This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/Dj76IuhY_ZcEBVE2KiizEPfmq2o.roa File: Dj76IuhY_ZcEBVE2KiizEPfmq2o.roa (raw, json) Hash identifier: JLl5LgwXFq7LFSA5pMou2kKkB8aQfwmYIzIvN9pXPiU= Subject key identifier: 0E:3E:FA:22:E8:58:FD:97:04:05:51:36:2A:28:B3:10:F7:E6:AB:6A Certificate issuer: /CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1 Certificate serial: 019AE8EF01880043830DF41F07E69DB8CC10 Authority key identifier: 32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/Dj76IuhY_ZcEBVE2KiizEPfmq2o.roa Signing time: Thu 04 Dec 2025 10:36:08 +0000 ROA not before: Thu 04 Dec 2025 10:36:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210213 IP address blocks: 2a14:5680:a003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:ef:01:88:00:43:83:0d:f4:1f:07:e6:9d:b8:cc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1 Validity Not Before: Dec 4 10:36:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0e3efa22e858fd97040551362a28b310f7e6ab6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:16:a7:d7:dd:79:02:65:6f:7f:77:ee:7e:86: 0c:93:52:a2:26:bd:a6:6b:d3:fb:8a:df:b0:0d:3d: cf:69:93:d5:60:07:d5:3a:5d:66:c6:49:22:e7:19: c1:85:94:37:39:76:ba:30:ae:2b:5e:fc:0f:bd:28: 34:cc:f8:09:45:af:cc:db:70:01:90:99:d4:95:03: 18:89:6d:b7:ae:3a:44:4d:a6:4d:65:84:c2:77:59: 8b:83:80:7f:e0:ad:ca:47:4d:3d:ed:14:65:ca:b4: 17:be:87:db:2d:b9:f4:91:0b:4f:d4:39:94:f9:95: bb:86:3c:5e:4f:44:0d:9d:dc:85:63:11:66:6b:07: b3:a2:38:ff:76:2f:20:80:4a:41:e0:3d:73:65:d8: 2e:c1:19:95:1a:49:b5:07:18:60:d9:01:15:63:47: 01:38:39:32:94:f9:5f:d9:0c:ba:7a:8f:09:7f:0d: bc:5a:e4:c4:31:d8:e0:79:ef:9e:72:45:a6:5b:94: 44:80:7a:c6:35:35:d0:c4:8d:3a:03:13:ee:8b:1c: 91:32:49:9f:be:b5:12:e4:10:15:e2:76:68:27:ca: a2:0c:0d:a8:2e:7e:50:52:e6:d1:ec:f1:93:05:34: 1c:0e:ca:d0:54:3d:e3:9f:b3:63:8d:1d:c8:90:13: 6e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3E:FA:22:E8:58:FD:97:04:05:51:36:2A:28:B3:10:F7:E6:AB:6A X509v3 Authority Key Identifier: keyid:32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/Dj76IuhY_ZcEBVE2KiizEPfmq2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:5680:a003::/48 Signature Algorithm: sha256WithRSAEncryption 1e:b5:6b:4f:d2:38:14:19:cc:92:41:18:da:5a:da:45:6b:fd: 62:3c:18:2a:84:f2:19:11:d8:76:d6:dc:34:8b:d5:04:fd:b6: c1:cb:0f:11:a9:eb:49:94:ad:a1:da:52:00:24:e0:3f:d4:1a: 7f:9f:32:73:7f:bb:8b:73:2e:7b:00:1e:70:4d:b4:f3:6b:0f: 6c:14:02:8b:5f:11:a3:83:1d:96:f5:43:aa:42:b6:fe:35:46: 94:53:b9:9f:8e:22:ca:4e:47:46:f2:1b:7c:fe:30:80:2b:5f: 67:16:9e:2f:a8:d7:df:05:8e:80:a5:46:f8:bc:72:37:33:10: f0:ec:5c:4d:66:26:03:3e:90:d8:15:a8:bb:b2:c1:d8:5e:04: dd:32:68:54:80:64:49:8f:b2:f4:37:3c:b2:cb:a7:af:9c:a1: 22:59:bc:5a:9d:56:95:57:b3:f9:32:7a:f5:a9:50:ec:39:f9: 85:ad:b6:8e:8a:51:03:df:83:4f:98:79:c7:06:dd:a9:1e:e9: 12:f4:38:e9:96:b2:f0:65:ca:bb:45:43:96:75:75:41:a2:3c: 57:12:6b:9e:fc:1b:8b:81:b5:a3:68:7a:c6:01:96:9c:32:75: fd:ad:f3:01:bb:3b:dc:ee:4b:2f:b7:ce:bf:bd:23:fd:5d:70: 36:91:40:68 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZro7wGIAEODDfQfB+aduMwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMzg4ZmNmNzRkMmU1OTUyNGY0ZWI0ZDk2ZTQ0YzUyMjJk YjYzZTEwHhcNMjUxMjA0MTAzNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTNlZmEyMmU4NThmZDk3MDQwNTUxMzYyYTI4YjMxMGY3ZTZhYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+han1915AmVvf3fufoYMk1KiJr2m a9P7it+wDT3PaZPVYAfVOl1mxkki5xnBhZQ3OXa6MK4rXvwPvSg0zPgJRa/M23AB kJnUlQMYiW23rjpETaZNZYTCd1mLg4B/4K3KR0097RRlyrQXvofbLbn0kQtP1DmU +ZW7hjxeT0QNndyFYxFmawezojj/di8ggEpB4D1zZdguwRmVGkm1Bxhg2QEVY0cB ODkylPlf2Qy6eo8Jfw28WuTEMdjgee+eckWmW5REgHrGNTXQxI06AxPuixyRMkmf vrUS5BAV4nZoJ8qiDA2oLn5QUubR7PGTBTQcDsrQVD3jn7NjjR3IkBNuuwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA4++iLoWP2XBAVRNioosxD35qtqMB8GA1UdIwQY MBaAFDI4j8900uWVJPTrTZbkTFIi22PhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWppUHozVFM1WlVrOU90Tmx1Uk1VaUxiWS1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9hOWExYzktMzQ0NC00ZTViLWE3MjAt MTgwNDBjOGUyMmVkLzEvRGo3Nkl1aFlfWmNFQlZFMktpaXpFUGZtcTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9hOWExYzktMzQ0NC00ZTViLWE3MjAtMTgwNDBjOGUyMmVk LzEvTWppUHozVFM1WlVrOU90Tmx1Uk1VaUxiWS1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRWgKAD MA0GCSqGSIb3DQEBCwUAA4IBAQAetWtP0jgUGcySQRjaWtpFa/1iPBgqhPIZEdh2 1tw0i9UE/bbByw8RqetJlK2h2lIAJOA/1Bp/nzJzf7uLcy57AB5wTbTzaw9sFAKL XxGjgx2W9UOqQrb+NUaUU7mfjiLKTkdG8ht8/jCAK19nFp4vqNffBY6ApUb4vHI3 MxDw7FxNZiYDPpDYFai7ssHYXgTdMmhUgGRJj7L0Nzyyy6evnKEiWbxanVaVV7P5 Mnr1qVDsOfmFrbaOilED34NPmHnHBt2pHukS9DjplrLwZcq7RUOWdXVBojxXEmue /BuLgbWjaHrGAZacMnX9rfMBuzvc7ksvt86/vSP9XXA2kUBo -----END CERTIFICATE-----Generated at Sat Dec 6 21:14:32 2025 by rpki-client