This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/dL52a-JSQC-00Ko98mQkGc0Xvzo.roa File: dL52a-JSQC-00Ko98mQkGc0Xvzo.roa (raw, json) Hash identifier: 2r+wEDTFQg2vugNKxVL/EHxSgKFbqV3jiVEPhPaqb/k= Subject key identifier: 74:BE:76:6B:E2:52:40:2F:B4:D0:AA:3D:F2:64:24:19:CD:17:BF:3A Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857 Certificate serial: 019B79EC91AB0A590AA76E45F997792F52EA Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/dL52a-JSQC-00Ko98mQkGc0Xvzo.roa Signing time: Thu 01 Jan 2026 14:18:25 +0000 ROA not before: Thu 01 Jan 2026 14:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20495 IP address blocks: 2a04:d9c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:91:ab:0a:59:0a:a7:6e:45:f9:97:79:2f:52:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857 Validity Not Before: Jan 1 14:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74be766be252402fb4d0aa3df2642419cd17bf3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:53:8a:e5:1a:45:80:3a:d8:3d:d5:4e:bf:ff: 1f:8d:bc:12:b9:33:5b:e3:b7:4b:b1:f7:ec:8e:51: 30:d1:ad:8e:44:8d:86:1d:70:72:f1:71:51:05:14: 35:5e:41:ca:46:90:e1:2f:37:a1:85:5c:aa:f8:75: 74:3c:76:a6:0e:df:b5:d2:f3:21:fc:aa:66:1b:d5: 7c:13:d1:29:ae:af:5d:cc:4f:42:23:fa:d2:70:0f: c3:1d:d7:fb:4c:ec:7d:2e:3e:96:8f:3a:07:6d:33: db:8c:5f:a5:91:2b:4a:e9:4e:0f:fb:dc:e0:ff:73: f3:cd:f1:1e:c4:ac:56:85:a4:55:c4:e6:d6:d4:c2: a9:a9:b9:3d:e7:59:4c:8d:55:4e:24:60:b9:81:ca: d8:c7:51:7f:90:23:0c:c1:8d:ae:1e:6f:2a:9a:14: 4f:e1:85:0a:d9:85:b5:41:87:78:43:15:ec:6b:30: 4b:dd:26:01:d3:9f:7a:d2:e4:39:cf:63:55:91:b0: 08:26:d4:bb:44:31:38:29:10:60:48:a6:db:90:4e: 61:c3:18:12:2c:b2:ab:0e:7b:5e:1e:2f:a3:35:56: 95:74:8c:8d:a6:c4:43:e1:7f:a2:b7:05:dc:12:5c: 03:74:63:d9:82:b7:10:83:cf:8e:73:cd:0f:c8:cf: 8a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BE:76:6B:E2:52:40:2F:B4:D0:AA:3D:F2:64:24:19:CD:17:BF:3A X509v3 Authority Key Identifier: keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/dL52a-JSQC-00Ko98mQkGc0Xvzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:d9c0::/32 Signature Algorithm: sha256WithRSAEncryption 79:09:51:1f:4f:c8:63:cc:c3:1a:d4:66:ce:0e:d1:d5:66:a6: 3c:d7:b7:80:1c:41:ed:23:fc:7a:0a:4e:f3:32:50:fc:27:9e: 6a:f6:21:09:5b:d1:16:43:8e:f4:60:ae:db:32:b6:1a:01:17: 86:f0:05:55:d2:0a:df:5f:a4:54:4d:c2:3f:17:a5:9b:67:09: 73:10:fb:d3:98:dd:00:ae:6b:11:a9:3b:fb:27:49:d0:79:b4: 47:3c:b1:26:66:f6:55:c5:d3:85:65:31:24:1d:8b:7c:17:09: d8:e3:3e:91:ed:b4:16:18:32:57:09:fd:0f:ac:ab:75:d0:d1: 97:87:93:f4:3c:de:7f:2c:57:c7:9f:b7:6d:b4:e9:8e:7e:e1: 79:98:7d:ad:05:a8:0b:78:dd:5b:3f:60:ed:8a:02:5d:7e:9f: 7f:a4:cd:e7:bf:81:44:5d:93:96:cc:62:11:3d:9f:4b:e1:c7: 17:08:eb:c2:37:43:bd:14:dc:4f:fa:fc:5a:c1:11:d4:60:96: c6:8b:e4:28:11:03:76:21:f0:bc:e2:05:8a:20:69:6f:52:c6: b8:5f:e8:19:4e:4c:23:c1:40:54:e2:75:c4:a6:90:3d:e4:10: c6:bd:4d:dc:54:d6:0c:b0:72:99:36:c3:d9:7a:33:a5:b9:6e: b1:a8:c8:ef -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57JGrClkKp25F+Zd5L1LqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMWQyYTU2MmM3ZGIyMTE1MWI0YTA5MjZiOGQ2ZmVlYWNl Zjg4NTcwHhcNMjYwMTAxMTQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGJlNzY2YmUyNTI0MDJmYjRkMGFhM2RmMjY0MjQxOWNkMTdiZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VOK5RpFgDrYPdVOv/8fjbwSuTNb 47dLsffsjlEw0a2ORI2GHXBy8XFRBRQ1XkHKRpDhLzehhVyq+HV0PHamDt+10vMh /KpmG9V8E9Eprq9dzE9CI/rScA/DHdf7TOx9Lj6WjzoHbTPbjF+lkStK6U4P+9zg /3PzzfEexKxWhaRVxObW1MKpqbk951lMjVVOJGC5gcrYx1F/kCMMwY2uHm8qmhRP 4YUK2YW1QYd4QxXsazBL3SYB05960uQ5z2NVkbAIJtS7RDE4KRBgSKbbkE5hwxgS LLKrDnteHi+jNVaVdIyNpsRD4X+itwXcElwDdGPZgrcQg8+Oc80PyM+KdwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHS+dmviUkAvtNCqPfJkJBnNF786MB8GA1UdIwQY MBaAFK0dKlYsfbIRUbSgkmuNb+6s74hXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDkt MzI5MzZjM2E0YTlkLzEvZEw1MmEtSlNRQy0wMEtvOThtUWtHYzBYdnpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDktMzI5MzZjM2E0YTlk LzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgTZwDAN BgkqhkiG9w0BAQsFAAOCAQEAeQlRH0/IY8zDGtRmzg7R1WamPNe3gBxB7SP8egpO 8zJQ/CeeavYhCVvRFkOO9GCu2zK2GgEXhvAFVdIK31+kVE3CPxelm2cJcxD705jd AK5rEak7+ydJ0Hm0RzyxJmb2VcXThWUxJB2LfBcJ2OM+ke20FhgyVwn9D6yrddDR l4eT9DzefyxXx5+3bbTpjn7heZh9rQWoC3jdWz9g7YoCXX6ff6TN57+BRF2Tlsxi ET2fS+HHFwjrwjdDvRTcT/r8WsER1GCWxovkKBEDdiHwvOIFiiBpb1LGuF/oGU5M I8FAVOJ1xKaQPeQQxr1N3FTWDLBymTbD2XozpblusajI7w== -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:08 2026 by rpki-client