This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa File: cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa (raw, json) Hash identifier: kFvba9VnGvbidEsHHI8Wcjcp/+eUykc2W3uRbNK02kM= Subject key identifier: 71:3A:D9:B3:20:F9:4D:9E:73:DC:4A:E6:AD:77:65:04:85:2A:0B:B9 Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5 Certificate serial: 019B7BA3A0E60DAE50982B9214F1BD75E006 Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa Signing time: Thu 01 Jan 2026 22:17:59 +0000 ROA not before: Thu 01 Jan 2026 22:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206125 IP address blocks: 2001:67c:ecc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:a0:e6:0d:ae:50:98:2b:92:14:f1:bd:75:e0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5 Validity Not Before: Jan 1 22:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=713ad9b320f94d9e73dc4ae6ad776504852a0bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:73:b6:64:70:a1:bf:37:cc:be:d3:e3:2b:73: dc:22:80:b0:54:69:a5:84:12:21:6c:5c:39:4d:47: a5:43:e2:54:61:78:d5:18:44:01:2e:ac:ce:37:d5: d7:9f:e2:18:ae:a3:e7:ea:4d:77:43:9c:50:05:10: d4:b2:70:3e:e0:3b:4e:37:b0:fd:80:ce:3e:ac:a4: 9c:4a:35:e0:4f:f7:1a:0f:a9:41:17:9b:4f:a7:10: 2e:ea:b6:09:94:b2:85:60:0c:8f:80:75:fe:33:b3: a7:1e:d6:06:fb:9f:e7:70:58:b9:08:5f:01:33:6a: 5f:87:ea:c3:69:92:b1:5d:1b:96:89:98:f0:1e:31: 5d:be:38:d8:a0:30:95:e7:b4:86:a0:2d:1a:06:7f: 57:eb:0f:e0:d7:ee:37:4e:31:74:e3:75:2d:bb:b4: 04:20:9c:10:ad:4d:c8:5a:4b:fd:94:5a:4b:be:ae: f6:7e:79:4a:30:ff:5b:25:32:a8:bd:3b:cc:c3:16: 68:aa:5e:67:ab:fb:34:84:e9:da:4f:be:8d:2d:c5: e6:6a:f4:93:96:a8:41:39:86:a8:e9:0f:08:82:c4: 17:63:ce:a7:8b:87:24:d8:d1:bd:00:7b:33:58:f6: 19:01:6a:af:c4:10:ed:5e:b4:37:5f:a8:ed:a8:ea: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3A:D9:B3:20:F9:4D:9E:73:DC:4A:E6:AD:77:65:04:85:2A:0B:B9 X509v3 Authority Key Identifier: keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ecc::/48 Signature Algorithm: sha256WithRSAEncryption 77:f6:36:cb:dd:53:43:fa:2a:e5:eb:7b:92:3e:5a:59:5a:be: e6:a5:9e:d7:24:e7:e4:bb:df:fa:52:55:0f:59:d5:5a:7b:fb: 2d:b1:4e:61:c0:bd:d3:4e:0a:1d:2e:bb:22:35:36:06:2e:d5: 6f:30:89:ad:f7:51:4c:da:85:66:72:37:59:96:09:42:bf:1e: 6f:a2:01:ad:17:e5:36:f4:80:b6:7d:f3:56:2b:4b:5d:ed:89: 75:fd:e8:9b:28:6d:9e:84:d4:c7:07:5f:27:f7:8c:43:0e:38: e5:2a:90:89:14:74:b3:87:04:00:cd:91:2d:ad:89:dd:d6:3f: 24:47:06:f6:bf:6b:d0:6a:a1:55:90:46:ea:55:d1:23:f0:45: 47:4e:71:7c:4a:b6:b6:b1:26:6e:c9:53:47:8b:77:86:d8:7e: 53:8a:2c:2b:39:42:c8:c6:85:4b:c6:0d:fc:c0:36:97:32:91: 66:c5:56:b6:8f:d3:27:78:23:06:ca:df:6e:e7:04:02:c4:cc: f0:6a:d1:4f:d6:bb:26:ae:f4:2b:e8:5c:2b:a5:35:4c:70:58: ac:e2:e2:e9:42:c2:74:97:53:12:71:97:df:fb:7c:5b:9c:83: 25:aa:7f:53:33:c4:22:d9:aa:2f:48:b9:26:91:11:ba:ba:6d: be:28:04:5f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o6DmDa5QmCuSFPG9deAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OWMxM2M2YjNjMWRjNmIyMjE1MDM1YTY0MmYxZWZiOWIw MGRkZjUwHhcNMjYwMTAxMjIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTNhZDliMzIwZjk0ZDllNzNkYzRhZTZhZDc3NjUwNDg1MmEwYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XO2ZHChvzfMvtPjK3PcIoCwVGml hBIhbFw5TUelQ+JUYXjVGEQBLqzON9XXn+IYrqPn6k13Q5xQBRDUsnA+4DtON7D9 gM4+rKScSjXgT/caD6lBF5tPpxAu6rYJlLKFYAyPgHX+M7OnHtYG+5/ncFi5CF8B M2pfh+rDaZKxXRuWiZjwHjFdvjjYoDCV57SGoC0aBn9X6w/g1+43TjF043Utu7QE IJwQrU3IWkv9lFpLvq72fnlKMP9bJTKovTvMwxZoql5nq/s0hOnaT76NLcXmavST lqhBOYao6Q8IgsQXY86ni4ck2NG9AHszWPYZAWqvxBDtXrQ3X6jtqOoBLQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHE62bMg+U2ec9xK5q13ZQSFKgu5MB8GA1UdIwQY MBaAFDicE8azwdxrIhUDWmQvHvubAN31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMt NjIxMGVhYjA1YjcwLzEvY1RyWnN5RDVUWjV6M0VybXJYZGxCSVVxQzdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMtNjIxMGVhYjA1Yjcw LzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA7M MA0GCSqGSIb3DQEBCwUAA4IBAQB39jbL3VND+irl63uSPlpZWr7mpZ7XJOfku9/6 UlUPWdVae/stsU5hwL3TTgodLrsiNTYGLtVvMImt91FM2oVmcjdZlglCvx5vogGt F+U29IC2ffNWK0td7Yl1/eibKG2ehNTHB18n94xDDjjlKpCJFHSzhwQAzZEtrYnd 1j8kRwb2v2vQaqFVkEbqVdEj8EVHTnF8Sra2sSZuyVNHi3eG2H5TiiwrOULIxoVL xg38wDaXMpFmxVa2j9MneCMGyt9u5wQCxMzwatFP1rsmrvQr6FwrpTVMcFis4uLp QsJ0l1MScZff+3xbnIMlqn9TM8Qi2aovSLkmkRG6um2+KARf -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:22 2026 by rpki-client