This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/K3MIBZxp4jdfvsKdu08OnwiBE7o.roa File: K3MIBZxp4jdfvsKdu08OnwiBE7o.roa (raw, json) Hash identifier: rmoWJ7KDNYDyYcZUS6xDuFVrAsHd3OdnVCkIJUp9tHQ= Subject key identifier: 2B:73:08:05:9C:69:E2:37:5F:BE:C2:9D:BB:4F:0E:9F:08:81:13:BA Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3930D8727D959A9E1DDD9BF9C79160 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/K3MIBZxp4jdfvsKdu08OnwiBE7o.roa Signing time: Fri 02 Jan 2026 10:20:35 +0000 ROA not before: Fri 02 Jan 2026 10:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200063 IP address blocks: 2a0c:b641:200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:30:d8:72:7d:95:9a:9e:1d:dd:9b:f9:c7:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b7308059c69e2375fbec29dbb4f0e9f088113ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:83:55:58:6b:4b:da:00:65:7c:51:73:22:d5: 65:3a:cf:b1:57:86:a5:97:ad:c9:87:1a:6c:38:5f: e5:5f:34:c7:67:f8:22:eb:3f:b1:d6:b6:75:3d:0f: 50:d7:80:25:e4:2c:88:80:45:f2:7f:9c:93:21:7f: 79:d9:ee:85:15:ad:17:d3:33:f7:00:7e:8e:1b:f0: 38:95:82:8a:02:4a:0e:da:1e:c7:c0:1d:2c:8c:e5: 67:bb:e8:8a:0d:35:2b:64:2e:52:86:55:e5:76:f9: 07:f6:ee:e0:48:cd:af:ce:ae:20:d6:ac:9f:86:c5: 17:dc:8f:23:f9:28:70:c0:9a:73:37:ec:56:50:48: d4:15:01:9a:2f:97:e5:51:9e:da:c5:bb:ca:c1:07: f4:51:63:14:49:5d:46:e5:4e:16:08:ae:a6:07:65: 51:08:ee:9d:f0:1e:d3:06:c3:be:c5:e1:b3:ca:65: a2:28:a5:98:c4:c9:10:60:4f:bd:6a:5b:1c:31:ca: 31:d3:c3:1b:e0:55:8c:ca:0b:82:69:82:fc:68:d0: e5:85:39:74:24:41:a0:99:5d:99:b0:77:62:c1:4d: 4c:91:f7:b4:af:e3:d1:25:d7:53:37:25:df:ea:52: 6a:9e:ed:bc:a3:79:2b:12:8a:f1:3e:f1:54:6f:05: de:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:73:08:05:9C:69:E2:37:5F:BE:C2:9D:BB:4F:0E:9F:08:81:13:BA X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/K3MIBZxp4jdfvsKdu08OnwiBE7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:200::/44 Signature Algorithm: sha256WithRSAEncryption 35:7d:41:35:d8:ea:f5:0d:ac:1f:db:a3:06:96:9b:84:bc:3f: 89:b2:84:53:95:f3:b4:8a:75:cb:fd:b0:7f:96:eb:17:da:3f: 84:16:e9:13:ed:c1:d3:1c:5a:f6:7c:fe:a0:68:c2:62:ad:7f: 44:97:75:a2:74:b6:87:c6:61:bc:08:51:4f:1b:43:a0:13:79: 68:91:72:a4:7a:b0:50:65:a4:a0:35:6e:8b:ce:24:af:9e:fe: 52:89:de:9f:4b:6a:26:0d:2e:6c:5d:1d:e8:43:13:22:ef:9c: a6:f5:6c:34:c8:04:63:c9:14:de:37:88:17:e7:6d:0c:e1:cb: 31:e6:ee:e4:ed:86:f2:22:95:cc:a2:34:e1:58:6e:9c:d1:15: 6f:6f:d3:8b:98:97:66:23:13:63:74:3a:da:c4:65:b9:4c:52: ad:eb:9e:ca:f9:4a:d0:73:15:99:87:99:aa:47:54:d9:61:a6: 71:3e:77:65:8b:05:08:fa:20:e3:3a:07:be:cb:42:3b:57:23: b7:02:d4:bf:06:2e:c1:b4:d9:b7:80:43:e8:dc:6f:62:55:ed: bf:f6:1e:d4:82:7f:47:23:54:7f:72:73:28:ab:bd:a9:01:ee: 24:89:f8:72:0b:0d:04:9c:7d:8a:be:cb:e0:bd:92:0b:ee:b8: 3d:63:02:f6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTDYcn2Vmp4d3Zv5x5FgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjczMDgwNTljNjllMjM3NWZiZWMyOWRiYjRmMGU5ZjA4ODExM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoNVWGtL2gBlfFFzItVlOs+xV4al l63JhxpsOF/lXzTHZ/gi6z+x1rZ1PQ9Q14Al5CyIgEXyf5yTIX952e6FFa0X0zP3 AH6OG/A4lYKKAkoO2h7HwB0sjOVnu+iKDTUrZC5ShlXldvkH9u7gSM2vzq4g1qyf hsUX3I8j+ShwwJpzN+xWUEjUFQGaL5flUZ7axbvKwQf0UWMUSV1G5U4WCK6mB2VR CO6d8B7TBsO+xeGzymWiKKWYxMkQYE+9alscMcox08Mb4FWMyguCaYL8aNDlhTl0 JEGgmV2ZsHdiwU1Mkfe0r+PRJddTNyXf6lJqnu28o3krEorxPvFUbwXe8QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCtzCAWcaeI3X77CnbtPDp8IgRO6MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvSzNNSUJaeHA0amRmdnNLZHUwOE9ud2lCRTdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQIA MA0GCSqGSIb3DQEBCwUAA4IBAQA1fUE12Or1Dawf26MGlpuEvD+JsoRTlfO0inXL /bB/lusX2j+EFukT7cHTHFr2fP6gaMJirX9El3WidLaHxmG8CFFPG0OgE3lokXKk erBQZaSgNW6LziSvnv5Sid6fS2omDS5sXR3oQxMi75ym9Ww0yARjyRTeN4gX520M 4csx5u7k7YbyIpXMojThWG6c0RVvb9OLmJdmIxNjdDraxGW5TFKt657K+UrQcxWZ h5mqR1TZYaZxPndliwUI+iDjOge+y0I7VyO3AtS/Bi7BtNm3gEPo3G9iVe2/9h7U gn9HI1R/cnMoq72pAe4kifhyCw0EnH2KvsvgvZIL7rg9YwL2 -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:56 2026 by rpki-client