This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/d3rejRbUmYFr35-vLeZclqKXvx8.roa File: d3rejRbUmYFr35-vLeZclqKXvx8.roa (raw, json) Hash identifier: d9vdGuX+pqEbHEeXPkCALX9/MW/hcSbcEnVvwtApLDQ= Subject key identifier: 77:7A:DE:8D:16:D4:99:81:6B:DF:9F:AF:2D:E6:5C:96:A2:97:BF:1F Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13E36EEA4CE499CEBF8E1029753D36 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/d3rejRbUmYFr35-vLeZclqKXvx8.roa Signing time: Fri 02 Jan 2026 14:19:28 +0000 ROA not before: Fri 02 Jan 2026 14:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12768 IP address blocks: 2a02:2698::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:e3:6e:ea:4c:e4:99:ce:bf:8e:10:29:75:3d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=777ade8d16d499816bdf9faf2de65c96a297bf1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:61:2e:46:6d:72:b7:a8:22:df:57:0b:93: 14:b8:27:3d:54:61:d8:13:c3:c7:59:56:bc:41:c4: fe:d6:d0:85:c1:d8:1a:f7:91:99:97:51:d3:ce:8b: a9:ab:47:ce:e0:ab:28:ff:34:b2:98:49:ed:fb:17: d9:be:f8:e0:12:47:aa:0f:81:30:ed:67:2b:57:c9: 25:06:29:75:ea:a4:47:1f:ce:56:fd:53:e4:42:bc: fd:c7:ab:42:52:e2:66:81:0c:77:b9:b7:a0:e9:df: 79:9d:07:56:66:69:97:cb:f0:61:b7:56:a5:0f:0c: e0:0f:65:a1:b4:45:3f:2f:f8:53:25:6c:b9:86:a3: e7:81:3f:68:f3:31:e6:0e:6f:7b:6b:45:dd:52:dc: de:53:57:69:58:06:80:61:ff:5f:0b:89:41:ed:a3: 8d:01:38:88:4b:37:c5:cf:12:f0:be:18:03:2c:fa: f6:84:fe:59:67:bf:cd:9f:e0:b2:a1:11:44:6f:af: cd:5d:90:14:53:08:e7:4e:05:8c:73:67:8a:45:7c: bd:4b:11:84:a8:ef:4a:66:90:15:5c:53:54:1d:d9: 60:3b:e7:c5:73:84:fc:82:66:19:f8:6e:0a:59:3d: f2:b7:9c:d0:41:a6:b6:57:f5:5d:cf:73:ef:2c:ec: 93:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7A:DE:8D:16:D4:99:81:6B:DF:9F:AF:2D:E6:5C:96:A2:97:BF:1F X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/d3rejRbUmYFr35-vLeZclqKXvx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698::/38 Signature Algorithm: sha256WithRSAEncryption 0d:62:1a:bf:0e:c9:a8:1e:78:04:4a:c3:f9:87:43:19:3b:4f: 6f:78:5a:40:ce:63:45:06:a8:0c:0e:1f:3b:bd:da:dc:40:f1: 1f:3f:92:9a:36:ad:eb:3c:c9:92:7c:aa:ff:2f:94:bf:fb:f8: 21:4f:5d:05:57:b0:0d:cd:be:68:5c:5c:f0:e0:b9:bc:00:7e: 5e:47:e6:79:bb:7e:29:4a:86:ba:ec:1c:89:f3:c1:d9:4f:08: 7c:50:ff:b6:4a:71:7d:75:3a:6f:e4:87:a7:60:e1:29:a2:d4: 8c:e4:e6:09:7e:d6:1f:58:e1:72:9f:99:d4:fc:56:c7:50:17: 0c:8d:93:94:7b:45:07:b6:9a:1d:7d:08:f0:7d:7f:f9:93:e4: 27:f3:6f:28:5f:d9:32:d8:9d:57:e3:38:8e:90:d7:cc:27:9c: bf:a4:a6:a9:f9:56:93:0e:56:c5:64:51:ea:e3:a9:60:70:a9: 9d:9d:d3:84:09:68:75:60:2d:a7:79:49:3a:d6:a7:2c:6f:d9: 72:34:f6:ba:a5:9a:88:b9:49:b4:6d:f1:ee:27:3d:88:bd:25: 3b:6b:bf:b7:c4:e4:08:34:da:2c:60:a8:8f:5c:62:b7:1e:76: 02:de:d5:b1:8b:33:11:06:ec:79:78:d4:db:b8:14:12:75:47: fb:50:2c:44 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E+Nu6kzkmc6/jhApdT02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzdhZGU4ZDE2ZDQ5OTgxNmJkZjlmYWYyZGU2NWM5NmEyOTdiZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUNhLkZtcreoIt9XC5MUuCc9VGHY E8PHWVa8QcT+1tCFwdga95GZl1HTzoupq0fO4Kso/zSymEnt+xfZvvjgEkeqD4Ew 7WcrV8klBil16qRHH85W/VPkQrz9x6tCUuJmgQx3ubeg6d95nQdWZmmXy/Bht1al DwzgD2WhtEU/L/hTJWy5hqPngT9o8zHmDm97a0XdUtzeU1dpWAaAYf9fC4lB7aON ATiISzfFzxLwvhgDLPr2hP5ZZ7/Nn+CyoRFEb6/NXZAUUwjnTgWMc2eKRXy9SxGE qO9KZpAVXFNUHdlgO+fFc4T8gmYZ+G4KWT3yt5zQQaa2V/Vdz3PvLOyTwwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHd63o0W1JmBa9+fry3mXJail78fMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvZDNyZWpSYlVtWUZyMzUtdkxlWmNscUtYdng4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmAAw DQYJKoZIhvcNAQELBQADggEBAA1iGr8OyageeARKw/mHQxk7T294WkDOY0UGqAwO Hzu92txA8R8/kpo2res8yZJ8qv8vlL/7+CFPXQVXsA3NvmhcXPDgubwAfl5H5nm7 filKhrrsHInzwdlPCHxQ/7ZKcX11Om/kh6dg4Smi1Izk5gl+1h9Y4XKfmdT8VsdQ FwyNk5R7RQe2mh19CPB9f/mT5Cfzbyhf2TLYnVfjOI6Q18wnnL+kpqn5VpMOVsVk UerjqWBwqZ2d04QJaHVgLad5STrWpyxv2XI09rqlmoi5SbRt8e4nPYi9JTtrv7fE 5Ag02ixgqI9cYrcedgLe1bGLMxEG7Hl41Nu4FBJ1R/tQLEQ= -----END CERTIFICATE-----Generated at Thu Feb 5 05:53:45 2026 by rpki-client