This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/duDdMIsWaX3Qv6Ulhf1btV1iznY.roa File: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (raw, json) Hash identifier: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8= Subject key identifier: 76:E0:DD:30:8B:16:69:7D:D0:BF:A5:25:85:FD:5B:B5:5D:62:CE:76 Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019B79ED614E397B408CBE96AE58ACE27220 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/duDdMIsWaX3Qv6Ulhf1btV1iznY.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214086 IP address blocks: 2a0e:e704:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:61:4e:39:7b:40:8c:be:96:ae:58:ac:e2:72:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76e0dd308b16697dd0bfa52585fd5bb55d62ce76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:b2:30:54:bb:0c:36:ca:44:f1:f0:80:df: 94:2e:e3:3d:a7:56:1d:21:72:63:90:60:b3:86:f5: 6a:63:be:2c:9a:33:4a:c2:c4:d3:47:27:e4:30:8a: b9:14:d5:5b:34:a3:02:99:9b:0b:d8:b5:02:fb:3f: bd:52:13:57:e7:16:96:4f:db:45:e7:ae:4d:1a:3e: 81:3d:45:2f:9a:83:f1:a0:b5:b3:1a:93:e8:d0:93: 93:d9:37:db:91:c2:13:78:32:d3:d8:66:4a:b2:80: c1:b5:2c:40:fd:cb:0b:e8:72:df:ef:5b:0d:b8:5e: f0:2d:40:af:ae:c0:31:46:50:68:ac:c8:75:9a:df: 80:b1:37:db:51:0c:19:98:0e:4b:34:19:28:12:d2: 0c:e2:69:a0:97:70:3b:7b:33:d1:b9:c4:eb:4a:03: 6d:58:d4:1e:67:9c:39:d0:bf:2f:f2:e5:0b:f1:fa: 5e:f0:7f:63:e4:c4:a5:3f:ac:8a:89:5d:31:54:92: 69:53:4b:7f:1e:20:13:82:8b:a0:18:48:14:01:54: 10:6a:6c:5c:df:39:10:16:10:9e:cd:b3:14:66:d9: d1:83:22:8f:52:f5:62:0a:e6:05:c4:83:d7:05:6d: b7:6e:f7:01:1b:84:85:a9:08:e6:3c:73:e0:28:74: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E0:DD:30:8B:16:69:7D:D0:BF:A5:25:85:FD:5B:B5:5D:62:CE:76 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/duDdMIsWaX3Qv6Ulhf1btV1iznY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:e704:47::/48 Signature Algorithm: sha256WithRSAEncryption 2a:bb:3d:6f:1d:de:5e:53:f6:e7:54:22:44:d6:b8:05:98:31: fb:fa:89:86:15:1e:30:d8:70:08:26:44:4a:de:a1:34:c5:fd: 43:3a:5c:93:04:1b:1a:a7:c5:bc:5a:e6:83:d6:6b:15:51:f9: 2e:f5:92:6c:56:6a:3d:bc:3b:49:53:74:e4:c0:3e:e7:0d:a7: 1d:09:ac:57:7d:43:07:36:f7:04:e4:d1:61:41:6f:23:12:5a: 17:fb:96:b1:4d:b2:b8:46:0d:ce:02:30:5b:27:3a:c9:0b:52: 0f:77:77:56:d3:a3:a6:67:48:ec:86:6c:21:97:03:d8:95:f0: 73:3c:ca:df:27:77:8e:6d:9a:7e:bc:08:e8:93:30:43:94:ed: f8:61:5c:e0:92:16:61:fa:59:6a:57:ee:7b:6f:1d:c3:b1:0e: e2:a1:5b:b4:6a:94:46:d1:34:cf:fa:1f:e2:e3:d5:ac:d8:74: 80:2b:cb:ea:21:18:55:d1:bc:68:53:b8:51:cd:06:fd:f2:b6: 70:33:a5:1c:52:af:53:c0:2e:b1:f0:72:7a:99:59:1b:55:a0: 5b:fd:75:60:9f:ab:38:80:1e:6e:90:48:5e:fe:e6:c2:b7:93: 4c:65:13:2a:e5:ca:b7:a4:15:89:35:74:5a:63:f5:dc:98:5e: 1b:0b:25:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57WFOOXtAjL6Wrlis4nIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmUwZGQzMDhiMTY2OTdkZDBiZmE1MjU4NWZkNWJiNTVkNjJjZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL6yMFS7DDbKRPHwgN+ULuM9p1Yd IXJjkGCzhvVqY74smjNKwsTTRyfkMIq5FNVbNKMCmZsL2LUC+z+9UhNX5xaWT9tF 565NGj6BPUUvmoPxoLWzGpPo0JOT2TfbkcITeDLT2GZKsoDBtSxA/csL6HLf71sN uF7wLUCvrsAxRlBorMh1mt+AsTfbUQwZmA5LNBkoEtIM4mmgl3A7ezPRucTrSgNt WNQeZ5w50L8v8uUL8fpe8H9j5MSlP6yKiV0xVJJpU0t/HiATgougGEgUAVQQamxc 3zkQFhCezbMUZtnRgyKPUvViCuYFxIPXBW23bvcBG4SFqQjmPHPgKHRuMQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHbg3TCLFml90L+lJYX9W7VdYs52MB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvZHVEZE1Jc1dhWDNRdjZVbGhmMWJ0VjFpem5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7nBABH MA0GCSqGSIb3DQEBCwUAA4IBAQAquz1vHd5eU/bnVCJE1rgFmDH7+omGFR4w2HAI JkRK3qE0xf1DOlyTBBsap8W8WuaD1msVUfku9ZJsVmo9vDtJU3TkwD7nDacdCaxX fUMHNvcE5NFhQW8jEloX+5axTbK4Rg3OAjBbJzrJC1IPd3dW06OmZ0jshmwhlwPY lfBzPMrfJ3eObZp+vAjokzBDlO34YVzgkhZh+llqV+57bx3DsQ7ioVu0apRG0TTP +h/i49Ws2HSAK8vqIRhV0bxoU7hRzQb98rZwM6UcUq9TwC6x8HJ6mVkbVaBb/XVg n6s4gB5ukEhe/ubCt5NMZRMq5cq3pBWJNXRaY/XcmF4bCyVN -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:02 2026 by rpki-client