This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/X_AaoL7Ah4HLoalI2_dxRNVjGT8.roa File: X_AaoL7Ah4HLoalI2_dxRNVjGT8.roa (raw, json) Hash identifier: LYJu7x3oXzLmoQVYfAqJ6SKMZlnDcjs2nlCx1uJIAu4= Subject key identifier: 5F:F0:1A:A0:BE:C0:87:81:CB:A1:A9:48:DB:F7:71:44:D5:63:19:3F Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00 Certificate serial: 019B7FF26A672FCDDCF1AF8384B89D9C0394 Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/X_AaoL7Ah4HLoalI2_dxRNVjGT8.roa Signing time: Fri 02 Jan 2026 18:22:31 +0000 ROA not before: Fri 02 Jan 2026 18:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213527 IP address blocks: 212.56.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:6a:67:2f:cd:dc:f1:af:83:84:b8:9d:9c:03:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00 Validity Not Before: Jan 2 18:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff01aa0bec08781cba1a948dbf77144d563193f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:36:24:34:41:f6:3f:cd:31:4f:b4:68:5e: b4:c5:aa:9d:ce:a3:64:9d:5e:ed:3b:ac:0c:2a:e8: 9b:b4:20:c0:c3:d8:a9:74:57:99:54:44:a4:bc:72: e3:f1:4f:c5:1c:d3:4a:8e:05:c0:cf:76:17:b1:80: bf:cb:7f:f4:03:81:b7:a3:64:a1:63:98:17:f1:dc: 80:ef:2e:81:4b:57:19:b4:b5:55:c7:c9:27:26:73: 1e:3e:ff:f4:c2:b0:d3:da:89:f4:a8:6b:83:b6:12: ec:be:39:e7:2b:73:3c:3f:f3:06:e6:c0:2f:83:e5: 82:2d:e6:a1:36:83:4e:2d:a8:6a:2c:39:46:29:5b: 8b:25:55:7b:e6:0e:60:fa:1e:a0:84:8a:ad:cf:57: d6:38:c3:9c:f4:ce:1f:15:23:a8:f4:8e:f0:5f:e9: a8:6e:a2:3a:34:41:7a:87:54:b1:58:ea:51:30:4c: 55:8a:ee:fe:80:a2:a2:05:cb:b6:1a:ec:e8:c4:ad: d4:a1:ef:6a:23:b6:f1:25:a1:e4:93:c2:fd:ea:50: 5d:0a:08:33:6b:59:bc:d3:b7:99:10:e1:88:7e:16: de:f5:92:d7:2b:49:23:8c:9d:7e:d2:6f:38:25:59: 8b:37:5a:fc:4c:c2:00:c3:59:52:da:45:2d:73:60: 19:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F0:1A:A0:BE:C0:87:81:CB:A1:A9:48:DB:F7:71:44:D5:63:19:3F X509v3 Authority Key Identifier: keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/X_AaoL7Ah4HLoalI2_dxRNVjGT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.56.58.0/24 Signature Algorithm: sha256WithRSAEncryption 87:86:37:dd:f5:fb:0b:83:7d:64:19:db:6b:6b:83:a0:34:d2: e4:76:38:b9:cc:15:88:ab:69:56:ef:5b:61:98:da:5f:a5:61: f9:18:1e:00:16:be:8c:49:76:fa:ca:77:20:54:52:69:0b:52: 62:6c:b3:b3:99:c2:b5:96:bd:c7:a5:3d:11:dc:50:0f:70:b1: 37:81:6a:08:2c:bc:9c:60:3c:fb:de:80:50:c5:82:42:ce:1d: a1:71:88:74:71:cc:9a:d4:1e:19:fc:1a:91:38:0c:34:7a:6a: f8:5c:ab:45:69:df:6a:ae:74:85:56:0d:5e:60:73:35:dc:ac: 3c:e5:53:f2:70:25:87:80:56:49:e9:c9:14:c7:71:4d:cf:b3: 9f:e4:58:5b:35:59:05:ad:9c:8d:29:ec:c7:52:2f:9e:8d:aa: 55:15:3b:6c:47:89:f2:1e:47:79:05:be:57:93:53:0e:dd:53: a7:54:25:ef:3d:da:56:cd:9a:72:04:98:5c:b1:d0:63:6e:e4: ff:0b:62:6e:9d:44:0c:e9:74:78:9f:71:85:a8:51:40:ed:71: 89:b0:bf:ef:22:39:81:99:57:5f:2c:2c:06:04:28:cc:bf:df: 66:8c:a5:82:c3:73:f3:8e:37:ad:38:3f:12:ab:d0:04:5a:b7: 89:4d:4a:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8mpnL83c8a+DhLidnAOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Zjk2NzBlZTJhMzBlYWM4YzBhMzlkYzQ3ZmY3YThjZDI0 NzNiMDAwHhcNMjYwMTAyMTgyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmYwMWFhMGJlYzA4NzgxY2JhMWE5NDhkYmY3NzE0NGQ1NjMxOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/42JDRB9j/NMU+0aF60xaqdzqNk nV7tO6wMKuibtCDAw9ipdFeZVESkvHLj8U/FHNNKjgXAz3YXsYC/y3/0A4G3o2Sh Y5gX8dyA7y6BS1cZtLVVx8knJnMePv/0wrDT2on0qGuDthLsvjnnK3M8P/MG5sAv g+WCLeahNoNOLahqLDlGKVuLJVV75g5g+h6ghIqtz1fWOMOc9M4fFSOo9I7wX+mo bqI6NEF6h1SxWOpRMExViu7+gKKiBcu2GuzoxK3Uoe9qI7bxJaHkk8L96lBdCggz a1m807eZEOGIfhbe9ZLXK0kjjJ1+0m84JVmLN1r8TMIAw1lS2kUtc2AZeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/wGqC+wIeBy6GpSNv3cUTVYxk/MB8GA1UdIwQY MBaAFCn5Zw7iow6sjAo53Ef/eozSRzsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDct NmUyOWVmZGZkNGUzLzEvWF9BYW9MN0FoNEhMb2FsSTJfZHhSTlZqR1Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDctNmUyOWVmZGZkNGUz LzEvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Dg6MA0G CSqGSIb3DQEBCwUAA4IBAQCHhjfd9fsLg31kGdtra4OgNNLkdji5zBWIq2lW71th mNpfpWH5GB4AFr6MSXb6yncgVFJpC1JibLOzmcK1lr3HpT0R3FAPcLE3gWoILLyc YDz73oBQxYJCzh2hcYh0ccya1B4Z/BqROAw0emr4XKtFad9qrnSFVg1eYHM13Kw8 5VPycCWHgFZJ6ckUx3FNz7Of5FhbNVkFrZyNKezHUi+ejapVFTtsR4nyHkd5Bb5X k1MO3VOnVCXvPdpWzZpyBJhcsdBjbuT/C2JunUQM6XR4n3GFqFFA7XGJsL/vIjmB mVdfLCwGBCjMv99mjKWCw3PzjjetOD8Sq9AEWreJTUq3 -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:16 2026 by rpki-client