This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-Tittq0aDFspaFrLMGKZX_Xy78M.roa File: 1-Tittq0aDFspaFrLMGKZX_Xy78M.roa (raw, json) Hash identifier: ElgbTkRDci7aFTA3wJr0Uu4LKKvzQtZOW6hvM5jy3x8= Subject key identifier: F9:38:AD:B6:AD:1A:0C:5B:29:68:5A:CB:30:62:99:5F:F5:F2:EF:C3 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019BEA28E29145C8A6948E812C2C5ED0F657 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-Tittq0aDFspaFrLMGKZX_Xy78M.roa Signing time: Fri 23 Jan 2026 09:21:46 +0000 ROA not before: Fri 23 Jan 2026 09:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202076 IP address blocks: 2a0c:b641:910::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:28:e2:91:45:c8:a6:94:8e:81:2c:2c:5e:d0:f6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 23 09:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f938adb6ad1a0c5b29685acb3062995ff5f2efc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:cb:1c:22:9f:36:37:f6:c8:47:09:3f:da: e0:e1:df:1b:26:c0:57:3d:a5:42:39:51:35:5a:80: 23:a4:f1:34:64:51:f3:a0:c3:0f:70:e6:13:23:b1: 7c:48:c8:f8:e5:2a:22:12:39:7d:66:2e:01:6b:87: 70:d8:c6:c1:90:f7:23:4c:9c:12:9e:df:c6:c4:d7: 7f:b8:e8:8a:05:65:04:58:74:13:8c:a3:1e:08:fb: e6:2f:02:02:4a:d7:3b:d6:ac:5b:cc:32:9e:a7:ea: 6b:b4:37:a7:3a:16:53:af:c3:58:c3:9a:42:a0:40: e6:fe:43:32:21:51:d0:26:6e:1b:c7:e9:55:0c:a8: cd:39:56:f9:39:9c:1f:3a:13:c1:9f:f1:f1:8e:d5: 61:65:80:2b:db:e4:d3:0c:85:fb:29:ee:48:61:13: bd:9e:4a:8d:73:a9:53:b8:5d:f2:25:90:78:5c:c3: 31:94:cd:90:65:40:3b:78:72:f3:25:ee:f1:9c:6a: ca:90:ec:73:37:32:cc:5a:bb:d6:95:11:c4:28:c0: 33:55:7e:73:4a:36:2d:30:7d:d3:01:9c:06:aa:b4: 95:d4:62:c0:1e:9c:11:dd:7d:f8:d5:21:44:81:c7: 70:87:96:af:8d:f2:76:6e:27:ab:df:83:0d:ba:20: 34:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:38:AD:B6:AD:1A:0C:5B:29:68:5A:CB:30:62:99:5F:F5:F2:EF:C3 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-Tittq0aDFspaFrLMGKZX_Xy78M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:910::/44 Signature Algorithm: sha256WithRSAEncryption 1e:ec:52:76:5b:2f:8e:92:65:88:10:28:71:e4:8a:f2:af:79: c5:40:4e:77:fe:be:eb:b9:9d:1c:d9:64:9e:e7:8d:3f:b9:81: d8:f3:d2:2a:47:92:ff:33:ef:cd:ee:2f:2b:e8:e9:7b:63:28: e5:1a:76:27:eb:0d:0d:10:b2:1d:4f:b4:7b:1c:c9:80:a8:5c: 6d:5b:c0:12:c8:87:20:bd:7b:9a:4b:d2:ba:d1:84:2c:e5:1d: 2b:90:75:6d:1e:30:9c:95:f4:db:75:d3:b7:63:ac:b9:57:71: b8:0f:d3:7d:1f:d3:39:4e:d8:aa:fb:26:81:ab:9b:ce:25:ae: 1f:c2:b0:bd:a5:0d:42:12:17:ed:b1:95:f1:d1:eb:cd:79:73: 6b:eb:d6:c1:0d:e6:54:09:ee:aa:79:cd:75:4f:b7:a4:9f:23: 5f:75:54:f3:7a:2a:75:38:ec:d6:77:4f:05:e6:2b:fc:a0:dc: 56:c8:ac:bd:fa:40:c9:8c:1a:74:11:1c:c2:c8:2a:52:65:c9: 4f:be:ca:e3:99:56:a8:02:fc:82:dc:7e:03:c4:d9:b7:23:78: 19:9f:3b:2b:fd:ff:c4:c2:92:22:29:a5:a7:62:18:a1:e0:ec: ca:4b:c6:82:06:7b:14:1d:6f:51:00:3d:e4:5d:a9:83:7b:c0: 53:37:0c:2c -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZvqKOKRRcimlI6BLCxe0PZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTIzMDkyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTM4YWRiNmFkMWEwYzViMjk2ODVhY2IzMDYyOTk1ZmY1ZjJlZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqazLHCKfNjf2yEcJP9rg4d8bJsBX PaVCOVE1WoAjpPE0ZFHzoMMPcOYTI7F8SMj45SoiEjl9Zi4Ba4dw2MbBkPcjTJwS nt/GxNd/uOiKBWUEWHQTjKMeCPvmLwICStc71qxbzDKep+prtDenOhZTr8NYw5pC oEDm/kMyIVHQJm4bx+lVDKjNOVb5OZwfOhPBn/HxjtVhZYAr2+TTDIX7Ke5IYRO9 nkqNc6lTuF3yJZB4XMMxlM2QZUA7eHLzJe7xnGrKkOxzNzLMWrvWlRHEKMAzVX5z SjYtMH3TAZwGqrSV1GLAHpwR3X341SFEgcdwh5avjfJ2bier34MNuiA0nQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPk4rbatGgxbKWhayzBimV/18u/DMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvMS1UaXR0cTBhREZzcGFGckxNR0taWF9YeTc4TS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjkvMmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBm ZC8xL0JaZG9BVFk5TjFlR0ZTNU5CaDUxeUw2elVGZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoMtkEJ EDANBgkqhkiG9w0BAQsFAAOCAQEAHuxSdlsvjpJliBAoceSK8q95xUBOd/6+67md HNlknueNP7mB2PPSKkeS/zPvze4vK+jpe2Mo5Rp2J+sNDRCyHU+0exzJgKhcbVvA EsiHIL17mkvSutGELOUdK5B1bR4wnJX023XTt2OsuVdxuA/TfR/TOU7Yqvsmgaub ziWuH8KwvaUNQhIX7bGV8dHrzXlza+vWwQ3mVAnuqnnNdU+3pJ8jX3VU83oqdTjs 1ndPBeYr/KDcVsisvfpAyYwadBEcwsgqUmXJT77K45lWqAL8gtx+A8TZtyN4GZ87 K/3/xMKSIimlp2IYoeDsykvGggZ7FB1vUQA95F2pg3vAUzcMLA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:58 2026 by rpki-client