This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/DF4qx1DNox0FJE2H-D0ZUTMQcKQ.roa File: DF4qx1DNox0FJE2H-D0ZUTMQcKQ.roa (raw, json) Hash identifier: Y2WFD4vu36lVNJG1rXcR3AVi/f0D3YYRbsZI0ZVNT0A= Subject key identifier: 0C:5E:2A:C7:50:CD:A3:1D:05:24:4D:87:F8:3D:19:51:33:10:70:A4 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13EBC7C9CF9FCEB1C3C1AA82EB6EFD Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/DF4qx1DNox0FJE2H-D0ZUTMQcKQ.roa Signing time: Fri 02 Jan 2026 14:19:30 +0000 ROA not before: Fri 02 Jan 2026 14:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41727 IP address blocks: 2a02:2698:2c00::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:eb:c7:c9:cf:9f:ce:b1:c3:c1:aa:82:eb:6e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c5e2ac750cda31d05244d87f83d1951331070a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:66:48:0c:0f:bc:49:b5:7e:2e:43:d6:31: d1:aa:ee:7a:87:ad:28:d0:ce:fd:8a:6a:06:f5:b4: d2:e6:f4:ef:9b:7e:23:06:4a:43:13:43:b4:a5:cc: 73:d0:b9:b0:a5:a5:81:03:2d:92:66:82:3c:16:11: 18:67:32:4d:ae:c4:f4:ea:c9:ed:14:a1:51:73:94: c6:31:ce:4e:ff:8e:b4:f4:2c:a1:95:f5:04:30:8d: bc:4e:b7:81:8f:79:20:05:ad:5b:6e:26:21:2b:91: b2:20:93:79:b8:20:1a:c7:bb:57:df:e3:0f:09:ea: 10:0b:f7:b1:70:2a:f6:89:cd:e6:8b:3d:0d:57:bb: 08:4c:ea:07:0d:c1:8d:f4:94:bb:62:ba:1f:ae:42: 69:9f:9f:71:01:9c:72:84:f4:c6:f2:2f:c6:32:29: f9:fe:22:b6:2b:98:69:fc:cb:ea:85:30:54:c5:46: 20:a4:42:f2:b6:74:03:16:b8:98:e1:62:31:4c:7b: 56:2a:fd:e3:1f:00:31:bb:00:f6:1c:fc:1f:b4:39: 13:ac:cd:98:b4:7b:f2:dc:11:7d:d4:16:4c:41:41: e7:ba:94:2e:4f:75:f9:3b:de:f9:d5:8f:98:a6:a8: 18:99:3a:db:32:96:9e:03:97:f4:65:a2:db:32:d8: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5E:2A:C7:50:CD:A3:1D:05:24:4D:87:F8:3D:19:51:33:10:70:A4 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/DF4qx1DNox0FJE2H-D0ZUTMQcKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:2c00::/38 Signature Algorithm: sha256WithRSAEncryption 8d:32:0d:ef:5c:b3:0c:29:5d:9f:60:a5:66:15:a5:3c:a2:7f: 8f:a4:c2:64:64:d1:be:af:54:a7:d0:58:cc:3f:5e:fd:35:67: 8f:7c:7c:8b:82:db:21:56:62:ea:fd:f8:a4:ae:8f:0c:f0:b3: de:9c:68:69:4d:30:cd:0b:12:2d:b9:b1:db:e3:b3:e5:9f:10: 3b:a3:ee:80:06:2f:63:b9:42:1b:9d:22:8e:da:f6:4e:81:9f: 83:fc:ce:32:a0:4a:f5:0d:89:c1:98:98:1e:cc:ee:20:ee:b5: 94:13:d7:2f:85:da:2e:e9:90:4f:3a:90:8f:ae:f4:ab:09:98: 5f:ec:ae:cb:c0:90:c7:9e:4e:79:43:d5:11:90:4d:6e:9a:40: 18:1a:04:f5:b6:75:eb:01:5b:55:7d:6b:33:98:ba:c4:09:ed: 17:95:2c:bf:d2:f5:49:7a:20:58:90:84:19:d5:75:45:f0:10: 72:7d:8d:bb:08:16:ac:5b:2d:a4:ec:86:74:c4:17:3d:c7:46: fb:09:8a:d8:c5:6c:f4:bd:dd:ec:75:16:b2:b7:1c:d2:20:c6: 20:66:2e:e5:31:7c:2b:08:27:25:d7:0a:f3:39:71:f8:15:5d: b7:5a:22:86:3a:89:4b:f1:95:27:87:17:39:89:72:2f:ba:56: da:9f:73:ab -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E+vHyc+fzrHDwaqC6279MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzVlMmFjNzUwY2RhMzFkMDUyNDRkODdmODNkMTk1MTMzMTA3MGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/RmSAwPvEm1fi5D1jHRqu56h60o 0M79imoG9bTS5vTvm34jBkpDE0O0pcxz0LmwpaWBAy2SZoI8FhEYZzJNrsT06snt FKFRc5TGMc5O/4609CyhlfUEMI28TreBj3kgBa1bbiYhK5GyIJN5uCAax7tX3+MP CeoQC/excCr2ic3miz0NV7sITOoHDcGN9JS7YrofrkJpn59xAZxyhPTG8i/GMin5 /iK2K5hp/MvqhTBUxUYgpELytnQDFriY4WIxTHtWKv3jHwAxuwD2HPwftDkTrM2Y tHvy3BF91BZMQUHnupQuT3X5O9751Y+YpqgYmTrbMpaeA5f0ZaLbMtgXNQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAxeKsdQzaMdBSRNh/g9GVEzEHCkMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvREY0cXgxRE5veDBGSkUySC1EMFpVVE1RY0tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmCww DQYJKoZIhvcNAQELBQADggEBAI0yDe9cswwpXZ9gpWYVpTyif4+kwmRk0b6vVKfQ WMw/Xv01Z498fIuC2yFWYur9+KSujwzws96caGlNMM0LEi25sdvjs+WfEDuj7oAG L2O5QhudIo7a9k6Bn4P8zjKgSvUNicGYmB7M7iDutZQT1y+F2i7pkE86kI+u9KsJ mF/srsvAkMeeTnlD1RGQTW6aQBgaBPW2desBW1V9azOYusQJ7ReVLL/S9Ul6IFiQ hBnVdUXwEHJ9jbsIFqxbLaTshnTEFz3HRvsJitjFbPS93ex1FrK3HNIgxiBmLuUx fCsIJyXXCvM5cfgVXbdaIoY6iUvxlSeHFzmJci+6Vtqfc6s= -----END CERTIFICATE-----Generated at Thu Feb 5 05:54:41 2026 by rpki-client