This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/DaWre0O30UsHqeSDT6i_4Yq-tic.roa File: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (raw, json) Hash identifier: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0= Subject key identifier: 0D:A5:AB:7B:43:B7:D1:4B:07:A9:E4:83:4F:A8:BF:E1:8A:BE:B6:27 Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065 Certificate serial: 019B7AC8AB6A186344EFAB37F6948C84EA10 Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/DaWre0O30UsHqeSDT6i_4Yq-tic.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200334 IP address blocks: 2a0c:f587:fffe::/48 maxlen: 48 2a0c:f587:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ab:6a:18:63:44:ef:ab:37:f6:94:8c:84:ea:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0da5ab7b43b7d14b07a9e4834fa8bfe18abeb627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1d:f7:22:c9:9e:2e:f1:30:aa:3e:cc:c3:5b: 25:10:dd:70:a7:65:4e:cc:24:b7:48:aa:a7:87:6f: cc:ef:82:62:49:29:97:e6:ca:70:96:f0:e8:21:19: ea:3a:e9:31:e0:d7:d6:4a:5e:ed:c7:ea:92:06:4d: 12:41:83:bc:cd:62:65:e5:35:ac:29:ce:79:5a:74: 95:70:44:31:fe:57:a2:48:f8:1c:62:ce:42:b0:58: b1:b2:d4:82:e0:8d:92:ef:55:69:5f:0e:30:62:43: e1:88:3f:b1:c1:05:9f:24:5f:41:ba:c8:69:6b:81: 7c:05:cb:90:5f:52:5d:e9:6b:20:4e:27:bd:0f:ba: bc:de:23:4b:05:a4:78:f2:c9:31:3a:79:fc:bd:f1: 0f:7e:52:b6:bc:1e:1b:66:bb:f4:8e:42:87:d1:84: c5:5e:94:92:bd:10:12:54:02:e5:ca:2c:84:77:a9: 02:60:7d:4d:41:dc:38:34:89:13:5d:e6:94:9f:af: ad:20:dc:5f:f6:d6:a2:09:5a:b5:ef:ca:e2:ac:9e: 23:7c:ec:b9:03:fe:9f:9c:0e:b8:8b:03:a1:8b:cb: fa:bb:91:c3:5c:6b:da:1b:69:42:04:5b:d1:cc:80: ba:ba:d1:89:b6:e8:8b:0c:71:c7:1e:6d:5b:f2:1d: 92:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A5:AB:7B:43:B7:D1:4B:07:A9:E4:83:4F:A8:BF:E1:8A:BE:B6:27 X509v3 Authority Key Identifier: keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/DaWre0O30UsHqeSDT6i_4Yq-tic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:f587:fffe::/47 Signature Algorithm: sha256WithRSAEncryption 59:da:97:77:bb:c2:ff:e6:00:38:d5:f8:82:a7:64:91:50:07: 34:f2:1f:a7:0c:01:36:85:d6:9f:ec:97:30:1b:30:e3:5e:ab: bd:16:a6:80:14:e5:e3:9f:a4:b8:c9:96:b5:f7:6f:a4:2b:65: 0f:5a:24:07:35:a3:cb:5c:be:5c:f3:b4:98:16:fc:59:d7:fa: b5:73:3d:7e:2d:a7:05:fc:18:56:1a:32:60:5b:f9:f1:80:0e: 32:e4:2d:72:0d:99:de:34:fe:92:f0:e9:f2:ba:e8:db:e6:c2: 9a:c1:ca:be:5d:61:71:47:9b:49:d7:41:9c:5b:61:a6:80:e8: b0:de:a7:4b:3f:8a:b7:1f:5f:c3:ab:95:b7:4c:c9:d4:e5:6c: 13:2a:9f:3d:71:b4:77:54:c6:79:06:f2:99:7e:99:09:82:63: 4a:17:dd:96:00:14:2c:1c:7e:ec:7d:a6:87:4f:f7:15:44:6d: ab:1d:d2:72:58:f0:5f:0d:9f:83:ff:bf:bd:55:d4:1f:14:0c: f1:4a:03:cd:6c:5a:bb:f7:29:bc:5b:cd:ee:38:71:6c:62:80: b1:64:17:bf:82:b8:0c:7c:a2:ab:ed:c4:9a:41:93:82:ec:64: 0d:f6:23:7e:24:25:a8:ae:71:74:96:57:b7:fb:6c:bf:2c:91: a1:0d:0a:0a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yKtqGGNE76s39pSMhOoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzUxODY1Yjc2N2RkN2I5YzIyMzE0YmZjODA1NWJkNTdk YjAwNjUwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGE1YWI3YjQzYjdkMTRiMDdhOWU0ODM0ZmE4YmZlMThhYmViNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB33IsmeLvEwqj7Mw1slEN1wp2VO zCS3SKqnh2/M74JiSSmX5spwlvDoIRnqOukx4NfWSl7tx+qSBk0SQYO8zWJl5TWs Kc55WnSVcEQx/leiSPgcYs5CsFixstSC4I2S71VpXw4wYkPhiD+xwQWfJF9Bushp a4F8BcuQX1Jd6WsgTie9D7q83iNLBaR48skxOnn8vfEPflK2vB4bZrv0jkKH0YTF XpSSvRASVALlyiyEd6kCYH1NQdw4NIkTXeaUn6+tINxf9taiCVq178rirJ4jfOy5 A/6fnA64iwOhi8v6u5HDXGvaG2lCBFvRzIC6utGJtuiLDHHHHm1b8h2SawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA2lq3tDt9FLB6nkg0+ov+GKvrYnMB8GA1UdIwQY MBaAFCE1GGW3Z917nCIxS/yAVb1X2wBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAt MWU0ZTA0MDA4NDRiLzEvRGFXcmUwTzMwVXNIcWVTRFQ2aV80WXEtdGljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAtMWU0ZTA0MDA4NDRi LzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgz1h//+ MA0GCSqGSIb3DQEBCwUAA4IBAQBZ2pd3u8L/5gA41fiCp2SRUAc08h+nDAE2hdaf 7JcwGzDjXqu9FqaAFOXjn6S4yZa192+kK2UPWiQHNaPLXL5c87SYFvxZ1/q1cz1+ LacF/BhWGjJgW/nxgA4y5C1yDZneNP6S8Onyuujb5sKawcq+XWFxR5tJ10GcW2Gm gOiw3qdLP4q3H1/Dq5W3TMnU5WwTKp89cbR3VMZ5BvKZfpkJgmNKF92WABQsHH7s faaHT/cVRG2rHdJyWPBfDZ+D/7+9VdQfFAzxSgPNbFq79ym8W83uOHFsYoCxZBe/ grgMfKKr7cSaQZOC7GQN9iN+JCWornF0lle3+2y/LJGhDQoK -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:34 2026 by rpki-client