This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/h5zvAmJ83d-8IVWweKVwVQbpWfw.roa File: h5zvAmJ83d-8IVWweKVwVQbpWfw.roa (raw, json) Hash identifier: z5b0mSC5FPrLs2/1ADKUW4WLocbNqjqcVGozvGnxCSw= Subject key identifier: 87:9C:EF:02:62:7C:DD:DF:BC:21:55:B0:78:A5:70:55:06:E9:59:FC Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019BE5158540CC952827682CD41B472D6AF7 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/h5zvAmJ83d-8IVWweKVwVQbpWfw.roa Signing time: Thu 22 Jan 2026 09:42:31 +0000 ROA not before: Thu 22 Jan 2026 09:42:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204463 IP address blocks: 2a0c:b641:900::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:15:85:40:cc:95:28:27:68:2c:d4:1b:47:2d:6a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 22 09:42:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=879cef02627cdddfbc2155b078a5705506e959fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:83:c9:85:c5:24:de:a8:b8:73:a0:08:0e: 5e:80:56:67:3a:75:b0:c7:67:cf:41:93:fd:07:7b: 43:41:1f:7f:32:e1:c9:40:cb:2a:d4:b4:8a:c4:82: 71:e2:ef:cf:80:96:52:a0:a9:10:7f:55:f1:04:f3: ee:99:98:a0:cc:d3:70:19:ca:88:d6:a8:66:c7:62: 5d:9a:b6:0c:1b:5e:46:11:13:78:eb:74:b9:8e:a6: 06:71:0b:bb:58:1b:ea:5f:11:42:cf:66:f2:f7:7f: 9f:40:96:67:15:5a:3e:51:e8:ac:57:b4:a4:19:4c: 0f:ea:bf:78:b4:20:41:18:32:17:29:9f:ae:aa:b7: 28:4f:ee:e2:b8:19:67:0f:6c:63:e4:ea:3a:0d:53: 8a:5e:7d:cb:8c:00:f6:5f:84:d0:37:01:b6:f8:2e: de:6c:b2:e3:2f:7f:bb:94:fb:1b:6d:cf:1e:91:d8: 09:01:77:ad:fc:b5:da:10:95:76:64:68:f0:0d:eb: ef:bd:78:b0:89:cf:57:bb:7c:72:7e:a1:0f:c0:7b: 70:6e:bc:47:9b:18:ac:ad:5c:6d:d3:ba:10:75:9d: a6:3f:0f:6d:0a:60:f9:9d:ba:78:59:53:d5:50:68: 27:76:45:b6:2d:dc:92:c3:fd:7e:85:09:8a:bc:9f: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9C:EF:02:62:7C:DD:DF:BC:21:55:B0:78:A5:70:55:06:E9:59:FC X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/h5zvAmJ83d-8IVWweKVwVQbpWfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:900::/44 Signature Algorithm: sha256WithRSAEncryption 66:aa:c2:85:7d:1e:01:87:3c:0d:a3:84:89:8a:5f:70:ba:37: 9c:68:a9:d9:9f:a3:f3:c1:35:d5:3e:3b:14:d9:b2:a3:52:ac: 9b:7c:29:06:69:f8:c5:5f:ea:99:d0:1d:cb:8f:37:ad:0c:8f: 91:ad:9e:8e:e0:cd:8f:fd:d4:6d:ef:fa:0f:c8:af:ea:ad:79: ae:a0:3f:57:6f:cf:e8:fd:ee:2f:1f:23:62:20:fe:28:16:13: ce:d0:7e:7b:28:89:45:5a:e0:43:9d:77:9f:b9:86:e0:34:d7: 68:88:0b:13:a0:5a:c4:cb:d6:8d:45:98:03:3a:da:9a:74:77: 90:79:0d:a5:c9:3c:e4:75:ef:5d:57:b3:aa:15:e8:09:1b:ef: ed:da:2f:eb:7d:60:53:de:19:5f:46:ac:fc:18:5e:8d:d5:61: ae:45:f6:14:e7:c3:9d:0b:7d:7a:31:57:3d:54:3e:d8:d7:ea: 1f:8b:65:45:91:e6:83:10:82:0b:d2:51:16:a2:fe:05:ba:5f: 1e:c1:bc:92:68:cb:9d:f2:99:b1:10:21:46:8d:f4:39:7d:91: 15:b6:86:6a:1c:b1:98:80:c3:3e:5d:1d:42:6f:a7:58:37:d0: ff:fd:6d:fa:07:f5:3d:39:4d:6d:2e:75:1f:20:2d:0c:24:0e: 22:23:77:bd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvlFYVAzJUoJ2gs1BtHLWr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTIyMDk0MjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzljZWYwMjYyN2NkZGRmYmMyMTU1YjA3OGE1NzA1NTA2ZTk1OWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldWDyYXFJN6ouHOgCA5egFZnOnWw x2fPQZP9B3tDQR9/MuHJQMsq1LSKxIJx4u/PgJZSoKkQf1XxBPPumZigzNNwGcqI 1qhmx2JdmrYMG15GERN463S5jqYGcQu7WBvqXxFCz2by93+fQJZnFVo+UeisV7Sk GUwP6r94tCBBGDIXKZ+uqrcoT+7iuBlnD2xj5Oo6DVOKXn3LjAD2X4TQNwG2+C7e bLLjL3+7lPsbbc8ekdgJAXet/LXaEJV2ZGjwDevvvXiwic9Xu3xyfqEPwHtwbrxH mxisrVxt07oQdZ2mPw9tCmD5nbp4WVPVUGgndkW2LdySw/1+hQmKvJ/ivQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIec7wJifN3fvCFVsHilcFUG6Vn8MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvaDV6dkFtSjgzZC04SVZXd2VLVndWUWJwV2Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQkA MA0GCSqGSIb3DQEBCwUAA4IBAQBmqsKFfR4BhzwNo4SJil9wujecaKnZn6PzwTXV PjsU2bKjUqybfCkGafjFX+qZ0B3LjzetDI+RrZ6O4M2P/dRt7/oPyK/qrXmuoD9X b8/o/e4vHyNiIP4oFhPO0H57KIlFWuBDnXefuYbgNNdoiAsToFrEy9aNRZgDOtqa dHeQeQ2lyTzkde9dV7OqFegJG+/t2i/rfWBT3hlfRqz8GF6N1WGuRfYU58OdC316 MVc9VD7Y1+ofi2VFkeaDEIIL0lEWov4Ful8ewbySaMud8pmxECFGjfQ5fZEVtoZq HLGYgMM+XR1Cb6dYN9D//W36B/U9OU1tLnUfIC0MJA4iI3e9 -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:11 2026 by rpki-client