This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa File: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (raw, json) Hash identifier: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo= Subject key identifier: D1:DF:61:88:77:7B:1A:3A:C2:F6:08:71:EE:BC:80:85:C8:54:F9:19 Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a Certificate serial: 019B7FF2670364630326C569A425742D944B Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa Signing time: Fri 02 Jan 2026 18:22:30 +0000 ROA not before: Fri 02 Jan 2026 18:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202520 IP address blocks: 2001:67c:b58::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:67:03:64:63:03:26:c5:69:a4:25:74:2d:94:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a Validity Not Before: Jan 2 18:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1df6188777b1a3ac2f60871eebc8085c854f919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:dc:4e:d0:25:7a:54:a8:7b:8b:c9:4f:c5: d2:88:b9:89:69:44:3e:d9:82:0c:a9:72:3f:f0:c8: 20:ea:93:ed:e0:77:c8:69:a3:45:3d:50:8f:d1:27: 00:8a:ad:8e:47:d2:f5:cb:96:17:77:eb:15:2d:80: d9:66:56:95:49:d4:40:0b:bb:20:76:15:e2:dc:6c: f5:37:17:e5:f1:fd:3b:f4:e7:e6:20:73:58:a1:b7: 43:83:e1:16:06:09:c3:f3:2f:c1:25:b7:5d:ee:a1: 3d:bf:ed:09:3b:d3:8a:ec:8b:ec:a2:ae:80:cc:9e: 81:17:a3:07:ef:46:f5:0e:87:4d:de:64:c4:3d:69: 1d:d5:2f:9f:c5:c0:cb:6b:c6:71:45:81:93:06:73: 5f:5c:cb:c7:93:64:68:37:ce:b4:7c:d7:53:6c:2e: 00:4a:d3:9c:f0:17:6c:e3:09:fb:69:8d:f7:aa:21: 7b:aa:e2:32:4c:8d:c3:fd:a1:bf:61:2c:76:78:b8: 00:b1:88:47:74:f6:7e:4c:cd:75:0e:62:d9:94:02: 6b:11:e4:40:8e:02:e8:30:55:8e:4f:de:23:b5:30: 63:b1:da:92:f1:4b:ce:0c:90:33:eb:91:b6:7e:89: f4:0e:a7:2b:bf:aa:ac:ac:31:31:7b:bc:ea:08:2f: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DF:61:88:77:7B:1A:3A:C2:F6:08:71:EE:BC:80:85:C8:54:F9:19 X509v3 Authority Key Identifier: keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b58::/48 Signature Algorithm: sha256WithRSAEncryption 7a:76:da:35:7a:42:f3:b0:58:19:54:24:30:43:b8:4d:87:15: 16:a8:d9:e9:74:da:d2:ff:72:65:df:36:8f:b9:62:df:7a:80: e5:fa:06:07:a8:f0:da:e8:ca:e7:a6:3c:a3:d7:51:70:67:38: 9d:86:fd:78:20:62:00:3f:d5:97:ab:ad:0f:32:11:32:36:41: 2b:77:a4:67:53:e4:e5:4f:7b:93:a1:1c:0a:0a:fe:cc:16:96: 44:86:f0:be:4e:f8:62:b1:77:e7:26:e1:c1:e3:3b:a0:d2:c1: 20:61:3a:37:43:fc:af:2e:3d:f3:c9:f1:f5:8e:27:e2:df:d7: a9:67:82:1a:0a:b4:71:a8:38:36:19:4b:d3:08:e0:4d:57:a8: 6e:ee:c4:52:93:5a:6f:fb:2e:07:2f:69:0a:f0:e2:cc:ad:4b: bf:52:d1:34:2e:ad:9d:65:54:5b:d2:dc:3b:de:77:c0:78:2d: f0:8f:41:b7:e3:b1:ef:49:81:80:d4:5d:2d:4a:38:67:4f:43: e6:2f:e1:85:d7:26:f5:4a:99:28:f5:be:74:1a:d7:e5:20:3e: 42:1b:91:00:79:01:3a:20:d0:78:f2:58:6c:aa:db:5c:71:c1: 1e:74:00:dc:ad:c3:bc:e0:f0:af:7e:6b:fc:1b:e8:5e:9c:e1: 26:83:cd:c0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8mcDZGMDJsVppCV0LZRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTY0YjZkNTE5MDJmZGMxYWE2ODQxYmIzZDNjNjIyYTU3 OTgyNWEwHhcNMjYwMTAyMTgyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWRmNjE4ODc3N2IxYTNhYzJmNjA4NzFlZWJjODA4NWM4NTRmOTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKrcTtAlelSoe4vJT8XSiLmJaUQ+ 2YIMqXI/8Mgg6pPt4HfIaaNFPVCP0ScAiq2OR9L1y5YXd+sVLYDZZlaVSdRAC7sg dhXi3Gz1Nxfl8f079OfmIHNYobdDg+EWBgnD8y/BJbdd7qE9v+0JO9OK7Ivsoq6A zJ6BF6MH70b1DodN3mTEPWkd1S+fxcDLa8ZxRYGTBnNfXMvHk2RoN860fNdTbC4A StOc8Bds4wn7aY33qiF7quIyTI3D/aG/YSx2eLgAsYhHdPZ+TM11DmLZlAJrEeRA jgLoMFWOT94jtTBjsdqS8UvODJAz65G2fon0Dqcrv6qsrDExe7zqCC+fOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNHfYYh3exo6wvYIce68gIXIVPkZMB8GA1UdIwQY MBaAFAWWS21RkC/cGqaEG7PTxiKleYJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNTg5YzItMWFjYi00ZDgyLTliOWEt NTIzNjJiNmIzMzM0LzEvMGQ5aGlIZDdHanJDOWdoeDdyeUFoY2hVLVJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lNTg5YzItMWFjYi00ZDgyLTliOWEtNTIzNjJiNmIzMzM0 LzEvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAtY MA0GCSqGSIb3DQEBCwUAA4IBAQB6dto1ekLzsFgZVCQwQ7hNhxUWqNnpdNrS/3Jl 3zaPuWLfeoDl+gYHqPDa6Mrnpjyj11FwZzidhv14IGIAP9WXq60PMhEyNkErd6Rn U+TlT3uToRwKCv7MFpZEhvC+TvhisXfnJuHB4zug0sEgYTo3Q/yvLj3zyfH1jifi 39epZ4IaCrRxqDg2GUvTCOBNV6hu7sRSk1pv+y4HL2kK8OLMrUu/UtE0Lq2dZVRb 0tw73nfAeC3wj0G347HvSYGA1F0tSjhnT0PmL+GF1yb1Spko9b50GtflID5CG5EA eQE6INB48lhsqttcccEedADcrcO84PCvfmv8G+henOEmg83A -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:32 2026 by rpki-client