This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/33dtqLxDvjVwskcvs1eBKxG9qW0.roa File: 33dtqLxDvjVwskcvs1eBKxG9qW0.roa (raw, json) Hash identifier: v3Uvvd01xCxk2zOvIWKmnmyUBgwjXDORZn0oG3d1w0A= Subject key identifier: DF:77:6D:A8:BC:43:BE:35:70:B2:47:2F:B3:57:81:2B:11:BD:A9:6D Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85 Certificate serial: 019B7E3809D68C03DED8B5E8F40BA69E916B Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/33dtqLxDvjVwskcvs1eBKxG9qW0.roa Signing time: Fri 02 Jan 2026 10:19:20 +0000 ROA not before: Fri 02 Jan 2026 10:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62256 IP address blocks: 2001:67c:920::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:09:d6:8c:03:de:d8:b5:e8:f4:0b:a6:9e:91:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85 Validity Not Before: Jan 2 10:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df776da8bc43be3570b2472fb357812b11bda96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:81:21:b6:c3:5c:15:56:e3:92:bc:0f:e8: aa:4e:54:6b:f6:62:4c:76:6d:3a:35:aa:b6:f5:f5: e7:7b:68:36:d4:5b:35:c6:1d:7e:76:cf:e4:1c:21: f4:99:38:c1:df:d8:88:75:12:c3:4f:1b:74:de:e0: 5e:59:10:e7:c3:f1:ea:eb:5f:4f:80:85:f0:c7:57: 50:54:4a:4f:34:0e:4d:27:83:af:bf:ad:94:d5:57: 97:f6:9a:09:74:d4:0e:c9:dc:ab:c1:7a:bf:1e:43: 7d:25:5f:ad:5d:b4:a9:fb:cd:80:00:99:b0:68:5a: f9:f9:a7:26:f8:25:6d:88:39:41:45:26:39:8c:1a: 5a:1e:93:88:47:fa:b4:38:e6:04:07:c6:0f:df:1a: 55:0a:13:ae:f6:6d:91:d5:ec:e5:fa:d2:9c:2e:c6: df:d4:84:53:b6:14:4f:90:ff:ff:b5:ac:63:67:35: c2:b6:f8:19:39:d0:94:4d:40:72:ed:dd:cf:2d:cd: 65:8f:88:0f:80:4e:7b:af:a3:52:31:ee:98:18:77: fb:78:c8:ec:67:ae:bd:53:55:f2:18:79:5d:ec:95: 39:60:29:d1:48:a4:ba:69:d4:17:ba:00:38:71:e1: b3:1f:1b:da:f0:3d:1e:56:75:5a:95:56:11:a6:37: 58:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:77:6D:A8:BC:43:BE:35:70:B2:47:2F:B3:57:81:2B:11:BD:A9:6D X509v3 Authority Key Identifier: keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/33dtqLxDvjVwskcvs1eBKxG9qW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:920::/48 Signature Algorithm: sha256WithRSAEncryption 9f:e9:26:9a:68:da:a0:18:47:23:9f:50:d0:ce:68:f3:4c:72: 75:0e:32:52:0a:2e:bb:80:37:8a:c7:1e:8e:bd:f6:48:8d:58: a0:9f:bf:a2:99:06:3a:31:e0:22:d4:32:b4:a0:6f:57:77:8d: 54:fd:9f:8a:ac:14:53:0f:d0:90:82:13:64:bd:e4:b3:ad:96: 11:85:d2:f7:9e:fa:0f:58:ab:1a:df:49:56:98:e7:e0:46:b4: f1:7f:d9:5f:96:43:b1:2c:e3:56:21:44:00:d0:9a:7c:e4:28: fa:36:9d:1b:cc:6e:a6:36:47:60:ff:52:9d:ca:b4:fd:68:f1: 70:61:ea:17:11:69:a5:1a:e4:16:41:02:b7:ca:86:dc:9b:d5: 11:34:29:86:f7:66:c7:0b:b3:b1:31:a6:4d:64:82:7a:88:50: 01:fb:80:d8:43:b4:ba:b8:37:f9:b9:94:42:94:1e:8e:17:f5: 12:f3:19:19:5c:62:68:6a:87:1d:e5:b4:7d:53:17:4f:10:80: 27:69:16:cd:e5:21:c9:0b:fc:0e:6f:e5:97:e9:c2:8e:1b:ad: 04:92:e6:30:ca:82:bc:74:30:db:03:e4:f7:a5:57:4f:57:04: 16:d8:11:cf:76:6a:d4:24:cb:ec:e6:7c:7f:ab:52:68:6f:df: 8f:e5:78:30 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OAnWjAPe2LXo9AumnpFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNWMzZjFhOTc5MDNlNzk2MjkyYTJhYzdhNzhkNDFiMWMy MWRiODUwHhcNMjYwMTAyMTAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjc3NmRhOGJjNDNiZTM1NzBiMjQ3MmZiMzU3ODEyYjExYmRhOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/KBIbbDXBVW45K8D+iqTlRr9mJM dm06Naq29fXne2g21Fs1xh1+ds/kHCH0mTjB39iIdRLDTxt03uBeWRDnw/Hq619P gIXwx1dQVEpPNA5NJ4Ovv62U1VeX9poJdNQOydyrwXq/HkN9JV+tXbSp+82AAJmw aFr5+acm+CVtiDlBRSY5jBpaHpOIR/q0OOYEB8YP3xpVChOu9m2R1ezl+tKcLsbf 1IRTthRPkP//taxjZzXCtvgZOdCUTUBy7d3PLc1lj4gPgE57r6NSMe6YGHf7eMjs Z669U1XyGHld7JU5YCnRSKS6adQXugA4ceGzHxva8D0eVnValVYRpjdYawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN93bai8Q741cLJHL7NXgSsRvaltMB8GA1UdIwQY MBaAFENcPxqXkD55YpKirHp41BscIduFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kOGFkYmUtZGNiZS00YzI3LTk2NzEt ZGJkZWIzZDUzNjBiLzEvMzNkdHFMeER2alZ3c2tjdnMxZUJLeEc5cVcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kOGFkYmUtZGNiZS00YzI3LTk2NzEtZGJkZWIzZDUzNjBi LzEvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAkg MA0GCSqGSIb3DQEBCwUAA4IBAQCf6SaaaNqgGEcjn1DQzmjzTHJ1DjJSCi67gDeK xx6OvfZIjVign7+imQY6MeAi1DK0oG9Xd41U/Z+KrBRTD9CQghNkveSzrZYRhdL3 nvoPWKsa30lWmOfgRrTxf9lflkOxLONWIUQA0Jp85Cj6Np0bzG6mNkdg/1KdyrT9 aPFwYeoXEWmlGuQWQQK3yobcm9URNCmG92bHC7OxMaZNZIJ6iFAB+4DYQ7S6uDf5 uZRClB6OF/US8xkZXGJoaocd5bR9UxdPEIAnaRbN5SHJC/wOb+WX6cKOG60EkuYw yoK8dDDbA+T3pVdPVwQW2BHPdmrUJMvs5nx/q1Job9+P5Xgw -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:44 2026 by rpki-client