This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/btG2nJT4iaqSf2ka_3HJpZV-U3w.roa File: btG2nJT4iaqSf2ka_3HJpZV-U3w.roa (raw, json) Hash identifier: VP+IxLeiBTwTjl4LN6YqPGbYd8Q1JdjDhqR+iKRO1YY= Subject key identifier: 6E:D1:B6:9C:94:F8:89:AA:92:7F:69:1A:FF:71:C9:A5:95:7E:53:7C Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Certificate serial: 019B7CECD71AC6D89E100AB1AD73420C3BD5 Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/btG2nJT4iaqSf2ka_3HJpZV-U3w.roa Signing time: Fri 02 Jan 2026 04:17:34 +0000 ROA not before: Fri 02 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204790 IP address blocks: 2a11:8900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d7:1a:c6:d8:9e:10:0a:b1:ad:73:42:0c:3b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Validity Not Before: Jan 2 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ed1b69c94f889aa927f691aff71c9a5957e537c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:17:05:a2:5b:74:16:ca:da:fc:4a:f5:f3: e9:aa:06:9a:3b:f4:e6:42:ba:18:95:2a:a2:b4:1d: c9:f0:b5:73:06:3e:4d:87:46:1e:c4:96:66:b0:eb: a7:81:b1:c4:0b:6e:17:e8:89:3f:21:8a:74:c6:64: 8c:89:af:b5:55:40:b6:f0:6c:a1:3f:51:b7:e6:f3: cc:eb:65:f0:36:9f:4d:9c:31:b7:87:58:3a:82:4d: 11:27:8d:0a:46:db:9d:f1:36:6e:ce:3e:1b:2a:74: 9c:09:9d:ed:00:d2:50:a6:d9:98:57:dd:6e:36:b9: 01:f1:ee:99:95:1b:d1:b7:57:b1:3d:26:52:75:f1: 59:31:65:bc:05:a2:3c:5a:89:62:4c:bd:16:02:7c: f3:e1:40:47:06:27:82:14:96:dd:3f:d8:16:5c:44: a5:94:09:c4:1e:c1:e1:93:9e:ea:ce:db:4c:5b:b6: d1:4f:05:16:51:68:80:2b:78:46:14:2b:1a:75:1c: ad:b2:6f:46:31:38:15:4c:e4:f2:07:4d:dd:64:5b: 15:90:d7:ec:19:62:1b:9c:fe:41:fc:66:77:48:66: 4a:73:49:0c:69:94:6d:1a:b4:88:d6:7d:fc:3b:8b: ea:e2:fd:4b:3f:a8:ae:34:ab:67:3d:4d:51:d5:86: 9c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D1:B6:9C:94:F8:89:AA:92:7F:69:1A:FF:71:C9:A5:95:7E:53:7C X509v3 Authority Key Identifier: keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/btG2nJT4iaqSf2ka_3HJpZV-U3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:8900::/29 Signature Algorithm: sha256WithRSAEncryption 54:07:a4:23:2b:40:38:c1:21:bc:f9:68:de:ac:13:37:17:e9: c6:3d:f4:36:73:6e:26:3a:c8:d9:1f:67:56:5e:da:9e:44:59: c7:d5:b1:d0:30:b4:79:70:24:8f:33:1a:67:78:5a:bd:74:05: ed:24:39:57:91:14:92:dc:ea:c6:e9:de:9b:4c:97:b4:6a:a0: cb:72:24:c7:6e:9d:67:33:fd:fa:88:f9:cb:29:63:e8:ab:e1: 49:9f:47:76:6a:88:e7:e8:8f:8d:7e:a2:d2:41:4a:ee:36:f5: da:04:8d:24:ee:4e:55:a8:da:6c:ae:f7:08:cd:87:86:f8:d3: 05:7d:0d:ee:06:72:2e:c2:e6:6f:24:a4:76:ac:05:a8:81:85: 18:b1:91:c0:ec:09:45:7d:cf:84:c9:a3:37:2a:02:a9:e4:3b: 2f:3f:ca:07:47:e7:30:2d:c1:df:60:2e:88:fd:85:43:6c:46: 0e:bf:62:3a:02:7c:0e:bb:3f:37:e4:4e:87:ed:57:bf:66:bc: 99:e4:6d:6b:8e:fd:5c:5e:5c:23:7d:26:7b:56:89:4e:8e:3e: 30:86:a5:52:99:d4:fd:d3:b1:b6:8b:ab:59:84:51:87:58:25: 4f:6b:9d:9c:00:68:d7:df:b4:a0:7d:ee:62:cd:6f:f7:35:94: 02:87:cb:8a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87NcaxtieEAqxrXNCDDvVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1 OGM4MjAwHhcNMjYwMTAyMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWQxYjY5Yzk0Zjg4OWFhOTI3ZjY5MWFmZjcxYzlhNTk1N2U1MzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul4XBaJbdBbK2vxK9fPpqgaaO/Tm QroYlSqitB3J8LVzBj5Nh0YexJZmsOungbHEC24X6Ik/IYp0xmSMia+1VUC28Gyh P1G35vPM62XwNp9NnDG3h1g6gk0RJ40KRtud8TZuzj4bKnScCZ3tANJQptmYV91u NrkB8e6ZlRvRt1exPSZSdfFZMWW8BaI8WoliTL0WAnzz4UBHBieCFJbdP9gWXESl lAnEHsHhk57qzttMW7bRTwUWUWiAK3hGFCsadRytsm9GMTgVTOTyB03dZFsVkNfs GWIbnP5B/GZ3SGZKc0kMaZRtGrSI1n38O4vq4v1LP6iuNKtnPU1R1Yac3QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFG7RtpyU+Imqkn9pGv9xyaWVflN8MB8GA1UdIwQY MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt NThjZjg5ODg4ZTJhLzEvYnRHMm5KVDRpYXFTZjJrYV8zSEpwWlYtVTN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhGJADAN BgkqhkiG9w0BAQsFAAOCAQEAVAekIytAOMEhvPlo3qwTNxfpxj30NnNuJjrI2R9n Vl7ankRZx9Wx0DC0eXAkjzMaZ3havXQF7SQ5V5EUktzqxunem0yXtGqgy3Ikx26d ZzP9+oj5yylj6KvhSZ9HdmqI5+iPjX6i0kFK7jb12gSNJO5OVajabK73CM2HhvjT BX0N7gZyLsLmbySkdqwFqIGFGLGRwOwJRX3PhMmjNyoCqeQ7Lz/KB0fnMC3B32Au iP2FQ2xGDr9iOgJ8Drs/N+ROh+1Xv2a8meRta479XF5cI30me1aJTo4+MIalUpnU /dOxtourWYRRh1glT2udnABo19+0oH3uYs1v9zWUAofLig== -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:55 2026 by rpki-client