This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/djSIdX2gTX0MCxSL5llsn6i5hhM.roa File: djSIdX2gTX0MCxSL5llsn6i5hhM.roa (raw, json) Hash identifier: fcqxImDjDHGTSuae1yCoZlPJZwU1d5hw+ezJF6PZbRg= Subject key identifier: 76:34:88:75:7D:A0:4D:7D:0C:0B:14:8B:E6:59:6C:9F:A8:B9:86:13 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA562C66CE2B59D33ACA9D7B24FFE59 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/djSIdX2gTX0MCxSL5llsn6i5hhM.roa Signing time: Fri 02 Jan 2026 12:18:46 +0000 ROA not before: Fri 02 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214986 IP address blocks: 2a10:4646:150::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:62:c6:6c:e2:b5:9d:33:ac:a9:d7:b2:4f:fe:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=763488757da04d7d0c0b148be6596c9fa8b98613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:9d:79:09:35:37:30:ec:d7:ad:b5:3c:d8: cb:5a:61:2a:0d:d2:ea:50:15:af:d5:6e:81:21:14: 72:bb:c5:04:fc:d5:25:1b:b4:59:5d:13:3a:83:b5: ed:6a:63:3c:f8:a5:cb:43:4d:18:39:05:c4:29:e5: eb:e8:82:08:f6:4e:65:4b:55:f6:36:37:b4:a7:e5: 56:9a:f4:19:0d:aa:a7:d9:97:3b:a5:b3:db:86:d4: ac:fe:45:de:a3:b4:fd:de:27:f6:8d:0c:d8:bb:c5: 88:11:04:4c:3b:39:c6:69:f6:25:bd:ce:28:b1:a1: 57:2b:27:1c:51:cd:6b:7b:76:e4:fb:8d:3e:47:69: 4e:81:54:2c:73:ba:9a:d0:8b:40:a3:41:da:9a:df: ca:dd:1a:18:94:b1:c9:40:7f:ca:aa:f1:f0:5e:ea: 78:87:e6:39:1f:56:f7:ad:a3:50:b6:5c:0e:33:6b: e9:79:7e:9c:64:2a:7d:7d:8d:aa:a5:6f:d3:89:bb: 22:ab:04:2d:1e:ea:03:45:87:a4:35:f2:56:32:29: a8:c9:0a:5d:36:f0:a5:d3:58:8a:92:29:85:6e:f7: 61:a7:cd:9e:11:ee:a8:99:58:17:34:ff:82:e2:05: 20:ad:44:71:60:6f:43:bc:e4:88:01:ca:39:1a:a4: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:34:88:75:7D:A0:4D:7D:0C:0B:14:8B:E6:59:6C:9F:A8:B9:86:13 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/djSIdX2gTX0MCxSL5llsn6i5hhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:150::/44 Signature Algorithm: sha256WithRSAEncryption af:0e:8f:b7:50:ac:e3:73:4b:1f:64:c5:1a:9a:2e:32:71:06: 75:48:da:79:d7:84:1e:5e:e0:1b:8b:24:9d:96:f6:72:a4:bb: dd:9d:61:b1:f6:55:6a:af:bf:8a:f3:c1:92:47:fd:3c:8a:7f: 9e:15:21:2a:cf:20:66:1c:d8:9a:c8:1a:8d:b5:29:2a:6e:15: 13:d4:0f:91:0c:b5:b3:79:b6:86:ad:47:5d:c3:b9:60:6b:77: bf:80:53:fb:35:f4:9a:80:59:12:e1:c6:5f:e7:33:d6:6d:8e: 55:1e:99:89:85:de:3a:94:48:d1:49:29:5f:ef:bf:d8:a7:f1: 3b:42:12:79:77:7f:79:d8:89:d4:7f:28:d9:2e:5d:91:c0:fc: e8:df:84:74:15:01:21:a7:8d:cc:c8:fb:08:bd:3d:9d:ed:37: 9c:a6:99:4d:f3:63:8f:59:3a:ba:4f:b1:9b:19:27:6f:66:ca: 97:71:4b:cb:d5:af:52:ec:52:1c:7a:16:b4:8a:55:2a:9d:bb: 42:af:5d:3e:89:fe:07:d5:c6:f6:0c:3f:12:0e:6e:1d:23:b4: 8b:f5:17:0a:ac:ec:4f:fb:20:09:e5:25:0d:e9:c5:4f:32:9e: e8:ec:6f:d6:74:4b:9c:8a:dd:34:0b:44:d1:9c:f4:a7:96:b5: 10:28:ae:23 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pWLGbOK1nTOsqdeyT/5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjM0ODg3NTdkYTA0ZDdkMGMwYjE0OGJlNjU5NmM5ZmE4Yjk4NjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuqdeQk1NzDs1621PNjLWmEqDdLq UBWv1W6BIRRyu8UE/NUlG7RZXRM6g7XtamM8+KXLQ00YOQXEKeXr6III9k5lS1X2 Nje0p+VWmvQZDaqn2Zc7pbPbhtSs/kXeo7T93if2jQzYu8WIEQRMOznGafYlvc4o saFXKyccUc1re3bk+40+R2lOgVQsc7qa0ItAo0Hamt/K3RoYlLHJQH/KqvHwXup4 h+Y5H1b3raNQtlwOM2vpeX6cZCp9fY2qpW/TibsiqwQtHuoDRYekNfJWMimoyQpd NvCl01iKkimFbvdhp82eEe6omVgXNP+C4gUgrURxYG9DvOSIAco5GqQMWwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHY0iHV9oE19DAsUi+ZZbJ+ouYYTMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvZGpTSWRYMmdUWDBNQ3hTTDVsbHNuNmk1aGhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgFQ MA0GCSqGSIb3DQEBCwUAA4IBAQCvDo+3UKzjc0sfZMUami4ycQZ1SNp514QeXuAb iySdlvZypLvdnWGx9lVqr7+K88GSR/08in+eFSEqzyBmHNiayBqNtSkqbhUT1A+R DLWzebaGrUddw7lga3e/gFP7NfSagFkS4cZf5zPWbY5VHpmJhd46lEjRSSlf77/Y p/E7QhJ5d3952InUfyjZLl2RwPzo34R0FQEhp43MyPsIvT2d7TecpplN82OPWTq6 T7GbGSdvZsqXcUvL1a9S7FIceha0ilUqnbtCr10+if4H1cb2DD8SDm4dI7SL9RcK rOxP+yAJ5SUN6cVPMp7o7G/WdEucit00C0TRnPSnlrUQKK4j -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:37 2026 by rpki-client