This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/_DjjSU3BAoPGedf4mI0XCD0mbWo.roa File: _DjjSU3BAoPGedf4mI0XCD0mbWo.roa (raw, json) Hash identifier: qwdJ+lJOWsnxPjxpN0M5u6G8sfxnyYF02VcN5oTvQUA= Subject key identifier: FC:38:E3:49:4D:C1:02:83:C6:79:D7:F8:98:8D:17:08:3D:26:6D:6A Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a Certificate serial: 019B7C12867A4B0FCB259DB01D12B39E1CD1 Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/_DjjSU3BAoPGedf4mI0XCD0mbWo.roa Signing time: Fri 02 Jan 2026 00:19:07 +0000 ROA not before: Fri 02 Jan 2026 00:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44286 IP address blocks: 2a02:2410::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:86:7a:4b:0f:cb:25:9d:b0:1d:12:b3:9e:1c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc38e3494dc10283c679d7f8988d17083d266d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:09:13:9f:91:13:48:23:3b:18:9a:55:89: be:92:72:6e:3c:7c:71:f6:c9:b6:55:3a:38:d1:8c: af:f3:8a:d6:a1:4b:98:a6:dc:3a:57:db:82:e3:34: f4:e1:c3:5d:41:ec:6f:8c:6d:05:21:a6:6b:af:12: 10:b2:da:e6:2c:0d:42:e7:f8:1a:7d:a7:c6:26:21: 1d:88:61:3a:15:6f:0c:3b:ed:ef:fc:67:be:a0:a6: fa:9d:3b:ac:69:78:e9:85:d0:37:90:7a:c9:cd:cc: 51:0f:c5:1e:fe:67:2c:e5:98:23:60:ec:2e:f9:82: 89:e5:75:50:a4:44:02:bf:42:6f:2d:27:df:68:3f: 5f:dd:09:78:27:d9:dc:33:41:8e:f1:c2:fb:c5:0f: 23:45:41:26:1d:8b:05:1d:e7:79:35:70:ab:42:88: a0:5f:f9:0a:dc:48:8b:11:2b:67:7a:e0:77:06:7b: 9a:f2:9e:71:11:18:c0:f5:9f:5f:8c:07:18:ef:bd: 62:5e:18:c9:97:a4:40:16:9c:1a:3a:89:24:c2:86: 48:71:1f:95:9f:ca:e5:5f:f2:fd:01:8a:b6:a3:f8: 24:85:7e:10:30:7b:ca:0a:34:2d:5b:67:23:bb:c1: 88:d7:96:36:cd:ee:84:5e:12:b7:b4:42:04:46:47: 09:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:38:E3:49:4D:C1:02:83:C6:79:D7:F8:98:8D:17:08:3D:26:6D:6A X509v3 Authority Key Identifier: keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/_DjjSU3BAoPGedf4mI0XCD0mbWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2410::/32 Signature Algorithm: sha256WithRSAEncryption b6:1f:c7:63:ef:e6:ce:3e:01:d9:40:52:80:e2:08:3e:71:53: d3:29:7e:88:e5:6d:ac:10:69:06:c1:59:32:8d:f3:f3:cc:ab: f2:89:d9:4f:a1:a5:c8:ef:5e:8f:e4:1a:6d:db:4c:ce:f7:bf: 9f:b3:94:4f:f4:89:ca:2f:64:a3:00:fc:d8:fc:3c:73:f7:dc: 7b:27:de:79:be:92:bc:60:19:bf:61:1f:e3:7f:82:0d:61:c8: eb:73:c3:5d:25:c8:e8:55:65:ec:c0:b4:d3:57:c3:b1:eb:ec: 60:e4:81:e4:0e:a4:77:d4:8c:cf:07:c7:07:31:df:4f:b6:bc: 66:73:34:7e:38:6f:1f:65:d2:2b:43:40:4c:00:05:d5:7f:84: be:bc:c5:13:45:e9:37:6f:3a:00:f6:39:12:c8:42:f6:91:c4: d0:2e:e2:ce:e4:4d:2e:95:a6:ad:2c:18:79:e2:93:cc:9f:0f: d0:df:1b:0d:5c:e3:1f:f5:65:2e:5c:b5:a2:4b:1b:7c:d8:0c: 68:5c:b7:67:92:21:3c:17:8a:92:fa:be:2a:fd:2c:69:1d:04: b3:b3:79:60:78:0a:aa:28:eb:4d:0b:ae:b3:91:dc:eb:3b:5e: e2:6c:39:02:76:b0:76:51:3c:85:cc:3a:8f:dd:8a:be:be:91: 33:28:c6:b6 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EoZ6Sw/LJZ2wHRKznhzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTM5NjgxYzVhYWVmYjM1ZTU0ZjRhZDhhZmE0MjhkNGZm ZGUwNmEwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzM4ZTM0OTRkYzEwMjgzYzY3OWQ3Zjg5ODhkMTcwODNkMjY2ZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+4JE5+RE0gjOxiaVYm+knJuPHxx 9sm2VTo40Yyv84rWoUuYptw6V9uC4zT04cNdQexvjG0FIaZrrxIQstrmLA1C5/ga fafGJiEdiGE6FW8MO+3v/Ge+oKb6nTusaXjphdA3kHrJzcxRD8Ue/mcs5ZgjYOwu +YKJ5XVQpEQCv0JvLSffaD9f3Ql4J9ncM0GO8cL7xQ8jRUEmHYsFHed5NXCrQoig X/kK3EiLEStneuB3Bnua8p5xERjA9Z9fjAcY771iXhjJl6RAFpwaOokkwoZIcR+V n8rlX/L9AYq2o/gkhX4QMHvKCjQtW2cju8GI15Y2ze6EXhK3tEIERkcJwwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPw440lNwQKDxnnX+JiNFwg9Jm1qMB8GA1UdIwQY MBaAFILjloHFqu+zXlT0rYr6Qo1P/eBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgt ZmFmZDE0OTZhZTU5LzEvX0RqalNVM0JBb1BHZWRmNG1JMFhDRDBtYldvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgtZmFmZDE0OTZhZTU5 LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgIkEDAN BgkqhkiG9w0BAQsFAAOCAQEAth/HY+/mzj4B2UBSgOIIPnFT0yl+iOVtrBBpBsFZ Mo3z88yr8onZT6GlyO9ej+QabdtMzve/n7OUT/SJyi9kowD82Pw8c/fceyfeeb6S vGAZv2Ef43+CDWHI63PDXSXI6FVl7MC001fDsevsYOSB5A6kd9SMzwfHBzHfT7a8 ZnM0fjhvH2XSK0NATAAF1X+EvrzFE0XpN286APY5EshC9pHE0C7izuRNLpWmrSwY eeKTzJ8P0N8bDVzjH/VlLly1oksbfNgMaFy3Z5IhPBeKkvq+Kv0saR0Es7N5YHgK qijrTQuus5Hc6zte4mw5AnawdlE8hcw6j92Kvr6RMyjGtg== -----END CERTIFICATE-----Generated at Tue Jan 27 03:53:25 2026 by rpki-client