This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DuPiepgHewwgCfBRT0bh-7iEolY.roa File: DuPiepgHewwgCfBRT0bh-7iEolY.roa (raw, json) Hash identifier: +Qbpeac+8diL8kczTvPzwlOslFbzydX++ZfGo0h+Kjc= Subject key identifier: 0E:E3:E2:7A:98:07:7B:0C:20:09:F0:51:4F:46:E1:FB:B8:84:A2:56 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6E6E065D71D2C7641B64FCF70D268 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DuPiepgHewwgCfBRT0bh-7iEolY.roa Signing time: Fri 02 Jan 2026 12:20:25 +0000 ROA not before: Fri 02 Jan 2026 12:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203504 IP address blocks: 2a0c:9a40:89f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e6:e0:65:d7:1d:2c:76:41:b6:4f:cf:70:d2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ee3e27a98077b0c2009f0514f46e1fbb884a256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:e1:37:a0:6b:4f:50:1e:fc:12:ef:a9:4c: c6:bc:51:77:d9:8e:3d:28:6a:f2:fc:71:ba:00:56: cf:ca:69:78:50:d3:f2:ee:f9:17:2e:1b:0a:65:29: 08:06:64:69:39:f5:70:5e:78:15:30:4e:14:53:db: d4:84:d3:68:ae:73:c3:64:66:eb:36:b7:a2:b2:e8: ea:ac:9a:2a:0a:5a:d6:df:1c:7c:fd:ca:7a:ea:e3: 96:8d:38:a0:23:1d:d7:a0:56:31:da:db:63:2a:45: 71:f3:15:60:93:23:c1:3c:0a:63:a9:02:27:53:72: 55:ce:39:c0:56:73:3a:b7:fa:84:f6:37:cb:47:b9: 9f:a7:71:26:b3:5d:89:ba:06:16:e1:26:34:5c:05: 91:17:05:a1:fa:0c:29:ed:5a:f6:64:bb:09:b0:10: cf:09:06:89:08:37:4a:2f:b8:33:ec:f4:16:60:ff: f8:85:ad:66:37:d7:56:74:b1:06:03:d4:12:4a:3b: 3e:df:35:48:6d:04:8e:92:ce:50:56:f9:21:ea:72: b9:48:25:fc:7d:77:5a:0e:d9:6b:be:10:c2:57:26: 8d:a9:4a:6a:5c:8e:9b:7a:0b:95:92:f8:35:d2:2e: 4d:23:60:8d:17:20:6f:dc:09:1f:cf:2a:52:05:97: 18:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E3:E2:7A:98:07:7B:0C:20:09:F0:51:4F:46:E1:FB:B8:84:A2:56 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DuPiepgHewwgCfBRT0bh-7iEolY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:89f0::/48 Signature Algorithm: sha256WithRSAEncryption 4d:ea:85:3e:5b:af:30:56:88:eb:f3:eb:ab:12:d4:05:fc:df: db:e8:cc:bc:88:7c:a3:52:b8:96:2a:bb:e3:9d:54:ec:1a:21: 8f:4a:05:72:18:71:e1:51:ae:10:8a:e2:75:07:ad:51:cd:76: a5:65:a1:f1:42:3f:3b:b4:39:e4:5d:89:32:e9:35:9f:ec:dc: 9f:e3:6a:cc:80:01:b9:5b:5e:cc:6f:78:99:fa:e4:ef:4d:e5: cb:20:67:67:fd:b8:f5:ea:09:4b:cc:85:b1:de:51:ea:7c:45: de:9f:71:c5:fb:32:18:eb:2d:b1:25:53:20:b5:98:8e:44:fd: c0:09:5b:65:e9:7b:95:95:19:ec:9c:71:89:54:dc:ce:a4:fa: dd:eb:f0:d5:42:f2:71:da:01:c9:77:70:7e:b5:66:5e:83:83: eb:eb:06:d3:03:a3:81:01:38:32:a4:cf:0e:12:43:a7:94:a7: 8d:c1:20:a1:24:b3:78:da:6e:42:d3:9a:a0:32:36:59:c6:fe: b0:8b:b9:15:b2:ab:2b:b8:fb:0a:d8:5b:eb:db:a2:65:f1:bc: 00:27:24:96:a2:aa:d7:36:1c:41:fe:19:2b:b4:2f:57:d5:01: a0:87:86:58:30:1d:53:81:e9:41:78:72:a0:d3:a8:5f:15:09: 8d:c0:c3:e3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pubgZdcdLHZBtk/PcNJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWUzZTI3YTk4MDc3YjBjMjAwOWYwNTE0ZjQ2ZTFmYmI4ODRhMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsenhN6BrT1Ae/BLvqUzGvFF32Y49 KGry/HG6AFbPyml4UNPy7vkXLhsKZSkIBmRpOfVwXngVME4UU9vUhNNornPDZGbr NreisujqrJoqClrW3xx8/cp66uOWjTigIx3XoFYx2ttjKkVx8xVgkyPBPApjqQIn U3JVzjnAVnM6t/qE9jfLR7mfp3Ems12JugYW4SY0XAWRFwWh+gwp7Vr2ZLsJsBDP CQaJCDdKL7gz7PQWYP/4ha1mN9dWdLEGA9QSSjs+3zVIbQSOks5QVvkh6nK5SCX8 fXdaDtlrvhDCVyaNqUpqXI6beguVkvg10i5NI2CNFyBv3AkfzypSBZcYdQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA7j4nqYB3sMIAnwUU9G4fu4hKJWMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvRHVQaWVwZ0hld3dnQ2ZCUlQwYmgtN2lFb2xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQInw MA0GCSqGSIb3DQEBCwUAA4IBAQBN6oU+W68wVojr8+urEtQF/N/b6My8iHyjUriW KrvjnVTsGiGPSgVyGHHhUa4QiuJ1B61RzXalZaHxQj87tDnkXYky6TWf7Nyf42rM gAG5W17Mb3iZ+uTvTeXLIGdn/bj16glLzIWx3lHqfEXen3HF+zIY6y2xJVMgtZiO RP3ACVtl6XuVlRnsnHGJVNzOpPrd6/DVQvJx2gHJd3B+tWZeg4Pr6wbTA6OBATgy pM8OEkOnlKeNwSChJLN42m5C05qgMjZZxv6wi7kVsqsruPsK2Fvr26Jl8bwAJySW oqrXNhxB/hkrtC9X1QGgh4ZYMB1TgelBeHKg06hfFQmNwMPj -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:42 2026 by rpki-client