This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/D_NaeME6deLTOM55Rrl2tm5MZLg.roa File: D_NaeME6deLTOM55Rrl2tm5MZLg.roa (raw, json) Hash identifier: 2nQkrWt+U2qpN2DacnokV1bSMaLyh7jDyjPYg9NULnc= Subject key identifier: 0F:F3:5A:78:C1:3A:75:E2:D3:38:CE:79:46:B9:76:B6:6E:4C:64:B8 Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1 Certificate serial: 019B7E393A8D4995B3C79AF01F3479FFEFCE Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/D_NaeME6deLTOM55Rrl2tm5MZLg.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215846 IP address blocks: 2a06:5d81::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3a:8d:49:95:b3:c7:9a:f0:1f:34:79:ff:ef:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ff35a78c13a75e2d338ce7946b976b66e4c64b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:55:8a:29:66:a2:0b:54:e9:99:24:90:ea: e8:74:60:9f:d3:e5:e9:7b:72:b2:8e:e3:8c:27:2c: 1d:8e:6b:bf:6a:ee:92:b4:05:85:0e:a0:41:d0:43: 23:b6:45:6d:bd:44:7e:0b:ac:b9:a0:fd:84:1b:68: df:26:04:d3:c9:e7:2f:bc:b8:8f:b7:22:ea:c4:7e: 10:78:cb:44:e1:4d:38:8e:eb:27:fb:be:9d:7a:c5: a1:ef:1a:df:00:59:12:5f:3e:37:f8:80:6d:73:9b: c2:61:d7:75:89:92:0e:1a:8b:b2:b2:ce:b4:75:60: f7:43:19:90:1e:f6:cb:2f:2a:ff:3e:b6:0d:8c:da: 05:6f:82:4a:e8:26:78:c3:ea:33:78:4e:db:54:37: a3:1f:34:fb:ef:47:40:df:3a:01:6f:74:43:9b:d7: 44:ba:28:2c:ee:e6:fc:93:1e:c8:31:de:c2:73:a5: ad:f2:15:92:53:e3:d6:6f:88:2f:8f:82:16:7a:52: 8e:38:30:5a:a8:c3:2d:36:2d:24:97:9e:fb:a0:cf: 85:8d:5a:1e:a2:e2:ff:90:65:59:7e:1c:59:cf:60: 46:8c:eb:c1:03:ea:15:5d:3f:aa:08:78:06:e0:6c: e4:51:4b:1c:30:2f:af:07:b5:8c:e3:10:9a:6c:3f: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F3:5A:78:C1:3A:75:E2:D3:38:CE:79:46:B9:76:B6:6E:4C:64:B8 X509v3 Authority Key Identifier: keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/D_NaeME6deLTOM55Rrl2tm5MZLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:5d81::/32 Signature Algorithm: sha256WithRSAEncryption 81:bf:c2:56:cd:d1:8a:7b:b9:d3:97:8a:f3:ab:a8:48:1b:33: c7:5e:0c:87:0e:2f:d5:7e:7a:68:80:97:ba:58:4b:2c:db:3e: 33:9b:e0:1a:ef:8d:da:ea:91:49:c6:08:b1:8d:dd:7a:87:c3: df:3f:47:7a:b6:c3:f6:63:74:a3:b5:1b:77:be:b4:1f:a5:2d: f4:e7:5e:19:e0:0e:67:6f:27:41:d0:ad:4c:d3:10:b9:a2:88: d1:fd:02:39:5a:64:fc:53:4d:54:37:b9:37:c9:44:4e:a8:15: 15:26:53:ed:eb:ff:cc:65:7b:1f:eb:ec:13:bc:b4:68:a9:a4: 31:8d:78:b0:c9:6a:d5:27:8f:06:63:cc:ee:f9:95:0a:fa:19: e0:a6:5c:c7:32:ea:b2:af:39:df:48:06:a2:fa:75:5f:95:95: 57:c2:a1:92:f3:c1:f2:cd:c1:ce:a2:52:b1:d6:f2:b1:4b:83: 9d:2c:5e:0f:31:67:ea:fb:83:b1:cf:47:ef:31:09:a3:42:ec: ab:49:2b:ce:5a:3a:8b:bf:40:66:ed:48:ae:1e:22:8c:7c:79: ed:3c:6e:c3:e7:4a:03:b5:dc:c8:35:5f:a6:ef:03:c7:ed:f8: 86:40:4d:62:71:c8:e9:17:e5:d4:96:3c:52:ff:38:9e:61:8d: a5:c7:38:e4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OTqNSZWzx5rwHzR5/+/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Y2NhMDk1MmRiOGFhOWZlNWU1NzAzYzZmMTg5YTA2YTU3 ZjRiYjEwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmYzNWE3OGMxM2E3NWUyZDMzOGNlNzk0NmI5NzZiNjZlNGM2NGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA005ViilmogtU6ZkkkOrodGCf0+Xp e3KyjuOMJywdjmu/au6StAWFDqBB0EMjtkVtvUR+C6y5oP2EG2jfJgTTyecvvLiP tyLqxH4QeMtE4U04jusn+76desWh7xrfAFkSXz43+IBtc5vCYdd1iZIOGouyss60 dWD3QxmQHvbLLyr/PrYNjNoFb4JK6CZ4w+ozeE7bVDejHzT770dA3zoBb3RDm9dE uigs7ub8kx7IMd7Cc6Wt8hWSU+PWb4gvj4IWelKOODBaqMMtNi0kl577oM+FjVoe ouL/kGVZfhxZz2BGjOvBA+oVXT+qCHgG4GzkUUscMC+vB7WM4xCabD8SkwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFA/zWnjBOnXi0zjOeUa5drZuTGS4MB8GA1UdIwQY MBaAFJfMoJUtuKqf5eVwPG8Ymgalf0uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85YTBlYjItZTk5NC00NzE5LWExNjYt NWQ2ZGQwYmE1MmNmLzEvRF9OYWVNRTZkZUxUT001NVJybDJ0bTVNWkxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85YTBlYjItZTk5NC00NzE5LWExNjYtNWQ2ZGQwYmE1MmNm LzEvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgZdgTAN BgkqhkiG9w0BAQsFAAOCAQEAgb/CVs3Rinu505eK86uoSBszx14Mhw4v1X56aICX ulhLLNs+M5vgGu+N2uqRScYIsY3deofD3z9HerbD9mN0o7Ubd760H6Ut9OdeGeAO Z28nQdCtTNMQuaKI0f0COVpk/FNNVDe5N8lETqgVFSZT7ev/zGV7H+vsE7y0aKmk MY14sMlq1SePBmPM7vmVCvoZ4KZcxzLqsq8530gGovp1X5WVV8KhkvPB8s3BzqJS sdbysUuDnSxeDzFn6vuDsc9H7zEJo0Lsq0krzlo6i79AZu1Irh4ijHx57Txuw+dK A7XcyDVfpu8Dx+34hkBNYnHI6Rfl1JY8Uv84nmGNpcc45A== -----END CERTIFICATE-----Generated at Mon Jan 26 15:33:52 2026 by rpki-client