This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/djnhgW0GPEOAtyTwu_qBMZfVVj8.roa File: djnhgW0GPEOAtyTwu_qBMZfVVj8.roa (raw, json) Hash identifier: p2abx8Dnr+66AlllrJ9HMfsmzYB6750D7ZxfOTFxGoo= Subject key identifier: 76:39:E1:81:6D:06:3C:43:80:B7:24:F0:BB:FA:81:31:97:D5:56:3F Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E393CE08A28472341B46D545270904B Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/djnhgW0GPEOAtyTwu_qBMZfVVj8.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206499 IP address blocks: 2a0c:b642::/36 maxlen: 48 2a0c:b642:a00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3c:e0:8a:28:47:23:41:b4:6d:54:52:70:90:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7639e1816d063c4380b724f0bbfa813197d5563f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:8a:27:27:6b:04:24:86:05:08:71:1d:f2: b7:b0:ca:e0:d4:76:73:f5:b6:1f:3b:3e:29:b6:35: 29:86:6c:a3:70:e7:b5:11:85:a4:ee:49:62:ea:0f: ce:77:ef:66:46:31:79:11:17:e5:45:a0:ec:65:d9: 59:b9:cf:b4:8e:85:64:f5:b0:ba:65:85:f5:96:80: 56:98:9c:aa:47:83:2a:16:a0:7c:f2:86:9c:c1:71: ee:eb:40:a8:26:cf:9a:d6:a0:ff:b9:4a:d9:b4:6b: 4e:bb:df:00:92:78:93:78:6a:be:77:d8:cc:b6:67: f1:b2:58:66:e3:95:76:4d:8f:e9:0a:d5:56:5c:ba: c2:08:75:45:f0:12:23:07:2a:90:8a:49:f0:87:42: bb:50:36:5c:0e:ff:78:84:84:01:f8:a4:e0:4a:2b: 93:95:fd:ca:ea:13:e0:2c:77:ff:5f:86:6f:75:49: 05:4b:b4:46:8c:ba:2f:e0:6b:e7:6b:76:cb:87:6b: 10:de:4a:2e:6d:b8:99:c1:ab:b5:47:c0:ad:17:b8: 59:94:c8:5a:d1:f0:9f:81:95:82:4c:ee:10:35:d7: 3f:84:9d:92:ea:d4:f8:a3:f9:67:9b:00:3e:97:9c: e1:2d:3f:b6:f4:50:14:cf:15:75:06:7b:6d:91:e2: 12:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:39:E1:81:6D:06:3C:43:80:B7:24:F0:BB:FA:81:31:97:D5:56:3F X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/djnhgW0GPEOAtyTwu_qBMZfVVj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642::/36 Signature Algorithm: sha256WithRSAEncryption 99:3e:d5:87:cd:06:5e:ad:99:ab:9b:7e:9a:b2:f6:e2:97:dc: 6e:54:f2:ff:69:c5:8c:22:6b:b3:53:39:53:52:66:c6:23:c5: 88:0f:37:31:a4:21:7b:31:b7:ab:85:94:85:7d:de:50:84:4d: 3a:7e:d4:b7:1d:3e:f3:3e:48:20:22:83:71:49:a3:cc:52:7b: bc:ff:8b:82:bf:08:80:1f:e2:79:29:0f:e0:5b:a5:c3:a7:97: f8:ff:9f:37:cd:aa:ae:d2:af:96:55:5f:94:46:1d:61:9e:14: 60:b5:83:e1:d2:55:73:3c:cf:06:61:1e:6a:a0:6d:f8:31:54: ec:55:ba:e1:77:b3:09:bf:00:ad:53:e7:f1:3c:3e:93:e9:43: d5:f5:91:6e:ce:f1:04:b1:c8:80:a1:e3:e3:b3:6a:e2:28:61: 20:5c:44:ee:35:ea:70:11:a7:3a:16:39:2f:a8:2d:02:d7:1e: 58:1a:06:8a:ab:e5:56:8d:12:b4:4e:23:7e:a0:49:77:0f:51: 5f:70:3a:99:8d:9f:81:5b:21:81:62:66:19:46:51:61:5e:ec: b1:09:cc:20:91:ea:db:2f:17:07:ea:9d:1f:9f:f6:77:13:7e: 51:39:f4:b4:eb:90:98:44:97:ac:ad:6b:ad:35:c3:d4:3a:35: 60:b8:61:9d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OTzgiihHI0G0bVRScJBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjM5ZTE4MTZkMDYzYzQzODBiNzI0ZjBiYmZhODEzMTk3ZDU1NjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTSKJydrBCSGBQhxHfK3sMrg1HZz 9bYfOz4ptjUphmyjcOe1EYWk7kli6g/Od+9mRjF5ERflRaDsZdlZuc+0joVk9bC6 ZYX1loBWmJyqR4MqFqB88oacwXHu60CoJs+a1qD/uUrZtGtOu98AkniTeGq+d9jM tmfxslhm45V2TY/pCtVWXLrCCHVF8BIjByqQiknwh0K7UDZcDv94hIQB+KTgSiuT lf3K6hPgLHf/X4ZvdUkFS7RGjLov4Gvna3bLh2sQ3koubbiZwau1R8CtF7hZlMha 0fCfgZWCTO4QNdc/hJ2S6tT4o/lnmwA+l5zhLT+29FAUzxV1BnttkeISRQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHY54YFtBjxDgLck8Lv6gTGX1VY/MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvZGpuaGdXMEdQRU9BdHlUd3VfcUJNWmZWVmo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgy2QgAw DQYJKoZIhvcNAQELBQADggEBAJk+1YfNBl6tmaubfpqy9uKX3G5U8v9pxYwia7NT OVNSZsYjxYgPNzGkIXsxt6uFlIV93lCETTp+1LcdPvM+SCAig3FJo8xSe7z/i4K/ CIAf4nkpD+BbpcOnl/j/nzfNqq7Sr5ZVX5RGHWGeFGC1g+HSVXM8zwZhHmqgbfgx VOxVuuF3swm/AK1T5/E8PpPpQ9X1kW7O8QSxyICh4+OzauIoYSBcRO416nARpzoW OS+oLQLXHlgaBoqr5VaNErROI36gSXcPUV9wOpmNn4FbIYFiZhlGUWFe7LEJzCCR 6tsvFwfqnR+f9ncTflE59LTrkJhEl6yta601w9Q6NWC4YZ0= -----END CERTIFICATE-----Generated at Fri Jan 2 21:08:45 2026 by rpki-client