This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/f29PnhieHj8gf7nMidK2SiSNGy0.roa File: f29PnhieHj8gf7nMidK2SiSNGy0.roa (raw, json) Hash identifier: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648= Subject key identifier: 7F:6F:4F:9E:18:9E:1E:3F:20:7F:B9:CC:89:D2:B6:4A:24:8D:1B:2D Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019B7F8398695314ACB467C2C0D96BE9D5B8 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/f29PnhieHj8gf7nMidK2SiSNGy0.roa Signing time: Fri 02 Jan 2026 16:21:29 +0000 ROA not before: Fri 02 Jan 2026 16:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209018 IP address blocks: 2a0e:800:ff10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:98:69:53:14:ac:b4:67:c2:c0:d9:6b:e9:d5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jan 2 16:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f6f4f9e189e1e3f207fb9cc89d2b64a248d1b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:d6:60:b5:53:ff:57:38:86:bb:d5:a4:76: 0f:15:c8:7c:f1:8e:d0:d8:56:d3:a7:25:01:dd:7f: e2:a8:e3:9f:44:a1:fc:e5:76:f7:e9:e5:de:f2:7d: df:81:5f:7d:00:3d:dc:bc:a3:ad:04:b9:58:f1:10: e7:e2:ba:55:78:c5:36:fb:c9:95:eb:21:b8:d5:55: 6e:bc:d4:3f:11:5b:28:a8:74:4c:fe:30:46:0c:36: cb:14:ce:db:b0:0c:74:af:41:95:36:d7:62:50:f1: 4f:41:f0:a8:5e:69:e2:7c:78:e4:d8:c8:ba:59:23: d2:3f:09:ed:d4:db:3a:22:b7:a3:51:f4:b6:f3:2c: a7:28:57:21:3a:b2:da:bf:7a:8d:5f:ce:57:60:e2: ed:89:6b:2e:c2:d4:91:fc:2d:d0:e6:6a:71:69:67: 86:bf:7b:9b:b3:72:8d:b9:07:3d:28:fa:46:1c:c2: 74:a9:ca:9c:fb:43:34:dc:06:4e:b2:dd:72:e3:5b: bc:be:a1:41:87:cd:2f:4a:fc:50:a8:5b:f3:3a:dd: 5a:42:a9:a0:ed:37:f5:94:0e:82:8a:a1:fd:c0:d4: fa:c6:d7:5c:f3:8f:39:6f:66:e9:0b:30:47:0d:3d: be:15:8f:26:ae:10:e2:dc:e2:2a:1b:0c:13:cd:72: f6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6F:4F:9E:18:9E:1E:3F:20:7F:B9:CC:89:D2:B6:4A:24:8D:1B:2D X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/f29PnhieHj8gf7nMidK2SiSNGy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:800:ff10::/44 Signature Algorithm: sha256WithRSAEncryption 16:dc:d1:ad:00:70:3f:c2:0c:2f:a4:a5:f4:47:26:49:19:19: 45:1d:a1:86:f5:bf:9d:0b:1a:a9:36:df:73:db:6c:25:6e:7d: a4:00:a6:8c:b9:b1:5a:9f:99:c8:53:a1:68:d7:85:d4:db:26: f5:17:f3:41:65:32:b0:c3:66:75:12:ab:95:f1:1d:b4:ce:f6: 07:20:d8:53:da:1b:7f:61:57:52:c3:72:22:2b:41:c3:1d:38: 11:00:6a:68:61:eb:96:12:c5:50:ae:87:46:f9:bc:8d:15:fb: 0e:14:da:86:49:9a:67:a2:a4:e1:9d:47:12:79:80:36:67:35: 55:29:d6:02:97:d8:f4:e3:ff:4d:18:26:6a:b1:a1:de:a3:af: 44:03:fe:b9:f9:ad:16:35:e0:89:84:7c:e5:66:c5:f9:83:58: 79:36:c7:e9:c9:15:d7:3f:31:8b:63:fc:8f:82:44:a3:6f:cc: d1:7b:c6:f0:1f:7d:38:e8:fc:90:53:17:dd:3e:37:3b:57:b0: 79:7e:b1:7c:a1:57:bd:2a:e8:1b:96:63:36:77:b0:c7:52:3f: ae:6a:6c:3a:c1:f0:e9:5d:48:46:03:99:ac:47:55:50:2d:52: c5:7a:0d:89:95:fd:fd:e9:41:1e:2d:1b:e6:fe:9b:cb:16:af: f5:c7:15:a9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g5hpUxSstGfCwNlr6dW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMTAyMTYyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjZmNGY5ZTE4OWUxZTNmMjA3ZmI5Y2M4OWQyYjY0YTI0OGQxYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMvWYLVT/1c4hrvVpHYPFch88Y7Q 2FbTpyUB3X/iqOOfRKH85Xb36eXe8n3fgV99AD3cvKOtBLlY8RDn4rpVeMU2+8mV 6yG41VVuvNQ/EVsoqHRM/jBGDDbLFM7bsAx0r0GVNtdiUPFPQfCoXmnifHjk2Mi6 WSPSPwnt1Ns6IrejUfS28yynKFchOrLav3qNX85XYOLtiWsuwtSR/C3Q5mpxaWeG v3ubs3KNuQc9KPpGHMJ0qcqc+0M03AZOst1y41u8vqFBh80vSvxQqFvzOt1aQqmg 7Tf1lA6CiqH9wNT6xtdc8485b2bpCzBHDT2+FY8mrhDi3OIqGwwTzXL2JwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH9vT54Ynh4/IH+5zInStkokjRstMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvZjI5UG5oaWVIajhnZjduTWlkSzJTaVNOR3kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg4IAP8Q MA0GCSqGSIb3DQEBCwUAA4IBAQAW3NGtAHA/wgwvpKX0RyZJGRlFHaGG9b+dCxqp Nt9z22wlbn2kAKaMubFan5nIU6Fo14XU2yb1F/NBZTKww2Z1EquV8R20zvYHINhT 2ht/YVdSw3IiK0HDHTgRAGpoYeuWEsVQrodG+byNFfsOFNqGSZpnoqThnUcSeYA2 ZzVVKdYCl9j04/9NGCZqsaHeo69EA/65+a0WNeCJhHzlZsX5g1h5NsfpyRXXPzGL Y/yPgkSjb8zRe8bwH3046PyQUxfdPjc7V7B5frF8oVe9KugblmM2d7DHUj+uamw6 wfDpXUhGA5msR1VQLVLFeg2Jlf396UEeLRvm/pvLFq/1xxWp -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:11 2026 by rpki-client