This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/DaRPtN-iRI4PSG8nc9VeuMuPHVs.roa File: DaRPtN-iRI4PSG8nc9VeuMuPHVs.roa (raw, json) Hash identifier: XscIXOZDUssyO6/A3Rjz1yEV/LM4VTXT03e5bCTp2JI= Subject key identifier: 0D:A4:4F:B4:DF:A2:44:8E:0F:48:6F:27:73:D5:5E:B8:CB:8F:1D:5B Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38B8A194BEE8C69F6FDF73236EED94 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/DaRPtN-iRI4PSG8nc9VeuMuPHVs.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210738 IP address blocks: 2a13:a5c7:3100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b8:a1:94:be:e8:c6:9f:6f:df:73:23:6e:ed:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0da44fb4dfa2448e0f486f2773d55eb8cb8f1d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:df:2a:fc:4c:1e:7d:0e:2a:56:ab:ce:ee:08: 07:c4:f3:10:ad:bf:64:7c:f8:2a:d2:47:f8:5f:59: ef:75:31:a5:d4:98:f9:56:bd:84:5f:64:e1:b0:e5: f3:ce:d6:a0:e2:08:de:90:42:6a:ff:f3:c4:c7:12: 0c:25:85:e5:4d:0b:1a:92:a3:d0:9e:98:74:3c:e8: 1c:d2:a0:64:ea:19:ce:5f:fb:d7:c9:d9:d8:7f:a6: 88:3e:ad:bd:a0:47:00:9d:5d:68:3d:40:77:55:1d: ef:0b:57:c2:2e:3e:0f:06:4e:9a:81:48:5f:c7:5d: 50:ea:72:82:d4:2b:8c:a9:29:28:4e:90:3c:22:6f: a3:0f:1b:ba:5f:c7:c5:df:a8:fc:eb:62:17:0f:48: a1:a0:69:19:3e:54:e8:22:ef:2d:fd:c6:c6:58:ac: 62:02:10:eb:31:e0:6f:6e:9a:30:47:3b:bb:1b:b3: d8:3a:5f:58:76:85:6a:ae:a6:96:3a:0f:9e:a2:8c: 8d:f2:08:e3:8e:dc:af:85:73:6b:ce:8c:e5:72:80: 7a:c8:67:8d:c7:d7:5a:a8:e3:83:20:b3:a9:45:2d: f9:2b:28:c9:98:c1:1f:05:1c:39:93:0a:01:b5:1f: 3e:27:93:2e:e3:76:ae:0b:8b:6f:6c:9d:48:14:6c: 88:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A4:4F:B4:DF:A2:44:8E:0F:48:6F:27:73:D5:5E:B8:CB:8F:1D:5B X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/DaRPtN-iRI4PSG8nc9VeuMuPHVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:3100::/40 Signature Algorithm: sha256WithRSAEncryption 4d:b3:d1:7e:b2:a4:bb:c8:ba:83:b3:ca:ea:cb:f9:3d:c3:be: 83:af:04:ce:e9:ed:c0:bf:80:72:ab:4a:59:10:26:e8:ec:b6: 6a:25:bb:cd:58:8a:7e:5c:5b:d5:e5:bd:de:03:2f:c2:5f:41: 12:37:b9:15:94:cf:99:60:15:1c:9d:cd:c4:f0:32:a8:af:31: f3:61:4a:71:99:3e:22:16:56:c9:21:48:91:7e:7e:b1:53:5c: 66:0a:d2:1d:c7:38:72:7a:ec:fa:05:14:b8:66:77:74:1b:95: 0b:e3:6f:4b:58:ba:78:0d:86:b8:62:6c:2b:d9:96:3f:da:c5: 50:db:b9:43:5e:2f:34:e8:8e:96:58:a5:df:37:9d:8b:c8:8f: 14:91:93:37:10:73:a0:8b:b1:68:99:99:38:22:0b:79:d6:cf: 62:70:66:1b:3e:81:10:df:44:97:4d:10:bc:fc:0f:3d:2e:86: 7e:bc:bc:70:5f:be:19:36:ff:34:d3:37:de:46:de:ad:90:b0: 82:03:b5:06:56:f6:ed:e2:da:10:f0:60:21:ef:7c:11:0b:9d: c5:c5:1d:36:b8:64:23:d9:70:56:2e:7d:66:9c:05:84:c4:14: 59:a3:1a:a8:0e:6b:03:16:57:0d:03:02:f7:fa:d7:b5:32:b5: e8:52:0c:9d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OLihlL7oxp9v33Mjbu2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGE0NGZiNGRmYTI0NDhlMGY0ODZmMjc3M2Q1NWViOGNiOGYxZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz98q/EwefQ4qVqvO7ggHxPMQrb9k fPgq0kf4X1nvdTGl1Jj5Vr2EX2ThsOXzztag4gjekEJq//PExxIMJYXlTQsakqPQ nph0POgc0qBk6hnOX/vXydnYf6aIPq29oEcAnV1oPUB3VR3vC1fCLj4PBk6agUhf x11Q6nKC1CuMqSkoTpA8Im+jDxu6X8fF36j862IXD0ihoGkZPlToIu8t/cbGWKxi AhDrMeBvbpowRzu7G7PYOl9YdoVqrqaWOg+eooyN8gjjjtyvhXNrzozlcoB6yGeN x9daqOODILOpRS35KyjJmMEfBRw5kwoBtR8+J5Mu43auC4tvbJ1IFGyIowIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFA2kT7TfokSOD0hvJ3PVXrjLjx1bMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvRGFSUHROLWlSSTRQU0c4bmM5VmV1TXVQSFZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxzEw DQYJKoZIhvcNAQELBQADggEBAE2z0X6ypLvIuoOzyurL+T3DvoOvBM7p7cC/gHKr SlkQJujstmolu81Yin5cW9Xlvd4DL8JfQRI3uRWUz5lgFRydzcTwMqivMfNhSnGZ PiIWVskhSJF+frFTXGYK0h3HOHJ67PoFFLhmd3QblQvjb0tYungNhrhibCvZlj/a xVDbuUNeLzTojpZYpd83nYvIjxSRkzcQc6CLsWiZmTgiC3nWz2JwZhs+gRDfRJdN ELz8Dz0uhn68vHBfvhk2/zTTN95G3q2QsIIDtQZW9u3i2hDwYCHvfBELncXFHTa4 ZCPZcFYufWacBYTEFFmjGqgOawMWVw0DAvf617UytehSDJ0= -----END CERTIFICATE-----Generated at Mon Jan 5 03:46:58 2026 by rpki-client