This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/D0trHM76chvv7qaWaEKvqKXwKHk.roa File: D0trHM76chvv7qaWaEKvqKXwKHk.roa (raw, json) Hash identifier: 3I8xxuAcFvUfc77gO4fS+8WJ4bDdsjJ9mnD8FcheyGE= Subject key identifier: 0F:4B:6B:1C:CE:FA:72:1B:EF:EE:A6:96:68:42:AF:A8:A5:F0:28:79 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA704159928602A68F66821ED0AC60C Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/D0trHM76chvv7qaWaEKvqKXwKHk.roa Signing time: Fri 02 Jan 2026 12:20:33 +0000 ROA not before: Fri 02 Jan 2026 12:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213385 IP address blocks: 2a0c:9a40:81a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:04:15:99:28:60:2a:68:f6:68:21:ed:0a:c6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f4b6b1ccefa721befeea6966842afa8a5f02879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:83:dc:bf:1c:11:d4:94:c2:51:fc:23:af: fa:e7:16:1e:ba:03:34:6a:9b:6e:5b:64:84:41:82: 60:6d:8d:e1:a9:ce:f8:22:fd:6a:f4:68:67:22:7e: bf:bf:60:51:b5:d7:06:27:af:52:f8:26:56:06:61: 16:3f:88:58:47:94:14:75:65:d7:f2:6d:3d:00:67: bf:c3:2a:05:71:5a:8d:e3:1e:b4:a0:11:98:2a:fb: 6b:6a:8d:6a:71:28:af:a1:46:dc:b6:62:78:b5:11: d7:11:7c:d7:d2:96:8e:24:6e:16:c0:a3:20:bb:ba: 01:28:4e:9d:6f:71:79:a7:2d:a0:59:de:3a:2a:d2: 80:a1:0b:cb:2c:68:10:91:e2:da:82:a7:ba:0f:1d: f4:14:18:a5:df:e4:5a:a8:f3:26:58:79:4d:3c:a4: c9:15:1d:18:b0:58:0c:a2:d8:91:d5:80:fa:14:29: 58:66:8d:80:e7:a3:35:38:14:ad:02:32:68:72:f4: 49:c7:d7:7a:2e:d7:6e:7d:72:c8:b5:5d:96:b1:ac: 83:a1:78:f3:69:67:10:5b:94:b4:e5:f6:b8:27:55: 9a:63:6b:12:7d:27:53:cb:50:36:58:62:92:ee:b5: c5:bb:c0:4b:45:1c:c8:62:3b:6c:ed:52:84:f9:eb: dd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4B:6B:1C:CE:FA:72:1B:EF:EE:A6:96:68:42:AF:A8:A5:F0:28:79 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/D0trHM76chvv7qaWaEKvqKXwKHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:81a0::/48 Signature Algorithm: sha256WithRSAEncryption c0:44:72:25:25:f7:eb:11:b9:c7:11:98:8b:aa:be:84:aa:4e: 50:10:26:28:fd:a7:39:e6:e1:8b:d9:4f:90:f8:54:a7:ce:d0: fb:7e:10:92:30:49:6d:a8:66:e5:12:cd:b0:5e:c4:01:4d:77: 9b:b9:47:48:e2:a4:e6:1f:35:14:18:f3:ab:f2:db:54:14:5f: 1c:2a:30:47:b0:fd:49:44:44:96:17:e2:8c:af:de:32:56:a6: 7c:1b:4b:0c:29:21:4f:02:1b:a7:8b:85:6a:78:f4:bc:56:7c: 42:71:a9:5c:c5:95:a9:f9:ba:af:0a:dc:55:7c:9c:af:8e:94: 82:e8:6e:aa:22:36:7a:75:24:00:34:a3:3d:aa:51:3c:29:b1: 70:8a:f6:b6:56:05:9e:8a:d0:7c:f5:f0:d4:b7:d2:db:b7:91: e6:05:b7:67:8b:36:1c:2e:28:da:58:12:00:65:a6:b0:d0:e4: d2:0b:3e:2c:30:4d:c4:d4:39:84:83:29:14:65:f7:2a:ba:00: 56:0d:02:c9:2b:8b:37:ea:e7:b9:6c:48:31:ac:5a:12:97:13: a4:95:26:d8:da:59:cd:53:59:2f:32:8f:28:43:ab:37:37:e6: 2f:29:7b:b7:93:6d:9e:7b:3d:63:46:b0:58:a2:1f:22:63:a7: 05:33:ba:c1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwQVmShgKmj2aCHtCsYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjRiNmIxY2NlZmE3MjFiZWZlZWE2OTY2ODQyYWZhOGE1ZjAyODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCyD3L8cEdSUwlH8I6/65xYeugM0 aptuW2SEQYJgbY3hqc74Iv1q9GhnIn6/v2BRtdcGJ69S+CZWBmEWP4hYR5QUdWXX 8m09AGe/wyoFcVqN4x60oBGYKvtrao1qcSivoUbctmJ4tRHXEXzX0paOJG4WwKMg u7oBKE6db3F5py2gWd46KtKAoQvLLGgQkeLagqe6Dx30FBil3+RaqPMmWHlNPKTJ FR0YsFgMotiR1YD6FClYZo2A56M1OBStAjJocvRJx9d6LtdufXLItV2WsayDoXjz aWcQW5S05fa4J1WaY2sSfSdTy1A2WGKS7rXFu8BLRRzIYjts7VKE+evdUQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA9LaxzO+nIb7+6mlmhCr6il8Ch5MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvRDB0ckhNNzZjaHZ2N3FhV2FFS3ZxS1h3S0hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIGg MA0GCSqGSIb3DQEBCwUAA4IBAQDARHIlJffrEbnHEZiLqr6Eqk5QECYo/ac55uGL 2U+Q+FSnztD7fhCSMEltqGblEs2wXsQBTXebuUdI4qTmHzUUGPOr8ttUFF8cKjBH sP1JRESWF+KMr94yVqZ8G0sMKSFPAhuni4VqePS8VnxCcalcxZWp+bqvCtxVfJyv jpSC6G6qIjZ6dSQANKM9qlE8KbFwiva2VgWeitB89fDUt9Lbt5HmBbdnizYcLija WBIAZaaw0OTSCz4sME3E1DmEgykUZfcqugBWDQLJK4s36ue5bEgxrFoSlxOklSbY 2lnNU1kvMo8oQ6s3N+YvKXu3k22eez1jRrBYoh8iY6cFM7rB -----END CERTIFICATE-----Generated at Thu Jan 8 09:19:48 2026 by rpki-client