This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/De7jN2wq2NFR-4NMA629XyUBIwo.roa File: De7jN2wq2NFR-4NMA629XyUBIwo.roa (raw, json) Hash identifier: laSQpY1mMDgkRJQIWQdMxdl37ARtNoBKUTo3vcodLyc= Subject key identifier: 0D:EE:E3:37:6C:2A:D8:D1:51:FB:83:4C:03:AD:BD:5F:25:01:23:0A Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F806AEAF3731DFF3AB6B8D11870E Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/De7jN2wq2NFR-4NMA629XyUBIwo.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209833 IP address blocks: 2a0c:9a40:8130::/44 maxlen: 48 2a0c:9a40:8130::/48 maxlen: 48 2a0e:7d40::/32 maxlen: 32 2a0e:7d40:20::/44 maxlen: 44 2a0e:7d40:30::/44 maxlen: 44 2a0e:7d40:40::/44 maxlen: 44 2a0e:7d40:41::/48 maxlen: 48 2a0e:7d40:42::/48 maxlen: 48 2a0e:7d40:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f8:06:ae:af:37:31:df:f3:ab:6b:8d:11:87:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0deee3376c2ad8d151fb834c03adbd5f2501230a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:2f:2b:33:b3:49:65:95:5e:ff:20:ae:fe: 76:5e:ad:28:f6:6f:e8:e0:e0:0a:20:2e:05:14:c1: 11:e0:de:16:54:07:6c:c4:be:4d:c6:62:0a:e4:93: 87:a9:03:d7:8c:dd:9f:36:d6:eb:f4:36:df:36:4c: 61:14:2f:3a:41:a3:b3:69:11:dc:54:d8:47:46:4d: 84:16:63:ba:ad:1b:6a:ce:01:28:0c:20:d1:23:0d: 0a:29:5f:c4:df:98:f4:d7:8f:c4:91:21:03:d4:97: 12:e5:92:43:9d:08:2b:2f:c4:50:25:15:10:da:3c: e6:07:fd:8a:2f:0c:46:f6:13:d4:8d:74:2e:9c:f6: f8:f2:bb:57:1e:ad:7c:6d:44:c4:19:6e:5b:56:de: 78:a7:3f:ff:05:a8:5b:70:1a:aa:9f:19:64:3c:e4: 86:ea:75:0e:0e:45:fc:82:e9:4b:c8:c2:a1:e5:72: db:80:ff:a5:34:52:be:7e:47:69:99:10:f7:e8:af: 15:60:59:36:07:78:72:57:e8:02:0c:3b:4e:18:b2: 5e:a0:00:6f:65:aa:3b:a2:3a:25:cd:a6:71:ed:5c: 73:9a:f1:3a:37:9d:55:79:73:1c:32:d8:9f:30:77: 96:48:29:d4:81:0d:58:d4:f4:e6:db:63:7a:f7:ef: 5a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EE:E3:37:6C:2A:D8:D1:51:FB:83:4C:03:AD:BD:5F:25:01:23:0A X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/De7jN2wq2NFR-4NMA629XyUBIwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8130::/44 2a0e:7d40::/32 Signature Algorithm: sha256WithRSAEncryption af:3a:cf:d9:56:33:1d:0e:7b:78:d2:ae:2f:32:0d:ce:56:fd: 2a:24:ce:f3:c8:29:ae:d3:99:b7:29:91:b3:5e:db:a9:c5:d6: b0:75:25:fc:3c:dd:c3:9d:d5:b2:2d:a9:0c:23:f3:fe:0f:aa: a6:e0:fb:60:d6:b2:ae:1d:77:bc:ca:d5:ed:23:51:63:bd:9c: 59:38:6b:cf:f8:dc:f7:21:2d:96:9b:f0:c9:fd:e7:4d:03:d0: 30:33:4a:19:36:73:8c:b5:4b:0d:7c:f6:a7:41:0f:80:1a:28: 7f:50:c3:39:4f:bc:53:de:e8:6e:e0:2b:80:ee:21:29:d5:80: 9d:46:a2:ed:96:2d:6c:52:8f:6e:d2:27:9d:c8:68:65:6f:92: 75:f6:73:af:44:35:59:57:b8:0b:d0:ce:70:1b:52:21:9c:79: 30:e6:9c:2c:0d:a3:29:61:1d:30:9c:ed:7c:6a:13:35:9b:77: ab:6d:7b:29:33:3b:e8:46:8f:97:28:54:5e:3a:8f:89:58:5b: 44:19:45:14:e6:ba:8c:55:cf:e1:fd:d7:2b:39:9f:3c:e4:30: be:fb:b4:e9:e9:85:fb:ab:92:cd:d0:42:67:a8:d6:65:53:35: 0b:df:bc:5e:68:60:5a:3c:40:e1:85:46:4e:45:2f:01:0f:ff: 70:80:db:65 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt+pvgGrq83Md/zq2uNEYcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGVlZTMzNzZjMmFkOGQxNTFmYjgzNGMwM2FkYmQ1ZjI1MDEyMzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcsvKzOzSWWVXv8grv52Xq0o9m/o 4OAKIC4FFMER4N4WVAdsxL5NxmIK5JOHqQPXjN2fNtbr9DbfNkxhFC86QaOzaRHc VNhHRk2EFmO6rRtqzgEoDCDRIw0KKV/E35j014/EkSED1JcS5ZJDnQgrL8RQJRUQ 2jzmB/2KLwxG9hPUjXQunPb48rtXHq18bUTEGW5bVt54pz//BahbcBqqnxlkPOSG 6nUODkX8gulLyMKh5XLbgP+lNFK+fkdpmRD36K8VYFk2B3hyV+gCDDtOGLJeoABv Zao7ojolzaZx7VxzmvE6N51VeXMcMtifMHeWSCnUgQ1Y1PTm22N69+9aiwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFA3u4zdsKtjRUfuDTAOtvV8lASMKMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvRGU3ak4yd3EyTkZSLTROTUE2MjlYeVVCSXdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwcEKgyaQIEw AwUAKg59QDANBgkqhkiG9w0BAQsFAAOCAQEArzrP2VYzHQ57eNKuLzINzlb9KiTO 88gprtOZtymRs17bqcXWsHUl/Dzdw53Vsi2pDCPz/g+qpuD7YNayrh13vMrV7SNR Y72cWThrz/jc9yEtlpvwyf3nTQPQMDNKGTZzjLVLDXz2p0EPgBoof1DDOU+8U97o buArgO4hKdWAnUai7ZYtbFKPbtInnchoZW+SdfZzr0Q1WVe4C9DOcBtSIZx5MOac LA2jKWEdMJztfGoTNZt3q217KTM76EaPlyhUXjqPiVhbRBlFFOa6jFXP4f3XKzmf POQwvvu06emF+6uSzdBCZ6jWZVM1C9+8XmhgWjxA4YVGTkUvAQ//cIDbZQ== -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:41 2026 by rpki-client