This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/dID3LhBrOI7h-JjxBCDXGS6Ka90.roa File: dID3LhBrOI7h-JjxBCDXGS6Ka90.roa (raw, json) Hash identifier: Rx7lZVpO1Kcn3Rd9uI0ZIiOCJf4fpdx1CaamZMAapoY= Subject key identifier: 74:80:F7:2E:10:6B:38:8E:E1:F8:98:F1:04:20:D7:19:2E:8A:6B:DD Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Certificate serial: 019B76EB6160D34326948518E18EC16C88E7 Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/dID3LhBrOI7h-JjxBCDXGS6Ka90.roa Signing time: Thu 01 Jan 2026 00:18:15 +0000 ROA not before: Thu 01 Jan 2026 00:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39335 IP address blocks: 2a0b:6b86:1200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:61:60:d3:43:26:94:85:18:e1:8e:c1:6c:88:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Validity Not Before: Jan 1 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7480f72e106b388ee1f898f10420d7192e8a6bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5e:2e:44:48:65:25:91:d7:03:ef:17:5d:f4: 60:40:f2:ed:fe:40:51:31:60:04:f0:b7:bd:14:eb: 29:46:8f:ea:00:92:65:ef:91:46:9a:e4:e8:10:d5: fe:13:62:3b:a6:da:b6:0d:83:ab:43:73:f9:79:6a: 13:05:82:23:e0:bd:48:70:0b:ea:c6:a4:8e:61:5b: 7a:76:f3:4d:70:36:d8:f8:01:d9:f3:b9:a8:44:69: 7f:aa:5b:9b:b7:e4:02:40:14:21:7f:4c:1a:fc:ae: 2b:73:4e:d4:bc:3b:71:ce:0b:ed:85:50:b1:ee:11: 2e:29:a9:68:4a:2c:c1:1f:ef:10:29:bc:41:89:12: 44:aa:04:6c:f0:6f:59:30:d5:69:98:f3:6f:a0:0d: 49:f4:6d:65:5c:46:95:81:08:9c:b1:4e:f0:ae:c4: d4:e0:14:ea:20:c9:d2:d8:59:b1:b4:42:aa:a3:ad: 0c:47:45:4d:8c:b3:1e:36:c0:ca:eb:d5:19:b0:9b: 83:df:0b:65:dc:ff:c8:76:04:3f:e6:04:6b:17:e2: 5c:43:05:44:03:c0:eb:78:6f:06:5e:d9:6c:08:62: 6c:d7:1e:d5:26:30:52:20:50:b1:79:d8:89:a3:03: 7a:57:07:44:00:72:52:82:46:92:85:e2:fc:e3:9d: e7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:80:F7:2E:10:6B:38:8E:E1:F8:98:F1:04:20:D7:19:2E:8A:6B:DD X509v3 Authority Key Identifier: keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/dID3LhBrOI7h-JjxBCDXGS6Ka90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:6b86:1200::/40 Signature Algorithm: sha256WithRSAEncryption a2:90:af:63:89:05:83:e7:03:fa:3d:7c:d6:6f:e4:db:13:3e: b0:f5:d8:ac:88:90:f6:ed:3d:92:74:88:ba:b1:b8:10:ac:e1: 06:05:b8:f2:b7:de:ca:30:21:1b:58:5e:57:55:73:9f:4f:38: b1:20:b9:7b:ec:e9:b5:c7:8b:bc:61:6a:eb:48:5d:3e:5c:ee: a1:45:74:f8:a2:a8:50:3f:b6:e8:0e:c2:5a:98:38:26:2b:b2: fb:b5:1b:e3:c6:ea:ff:0b:01:db:b9:01:d6:32:2e:76:ea:e9: 23:9d:31:6f:85:1c:e4:e7:74:9c:01:c6:3d:d8:7d:7d:f4:e6: 00:95:cf:d3:39:06:c1:94:b7:4f:b5:5a:12:59:c2:70:e6:34: de:5a:fb:68:48:85:0e:5a:77:c3:13:32:8e:fd:40:19:a5:23: 7e:28:ff:6a:98:1d:24:e0:57:d2:0b:2a:31:d1:d6:e7:98:4b: 38:ff:23:b7:ed:f0:d0:af:a1:0d:39:2f:82:40:70:58:c1:7b: 89:0e:68:6c:51:3d:fb:b5:8d:02:b2:20:de:18:94:5e:f7:0b: 60:3d:ba:d3:30:a8:67:b1:7f:d5:52:01:66:2d:f0:20:97:bd: f6:9d:17:24:8f:13:c0:21:57:32:c1:10:13:17:fb:fa:8e:57: 3c:dc:48:c0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt262Fg00MmlIUY4Y7BbIjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy NDQ4MGYwHhcNMjYwMTAxMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDgwZjcyZTEwNmIzODhlZTFmODk4ZjEwNDIwZDcxOTJlOGE2YmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F4uREhlJZHXA+8XXfRgQPLt/kBR MWAE8Le9FOspRo/qAJJl75FGmuToENX+E2I7ptq2DYOrQ3P5eWoTBYIj4L1IcAvq xqSOYVt6dvNNcDbY+AHZ87moRGl/qlubt+QCQBQhf0wa/K4rc07UvDtxzgvthVCx 7hEuKaloSizBH+8QKbxBiRJEqgRs8G9ZMNVpmPNvoA1J9G1lXEaVgQicsU7wrsTU 4BTqIMnS2FmxtEKqo60MR0VNjLMeNsDK69UZsJuD3wtl3P/IdgQ/5gRrF+JcQwVE A8DreG8GXtlsCGJs1x7VJjBSIFCxediJowN6VwdEAHJSgkaSheL8453npwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHSA9y4QaziO4fiY8QQg1xkuimvdMB8GA1UdIwQY MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt YjM2YTI0ZDM5NDI3LzEvZElEM0xoQnJPSTdoLUpqeEJDRFhHUzZLYTkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3 LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgtrhhIw DQYJKoZIhvcNAQELBQADggEBAKKQr2OJBYPnA/o9fNZv5NsTPrD12KyIkPbtPZJ0 iLqxuBCs4QYFuPK33sowIRtYXldVc59POLEguXvs6bXHi7xhautIXT5c7qFFdPii qFA/tugOwlqYOCYrsvu1G+PG6v8LAdu5AdYyLnbq6SOdMW+FHOTndJwBxj3YfX30 5gCVz9M5BsGUt0+1WhJZwnDmNN5a+2hIhQ5ad8MTMo79QBmlI34o/2qYHSTgV9IL KjHR1ueYSzj/I7ft8NCvoQ05L4JAcFjBe4kOaGxRPfu1jQKyIN4YlF73C2A9utMw qGexf9VSAWYt8CCXvfadFySPE8AhVzLBEBMX+/qOVzzcSMA= -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:22 2026 by rpki-client