e2:2f:d2:29:9d:8e:a7:1d:f0:64:2c:d9:22:d7: ff:7c:8b:14:2f:6e:4c:03:25:88:aa:c9:dd:cf:19:48:a5:e1: eb:be:59:54:6c:36:b8:fb:46:10:2a:fd:0e:a2:31:d4:69:9b: 0c:83:13:de:8e:24:c0:89:bf:b7:f7:07:2d:09:c5:ba:c2:57: da:09:d7:ab:3d:52:82:a0:10:d2:47:90:38:d0:c8:5c:a2:7c: 09:fc:60:28:e7:77:f0:8d:00:9c:70:0e:95:ff:d6:6d:e6:be: 63:09:8d:05:23:8e:5c:2d:fb:77:ee:50:28:f9:c3:a1:58:6f: c5:5a:d6:14:7a:eb:be:1d:5c:69:fe:42:dd:45:c9:38:d6:ae: b4:8b:0b:77:27:e0:b3:e1:cb:cb:79:31:3c:14:51:a7:5e:19: 27:6b:c9:e9:69:a5:94:e5:6f:c1:1e:94:7c:94:e3:ce:ca:ad: db:37:13:66:10:7c:ba:13:0b:0d:bb:9d:0f:cf:cf:85:7e:be: 5e:c4:a6:fc:1f:4c:fd:9f:8f:f4:8b:3f:b7:1f:f5:8f:a8:9c: b0:a4:a4:b4:51:61:4e:78:5c:25:81:73:2b:69:d5:c0:ce:c4: db:7d:ad:b4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtvvhjiVDO7k+TMV6Aikgf5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjUxMjMwMTQ1MTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjhlN2IyODU4MDUwZjU5YTgxNWZmOTg3ZWQ2NWE4NmFlY2M0MDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGVB3oIzcbErFYnfCXWzXzBxb6ur 94I3HgavKc6LdFnzjF1Hfhn4rK4hJtiee0ux7oETbwzIBM/LNfhPecnp83ig9Nsu nD2WouFDeT0+Fb+GaDGU9bIrrI2UCdfaIuQWpH0GUAAVLtCLkM17lW04qn0+cpBC rqr8rcihrHYpWtSd5ROvl6ka0IQFjd22/dLIfYf7MEWWln+BIZNQi1u6FQ/jU2YI IBlKYEGF3kdT6x2kO3CkKQhDv7p+TmcSoDkf4C30UL5nTik1KLwpddxS460K4ppg TyjjkzK4j+eBG4SDGf85Aj1WOjOtdJVVw+AzXR4xyf7NNKuMlQz0ArdkUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNaOeyhYBQ9ZqBX/mH7WWoauzEArMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvMW81N0tGZ0ZEMW1vRmYtWWZ0WmFocTdNUUNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQGw MA0GCSqGSIb3DQEBCwUAA4IBAQBmVggKiPgKeHB+u2F9RbwzK/UUE4pT4i/SKZ2O px3wZCzZItf/fIsUL25MAyWIqsndzxlIpeHrvllUbDa4+0YQKv0OojHUaZsMgxPe jiTAib+39wctCcW6wlfaCderPVKCoBDSR5A40MhconwJ/GAo53fwjQCccA6V/9Zt 5r5jCY0FI45cLft37lAo+cOhWG/FWtYUeuu+HVxp/kLdRck41q60iwt3J+Cz4cvL eTE8FFGnXhkna8npaaWU5W/BHpR8lOPOyq3bNxNmEHy6EwsNu50Pz8+Ffr5exKb8 H0z9n4/0iz+3H/WPqJywpKS0UWFOeFwlgXMradXAzsTbfa20 -----END CERTIFICATE-----Generated at Wed Dec 31 02:21:44 2025 by rpki-client