This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/dJLZ82woz9osVRfBLK_-niCyNj8.roa File: dJLZ82woz9osVRfBLK_-niCyNj8.roa (raw, json) Hash identifier: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE= Subject key identifier: 74:92:D9:F3:6C:28:CF:DA:2C:55:17:C1:2C:AF:FE:9E:20:B2:36:3F Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA36CA373E1444E7EDB791B365D602A Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/dJLZ82woz9osVRfBLK_-niCyNj8.roa Signing time: Thu 01 Jan 2026 22:17:46 +0000 ROA not before: Thu 01 Jan 2026 22:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209389 IP address blocks: 2a01:e901:101::/48 maxlen: 48 2a01:e901:111::/48 maxlen: 48 2a01:e901:121::/48 maxlen: 48 2a01:e901:131::/48 maxlen: 48 2a01:e901:141::/48 maxlen: 48 2a01:e901:151::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6c:a3:73:e1:44:4e:7e:db:79:1b:36:5d:60:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7492d9f36c28cfda2c5517c12caffe9e20b2363f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:f8:a6:ea:3c:37:fb:2b:0c:61:b1:95:16: c5:51:cf:6e:83:ab:03:bb:94:1e:24:6a:15:9e:5d: c2:7c:06:b1:b3:ef:49:a8:ca:e0:ac:b6:45:7b:6f: dd:2b:28:0f:60:e4:5d:97:40:0c:78:65:6b:c9:8d: e3:c8:d1:69:4a:39:af:97:32:1f:d4:f9:eb:db:0e: d8:db:b2:34:9d:00:04:6d:51:b2:cb:20:bc:19:2e: 2f:c1:eb:96:ed:8e:b5:4a:f0:47:60:7d:4a:0b:9f: 9f:a4:1c:45:64:cf:14:de:4e:6f:83:9e:ec:bf:3a: ef:a8:a7:06:2d:88:75:4b:ce:1b:d3:fb:45:31:ce: 9f:3b:e8:a9:a3:7a:0d:d6:1f:f7:ad:c6:8d:7b:2c: 39:d8:aa:32:6b:21:98:63:d7:0f:8c:e1:d2:39:ad: 06:43:7c:7a:c3:cd:89:e2:7b:bc:72:f1:eb:2b:b7: 03:df:c0:c4:76:0d:97:85:41:e6:df:66:54:5c:c3: 20:8d:9e:54:2d:9d:1f:eb:4c:34:e2:29:25:46:ae: 96:1f:d9:da:9d:52:b4:e7:9f:9c:30:6f:69:7c:a1: 33:c3:74:f7:9c:a4:47:b1:c6:0e:4d:19:7c:36:58: 3f:c1:9a:7b:c3:95:8c:a5:63:09:a1:ab:84:a4:4d: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:92:D9:F3:6C:28:CF:DA:2C:55:17:C1:2C:AF:FE:9E:20:B2:36:3F X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/dJLZ82woz9osVRfBLK_-niCyNj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e901:101::/48 2a01:e901:111::/48 2a01:e901:121::/48 2a01:e901:131::/48 2a01:e901:141::/48 2a01:e901:151::/48 Signature Algorithm: sha256WithRSAEncryption 39:e5:dc:4d:e3:44:e6:9f:29:a4:f3:a7:a6:3d:8c:55:5a:c4: 4a:4b:c1:bb:82:d5:7a:23:fe:86:a7:94:29:e7:ab:6f:cf:17: 31:cb:a3:34:02:19:6a:1e:de:f8:c4:76:54:db:08:82:85:48: a0:cc:33:38:3b:3f:12:1e:f7:58:f2:8e:e7:66:65:69:39:a9: 92:2c:e2:5f:07:e3:cd:81:85:c9:8c:f9:28:49:f9:d6:97:e4: 98:db:90:ed:77:9a:8f:dd:83:2f:ea:17:fd:de:fd:80:a9:0f: f1:63:1d:5d:7b:ac:35:57:67:7e:08:b8:87:31:6c:d0:30:b1: cf:11:5d:66:c3:af:1c:11:ca:cc:fb:c0:1a:55:84:73:07:66: 45:d2:b4:b4:2d:b3:b0:31:97:9c:88:c5:77:91:d6:9e:8d:2f: 41:45:c0:f5:4c:36:df:38:a0:8d:0a:d9:6c:5f:38:90:d8:27: 61:1b:12:46:c2:fb:89:cf:6c:46:a1:bd:80:ca:0f:95:f9:f3: dc:39:43:75:86:5f:aa:17:4f:91:0a:4c:f9:95:69:ee:8c:67: d2:72:38:9e:96:3e:3a:c5:7e:97:2e:a6:21:51:b1:96:50:59: 16:53:ad:b8:dd:0f:39:b6:79:09:42:b5:d2:02:99:eb:d8:ec: ce:41:77:02 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7o2yjc+FETn7beRs2XWAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDkyZDlmMzZjMjhjZmRhMmM1NTE3YzEyY2FmZmU5ZTIwYjIzNjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutr4puo8N/srDGGxlRbFUc9ug6sD u5QeJGoVnl3CfAaxs+9JqMrgrLZFe2/dKygPYORdl0AMeGVryY3jyNFpSjmvlzIf 1Pnr2w7Y27I0nQAEbVGyyyC8GS4vweuW7Y61SvBHYH1KC5+fpBxFZM8U3k5vg57s vzrvqKcGLYh1S84b0/tFMc6fO+ipo3oN1h/3rcaNeyw52KoyayGYY9cPjOHSOa0G Q3x6w82J4nu8cvHrK7cD38DEdg2XhUHm32ZUXMMgjZ5ULZ0f60w04iklRq6WH9na nVK055+cMG9pfKEzw3T3nKRHscYOTRl8Nlg/wZp7w5WMpWMJoauEpE1IbQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFHSS2fNsKM/aLFUXwSyv/p4gsjY/MB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvZEpMWjgyd296OW9zVlJmQkxLXy1uaUN5Tmo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgHpAQEB AwcAKgHpAQERAwcAKgHpAQEhAwcAKgHpAQExAwcAKgHpAQFBAwcAKgHpAQFRMA0G CSqGSIb3DQEBCwUAA4IBAQA55dxN40Tmnymk86emPYxVWsRKS8G7gtV6I/6Gp5Qp 56tvzxcxy6M0AhlqHt74xHZU2wiChUigzDM4Oz8SHvdY8o7nZmVpOamSLOJfB+PN gYXJjPkoSfnWl+SY25Dtd5qP3YMv6hf93v2AqQ/xYx1de6w1V2d+CLiHMWzQMLHP EV1mw68cEcrM+8AaVYRzB2ZF0rS0LbOwMZeciMV3kdaejS9BRcD1TDbfOKCNCtls XziQ2CdhGxJGwvuJz2xGob2Ayg+V+fPcOUN1hl+qF0+RCkz5lWnujGfScjielj46 xX6XLqYhUbGWUFkWU6243Q85tnkJQrXSApnr2OzOQXcC -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:30 2026 by rpki-client