This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/dDH3JtUTrsvQnVBKVO7yHBntw-w.roa File: dDH3JtUTrsvQnVBKVO7yHBntw-w.roa (raw, json) Hash identifier: mfCB3VeF+mi9XRi1tKveWq8k9D8F3zzZ0DMoRWnR5Kc= Subject key identifier: 74:31:F7:26:D5:13:AE:CB:D0:9D:50:4A:54:EE:F2:1C:19:ED:C3:EC Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13FD52F9552749C7620B0AE2BA702D Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/dDH3JtUTrsvQnVBKVO7yHBntw-w.roa Signing time: Fri 02 Jan 2026 14:19:35 +0000 ROA not before: Fri 02 Jan 2026 14:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59713 IP address blocks: 2a02:2698:3800::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:fd:52:f9:55:27:49:c7:62:0b:0a:e2:ba:70:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7431f726d513aecbd09d504a54eef21c19edc3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:d6:82:8d:96:a6:fa:c7:46:67:86:5c:2b: 91:34:ec:d6:46:fa:27:d1:60:3c:f5:9a:7a:95:cf: d0:62:29:18:f9:94:8f:fb:73:d9:c1:ca:d0:d9:ea: 48:e7:ef:2b:b4:b9:a4:02:8f:5d:85:c3:3f:05:dc: a0:e3:09:39:9b:8e:ce:5c:55:c3:99:18:a0:3b:f8: bf:b1:c8:27:75:cc:bc:81:c7:f8:24:32:e3:c5:7c: 4b:08:4d:df:0a:d2:f0:1e:93:0c:a0:c7:7a:f3:07: 18:0e:5f:c7:d7:43:72:57:3a:6a:7c:ae:e7:5d:b3: 79:fc:4d:d9:76:30:18:fe:fc:e7:99:d1:1d:f4:57: b5:e8:73:24:ec:85:a1:75:f2:5e:9d:14:b5:a0:80: 6c:b0:28:a1:b8:4d:7a:e9:f0:82:07:b8:3d:2b:52: 84:84:8d:ef:5f:db:ba:a9:8f:c3:cc:31:cf:cf:9d: 39:e7:c0:8c:08:a3:4a:de:a3:e8:37:ba:31:fb:ba: 13:98:29:54:90:3e:05:ba:5a:aa:04:d4:aa:a7:ff: af:07:2b:5f:7e:61:25:7f:a1:9d:a4:39:ee:e9:a8: 0f:c6:3f:07:d8:aa:fb:56:50:63:6a:c5:9a:82:a7: 9b:bd:d4:c6:32:9f:39:04:c0:a0:02:98:a2:25:6f: dd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:31:F7:26:D5:13:AE:CB:D0:9D:50:4A:54:EE:F2:1C:19:ED:C3:EC X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/dDH3JtUTrsvQnVBKVO7yHBntw-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:3800::/38 Signature Algorithm: sha256WithRSAEncryption 35:f1:c3:99:2f:f8:18:fe:88:59:e6:61:fe:64:b3:6b:05:fb: 25:9f:04:2a:5a:91:72:aa:b7:3f:b5:c4:ca:18:13:30:1f:1a: 8a:34:6f:a1:7b:b5:b2:a3:1f:73:20:2c:fc:f6:c8:1f:b8:8d: 18:ca:57:50:16:9f:1e:d1:df:29:98:63:6f:c0:23:36:8e:d8: 05:2e:55:47:9c:0c:99:39:0c:85:8a:35:71:9e:1f:06:30:f2: 32:c7:85:22:16:9d:96:b7:7f:15:e9:04:20:9a:fa:2e:38:64: 63:67:ac:27:8e:34:9b:3c:00:10:1a:d8:d4:80:47:2f:3b:f7: 65:fb:ce:8d:90:cf:3e:61:c1:3d:a8:b4:66:a0:39:74:a6:32: d7:20:43:51:6b:58:9b:a5:49:24:7f:f0:ee:c1:36:69:2b:72: 5d:64:c9:97:66:42:c5:60:ed:fa:70:3e:a9:de:38:c2:d1:c9: 2e:c9:65:ba:3d:59:65:5c:91:cb:5d:4d:17:0e:a8:58:fd:fb: 1c:09:33:dd:8a:08:a4:ca:5b:cf:c7:a4:f6:a2:9a:1c:b8:4c: 35:3d:f7:38:83:91:ec:33:c1:26:c3:bb:97:b9:76:4b:76:42: 38:64:c1:98:5d:37:40:00:4b:99:81:63:61:9a:4e:a0:0f:2f: 84:63:87:6a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E/1S+VUnScdiCwriunAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDMxZjcyNmQ1MTNhZWNiZDA5ZDUwNGE1NGVlZjIxYzE5ZWRjM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiLWgo2WpvrHRmeGXCuRNOzWRvon 0WA89Zp6lc/QYikY+ZSP+3PZwcrQ2epI5+8rtLmkAo9dhcM/Bdyg4wk5m47OXFXD mRigO/i/scgndcy8gcf4JDLjxXxLCE3fCtLwHpMMoMd68wcYDl/H10NyVzpqfK7n XbN5/E3ZdjAY/vznmdEd9Fe16HMk7IWhdfJenRS1oIBssCihuE166fCCB7g9K1KE hI3vX9u6qY/DzDHPz50558CMCKNK3qPoN7ox+7oTmClUkD4FulqqBNSqp/+vBytf fmElf6GdpDnu6agPxj8H2Kr7VlBjasWagqebvdTGMp85BMCgApiiJW/djwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHQx9ybVE67L0J1QSlTu8hwZ7cPsMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvZERIM0p0VVRyc3ZRblZCS1ZPN3lIQm50dy13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmDgw DQYJKoZIhvcNAQELBQADggEBADXxw5kv+Bj+iFnmYf5ks2sF+yWfBCpakXKqtz+1 xMoYEzAfGoo0b6F7tbKjH3MgLPz2yB+4jRjKV1AWnx7R3ymYY2/AIzaO2AUuVUec DJk5DIWKNXGeHwYw8jLHhSIWnZa3fxXpBCCa+i44ZGNnrCeONJs8ABAa2NSARy87 92X7zo2Qzz5hwT2otGagOXSmMtcgQ1FrWJulSSR/8O7BNmkrcl1kyZdmQsVg7fpw PqneOMLRyS7JZbo9WWVckctdTRcOqFj9+xwJM92KCKTKW8/HpPaimhy4TDU99ziD kewzwSbDu5e5dkt2QjhkwZhdN0AAS5mBY2GaTqAPL4Rjh2o= -----END CERTIFICATE-----Generated at Thu Feb 5 05:54:56 2026 by rpki-client