This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/dWJoADnfK4B-d746vzmjtMcAOjU.roa File: dWJoADnfK4B-d746vzmjtMcAOjU.roa (raw, json) Hash identifier: so9FsTl0/OXPXGPpcUQXEB72QKiIb3Xkte1Mq+cb85o= Subject key identifier: 75:62:68:00:39:DF:2B:80:7E:77:BE:3A:BF:39:A3:B4:C7:00:3A:35 Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Certificate serial: 019B7E37DC9737B44DD62D3E14BF6F4B448C Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/dWJoADnfK4B-d746vzmjtMcAOjU.roa Signing time: Fri 02 Jan 2026 10:19:08 +0000 ROA not before: Fri 02 Jan 2026 10:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42209 IP address blocks: 2a0f:ca00:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:dc:97:37:b4:4d:d6:2d:3e:14:bf:6f:4b:44:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7562680039df2b807e77be3abf39a3b4c7003a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:50:70:b9:32:76:c2:3d:0a:84:81:84:be: b7:5a:a6:27:de:9c:d3:86:0c:b1:ce:9f:17:57:b6: d1:e3:ca:ac:41:de:1d:10:dd:00:ee:67:36:70:e4: 2c:95:55:60:ca:6a:07:ee:f6:fb:cf:f5:c9:52:05: fd:01:2a:3a:c4:9e:34:d2:45:f7:fa:82:99:47:51: ca:49:33:a9:5e:2b:dd:08:1d:25:69:51:b0:8a:84: 36:88:5c:33:d1:ac:a2:33:7d:38:2e:86:eb:2a:a5: 42:28:94:99:fa:ac:47:09:d5:af:c2:31:41:13:c4: 10:a8:db:ab:1f:f5:f7:9f:06:74:91:2a:46:c6:d3: e3:22:05:34:53:72:76:df:00:88:a2:59:9f:8e:61: a5:0a:0e:0a:23:4b:a3:87:e2:33:b3:48:da:7f:52: 3f:28:b2:38:cd:eb:8b:a8:ce:e6:3c:32:34:5d:3a: 5d:1d:52:6b:db:6f:7a:ab:c4:9b:fb:6f:8b:4c:e0: e1:7a:db:0d:77:49:0b:19:19:d3:22:f3:58:d9:93: 45:24:70:50:c6:48:f8:f6:a6:4a:91:1c:69:1b:a3: 2f:85:0d:c8:99:03:5c:c5:0a:f1:e0:f4:02:70:86: 19:f9:93:f5:61:df:e5:16:ca:a8:81:a4:01:d7:ce: 2e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:62:68:00:39:DF:2B:80:7E:77:BE:3A:BF:39:A3:B4:C7:00:3A:35 X509v3 Authority Key Identifier: keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/dWJoADnfK4B-d746vzmjtMcAOjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:ca00:8000::/48 Signature Algorithm: sha256WithRSAEncryption 05:df:9b:61:52:04:40:b8:47:f4:89:67:31:0b:49:ae:77:fd: 0d:2c:df:6e:35:34:37:43:75:46:cc:d8:eb:c0:10:62:bb:dc: 6c:54:43:4a:3a:28:6e:62:61:49:fc:a5:57:37:df:62:33:38: 7c:31:44:b0:2e:26:1f:64:23:0f:de:34:20:58:5a:51:4e:77: e8:19:81:ad:46:96:db:04:47:79:5f:68:2a:9e:fb:aa:33:55: ae:ee:3c:8a:83:3f:fa:6f:47:9d:0c:57:34:af:58:a7:19:45: 49:d8:cb:25:fa:30:d8:46:e9:74:cc:97:1a:ce:de:16:04:ff: f0:8a:aa:35:ff:5e:af:19:50:40:8e:c7:50:94:ac:15:35:3a: 2d:92:9e:e2:b2:a1:b9:eb:dd:e3:b3:dd:67:ed:e7:f0:8a:ab: dc:87:cc:a0:83:fc:eb:2a:e4:04:76:3c:9d:78:51:04:af:27: fc:01:92:e4:8f:2a:b1:ef:6e:29:a0:15:2a:28:5e:0d:7e:32: 7e:5f:54:16:53:33:01:13:10:5f:c7:3a:86:36:50:c9:f7:5e: 67:7f:0f:be:56:34:46:49:17:2c:5b:4c:27:47:fb:7d:bc:f6: ba:5e:21:3a:24:ce:5e:21:be:96:86:1d:9f:47:c1:a5:57:7e: 1b:2b:96:d4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N9yXN7RN1i0+FL9vS0SMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4 ZmUzY2EwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTYyNjgwMDM5ZGYyYjgwN2U3N2JlM2FiZjM5YTNiNGM3MDAzYTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6BQcLkydsI9CoSBhL63WqYn3pzT hgyxzp8XV7bR48qsQd4dEN0A7mc2cOQslVVgymoH7vb7z/XJUgX9ASo6xJ400kX3 +oKZR1HKSTOpXivdCB0laVGwioQ2iFwz0ayiM304LobrKqVCKJSZ+qxHCdWvwjFB E8QQqNurH/X3nwZ0kSpGxtPjIgU0U3J23wCIolmfjmGlCg4KI0ujh+Izs0jaf1I/ KLI4zeuLqM7mPDI0XTpdHVJr2296q8Sb+2+LTODhetsNd0kLGRnTIvNY2ZNFJHBQ xkj49qZKkRxpG6MvhQ3ImQNcxQrx4PQCcIYZ+ZP1Yd/lFsqogaQB184uOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHViaAA53yuAfne+Or85o7THADo1MB8GA1UdIwQY MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt MjBhMGQxMzBjNDU2LzEvZFdKb0FEbmZLNEItZDc0NnZ6bWp0TWNBT2pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2 LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg/KAIAA MA0GCSqGSIb3DQEBCwUAA4IBAQAF35thUgRAuEf0iWcxC0mud/0NLN9uNTQ3Q3VG zNjrwBBiu9xsVENKOihuYmFJ/KVXN99iMzh8MUSwLiYfZCMP3jQgWFpRTnfoGYGt RpbbBEd5X2gqnvuqM1Wu7jyKgz/6b0edDFc0r1inGUVJ2Msl+jDYRul0zJcazt4W BP/wiqo1/16vGVBAjsdQlKwVNTotkp7isqG5693js91n7efwiqvch8ygg/zrKuQE djydeFEEryf8AZLkjyqx724poBUqKF4NfjJ+X1QWUzMBExBfxzqGNlDJ915nfw++ VjRGSRcsW0wnR/t9vPa6XiE6JM5eIb6Whh2fR8GlV34bK5bU -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:53 2026 by rpki-client