This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/DRoag0qDfTCV8CWNjxFWkSdbHhs.roa File: DRoag0qDfTCV8CWNjxFWkSdbHhs.roa (raw, json) Hash identifier: /VVcitmhAVjKgGAs0/rKl9yT6q4BkEFZ0dVfBTjxpSU= Subject key identifier: 0D:1A:1A:83:4A:83:7D:30:95:F0:25:8D:8F:11:56:91:27:5B:1E:1B Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EBAC13118E45A8C9B86F61178F61F Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/DRoag0qDfTCV8CWNjxFWkSdbHhs.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213169 IP address blocks: 2a0e:aa07:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ba:c1:31:18:e4:5a:8c:9b:86:f6:11:78:f6:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d1a1a834a837d3095f0258d8f115691275b1e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:31:47:62:bc:5a:20:24:90:10:30:bc:88: e5:a4:a7:57:79:eb:3c:c4:c8:1e:5c:d2:cb:15:9d: ba:f8:18:8b:0e:23:49:5d:34:82:e0:52:49:82:83: bb:1d:1c:a8:64:11:c4:d9:4b:04:25:69:15:47:cf: 7d:6a:51:95:4c:b0:54:4d:f9:d4:98:f0:ad:99:f7: 06:33:d8:38:d6:9a:3f:3f:b9:20:6d:5d:68:bc:46: fb:0d:b7:b8:2f:cb:80:37:d0:ce:de:f9:1d:b1:12: 2d:34:44:25:0b:33:a7:b4:ea:e2:4b:31:9c:ea:ae: 80:6f:a2:b3:70:3a:76:0a:a2:3e:b8:43:5f:e6:96: b7:d3:4d:e8:67:2b:9a:78:4a:59:1d:2b:4b:4c:e7: 76:30:3a:93:d7:fb:02:2c:1a:d4:f6:80:4b:08:f9: de:ad:6b:4a:14:56:5b:d5:01:92:66:28:81:82:43: b5:a7:42:54:a6:4a:fd:ae:dd:37:1c:aa:62:da:a7: 10:03:98:1b:87:8b:90:ac:ce:57:41:e1:a7:63:38: 9d:e4:33:76:cf:ff:05:a7:54:7b:e3:4e:56:db:60: f4:d3:2c:af:e7:83:85:3f:f5:95:5e:fa:db:60:99: 6b:2e:2a:e3:45:af:4a:c0:35:d1:1f:89:81:81:5e: aa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1A:1A:83:4A:83:7D:30:95:F0:25:8D:8F:11:56:91:27:5B:1E:1B X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/DRoag0qDfTCV8CWNjxFWkSdbHhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:4000::/40 Signature Algorithm: sha256WithRSAEncryption a3:a5:7e:fa:d6:4c:43:e9:60:9d:b3:33:39:cf:28:6b:cb:e3: 36:58:d4:a7:8a:e4:72:a2:d7:b3:53:14:84:76:96:89:32:15: 24:52:61:04:f0:54:31:7e:0f:03:21:e5:4e:6c:b8:27:a9:18: 8b:19:e2:b7:88:5a:15:5b:9a:73:32:fb:d1:48:ad:b6:ab:65: 8e:b6:6c:d4:45:5a:f0:4e:d7:f3:b8:d0:52:9b:78:d1:6f:c9: ad:e2:3c:bf:26:7b:3d:83:53:8f:40:84:3b:60:74:69:0d:ba: 8a:b2:f5:09:c8:cf:b3:62:33:f0:fb:de:9d:30:1e:ff:fe:99: 08:b7:f5:36:51:de:f7:22:cb:74:d8:40:10:ec:a2:2f:d6:ba: f4:f2:65:36:ed:ee:e9:65:25:d8:8a:6b:24:1b:11:ce:2a:8d: 82:23:56:42:1c:8b:88:9f:e5:96:d7:cf:ac:20:66:28:ff:2a: c4:7d:72:97:fc:af:14:69:e6:83:77:05:e4:18:cd:cf:6b:64: ea:ee:ba:ff:15:a3:98:07:62:d4:91:e3:9f:14:19:df:f5:25: 39:7a:51:a8:36:d8:6f:77:4d:f7:4c:9c:7d:de:8b:81:35:f7: 61:9d:3c:6a:5a:d6:c6:f7:bd:f6:dc:d1:0c:ca:b2:da:95:65: fa:9d:1a:83 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5frrBMRjkWoybhvYRePYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDFhMWE4MzRhODM3ZDMwOTVmMDI1OGQ4ZjExNTY5MTI3NWIxZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyQxR2K8WiAkkBAwvIjlpKdXees8 xMgeXNLLFZ26+BiLDiNJXTSC4FJJgoO7HRyoZBHE2UsEJWkVR899alGVTLBUTfnU mPCtmfcGM9g41po/P7kgbV1ovEb7Dbe4L8uAN9DO3vkdsRItNEQlCzOntOriSzGc 6q6Ab6KzcDp2CqI+uENf5pa3003oZyuaeEpZHStLTOd2MDqT1/sCLBrU9oBLCPne rWtKFFZb1QGSZiiBgkO1p0JUpkr9rt03HKpi2qcQA5gbh4uQrM5XQeGnYzid5DN2 z/8Fp1R7405W22D00yyv54OFP/WVXvrbYJlrLirjRa9KwDXRH4mBgV6qHwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFA0aGoNKg30wlfAljY8RVpEnWx4bMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvRFJvYWcwcURmVENWOENXTmp4RldrU2RiSGhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg6qB0Aw DQYJKoZIhvcNAQELBQADggEBAKOlfvrWTEPpYJ2zMznPKGvL4zZY1KeK5HKi17NT FIR2lokyFSRSYQTwVDF+DwMh5U5suCepGIsZ4reIWhVbmnMy+9FIrbarZY62bNRF WvBO1/O40FKbeNFvya3iPL8mez2DU49AhDtgdGkNuoqy9QnIz7NiM/D73p0wHv/+ mQi39TZR3vciy3TYQBDsoi/WuvTyZTbt7ullJdiKayQbEc4qjYIjVkIci4if5ZbX z6wgZij/KsR9cpf8rxRp5oN3BeQYzc9rZOruuv8Vo5gHYtSR458UGd/1JTl6Uag2 2G93TfdMnH3ei4E192GdPGpa1sb3vfbc0QzKstqVZfqdGoM= -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:42 2026 by rpki-client