This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/dt_sesUw1jCIshOtSv8VduDtfqM.roa File: dt_sesUw1jCIshOtSv8VduDtfqM.roa (raw, json) Hash identifier: +LfBzD6Ek6GfCiZXW1OnTJegtkF9IIfufLlAfANB8ls= Subject key identifier: 76:DF:EC:7A:C5:30:D6:30:88:B2:13:AD:4A:FF:15:76:E0:ED:7E:A3 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB4ABDF441B365619A5ABAA44141AC Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/dt_sesUw1jCIshOtSv8VduDtfqM.roa Signing time: Thu 01 Jan 2026 00:18:09 +0000 ROA not before: Thu 01 Jan 2026 00:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4817 IP address blocks: 2.189.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4a:bd:f4:41:b3:65:61:9a:5a:ba:a4:41:41:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76dfec7ac530d63088b213ad4aff1576e0ed7ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:14:7b:67:72:e2:11:b6:51:6f:9b:7f:e7: c8:c2:de:b0:fb:c6:c3:b8:8b:a7:bf:55:14:0e:9a: 3b:46:10:84:40:38:6c:00:e3:5d:71:cd:f7:50:14: fb:38:98:58:a4:39:46:85:70:a1:d3:8d:fe:c3:35: c2:21:bb:80:72:65:24:3d:ea:d7:8d:39:11:c9:ae: 27:a9:b9:42:14:74:b2:61:89:61:b3:e6:65:b7:e7: b5:57:4e:74:58:08:a9:8e:c2:81:27:e6:32:b2:36: b0:ae:52:9d:fa:54:18:d4:2f:05:a5:72:a0:84:1b: cf:d8:f1:02:12:1d:64:6b:ba:a9:5a:a6:1c:3b:08: 14:f4:34:d6:af:6b:b6:57:d0:f2:fe:68:84:33:b1: 26:80:8a:0e:c9:6c:bd:b7:95:6a:7e:78:da:64:74: 07:12:4a:f1:64:78:86:04:74:36:f6:43:69:20:45: b6:82:34:61:96:6a:c0:17:7a:56:1d:04:21:f5:03: c1:6d:8e:30:61:3c:00:ac:ec:7e:f3:f0:c1:4e:5b: d9:e1:90:b5:4a:9e:4f:2f:9d:1e:ac:e1:ae:70:71: 40:9c:1a:8c:80:fd:f6:1e:de:20:35:35:fe:57:d9: 1c:6c:ce:c6:2e:07:bd:5e:ad:ab:92:a8:3e:12:d3: 5e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DF:EC:7A:C5:30:D6:30:88:B2:13:AD:4A:FF:15:76:E0:ED:7E:A3 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/dt_sesUw1jCIshOtSv8VduDtfqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.189.242.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:6d:35:e5:03:00:ec:09:56:79:71:ab:74:bb:cf:45:3f:91: a1:50:93:d9:1e:91:57:5e:ce:1c:8f:e8:77:11:8f:de:da:40: ea:2e:55:64:56:a6:86:5a:23:03:bc:b8:ec:e9:07:ed:dd:f0: 7a:5c:88:36:84:6f:96:06:28:ac:4a:ea:8d:ad:4f:d0:57:33: 5a:dd:28:d1:0f:7a:0d:92:d4:45:68:51:99:e4:bf:7d:70:7e: 65:1b:31:ea:88:1f:a9:e8:6d:c0:2a:51:01:51:46:04:5d:49: 39:8f:73:68:d0:04:ba:4b:20:e9:e5:bc:78:a9:5c:b2:e7:72: c6:6e:80:6d:10:cf:a9:95:a5:41:ae:9b:bc:4f:09:ba:9f:6f: 59:c7:44:30:2f:c7:ca:bf:4d:6a:f5:80:0b:cd:5c:dc:0f:1d: d7:12:c9:9c:ab:7b:23:40:46:7a:0e:8c:54:f1:e4:e9:74:1f: 4d:6d:e2:c3:a4:b7:d4:3f:54:f3:d9:85:67:24:ff:1c:70:ce: 73:af:7d:32:2e:6e:b3:9b:39:30:76:74:1d:04:f3:cf:7c:7e: 74:df:5a:bc:40:d0:5d:7f:45:e5:72:52:f7:36:4b:0e:b3:3d: 90:fc:f7:3e:e5:e7:f0:31:67:59:7f:d5:97:d3:22:8a:57:6f: da:2b:94:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260q99EGzZWGaWrqkQUGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmRmZWM3YWM1MzBkNjMwODhiMjEzYWQ0YWZmMTU3NmUwZWQ3ZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiEUe2dy4hG2UW+bf+fIwt6w+8bD uIunv1UUDpo7RhCEQDhsAONdcc33UBT7OJhYpDlGhXCh043+wzXCIbuAcmUkPerX jTkRya4nqblCFHSyYYlhs+Zlt+e1V050WAipjsKBJ+YysjawrlKd+lQY1C8FpXKg hBvP2PECEh1ka7qpWqYcOwgU9DTWr2u2V9Dy/miEM7EmgIoOyWy9t5VqfnjaZHQH EkrxZHiGBHQ29kNpIEW2gjRhlmrAF3pWHQQh9QPBbY4wYTwArOx+8/DBTlvZ4ZC1 Sp5PL50erOGucHFAnBqMgP32Ht4gNTX+V9kcbM7GLge9Xq2rkqg+EtNegwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHbf7HrFMNYwiLITrUr/FXbg7X6jMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvZHRfc2VzVXcxakNJc2hPdFN2OFZkdUR0ZnFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBAr3yMA0G CSqGSIb3DQEBCwUAA4IBAQAvbTXlAwDsCVZ5cat0u89FP5GhUJPZHpFXXs4cj+h3 EY/e2kDqLlVkVqaGWiMDvLjs6Qft3fB6XIg2hG+WBiisSuqNrU/QVzNa3SjRD3oN ktRFaFGZ5L99cH5lGzHqiB+p6G3AKlEBUUYEXUk5j3No0AS6SyDp5bx4qVyy53LG boBtEM+plaVBrpu8Twm6n29Zx0QwL8fKv01q9YALzVzcDx3XEsmcq3sjQEZ6DoxU 8eTpdB9NbeLDpLfUP1Tz2YVnJP8ccM5zr30yLm6zmzkwdnQdBPPPfH5031q8QNBd f0XlclL3NksOsz2Q/Pc+5efwMWdZf9WX0yKKV2/aK5SI -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:51 2026 by rpki-client