This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/20ByDsKWFZRWYpb7FRYaT_Q5JSk.roa File: 20ByDsKWFZRWYpb7FRYaT_Q5JSk.roa (raw, json) Hash identifier: iEncjQtFgIB22mz60qam8MyH8YH02FIPzxF1b4hepAA= Subject key identifier: DB:40:72:0E:C2:96:15:94:56:62:96:FB:15:16:1A:4F:F4:39:25:29 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7D84794E7E74B4511D62691CB5846 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/20ByDsKWFZRWYpb7FRYaT_Q5JSk.roa Signing time: Thu 01 Jan 2026 18:17:55 +0000 ROA not before: Thu 01 Jan 2026 18:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200709 IP address blocks: 2a02:610:fffa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d8:47:94:e7:e7:4b:45:11:d6:26:91:cb:58:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db40720ec2961594566296fb15161a4ff4392529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:78:d5:11:08:3e:97:38:43:f0:00:ed:8b: 54:77:40:d2:56:26:11:8c:f9:d4:81:5e:9b:36:d7: 87:41:e3:5c:9c:34:cf:76:f9:67:2f:d4:e3:cb:cf: b8:97:74:79:db:0e:62:5a:17:6c:bf:5f:7c:67:e0: 85:9b:f9:15:48:d2:94:cf:93:c7:c9:a6:14:1e:ca: d5:3d:ba:80:45:b1:ce:cf:f9:54:21:ef:6d:b0:ea: c4:f1:4f:ae:8d:bc:42:57:1a:33:47:56:78:52:1a: 99:69:d2:d7:28:c8:9c:47:d1:45:f2:89:5c:4b:46: a8:5c:c7:86:d5:80:8c:a9:55:20:ca:2c:c0:5c:be: c2:83:8f:06:94:09:46:f6:ed:be:e6:8f:5a:4d:6c: cd:e2:be:3b:b7:77:5e:f6:40:71:35:80:f9:58:91: 65:40:a6:3a:6d:f7:37:69:18:ea:38:43:66:89:3d: 87:d3:ab:08:cd:8f:6d:26:3d:b3:d0:c0:71:02:9b: e3:97:f3:84:18:40:00:c7:6b:3b:86:70:f5:46:82: e8:73:06:23:0f:f7:35:c5:ae:42:8c:85:aa:55:1a: ff:5c:5c:d9:82:8f:6d:18:81:3d:ad:44:bd:83:c5: 2b:0d:74:38:b6:c8:de:2e:c2:05:3f:77:72:52:49: c0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:40:72:0E:C2:96:15:94:56:62:96:FB:15:16:1A:4F:F4:39:25:29 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/20ByDsKWFZRWYpb7FRYaT_Q5JSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:610:fffa::/48 Signature Algorithm: sha256WithRSAEncryption a9:9b:70:87:73:32:f1:ed:a3:b4:b9:72:49:f2:a4:76:96:7e: 5a:69:33:bf:36:ea:e2:48:00:f2:76:29:4b:a8:12:d3:86:0f: 5c:b7:59:24:28:bc:26:03:13:6e:b8:aa:6f:59:5c:96:8c:06: 11:08:a1:e9:a0:96:75:a1:58:ac:3c:a9:e1:93:06:e6:c3:ad: 6c:40:80:25:78:e6:19:20:4b:86:70:bf:6a:6b:66:13:69:c8: 0b:09:77:93:87:d3:9c:2c:9b:29:39:fd:a2:33:e1:9c:c4:ff: 4e:85:8f:ca:88:7b:2f:53:78:b3:8c:1d:c2:09:32:48:22:a3: ba:13:b3:31:47:17:e9:80:63:6d:08:10:8d:80:00:fe:7a:63: f8:17:65:db:ce:9e:4d:26:2f:87:cc:66:5f:85:48:15:da:ab: c6:e8:84:5e:e0:8d:e6:75:af:13:5c:7d:17:dd:14:6d:6a:c2: 52:3d:44:7a:a3:01:c1:30:71:db:67:08:1e:ce:80:3f:30:15: 2a:34:41:2e:11:93:5a:fc:3e:df:46:1e:2a:4a:4f:8a:49:55: df:b7:38:d3:15:6a:ab:13:f5:81:46:a0:12:79:61:99:07:47: 24:36:a0:e7:fa:8c:ae:e1:bc:18:c6:8b:3c:7a:96:80:69:05: 4d:9b:18:0c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6x9hHlOfnS0UR1iaRy1hGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjQwNzIwZWMyOTYxNTk0NTY2Mjk2ZmIxNTE2MWE0ZmY0MzkyNTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08l41REIPpc4Q/AA7YtUd0DSViYR jPnUgV6bNteHQeNcnDTPdvlnL9Tjy8+4l3R52w5iWhdsv198Z+CFm/kVSNKUz5PH yaYUHsrVPbqARbHOz/lUIe9tsOrE8U+ujbxCVxozR1Z4UhqZadLXKMicR9FF8olc S0aoXMeG1YCMqVUgyizAXL7Cg48GlAlG9u2+5o9aTWzN4r47t3de9kBxNYD5WJFl QKY6bfc3aRjqOENmiT2H06sIzY9tJj2z0MBxApvjl/OEGEAAx2s7hnD1RoLocwYj D/c1xa5CjIWqVRr/XFzZgo9tGIE9rUS9g8UrDXQ4tsjeLsIFP3dyUknAcQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNtAcg7ClhWUVmKW+xUWGk/0OSUpMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvMjBCeURzS1dGWlJXWXBiN0ZSWWFUX1E1SlNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIGEP/6 MA0GCSqGSIb3DQEBCwUAA4IBAQCpm3CHczLx7aO0uXJJ8qR2ln5aaTO/NuriSADy dilLqBLThg9ct1kkKLwmAxNuuKpvWVyWjAYRCKHpoJZ1oVisPKnhkwbmw61sQIAl eOYZIEuGcL9qa2YTacgLCXeTh9OcLJspOf2iM+GcxP9OhY/KiHsvU3izjB3CCTJI IqO6E7MxRxfpgGNtCBCNgAD+emP4F2Xbzp5NJi+HzGZfhUgV2qvG6IRe4I3mda8T XH0X3RRtasJSPUR6owHBMHHbZwgezoA/MBUqNEEuEZNa/D7fRh4qSk+KSVXftzjT FWqrE/WBRqASeWGZB0ckNqDn+oyu4bwYxos8epaAaQVNmxgM -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:45 2026 by rpki-client