This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DhUWeTD-XesEK0T1t7CcHgwZ-qg.roa File: DhUWeTD-XesEK0T1t7CcHgwZ-qg.roa (raw, json) Hash identifier: ecff1GkMpn3ppfoBRosqF+QfsEsA07PpDKRTbJe018g= Subject key identifier: 0E:15:16:79:30:FE:5D:EB:04:2B:44:F5:B7:B0:9C:1E:0C:19:FA:A8 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA75E3028933A2FA8B57BB5197FF08A Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DhUWeTD-XesEK0T1t7CcHgwZ-qg.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210971 IP address blocks: 2a0d:6f80:5129::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5e:30:28:93:3a:2f:a8:b5:7b:b5:19:7f:f0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e15167930fe5deb042b44f5b7b09c1e0c19faa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:db:9e:7f:6e:bc:fa:39:02:f4:be:f4:e9: f8:de:de:10:0a:9d:c5:6c:23:78:e1:23:db:5d:51: 66:9c:78:70:3c:ef:fe:ac:74:d2:3c:65:3c:fd:f5: 99:df:bf:5b:0b:b4:d3:aa:cf:bb:bd:91:42:92:c5: a6:01:78:54:58:02:ed:17:5c:71:94:17:57:80:c3: cf:7e:96:c9:1a:88:a8:4f:3a:3b:9e:a2:d7:c4:09: 83:18:95:5a:a8:00:67:f3:f5:b7:b3:7f:9c:0f:47: c0:9f:65:c9:22:4c:57:ca:41:8b:e5:e1:3a:89:ed: 49:14:58:99:1e:f7:33:29:fa:4b:44:18:a3:21:0c: 7d:aa:ac:02:7d:1e:70:94:f5:5d:27:3b:9d:54:60: 15:d6:3e:9d:9b:30:d9:98:3d:5d:b6:54:45:7e:fd: 3f:9f:01:28:c9:ac:13:7a:b6:24:15:09:40:c0:3d: 2f:52:04:9b:dd:e6:40:5a:56:60:1c:d8:c8:92:bf: 51:f7:67:8a:43:5f:60:54:20:e0:4a:78:3d:e5:1a: cc:cd:ea:c8:73:05:38:f9:4e:69:b7:2d:3c:be:72: c7:97:f2:7e:be:0a:b2:1d:7b:0d:4e:9f:e0:3a:f4: 87:87:69:05:58:9d:ab:e7:9c:69:3f:2b:f8:e2:de: 1b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:15:16:79:30:FE:5D:EB:04:2B:44:F5:B7:B0:9C:1E:0C:19:FA:A8 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DhUWeTD-XesEK0T1t7CcHgwZ-qg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6f80:5129::/48 Signature Algorithm: sha256WithRSAEncryption c9:05:63:a3:91:9d:a8:87:bc:2d:a9:4b:33:5b:39:a2:db:a7: 46:82:e4:a1:6f:45:d8:8d:71:32:8a:7a:43:b2:96:e9:1f:49: 4b:ef:4f:22:9e:01:59:0c:a0:95:ff:61:95:b6:81:96:17:b7: 1d:57:6d:15:5d:d3:48:7c:4e:3e:a7:c0:15:64:29:8a:6a:6a: ea:6e:63:c2:dc:8e:60:e9:c5:ee:91:b8:b9:b1:5f:ba:35:f9: eb:f7:e9:59:b6:65:7a:ad:4b:60:f3:77:35:37:b5:12:13:86: 40:c3:97:47:05:6d:87:2e:c5:7c:7f:bc:f1:b9:19:e0:80:60: 51:4a:61:bb:0e:c7:ee:e1:4e:d4:45:6f:47:39:ae:d9:49:08: 4e:8a:35:c1:a2:06:c5:27:3d:64:ee:3d:84:01:25:ba:36:82: 59:d9:c5:35:60:d5:54:6b:35:bb:4d:2b:62:46:c5:61:df:1c: 2c:64:6d:b2:49:af:c6:94:51:39:6e:39:6c:03:70:08:07:d7: 6a:2a:1a:99:1a:36:30:81:df:7d:d8:62:6a:4f:21:86:8d:58: d2:26:9a:10:f7:03:fb:6a:4e:4c:76:9a:fa:22:c3:46:87:0a: ba:5b:b8:5e:b3:cb:9d:fe:a8:cc:e5:76:8c:f3:12:aa:1c:ee: 39:5e:c2:20 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p14wKJM6L6i1e7UZf/CKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTE1MTY3OTMwZmU1ZGViMDQyYjQ0ZjViN2IwOWMxZTBjMTlmYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzDbnn9uvPo5AvS+9On43t4QCp3F bCN44SPbXVFmnHhwPO/+rHTSPGU8/fWZ379bC7TTqs+7vZFCksWmAXhUWALtF1xx lBdXgMPPfpbJGoioTzo7nqLXxAmDGJVaqABn8/W3s3+cD0fAn2XJIkxXykGL5eE6 ie1JFFiZHvczKfpLRBijIQx9qqwCfR5wlPVdJzudVGAV1j6dmzDZmD1dtlRFfv0/ nwEoyawTerYkFQlAwD0vUgSb3eZAWlZgHNjIkr9R92eKQ19gVCDgSng95RrMzerI cwU4+U5pty08vnLHl/J+vgqyHXsNTp/gOvSHh2kFWJ2r55xpPyv44t4biwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA4VFnkw/l3rBCtE9bewnB4MGfqoMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvRGhVV2VURC1YZXNFSzBUMXQ3Q2NIZ3daLXFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgFEp MA0GCSqGSIb3DQEBCwUAA4IBAQDJBWOjkZ2oh7wtqUszWzmi26dGguShb0XYjXEy inpDspbpH0lL708ingFZDKCV/2GVtoGWF7cdV20VXdNIfE4+p8AVZCmKamrqbmPC 3I5g6cXukbi5sV+6Nfnr9+lZtmV6rUtg83c1N7USE4ZAw5dHBW2HLsV8f7zxuRng gGBRSmG7Dsfu4U7URW9HOa7ZSQhOijXBogbFJz1k7j2EASW6NoJZ2cU1YNVUazW7 TStiRsVh3xwsZG2ySa/GlFE5bjlsA3AIB9dqKhqZGjYwgd992GJqTyGGjVjSJpoQ 9wP7ak5Mdpr6IsNGhwq6W7hes8ud/qjM5XaM8xKqHO45XsIg -----END CERTIFICATE-----Generated at Sat Jan 3 18:59:57 2026 by rpki-client