This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/rDQ-WFv7FDAqr0cbI_4MO7hJii4.roa File: rDQ-WFv7FDAqr0cbI_4MO7hJii4.roa (raw, json) Hash identifier: J39PyKLqvzHrXAZhA3OlBu2zPyXmjRuY84Ppooaj7xg= Subject key identifier: AC:34:3E:58:5B:FB:14:30:2A:AF:47:1B:23:FE:0C:3B:B8:49:8A:2E Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38B6A12CE6394D7493B9F4596506D5 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/rDQ-WFv7FDAqr0cbI_4MO7hJii4.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203314 IP address blocks: 2a13:a5c7:2500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b6:a1:2c:e6:39:4d:74:93:b9:f4:59:65:06:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac343e585bfb14302aaf471b23fe0c3bb8498a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:d6:29:2f:95:74:b3:7f:fc:d1:23:ea:de: 02:5f:a8:cc:60:4f:d3:b2:cf:4d:b4:65:7b:5c:82: fe:eb:2f:a8:a1:dc:e7:af:73:18:fd:ba:5c:00:62: 15:37:c9:da:2b:8c:a4:4d:13:56:8e:ab:b3:95:78: 42:21:d7:f9:4d:6c:1c:a0:d2:b5:b2:4f:3b:b1:af: 6d:be:96:3f:36:0b:d2:2c:67:58:6c:96:4c:25:72: 7d:6d:a9:4a:19:21:83:8e:3d:ec:5b:d0:bf:c0:d4: 1f:91:dc:cc:5e:e2:b2:3d:f9:8b:57:dc:0b:72:ad: f6:38:5d:a7:a0:98:03:ab:cc:d9:3e:94:91:75:8e: 49:ac:a9:c6:8d:23:36:f9:b3:90:b0:fd:65:b7:78: cf:96:06:3e:d3:e5:99:64:b0:31:e8:db:f9:93:b7: 2e:67:38:dc:5e:8c:89:4c:d5:d8:ce:80:b9:f4:52: c1:3d:4c:e3:70:35:c8:af:bb:e5:7c:40:a1:65:2f: 7e:69:42:e0:4d:15:e8:b0:17:7a:97:ac:94:17:5f: e8:9b:2d:f7:2f:99:2d:48:50:9c:43:ed:81:ba:20: ef:8b:ee:b8:60:4c:24:40:5c:57:94:ae:d3:e1:3b: c5:a6:2f:fb:29:c6:7d:d6:f9:18:41:1c:ee:d5:59: bb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:34:3E:58:5B:FB:14:30:2A:AF:47:1B:23:FE:0C:3B:B8:49:8A:2E X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/rDQ-WFv7FDAqr0cbI_4MO7hJii4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:2500::/40 Signature Algorithm: sha256WithRSAEncryption b2:9e:92:23:87:c5:77:62:ef:78:1f:fc:df:96:9b:fd:71:5e: 82:04:67:88:1c:77:73:02:34:9d:17:f9:d6:c1:0b:c2:ee:bd: 1e:5a:23:b5:11:e0:c6:95:84:d0:b6:0d:1b:67:3d:85:5a:ef: b0:ab:61:59:29:0f:c5:56:b8:0c:90:51:7b:75:ab:a1:67:97: 36:ac:ef:81:53:15:6c:02:2b:97:ae:9b:c4:6a:14:ab:c1:1d: f1:86:4c:6b:27:03:8c:9e:2b:f1:80:bf:a2:4a:53:77:bd:3c: 92:ba:ab:1a:fc:ce:54:0e:da:5f:bb:4b:31:4e:ae:c0:a1:57: da:56:1f:11:4c:bf:6f:d5:7e:36:90:ca:a9:6a:c5:3b:8c:6c: 2e:4d:e2:0a:07:15:8b:c3:bf:15:cb:bc:bd:6c:91:9d:4c:3c: c7:bc:79:02:19:1c:8b:0c:50:0a:cd:bb:b4:65:75:ba:81:de: a3:69:75:05:49:1a:f7:84:c3:b8:d0:12:ab:15:19:fa:b9:3d: aa:d9:98:5e:d6:45:3a:2d:08:87:69:3e:5b:e0:cb:af:d5:3e: ce:2f:36:03:45:7f:66:a7:77:c9:a8:7a:53:a6:df:f5:36:93: 5a:cf:af:e8:3a:9b:9e:e1:2a:3a:8b:7c:95:79:1b:27:49:90: 2e:7d:94:ba -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OLahLOY5TXSTufRZZQbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzM0M2U1ODViZmIxNDMwMmFhZjQ3MWIyM2ZlMGMzYmI4NDk4YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1vWKS+VdLN//NEj6t4CX6jMYE/T ss9NtGV7XIL+6y+oodznr3MY/bpcAGIVN8naK4ykTRNWjquzlXhCIdf5TWwcoNK1 sk87sa9tvpY/NgvSLGdYbJZMJXJ9balKGSGDjj3sW9C/wNQfkdzMXuKyPfmLV9wL cq32OF2noJgDq8zZPpSRdY5JrKnGjSM2+bOQsP1lt3jPlgY+0+WZZLAx6Nv5k7cu ZzjcXoyJTNXYzoC59FLBPUzjcDXIr7vlfEChZS9+aULgTRXosBd6l6yUF1/omy33 L5ktSFCcQ+2BuiDvi+64YEwkQFxXlK7T4TvFpi/7KcZ91vkYQRzu1Vm7PQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKw0Plhb+xQwKq9HGyP+DDu4SYouMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvckRRLVdGdjdGREFxcjBjYklfNE1PN2hKaWk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxyUw DQYJKoZIhvcNAQELBQADggEBALKekiOHxXdi73gf/N+Wm/1xXoIEZ4gcd3MCNJ0X +dbBC8LuvR5aI7UR4MaVhNC2DRtnPYVa77CrYVkpD8VWuAyQUXt1q6Fnlzas74FT FWwCK5eum8RqFKvBHfGGTGsnA4yeK/GAv6JKU3e9PJK6qxr8zlQO2l+7SzFOrsCh V9pWHxFMv2/VfjaQyqlqxTuMbC5N4goHFYvDvxXLvL1skZ1MPMe8eQIZHIsMUArN u7RldbqB3qNpdQVJGveEw7jQEqsVGfq5ParZmF7WRTotCIdpPlvgy6/VPs4vNgNF f2and8moelOm3/U2k1rPr+g6m57hKjqLfJV5GydJkC59lLo= -----END CERTIFICATE-----Generated at Mon Jan 5 03:48:29 2026 by rpki-client