This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/verD4dllUKtJY4jERuVqMHIGsA8.roa File: verD4dllUKtJY4jERuVqMHIGsA8.roa (raw, json) Hash identifier: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU= Subject key identifier: BD:EA:C3:E1:D9:65:50:AB:49:63:88:C4:46:E5:6A:30:72:06:B0:0F Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019B7F8396FE4B1ED8C6DE86833B9875E740 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/verD4dllUKtJY4jERuVqMHIGsA8.roa Signing time: Fri 02 Jan 2026 16:21:28 +0000 ROA not before: Fri 02 Jan 2026 16:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139833 IP address blocks: 2a0e:800:6666::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:96:fe:4b:1e:d8:c6:de:86:83:3b:98:75:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jan 2 16:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdeac3e1d96550ab496388c446e56a307206b00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:81:ba:74:24:66:88:28:bd:f8:74:28:d9:a4: ad:6a:a6:66:81:13:6d:fb:b7:09:40:f4:14:ca:7a: 9e:61:0c:e6:56:d4:02:d8:da:a8:9f:e8:91:aa:59: c1:2f:c0:04:51:36:ae:8a:5e:a7:36:f2:93:5f:04: da:13:2d:47:16:25:df:eb:27:27:5c:08:31:cf:ad: ae:39:33:db:26:5d:39:1a:89:91:a9:51:b4:c8:4a: 90:95:48:78:bb:b9:06:76:dc:36:70:30:68:17:7b: 67:0e:23:ce:9a:70:cf:a7:4b:71:8d:0d:bf:75:30: 48:fb:dc:4e:fe:b2:72:16:7e:f1:7d:ff:1f:a3:03: ad:e0:67:6b:72:44:23:ce:2d:f6:c1:4d:a7:57:85: 4e:5d:0e:d2:03:aa:5b:1f:41:e9:06:d5:67:c9:3a: cb:66:40:1b:4a:dc:11:09:2a:09:c0:06:e5:d0:1a: 88:8a:d0:7c:d1:ff:20:be:d6:7c:4b:ee:3a:a3:cb: 7f:9f:1d:45:d7:0f:b7:0c:5d:b4:e9:ae:1a:ef:2c: 25:af:18:3c:90:73:71:d3:78:ae:aa:6a:f2:76:f8: 51:d6:dc:f3:df:45:71:a0:ae:21:5b:4b:9e:4f:5c: ab:67:b6:7b:a6:da:d6:fd:89:ee:9f:e4:63:78:c0: 5c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EA:C3:E1:D9:65:50:AB:49:63:88:C4:46:E5:6A:30:72:06:B0:0F X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/verD4dllUKtJY4jERuVqMHIGsA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:800:6666::/48 Signature Algorithm: sha256WithRSAEncryption 02:3d:72:84:5e:b8:b6:c9:00:57:c4:57:bc:6d:71:af:d6:e2: e9:87:40:b4:6e:6e:1d:0b:13:7f:a5:00:d2:f3:22:8d:75:ff: 0d:0c:8f:e9:22:47:0b:78:88:9b:07:0f:e1:ae:f2:39:4d:aa: 49:2c:bf:64:ec:99:4b:f3:a6:24:87:20:a1:41:52:a2:53:8f: ad:00:7e:98:91:77:7d:2c:62:cc:ce:96:5a:e3:e0:f0:c7:2a: 2a:b1:63:3d:aa:41:9b:38:49:8f:f5:99:63:68:7c:14:33:b0: 60:d1:a0:5d:f2:d3:82:3f:08:16:62:23:86:7b:1f:09:de:2c: db:fd:2a:22:51:c9:c9:24:0b:f4:07:58:fe:d9:56:da:39:0b: da:78:18:4a:80:58:d2:62:26:e4:c9:26:3a:bf:a7:fc:de:87: b8:e2:03:f6:a0:eb:5e:87:fa:38:f9:66:d6:ed:96:e9:53:9a: ca:e4:46:ea:97:43:ad:03:43:7b:41:f7:f9:63:2e:4e:0a:d3: a6:6b:42:91:a3:83:5d:5f:a1:e6:aa:24:27:7c:90:7f:b4:da: e0:96:33:9e:27:7d:65:e2:2d:45:90:b0:80:7b:cc:f3:e9:be: 4c:13:1a:fa:4e:a5:bd:fe:d1:80:d9:0c:bf:76:3c:64:ad:17: 19:2e:f6:06 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g5b+Sx7Yxt6GgzuYdedAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMTAyMTYyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGVhYzNlMWQ5NjU1MGFiNDk2Mzg4YzQ0NmU1NmEzMDcyMDZiMDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIG6dCRmiCi9+HQo2aStaqZmgRNt +7cJQPQUynqeYQzmVtQC2Nqon+iRqlnBL8AEUTauil6nNvKTXwTaEy1HFiXf6ycn XAgxz62uOTPbJl05GomRqVG0yEqQlUh4u7kGdtw2cDBoF3tnDiPOmnDPp0txjQ2/ dTBI+9xO/rJyFn7xff8fowOt4GdrckQjzi32wU2nV4VOXQ7SA6pbH0HpBtVnyTrL ZkAbStwRCSoJwAbl0BqIitB80f8gvtZ8S+46o8t/nx1F1w+3DF206a4a7ywlrxg8 kHNx03iuqmrydvhR1tzz30VxoK4hW0ueT1yrZ7Z7ptrW/Ynun+RjeMBcawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL3qw+HZZVCrSWOIxEblajByBrAPMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvdmVyRDRkbGxVS3RKWTRqRVJ1VnFNSElHc0E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4IAGZm MA0GCSqGSIb3DQEBCwUAA4IBAQACPXKEXri2yQBXxFe8bXGv1uLph0C0bm4dCxN/ pQDS8yKNdf8NDI/pIkcLeIibBw/hrvI5TapJLL9k7JlL86YkhyChQVKiU4+tAH6Y kXd9LGLMzpZa4+DwxyoqsWM9qkGbOEmP9ZljaHwUM7Bg0aBd8tOCPwgWYiOGex8J 3izb/SoiUcnJJAv0B1j+2VbaOQvaeBhKgFjSYibkySY6v6f83oe44gP2oOteh/o4 +WbW7ZbpU5rK5Ebql0OtA0N7Qff5Yy5OCtOma0KRo4NdX6HmqiQnfJB/tNrgljOe J31l4i1FkLCAe8zz6b5MExr6TqW9/tGA2Qy/djxkrRcZLvYG -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:21 2026 by rpki-client