This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DdmqisPDTkqaatdeo3H-3m5-GL4.roa File: DdmqisPDTkqaatdeo3H-3m5-GL4.roa (raw, json) Hash identifier: LN0oDqSe03Wxhr6/xohIAbkN2+p6eb1f88KVwlfF5HE= Subject key identifier: 0D:D9:AA:8A:C3:C3:4E:4A:9A:6A:D7:5E:A3:71:FE:DE:6E:7E:18:BE Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA71A588120D24922EC8C640372FCA5 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DdmqisPDTkqaatdeo3H-3m5-GL4.roa Signing time: Fri 02 Jan 2026 12:20:39 +0000 ROA not before: Fri 02 Jan 2026 12:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216340 IP address blocks: 2a0c:9a40:8300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1a:58:81:20:d2:49:22:ec:8c:64:03:72:fc:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dd9aa8ac3c34e4a9a6ad75ea371fede6e7e18be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:48:34:53:04:d6:57:17:23:89:e9:a2:db:67: a2:b5:c6:1f:e0:a8:34:cc:65:e6:ac:29:4a:2c:cc: 1c:36:29:cb:08:8c:f2:61:15:dd:b8:0e:0a:fc:b3: 74:9c:b9:c7:f7:42:fc:c4:35:f8:36:dd:97:ea:2e: 82:43:fc:c4:aa:42:d4:dd:b0:89:98:27:fd:0b:b2: 49:8a:dc:b5:ae:59:8e:13:f7:55:e1:74:ab:9f:69: 00:80:30:71:25:df:c4:ff:85:3b:5a:10:a3:58:bc: 5f:70:40:77:25:8a:62:73:65:05:03:37:06:df:61: 66:b6:21:61:4d:97:be:99:8c:4c:0e:7c:24:d3:82: 00:a8:50:c8:55:e3:de:e5:d7:10:43:08:37:28:0b: e6:1c:c1:d3:24:2d:a0:d7:8d:86:dc:58:7e:84:f1: b3:58:91:1f:52:8a:62:77:87:83:28:03:d1:f6:dd: d9:58:f5:ac:a7:bd:27:94:6a:f1:5e:55:cd:29:65: a3:02:1f:99:26:15:b2:b3:3d:51:35:82:c1:89:9a: 86:72:44:d4:cc:62:7f:26:6c:92:a0:6b:73:fa:7b: 80:dd:3c:44:70:70:af:69:14:94:4b:19:1a:1b:cb: 82:84:26:a9:9f:67:1b:20:22:06:c9:27:6c:ff:21: a3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D9:AA:8A:C3:C3:4E:4A:9A:6A:D7:5E:A3:71:FE:DE:6E:7E:18:BE X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DdmqisPDTkqaatdeo3H-3m5-GL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8300::/48 Signature Algorithm: sha256WithRSAEncryption 88:c6:68:a0:d7:c2:4a:8a:4a:66:e1:98:8e:52:ac:00:c9:94: 10:87:97:ce:53:7f:7c:be:6a:d5:7a:a6:9e:45:b8:4c:1d:fa: 9f:a3:bb:48:94:ed:7c:24:87:9d:a6:07:a1:63:5c:0c:4e:27: 90:9f:3e:75:b5:b1:34:bb:49:7a:e1:68:50:62:97:30:60:f4: 24:32:d6:c3:f1:a3:05:12:e8:76:d0:68:c2:e3:b4:71:10:a1: 9a:65:49:fd:65:8c:76:26:c3:da:f1:26:c1:fe:32:cf:bf:21: 21:1a:ae:3f:92:80:70:8f:3e:20:47:49:f7:be:7d:91:6b:ce: b7:5a:a3:85:5f:b7:ae:d7:b6:44:99:60:11:60:50:74:77:e2: e3:b1:aa:be:1d:62:e8:7f:20:46:92:45:46:77:3c:29:14:54: ee:07:11:33:ac:c4:f9:ce:d9:02:84:01:59:55:9d:67:31:e4: 07:ba:04:d3:ec:0c:d8:e7:7b:da:fa:1a:50:11:d0:40:9b:55: c4:41:84:28:0f:a9:56:e7:08:71:e0:d3:d0:c2:c3:0c:2e:73: a9:98:2f:10:a9:67:1f:1e:17:31:9b:87:ab:67:64:bb:48:a7: 91:c6:88:d5:5a:50:b6:01:99:f1:c4:72:0c:8e:d7:07:d5:7b: 6b:19:27:c9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxpYgSDSSSLsjGQDcvylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGQ5YWE4YWMzYzM0ZTRhOWE2YWQ3NWVhMzcxZmVkZTZlN2UxOGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0g0UwTWVxcjiemi22eitcYf4Kg0 zGXmrClKLMwcNinLCIzyYRXduA4K/LN0nLnH90L8xDX4Nt2X6i6CQ/zEqkLU3bCJ mCf9C7JJity1rlmOE/dV4XSrn2kAgDBxJd/E/4U7WhCjWLxfcEB3JYpic2UFAzcG 32FmtiFhTZe+mYxMDnwk04IAqFDIVePe5dcQQwg3KAvmHMHTJC2g142G3Fh+hPGz WJEfUopid4eDKAPR9t3ZWPWsp70nlGrxXlXNKWWjAh+ZJhWysz1RNYLBiZqGckTU zGJ/JmySoGtz+nuA3TxEcHCvaRSUSxkaG8uChCapn2cbICIGySds/yGjdwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA3ZqorDw05KmmrXXqNx/t5ufhi+MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvRGRtcWlzUERUa3FhYXRkZW8zSC0zbTUtR0w0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIMA MA0GCSqGSIb3DQEBCwUAA4IBAQCIxmig18JKikpm4ZiOUqwAyZQQh5fOU398vmrV eqaeRbhMHfqfo7tIlO18JIedpgehY1wMTieQnz51tbE0u0l64WhQYpcwYPQkMtbD 8aMFEuh20GjC47RxEKGaZUn9ZYx2JsPa8SbB/jLPvyEhGq4/koBwjz4gR0n3vn2R a863WqOFX7eu17ZEmWARYFB0d+Ljsaq+HWLofyBGkkVGdzwpFFTuBxEzrMT5ztkC hAFZVZ1nMeQHugTT7AzY53va+hpQEdBAm1XEQYQoD6lW5whx4NPQwsMMLnOpmC8Q qWcfHhcxm4erZ2S7SKeRxojVWlC2AZnxxHIMjtcH1XtrGSfJ -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:19 2026 by rpki-client