This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/Duy_rM8zgDjySYe4ZSDOg73tPCE.roa File: Duy_rM8zgDjySYe4ZSDOg73tPCE.roa (raw, json) Hash identifier: X8/ksNeJf+bfGjtKgbxWuhpWvkDUusV0gttXbiXMo/w= Subject key identifier: 0E:EC:BF:AC:CF:33:80:38:F2:49:87:B8:65:20:CE:83:BD:ED:3C:21 Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 019B7F14F8CF796FC5200C62ADB162BC489C Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/Duy_rM8zgDjySYe4ZSDOg73tPCE.roa Signing time: Fri 02 Jan 2026 14:20:39 +0000 ROA not before: Fri 02 Jan 2026 14:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141039 IP address blocks: 2a09:a702:a::/48 maxlen: 48 2a09:a702:a8::/48 maxlen: 48 2a09:a702:aa::/48 maxlen: 48 2a09:a702:ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f8:cf:79:6f:c5:20:0c:62:ad:b1:62:bc:48:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Jan 2 14:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eecbfaccf338038f24987b86520ce83bded3c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e0:18:53:75:f7:a2:94:ce:2b:6a:19:e6:c8: f2:e0:55:dd:3e:d1:6f:92:cd:6a:42:83:f0:90:55: 1e:f6:f6:77:32:29:6c:0f:a9:0f:4b:ab:87:05:ea: d5:5c:7b:54:a4:2e:e8:5e:56:0f:25:2e:2e:7d:d9: a7:ac:2a:3f:33:f3:63:d9:75:49:d8:c8:70:09:e1: 1d:5e:c2:5e:32:f4:5d:ff:65:92:1a:dc:ef:b2:ef: 99:62:9d:be:0b:05:74:26:df:31:31:5a:e3:4a:32: 89:6b:35:dc:bd:62:8b:c4:a4:fb:a7:82:a6:72:1d: ed:36:56:3e:32:d2:36:19:db:5c:23:1f:75:18:f5: 6d:b5:76:88:44:eb:ca:a9:4e:5e:63:20:fe:2c:6e: b5:d2:dc:cd:77:3b:31:94:c1:9f:d8:4e:e8:92:cb: 69:1e:8b:4b:b0:d3:ae:2b:20:c8:aa:17:b4:08:74: 15:65:c2:b4:d2:9d:30:e4:63:dc:97:39:a6:61:87: 3e:7e:2a:9b:bf:42:7d:06:c6:89:25:f6:bc:70:07: 4d:e1:b8:20:29:78:38:0a:b2:df:84:3b:f7:b5:ce: ea:a9:78:8b:3c:9c:84:72:06:88:5b:e1:98:f5:55: 33:81:a6:b5:a9:5c:39:a4:b0:35:63:2b:02:bf:63: 9b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EC:BF:AC:CF:33:80:38:F2:49:87:B8:65:20:CE:83:BD:ED:3C:21 X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/Duy_rM8zgDjySYe4ZSDOg73tPCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:a702:a::/48 2a09:a702:a8::/48 2a09:a702:aa::/47 Signature Algorithm: sha256WithRSAEncryption 5b:9c:38:64:58:95:70:1f:28:8c:ac:b7:29:38:95:4e:73:28: ab:d2:3b:cf:c5:30:ff:bd:63:c5:3f:78:6f:3e:16:cb:e1:04: 32:fe:48:03:58:27:84:60:4c:0a:c9:e4:58:47:6f:89:20:dd: a8:81:55:89:f0:a7:13:bb:bb:50:d2:af:33:c0:14:7d:27:f4: 47:ed:a0:bd:82:bc:7d:9b:39:5e:34:6e:4d:32:92:1e:c6:75: 23:4b:72:2e:cb:08:66:0d:04:a5:4b:b2:ca:b7:4a:d4:7c:bd: f8:98:c6:ae:87:a5:f6:c0:52:e3:7d:e3:1e:b9:03:b1:7b:2c: d5:fa:eb:73:03:e0:31:83:5e:c7:47:ab:f9:f1:3b:f4:5e:ff: 52:10:44:02:79:5c:f5:e0:a6:03:a7:48:ce:2c:04:57:80:bd: 9f:01:9b:e3:6c:ae:d0:ad:db:ad:61:e8:62:76:4a:1c:cf:72: d1:4e:e8:ee:cc:5f:81:f8:e9:23:3a:02:f8:1b:ce:d2:11:d1: e3:d6:93:e8:75:07:f0:69:dd:81:97:b6:95:67:69:59:50:de: b4:86:8d:2f:ff:3a:e2:f2:e9:c1:79:08:ff:a4:c2:d0:4b:92: 2a:48:fa:40:ed:0d:d3:93:c8:e1:37:e9:83:8d:c1:6c:86:c8: 0b:eb:ff:e3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FPjPeW/FIAxirbFivEicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjYwMTAyMTQyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWVjYmZhY2NmMzM4MDM4ZjI0OTg3Yjg2NTIwY2U4M2JkZWQzYzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uAYU3X3opTOK2oZ5sjy4FXdPtFv ks1qQoPwkFUe9vZ3MilsD6kPS6uHBerVXHtUpC7oXlYPJS4ufdmnrCo/M/Nj2XVJ 2MhwCeEdXsJeMvRd/2WSGtzvsu+ZYp2+CwV0Jt8xMVrjSjKJazXcvWKLxKT7p4Km ch3tNlY+MtI2GdtcIx91GPVttXaIROvKqU5eYyD+LG610tzNdzsxlMGf2E7okstp HotLsNOuKyDIqhe0CHQVZcK00p0w5GPclzmmYYc+fiqbv0J9BsaJJfa8cAdN4bgg KXg4CrLfhDv3tc7qqXiLPJyEcgaIW+GY9VUzgaa1qVw5pLA1YysCv2ObDwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFA7sv6zPM4A48kmHuGUgzoO97TwhMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvRHV5X3JNOHpnRGp5U1llNFpTRE9nNzN0UENFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgmnAgAK AwcAKgmnAgCoAwcBKgmnAgCqMA0GCSqGSIb3DQEBCwUAA4IBAQBbnDhkWJVwHyiM rLcpOJVOcyir0jvPxTD/vWPFP3hvPhbL4QQy/kgDWCeEYEwKyeRYR2+JIN2ogVWJ 8KcTu7tQ0q8zwBR9J/RH7aC9grx9mzleNG5NMpIexnUjS3IuywhmDQSlS7LKt0rU fL34mMauh6X2wFLjfeMeuQOxeyzV+utzA+Axg17HR6v58Tv0Xv9SEEQCeVz14KYD p0jOLARXgL2fAZvjbK7QrdutYehidkocz3LRTujuzF+B+OkjOgL4G87SEdHj1pPo dQfwad2Bl7aVZ2lZUN60ho0v/zri8unBeQj/pMLQS5IqSPpA7Q3Tk8jhN+mDjcFs hsgL6//j -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:31 2026 by rpki-client