This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/dVtwphN1_Ymo6BcDmHfy1jmx6U0.roa File: dVtwphN1_Ymo6BcDmHfy1jmx6U0.roa (raw, json) Hash identifier: e6yDBLmPX/yDrTDqNgtpP+X9UDkMifiX5+fBf/AlYqs= Subject key identifier: 75:5B:70:A6:13:75:FD:89:A8:E8:17:03:98:77:F2:D6:39:B1:E9:4D Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910C1BD812A987F0FF6CCE698F082B3 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/dVtwphN1_Ymo6BcDmHfy1jmx6U0.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215799 IP address blocks: 2a12:bec0:620::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c1:bd:81:2a:98:7f:0f:f6:cc:e6:98:f0:82:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=755b70a61375fd89a8e817039877f2d639b1e94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:64:18:6b:08:5c:3b:be:56:7f:6b:8c:69: de:85:b8:1a:b0:10:ff:f1:e5:2b:69:06:fa:4a:82: 97:e1:4b:fc:8b:3a:7b:86:1d:da:ca:9d:9e:00:28: 7f:f6:81:31:b4:ce:a2:76:06:20:c8:55:aa:e3:da: 5e:c8:71:3c:ba:e6:ba:fd:07:ce:5d:a6:11:b7:0d: 1d:6b:02:53:3a:a1:e9:f5:4a:6a:b2:64:3d:70:ac: 05:69:5e:06:af:6c:6b:f3:d1:c2:b5:6c:78:f5:57: 7b:a9:d9:cb:7f:a6:5a:d6:29:a1:78:af:1a:f4:33: ce:cd:61:2f:d9:cf:c6:4f:3f:c1:6e:bc:94:30:42: 3b:6c:57:df:00:0e:cd:27:82:ca:6a:83:59:7c:cc: a0:51:d2:01:d2:3a:71:e1:e5:73:0f:f9:a0:4a:1a: 60:49:27:84:42:36:65:8d:20:de:62:0a:c9:ec:0c: 9b:8e:ed:ae:93:52:bc:63:a2:19:c0:3d:b4:57:72: b0:8e:fa:b7:ae:d1:01:47:0d:6a:55:a3:aa:22:1e: 00:ea:64:8e:6c:cc:86:63:6e:1d:79:db:d7:89:31: 3a:0b:ff:be:24:16:78:40:ed:ee:ae:e9:31:a4:d7: 41:41:f2:bb:76:8a:ef:be:b4:29:3d:e4:ae:cf:81: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5B:70:A6:13:75:FD:89:A8:E8:17:03:98:77:F2:D6:39:B1:E9:4D X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/dVtwphN1_Ymo6BcDmHfy1jmx6U0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:620::/44 Signature Algorithm: sha256WithRSAEncryption 5b:53:b7:99:6d:12:31:65:4d:5d:71:84:50:cb:8d:b7:51:9a: ef:21:ab:54:59:ff:2d:c7:30:fb:d0:fc:06:9f:62:59:60:a8: c2:a1:38:3b:2a:4a:cf:b5:30:fd:21:5e:a6:64:37:0f:e7:d3: 3b:de:06:86:e9:18:57:97:b2:84:f3:47:22:30:5b:9a:f6:b5: e7:31:f8:5b:23:4b:d1:cc:f1:5e:09:1a:a4:d9:c4:8f:5d:73: 7b:3b:7e:fe:fa:73:5a:bc:f7:b5:5b:5a:64:c8:6d:05:bf:b9: b6:6c:d9:56:0b:80:aa:c4:c5:b8:3c:9d:91:96:43:e8:4b:10: 8f:b5:5f:c3:0f:59:f1:5e:e5:b0:5d:d7:a7:a6:37:fc:5e:e4: d4:e9:7f:db:8c:f0:15:a7:71:f9:b3:ad:3a:1f:34:2a:f0:e6: da:b4:90:c3:03:3d:85:2d:1d:ad:45:4f:03:c6:ee:52:5d:b5: 15:cb:f6:a5:28:69:6f:4f:32:16:d6:d4:2a:f4:14:39:29:03: 1d:a0:b7:dd:7b:1b:0f:90:32:28:2f:f1:28:14:95:f6:f7:69: 0b:aa:59:ff:c1:2d:1f:f0:8b:b4:bf:c1:20:a1:df:26:3f:9f: 95:7c:bc:b1:73:1b:7c:46:85:29:28:2b:e2:ea:94:6a:5b:32: 7e:c2:9f:1f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EMG9gSqYfw/2zOaY8IKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTViNzBhNjEzNzVmZDg5YThlODE3MDM5ODc3ZjJkNjM5YjFlOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXlkGGsIXDu+Vn9rjGnehbgasBD/ 8eUraQb6SoKX4Uv8izp7hh3ayp2eACh/9oExtM6idgYgyFWq49peyHE8uua6/QfO XaYRtw0dawJTOqHp9UpqsmQ9cKwFaV4Gr2xr89HCtWx49Vd7qdnLf6Za1imheK8a 9DPOzWEv2c/GTz/BbryUMEI7bFffAA7NJ4LKaoNZfMygUdIB0jpx4eVzD/mgShpg SSeEQjZljSDeYgrJ7Aybju2uk1K8Y6IZwD20V3Kwjvq3rtEBRw1qVaOqIh4A6mSO bMyGY24dedvXiTE6C/++JBZ4QO3urukxpNdBQfK7dorvvrQpPeSuz4EmPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHVbcKYTdf2JqOgXA5h38tY5selNMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvZFZ0d3BoTjFfWW1vNkJjRG1IZnkxam14NlUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAYg MA0GCSqGSIb3DQEBCwUAA4IBAQBbU7eZbRIxZU1dcYRQy423UZrvIatUWf8txzD7 0PwGn2JZYKjCoTg7KkrPtTD9IV6mZDcP59M73gaG6RhXl7KE80ciMFua9rXnMfhb I0vRzPFeCRqk2cSPXXN7O37++nNavPe1W1pkyG0Fv7m2bNlWC4CqxMW4PJ2RlkPo SxCPtV/DD1nxXuWwXdenpjf8XuTU6X/bjPAVp3H5s606HzQq8ObatJDDAz2FLR2t RU8Dxu5SXbUVy/alKGlvTzIW1tQq9BQ5KQMdoLfdexsPkDIoL/EoFJX292kLqln/ wS0f8Iu0v8Egod8mP5+VfLyxcxt8RoUpKCvi6pRqWzJ+wp8f -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:08 2026 by rpki-client