This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/l0Ddeo9tTIWLHJc0_CK037__rrk.roa File: l0Ddeo9tTIWLHJc0_CK037__rrk.roa (raw, json) Hash identifier: NoSTzfsil96zJg976baBcnLZGOkJOEogfRPm/pzCubk= Subject key identifier: 97:40:DD:7A:8F:6D:4C:85:8B:1C:97:34:FC:22:B4:DF:BF:FF:AE:B9 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EABB4E195C8699A12A9F361B399ABB Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/l0Ddeo9tTIWLHJc0_CK037__rrk.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44364 IP address blocks: 2a09:cc0::/48 maxlen: 48 2a09:1240::/48 maxlen: 48 2a09:4740::/48 maxlen: 48 2a09:47c0::/48 maxlen: 48 2a09:9cc0::/48 maxlen: 48 2a09:9d40::/48 maxlen: 48 2a09:9dc0::/48 maxlen: 48 2a09:9e40::/48 maxlen: 48 2a09:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bb:4e:19:5c:86:99:a1:2a:9f:36:1b:39:9a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9740dd7a8f6d4c858b1c9734fc22b4dfbfffaeb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:c9:27:4f:01:0f:c6:12:e3:32:b0:aa:c9: d3:e8:8a:c6:c7:09:c0:f2:19:a5:95:8e:e4:6f:3e: 82:03:d0:5a:0e:20:1e:a7:d2:63:38:9e:72:58:bf: 70:41:03:40:17:71:cb:c3:c6:a1:74:19:f2:a2:ed: 39:95:f1:b8:a3:b3:12:16:21:5e:6a:d5:f9:63:dd: c8:5c:d4:6f:a7:89:55:4d:0b:15:63:a7:cb:07:57: cf:99:31:56:d3:b3:57:35:92:0f:1e:09:68:3b:3b: 37:5c:cc:ab:f3:12:ee:9d:13:0e:06:8a:32:6c:54: 0d:f3:a6:dd:f3:3d:49:03:7a:f8:a6:a2:2d:c8:a4: 46:7e:f8:f2:50:fe:e8:ba:77:e1:d9:81:90:45:dd: 83:3e:a9:97:64:eb:45:44:33:2e:03:b6:5f:d4:13: 55:1a:2a:e5:12:65:9f:39:d8:b6:4e:3c:d7:40:13: 3d:07:e1:ad:df:84:b3:e1:b7:9c:1f:a0:e1:ce:ac: f3:e6:12:95:3f:48:58:c4:54:36:6b:28:b1:e0:61: c7:3a:64:66:cb:43:66:5f:53:de:f3:5f:f5:6f:3b: 71:91:b1:ff:32:94:3e:94:2d:17:be:b8:98:f5:5d: 9e:70:21:3e:02:b0:09:c6:00:54:0f:b8:30:a2:d9: 63:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:40:DD:7A:8F:6D:4C:85:8B:1C:97:34:FC:22:B4:DF:BF:FF:AE:B9 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/l0Ddeo9tTIWLHJc0_CK037__rrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:cc0::/48 2a09:1240::/48 2a09:4740::/48 2a09:47c0::/48 2a09:9cc0::/48 2a09:9d40::/48 2a09:9dc0::/48 2a09:9e40::/48 2a09:a080::/48 Signature Algorithm: sha256WithRSAEncryption 8a:81:a8:b7:f1:40:65:9a:4b:b8:ce:b0:a6:99:24:b4:75:e6: 0e:d5:c6:6c:e8:48:26:fa:5b:4f:d9:60:fa:79:d4:fa:8d:c0: be:d7:b3:fb:68:d9:bd:db:21:83:ed:0d:30:d4:7f:32:44:ea: 2c:79:be:ce:05:5b:03:f0:23:33:4f:2e:0f:68:0e:33:95:fb: fa:4e:1c:1d:7d:20:7b:dc:88:ed:65:b6:ab:b0:ad:7c:21:16: 63:77:13:76:81:05:f8:00:88:ac:1f:cb:00:47:78:e9:12:83: 2b:c8:22:6c:18:a9:8e:dc:a0:54:14:ff:c3:ea:04:f7:0b:e9: 96:2e:3a:35:1a:5f:07:7c:66:6a:69:19:c2:d6:3c:3e:94:e0: 03:4c:23:ee:57:8b:37:e0:d3:cb:b5:a2:1e:9b:25:1d:df:63: 13:6c:d2:84:68:7d:86:2d:d6:b6:20:96:f3:d2:6a:da:8a:16: 8a:e2:f2:a1:d8:bd:d0:56:4d:80:87:76:ee:ca:49:28:3b:51: 56:17:1b:58:84:12:3e:db:d2:23:13:72:4b:ff:a3:e0:b0:7e: b6:27:76:23:8a:f7:de:75:c0:04:05:3c:4a:f9:0e:eb:95:53: 8b:f6:45:87:d9:cb:9b:81:62:b0:80:9d:5b:a3:5f:74:e2:16: 8a:5a:29:b1 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt26rtOGVyGmaEqnzYbOZq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzQwZGQ3YThmNmQ0Yzg1OGIxYzk3MzRmYzIyYjRkZmJmZmZhZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfTJJ08BD8YS4zKwqsnT6IrGxwnA 8hmllY7kbz6CA9BaDiAep9JjOJ5yWL9wQQNAF3HLw8ahdBnyou05lfG4o7MSFiFe atX5Y93IXNRvp4lVTQsVY6fLB1fPmTFW07NXNZIPHgloOzs3XMyr8xLunRMOBooy bFQN86bd8z1JA3r4pqItyKRGfvjyUP7ounfh2YGQRd2DPqmXZOtFRDMuA7Zf1BNV GirlEmWfOdi2TjzXQBM9B+Gt34Sz4becH6Dhzqzz5hKVP0hYxFQ2ayix4GHHOmRm y0NmX1Pe81/1bztxkbH/MpQ+lC0XvriY9V2ecCE+ArAJxgBUD7gwotljrwIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFJdA3XqPbUyFixyXNPwitN+//665MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvbDBEZGVvOXRUSVdMSEpjMF9DSzAzN19fcnJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAAjBRAwcAKgkMwAAA AwcAKgkSQAAAAwcAKglHQAAAAwcAKglHwAAAAwcAKgmcwAAAAwcAKgmdQAAAAwcA KgmdwAAAAwcAKgmeQAAAAwcAKgmggAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCKgai3 8UBlmku4zrCmmSS0deYO1cZs6Egm+ltP2WD6edT6jcC+17P7aNm92yGD7Q0w1H8y ROoseb7OBVsD8CMzTy4PaA4zlfv6ThwdfSB73IjtZbarsK18IRZjdxN2gQX4AIis H8sAR3jpEoMryCJsGKmO3KBUFP/D6gT3C+mWLjo1Gl8HfGZqaRnC1jw+lOADTCPu V4s34NPLtaIemyUd32MTbNKEaH2GLda2IJbz0mraihaK4vKh2L3QVk2Ah3buykko O1FWFxtYhBI+29IjE3JL/6PgsH62J3YjivfedcAEBTxK+Q7rlVOL9kWH2cubgWKw gJ1bo1904haKWimx -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:41 2026 by rpki-client