This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/DuCPfh0BtVEkEb46CmQmkJTEoiA.roa File: DuCPfh0BtVEkEb46CmQmkJTEoiA.roa (raw, json) Hash identifier: 4H+ADRlPO/G+o1dwkSRBoJP9og9DDlqIZuQkG2ZaHhA= Subject key identifier: 0E:E0:8F:7E:1D:01:B5:51:24:11:BE:3A:0A:64:26:90:94:C4:A2:20 Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e Certificate serial: 019B7910A9FE141378AD2CDC6DE3708505E9 Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/DuCPfh0BtVEkEb46CmQmkJTEoiA.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213346 IP address blocks: 2a10:b9c7:10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a9:fe:14:13:78:ad:2c:dc:6d:e3:70:85:05:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ee08f7e1d01b5512411be3a0a64269094c4a220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:ac:ac:b8:e0:f9:9b:12:74:2e:f0:55:20: 6e:0e:bb:9f:47:cf:fe:d5:b0:e3:12:5a:2d:58:58: 3d:a0:ba:c0:6e:63:c6:ef:41:f2:ac:cc:f9:1e:e6: 68:a6:e8:60:41:29:1a:2a:25:2a:ce:c0:82:45:9e: 6b:9d:5c:48:9f:e5:09:90:2a:7c:b6:97:46:56:fb: 2d:11:00:23:6c:95:e1:54:25:18:51:a1:a1:f9:01: 5a:3b:02:16:f8:51:db:f6:9a:93:23:09:c9:bd:28: 3d:f5:be:dd:b0:e5:67:88:87:ff:1b:d0:af:de:b0: 93:0c:b1:01:0d:cc:14:05:92:ef:1f:87:b9:ff:a4: b6:5e:38:00:f6:c6:c1:4a:78:27:08:30:76:60:d0: 45:e1:86:81:42:99:e0:03:36:7a:27:98:70:4c:4e: 45:6c:31:7c:f9:9f:50:b4:6e:d6:c9:96:72:0d:4e: f3:d2:2d:86:f6:f5:89:9f:4f:bd:7e:86:6a:2d:21: 3d:21:ea:8c:db:00:6f:7b:13:c7:71:1d:69:1e:3e: 64:03:c0:8b:d1:6f:58:b3:ee:75:8f:a6:70:5b:57: e1:e7:f0:91:97:10:26:36:29:af:6a:f3:26:da:da: 68:9c:96:80:e8:55:40:ba:97:da:cb:3b:20:6b:6f: 02:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E0:8F:7E:1D:01:B5:51:24:11:BE:3A:0A:64:26:90:94:C4:A2:20 X509v3 Authority Key Identifier: keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/DuCPfh0BtVEkEb46CmQmkJTEoiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:b9c7:10::/44 Signature Algorithm: sha256WithRSAEncryption d3:31:34:f4:eb:a8:a9:c3:e2:01:8c:a9:ed:fa:7d:0f:f9:81: c1:51:a5:b1:3d:3f:c7:5d:0e:14:5d:40:3c:01:c0:77:ab:20: 58:d4:ba:3c:0a:8e:66:de:1f:49:52:e6:55:98:c9:6a:c5:a0: d7:58:42:ee:77:92:2e:7e:4d:11:9f:58:92:a1:36:5f:e7:a7: 28:10:e2:45:3f:67:19:5a:57:fd:19:3d:a1:e3:be:b4:92:45: 4d:53:02:51:de:9f:8b:44:f8:4b:13:96:83:ef:90:ae:2c:36: f5:5b:f5:54:d8:2d:51:4d:93:c3:a9:af:f5:47:70:73:3b:20: 8c:84:75:7f:78:65:55:e1:be:80:b9:3c:99:34:b2:70:90:94: b4:b0:53:cf:c6:f1:4c:a8:16:1d:48:19:aa:0d:71:82:bd:b4: cf:2d:39:b7:42:5b:07:6e:86:e1:4d:2b:a6:a6:2d:62:fb:37: 0f:af:f9:86:0b:12:dc:73:ea:1c:8e:15:ee:5a:05:0c:7e:79: a0:42:7c:e3:87:6f:f7:54:2f:f1:df:90:ea:ac:aa:74:5e:dd: 22:ef:25:41:da:0a:6d:5c:d3:36:5a:02:bf:2b:ca:d5:98:38: 63:57:07:2e:5e:2e:ea:ad:c6:bb:35:71:80:45:43:e3:15:e6: 28:b9:b7:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EKn+FBN4rSzcbeNwhQXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2Y0ZjhhYzhjYTczNDNlZDFiNGZmMTJjZTI3NjMxOGI2 OWQxMGUwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWUwOGY3ZTFkMDFiNTUxMjQxMWJlM2EwYTY0MjY5MDk0YzRhMjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjSsrLjg+ZsSdC7wVSBuDrufR8/+ 1bDjElotWFg9oLrAbmPG70HyrMz5HuZopuhgQSkaKiUqzsCCRZ5rnVxIn+UJkCp8 tpdGVvstEQAjbJXhVCUYUaGh+QFaOwIW+FHb9pqTIwnJvSg99b7dsOVniIf/G9Cv 3rCTDLEBDcwUBZLvH4e5/6S2XjgA9sbBSngnCDB2YNBF4YaBQpngAzZ6J5hwTE5F bDF8+Z9QtG7WyZZyDU7z0i2G9vWJn0+9foZqLSE9IeqM2wBvexPHcR1pHj5kA8CL 0W9Ys+51j6ZwW1fh5/CRlxAmNimvavMm2tponJaA6FVAupfayzsga28ClQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA7gj34dAbVRJBG+OgpkJpCUxKIgMB8GA1UdIwQY MBaAFEp/T4rIynND7RtP8SzidjGLadEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4Mzkt OWVjN2FkZDBlYjY4LzEvRHVDUGZoMEJ0VkVrRWI0NkNtUW1rSlRFb2lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4MzktOWVjN2FkZDBlYjY4 LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhC5xwAQ MA0GCSqGSIb3DQEBCwUAA4IBAQDTMTT066ipw+IBjKnt+n0P+YHBUaWxPT/HXQ4U XUA8AcB3qyBY1Lo8Co5m3h9JUuZVmMlqxaDXWELud5Iufk0Rn1iSoTZf56coEOJF P2cZWlf9GT2h4760kkVNUwJR3p+LRPhLE5aD75CuLDb1W/VU2C1RTZPDqa/1R3Bz OyCMhHV/eGVV4b6AuTyZNLJwkJS0sFPPxvFMqBYdSBmqDXGCvbTPLTm3QlsHbobh TSumpi1i+zcPr/mGCxLcc+ocjhXuWgUMfnmgQnzjh2/3VC/x35DqrKp0Xt0i7yVB 2gptXNM2WgK/K8rVmDhjVwcuXi7qrca7NXGARUPjFeYoubcP -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:08 2026 by rpki-client