This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/dr0WTbKAOdZCmM023BVBdPDWRk8.roa File: dr0WTbKAOdZCmM023BVBdPDWRk8.roa (raw, json) Hash identifier: QpYxSWr/vVLdYe2PKpH5AUkh/HBsOurm0FmWy5lE2hA= Subject key identifier: 76:BD:16:4D:B2:80:39:D6:42:98:CD:36:DC:15:41:74:F0:D6:46:4F Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796 Certificate serial: 019B7D5BBDFA3CF924524A941529F3C39CC6 Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/dr0WTbKAOdZCmM023BVBdPDWRk8.roa Signing time: Fri 02 Jan 2026 06:18:43 +0000 ROA not before: Fri 02 Jan 2026 06:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47909 IP address blocks: 2a05:a7c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:bd:fa:3c:f9:24:52:4a:94:15:29:f3:c3:9c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796 Validity Not Before: Jan 2 06:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76bd164db28039d64298cd36dc154174f0d6464f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f2:02:c7:16:7f:ad:6a:72:a7:63:e2:75:26: 59:89:e6:9a:7c:0a:a3:04:9b:53:7a:fb:b8:61:89: f5:a7:42:8b:3e:73:94:33:45:62:47:a0:a7:b9:c4: 65:7a:6d:5a:5b:4c:72:48:56:c5:5d:a5:33:e6:34: ad:35:86:93:fa:f6:68:f5:4e:3f:dd:ab:e3:30:32: f4:c5:1c:66:98:e3:2b:e2:74:16:56:22:8c:7c:b2: bc:d5:1c:ba:11:9d:3c:2b:33:98:86:ed:3a:a7:09: 41:4a:0a:e4:95:6d:fb:7f:9e:dd:68:97:a5:7f:a4: d6:07:9a:4d:c0:27:34:da:6a:02:3e:fc:c6:6f:75: c2:2f:41:fc:47:11:fd:22:31:ae:d9:4b:08:f5:3c: 1d:23:96:25:e3:0f:16:bc:bc:df:99:2d:65:20:3e: 94:a8:05:4e:4e:44:ba:38:7e:23:0a:27:d7:3d:4f: 50:7f:1c:ed:f9:67:31:09:6b:eb:0d:7d:01:b9:dd: 17:27:61:60:27:92:64:cb:20:b0:ef:73:ad:0a:72: 8b:9c:73:33:c9:ef:0c:bc:1f:aa:91:e0:67:c8:07: 34:5b:08:bc:16:b1:0b:5b:e3:49:eb:ac:74:23:b4: af:05:0e:37:2f:11:da:d0:f7:33:b1:db:e1:4d:15: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BD:16:4D:B2:80:39:D6:42:98:CD:36:DC:15:41:74:F0:D6:46:4F X509v3 Authority Key Identifier: keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/dr0WTbKAOdZCmM023BVBdPDWRk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:a7c7::/32 Signature Algorithm: sha256WithRSAEncryption 6a:c1:5b:21:e7:ab:e7:89:56:e2:c7:47:35:a1:03:02:c5:fa: 8f:61:3d:a2:f9:8e:ef:e1:fd:67:7e:e8:8d:f6:3d:8b:f5:35: 07:44:c3:12:17:4a:d5:f4:b1:56:6e:10:81:4e:65:3f:d7:4f: 42:93:40:13:89:e0:e3:4a:9b:8f:7b:1a:2b:72:43:bd:f0:db: bf:ac:89:69:55:db:41:8f:20:6e:ec:28:f0:17:fc:63:ff:1f: 44:7b:2f:e4:ae:e4:e0:43:8e:29:fe:ae:fd:1d:1f:2b:1c:0d: 03:14:21:77:9b:5f:40:d5:74:9d:d5:8d:d8:5f:c9:37:3b:8b: 1c:14:ce:8e:99:ac:b2:c3:cf:17:d9:a1:54:b8:b9:1a:70:4c: 4c:e8:a8:3c:82:4b:80:2d:b1:0c:24:dc:bb:7f:e8:95:61:c2: 90:35:71:ff:b2:80:e9:46:af:a6:e4:73:b7:1c:60:c9:88:bc: 34:20:c3:c1:51:a3:14:33:31:41:49:ec:fd:32:e9:e9:52:84: c4:5f:c4:29:32:0b:4c:2b:49:91:2d:09:ae:54:3a:27:33:ea: 38:4b:d6:23:12:8a:0b:de:64:29:dd:cd:61:34:d3:a8:80:cb: b4:1c:88:35:24:45:0d:35:f8:b4:b4:fd:d5:7a:78:41:d5:ae: 37:f2:72:24 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9W736PPkkUkqUFSnzw5zGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZmM2ZTQ1MTgxZDgzOWZkMTBlNGE5MDI3NjJmMjZjOWE2 NDY3OTYwHhcNMjYwMTAyMDYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmJkMTY0ZGIyODAzOWQ2NDI5OGNkMzZkYzE1NDE3NGYwZDY0NjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPICxxZ/rWpyp2PidSZZieaafAqj BJtTevu4YYn1p0KLPnOUM0ViR6CnucRlem1aW0xySFbFXaUz5jStNYaT+vZo9U4/ 3avjMDL0xRxmmOMr4nQWViKMfLK81Ry6EZ08KzOYhu06pwlBSgrklW37f57daJel f6TWB5pNwCc02moCPvzGb3XCL0H8RxH9IjGu2UsI9TwdI5Yl4w8WvLzfmS1lID6U qAVOTkS6OH4jCifXPU9Qfxzt+WcxCWvrDX0Bud0XJ2FgJ5JkyyCw73OtCnKLnHMz ye8MvB+qkeBnyAc0Wwi8FrELW+NJ66x0I7SvBQ43LxHa0PczsdvhTRVh4wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHa9Fk2ygDnWQpjNNtwVQXTw1kZPMB8GA1UdIwQY MBaAFNj8bkUYHYOf0Q5KkCdi8myaZGeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjIt N2ViMmViODViODRhLzEvZHIwV1RiS0FPZFpDbU0wMjNCVkJkUERXUms4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjItN2ViMmViODViODRh LzEvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgWnxzAN BgkqhkiG9w0BAQsFAAOCAQEAasFbIeer54lW4sdHNaEDAsX6j2E9ovmO7+H9Z37o jfY9i/U1B0TDEhdK1fSxVm4QgU5lP9dPQpNAE4ng40qbj3saK3JDvfDbv6yJaVXb QY8gbuwo8Bf8Y/8fRHsv5K7k4EOOKf6u/R0fKxwNAxQhd5tfQNV0ndWN2F/JNzuL HBTOjpmsssPPF9mhVLi5GnBMTOioPIJLgC2xDCTcu3/olWHCkDVx/7KA6UavpuRz txxgyYi8NCDDwVGjFDMxQUns/TLp6VKExF/EKTILTCtJkS0JrlQ6JzPqOEvWIxKK C95kKd3NYTTTqIDLtByINSRFDTX4tLT91Xp4QdWuN/JyJA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:40:35 2026 by rpki-client