This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/D7CjrTPEmaFgX5q30EgqridM6Ks.roa File: D7CjrTPEmaFgX5q30EgqridM6Ks.roa (raw, json) Hash identifier: 6VDTLT0bKAkkx8WWVo+B1/Z/i7C3vrJBLQ7Xx0A+EvA= Subject key identifier: 0F:B0:A3:AD:33:C4:99:A1:60:5F:9A:B7:D0:48:2A:AE:27:4C:E8:AB Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55 Certificate serial: 019B7E38C98452A04CB520F881ADDE6C7F99 Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/D7CjrTPEmaFgX5q30EgqridM6Ks.roa Signing time: Fri 02 Jan 2026 10:20:09 +0000 ROA not before: Fri 02 Jan 2026 10:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204630 IP address blocks: 2a0d:4280::/29 maxlen: 29 2a0d:4280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c9:84:52:a0:4c:b5:20:f8:81:ad:de:6c:7f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55 Validity Not Before: Jan 2 10:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fb0a3ad33c499a1605f9ab7d0482aae274ce8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2a:53:20:2c:62:bc:28:74:8a:e0:9d:05:90: 45:bb:2f:2e:20:84:70:0d:f1:d9:05:60:0c:19:d1: 15:d9:b4:ad:22:10:48:92:8f:cf:9c:2d:bb:bc:86: 5f:1e:3c:c4:81:01:64:ff:1b:a2:03:d5:fe:59:43: 57:7a:a3:03:b0:4d:3d:a8:50:2a:ef:1c:bc:10:8c: 51:1f:9a:b9:27:69:bf:c1:ae:87:56:b9:f7:f5:62: 66:51:93:b5:3b:5a:f2:b8:91:7a:e3:af:3b:cc:05: 8a:35:8e:e9:29:b3:73:6b:96:19:da:4b:35:37:80: 53:f8:6a:c7:d1:74:49:98:75:3d:c0:3a:42:44:8e: fb:fd:83:70:51:4a:36:13:f9:aa:a3:90:3f:7b:30: 8e:ab:81:83:8c:10:9b:4b:5d:06:0f:62:6a:02:22: ac:f8:b3:48:77:e0:b3:03:2d:6e:58:92:88:a0:03: b8:38:ff:d9:15:bd:62:70:00:e6:9c:a6:71:e6:08: 17:e4:41:11:47:a4:24:4a:58:56:97:4c:ce:90:92: 1d:5b:91:f3:a9:fe:33:c0:c8:ca:7e:d8:c2:20:c0: e3:1f:cd:17:2d:54:5b:4a:bd:d3:4f:62:c0:d6:f0: 4a:f1:b7:36:00:18:92:06:a8:76:cb:b9:82:8b:22: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B0:A3:AD:33:C4:99:A1:60:5F:9A:B7:D0:48:2A:AE:27:4C:E8:AB X509v3 Authority Key Identifier: keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/D7CjrTPEmaFgX5q30EgqridM6Ks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:4280::/29 Signature Algorithm: sha256WithRSAEncryption 1d:c5:58:bf:3d:16:6e:43:0c:22:4b:54:4d:06:98:77:d6:29: 3c:df:46:2e:95:4d:bc:a8:76:b2:cc:f4:45:28:e1:ed:e3:a9: c3:b3:a9:3c:d3:5b:56:12:72:64:d6:e3:23:7a:61:6a:d1:f1: 21:2b:64:df:23:37:94:92:e7:fe:92:fb:4e:bc:ed:68:54:ec: f9:02:bf:31:3d:07:23:e5:5b:64:31:77:a2:22:45:eb:1f:bd: 78:47:b2:5f:02:a8:23:69:ec:fa:ee:86:ba:31:66:68:b3:7c: ee:e0:f2:f9:aa:a9:8e:46:bc:2a:dd:8b:66:09:dc:83:f3:5b: b5:ac:b1:3d:c7:83:5f:ce:f4:08:68:88:fa:f5:b2:8e:5a:00: da:0c:62:40:2b:af:fd:57:c3:f4:31:f0:84:de:f2:a6:04:ea: a7:2d:7f:36:f2:0e:37:17:d0:3d:88:54:e5:cb:85:dd:ad:90: 97:72:50:af:85:ee:e9:d2:79:77:a7:d6:e3:2b:0d:ff:80:30: 20:5a:3e:af:88:e9:01:26:73:1c:5d:68:15:e8:ea:fa:f9:f1: 29:71:71:80:05:d2:19:df:fc:ae:fc:db:53:0c:da:07:65:60: a9:ac:d4:99:eb:05:f5:4f:35:61:6b:e4:5c:32:44:60:ca:7c: e0:08:ba:14 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OMmEUqBMtSD4ga3ebH+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOGNiNGExMWNhYmFjMjA0YWRmYjhhNWI1ODdlMzJmZWU0 YTFiNTUwHhcNMjYwMTAyMTAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmIwYTNhZDMzYzQ5OWExNjA1ZjlhYjdkMDQ4MmFhZTI3NGNlOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SpTICxivCh0iuCdBZBFuy8uIIRw DfHZBWAMGdEV2bStIhBIko/PnC27vIZfHjzEgQFk/xuiA9X+WUNXeqMDsE09qFAq 7xy8EIxRH5q5J2m/wa6HVrn39WJmUZO1O1ryuJF64687zAWKNY7pKbNza5YZ2ks1 N4BT+GrH0XRJmHU9wDpCRI77/YNwUUo2E/mqo5A/ezCOq4GDjBCbS10GD2JqAiKs +LNId+CzAy1uWJKIoAO4OP/ZFb1icADmnKZx5ggX5EERR6QkSlhWl0zOkJIdW5Hz qf4zwMjKftjCIMDjH80XLVRbSr3TT2LA1vBK8bc2ABiSBqh2y7mCiyLwmQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFA+wo60zxJmhYF+at9BIKq4nTOirMB8GA1UdIwQY MBaAFNyMtKEcq6wgSt+4pbWH4y/uShtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDIt OTlkNWUwN2JhZTc2LzEvRDdDanJUUEVtYUZnWDVxMzBFZ3FyaWRNNktzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDItOTlkNWUwN2JhZTc2 LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg1CgDAN BgkqhkiG9w0BAQsFAAOCAQEAHcVYvz0WbkMMIktUTQaYd9YpPN9GLpVNvKh2ssz0 RSjh7eOpw7OpPNNbVhJyZNbjI3phatHxIStk3yM3lJLn/pL7TrztaFTs+QK/MT0H I+VbZDF3oiJF6x+9eEeyXwKoI2ns+u6GujFmaLN87uDy+aqpjka8Kt2LZgncg/Nb tayxPceDX870CGiI+vWyjloA2gxiQCuv/VfD9DHwhN7ypgTqpy1/NvIONxfQPYhU 5cuF3a2Ql3JQr4Xu6dJ5d6fW4ysN/4AwIFo+r4jpASZzHF1oFejq+vnxKXFxgAXS Gd/8rvzbUwzaB2VgqazUmesF9U81YWvkXDJEYMp84Ai6FA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:41 2026 by rpki-client