This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DmtLO5X2bLeucKh03XftFATgQ4I.roa File: DmtLO5X2bLeucKh03XftFATgQ4I.roa (raw, json) Hash identifier: Pb9/aU6GCuF7aP3/u02ShUdEeHkWLefchOLGQNbdOaE= Subject key identifier: 0E:6B:4B:3B:95:F6:6C:B7:AE:70:A8:74:DD:77:ED:14:04:E0:43:82 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA71606096AD548D44315098B466C12 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DmtLO5X2bLeucKh03XftFATgQ4I.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215685 IP address blocks: 2a0c:9a40:8890::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:16:06:09:6a:d5:48:d4:43:15:09:8b:46:6c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e6b4b3b95f66cb7ae70a874dd77ed1404e04382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:c1:4f:39:25:aa:a0:0a:93:b5:de:5c:30: be:77:77:5c:03:93:73:76:7c:ac:70:5c:99:b5:69: 44:7a:5c:73:f2:e4:a3:82:e1:76:45:36:1a:66:76: eb:52:98:f3:2a:df:c6:ed:44:18:3e:4c:f0:2a:a5: 4c:71:c7:67:3f:a7:ef:91:93:bf:8c:8d:62:9e:75: 12:3d:ac:76:05:26:23:da:d4:cd:fb:91:8a:41:e7: b2:bd:cc:34:29:64:a7:dc:c4:e3:e1:0f:82:55:cc: 92:7c:a9:9d:43:ec:32:ca:90:6b:84:6f:40:84:70: 9e:31:04:aa:b9:94:60:aa:d8:4b:f1:69:5b:68:fc: 5f:53:ff:c6:22:1a:fd:81:76:fd:02:c4:8d:52:74: c7:d6:85:4b:3b:6f:af:7a:db:6d:2c:81:79:75:49: 39:d2:ab:4f:38:d9:71:a5:77:a7:8d:bf:80:98:36: a2:5e:a7:d5:4e:71:aa:35:b5:c9:25:74:6d:dc:25: 1a:21:f7:c2:1c:9b:41:36:32:55:60:33:55:f3:c9: 4e:ae:f2:d5:81:80:22:ab:f7:e3:e1:6c:ac:b7:3b: be:4c:87:de:42:82:02:4f:c1:44:34:c3:e3:13:e3: d5:ac:ad:2b:46:b4:89:e3:41:cb:d7:92:1d:c4:39: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6B:4B:3B:95:F6:6C:B7:AE:70:A8:74:DD:77:ED:14:04:E0:43:82 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DmtLO5X2bLeucKh03XftFATgQ4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8890::/48 Signature Algorithm: sha256WithRSAEncryption 02:54:e1:f5:f3:2f:68:fd:f4:28:c2:59:ce:c1:63:f2:c8:d2: b7:80:93:2a:be:a8:d1:b0:08:bd:ab:e6:93:b2:e1:50:19:12: e1:ed:d1:d7:56:cc:bb:2d:86:f7:f9:da:f7:f5:56:00:f0:bc: aa:30:a2:55:9b:61:f5:f4:64:e6:f1:d9:ac:64:6e:d1:10:02: eb:65:71:cd:fc:5c:5e:03:13:8d:89:b8:db:b4:18:fd:2c:03: 3c:e9:27:89:76:b8:7e:d4:ce:4b:ba:5a:79:b0:8b:ba:70:11: 97:48:30:ba:45:c3:ca:33:e9:1b:0a:33:d0:b3:b8:f2:c2:c0: 19:cf:84:08:d9:10:d1:4d:a5:f3:71:35:8f:97:5c:b9:71:ea: 57:e6:63:7e:de:50:b6:57:3a:df:35:73:cd:f8:8b:34:67:2a: e1:e2:65:0c:9c:67:0f:73:01:3c:72:5c:61:d5:82:37:f1:a6: f3:f4:c2:07:91:8e:a5:69:33:c6:28:d9:68:0a:27:75:29:3f: 01:ed:50:fb:52:02:2a:8d:e0:0a:fe:bc:7e:b0:33:35:79:85: 13:14:e8:e7:45:c5:43:71:22:4f:e1:87:71:f1:27:c7:8e:a9: 78:0a:15:1c:52:aa:4c:d9:b6:36:0f:fd:e2:90:f3:34:67:b8: 74:dc:25:cc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxYGCWrVSNRDFQmLRmwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTZiNGIzYjk1ZjY2Y2I3YWU3MGE4NzRkZDc3ZWQxNDA0ZTA0MzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1rBTzklqqAKk7XeXDC+d3dcA5Nz dnyscFyZtWlEelxz8uSjguF2RTYaZnbrUpjzKt/G7UQYPkzwKqVMccdnP6fvkZO/ jI1innUSPax2BSYj2tTN+5GKQeeyvcw0KWSn3MTj4Q+CVcySfKmdQ+wyypBrhG9A hHCeMQSquZRgqthL8WlbaPxfU//GIhr9gXb9AsSNUnTH1oVLO2+vetttLIF5dUk5 0qtPONlxpXenjb+AmDaiXqfVTnGqNbXJJXRt3CUaIffCHJtBNjJVYDNV88lOrvLV gYAiq/fj4Wystzu+TIfeQoICT8FENMPjE+PVrK0rRrSJ40HL15IdxDnmBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA5rSzuV9my3rnCodN137RQE4EOCMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvRG10TE81WDJiTGV1Y0toMDNYZnRGQVRnUTRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIiQ MA0GCSqGSIb3DQEBCwUAA4IBAQACVOH18y9o/fQowlnOwWPyyNK3gJMqvqjRsAi9 q+aTsuFQGRLh7dHXVsy7LYb3+dr39VYA8LyqMKJVm2H19GTm8dmsZG7REALrZXHN /FxeAxONibjbtBj9LAM86SeJdrh+1M5Lulp5sIu6cBGXSDC6RcPKM+kbCjPQs7jy wsAZz4QI2RDRTaXzcTWPl1y5cepX5mN+3lC2VzrfNXPN+Is0Zyrh4mUMnGcPcwE8 clxh1YI38abz9MIHkY6laTPGKNloCid1KT8B7VD7UgIqjeAK/rx+sDM1eYUTFOjn RcVDcSJP4Ydx8SfHjql4ChUcUqpM2bY2D/3ikPM0Z7h03CXM -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:16 2026 by rpki-client