This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/dApPkRCoN-4Urelwm8bwQW1vX9s.roa
File: dApPkRCoN-4Urelwm8bwQW1vX9s.roa (raw, json)
Hash identifier: 7RPQ25TwZLmclWDefX866Q2Hh9AqUtARbcj7dGOX/SY=
Subject key identifier: 74:0A:4F:91:10:A8:37:EE:14:AD:E9:70:9B:C6:F0:41:6D:6F:5F:DB
Certificate issuer: /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial: 019B7BA528B8BE30D4117500A78FC0D545FD
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/dApPkRCoN-4Urelwm8bwQW1vX9s.roa
Signing time: Thu 01 Jan 2026 22:19:40 +0000
ROA not before: Thu 01 Jan 2026 22:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52209
IP address blocks: 2a13:9600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:28:b8:be:30:d4:11:75:00:a7:8f:c0:d5:45:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
Validity
Not Before: Jan 1 22:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=740a4f9110a837ee14ade9709bc6f0416d6f5fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:e0:1f:fe:f4:54:d0:10:6e:58:3a:62:d2:
e0:0c:b4:cb:c3:d6:31:b9:6d:22:ae:ab:28:cb:58:
79:c5:a0:96:70:1d:fb:5d:63:b4:71:64:1b:8a:5c:
d1:64:bd:b4:d1:25:45:c2:b8:34:19:8f:5e:58:8a:
6f:ce:66:08:66:4a:ee:37:2a:11:ed:53:11:c6:91:
d8:2a:58:15:a5:07:7c:b6:70:b3:b8:13:6d:25:54:
ee:9e:d0:ef:3b:30:39:56:43:eb:21:64:c7:19:53:
76:d3:51:2d:e8:4a:ff:c5:71:16:ed:5f:84:14:21:
7b:2b:7e:ee:d1:e4:3c:bb:8a:9d:fb:ed:a7:1a:c8:
1f:1f:ad:77:ed:bb:84:66:54:9d:cd:22:99:27:79:
db:4c:52:0d:2c:1d:b7:1c:11:53:25:71:ee:03:65:
34:97:9c:5d:cf:fd:93:5a:80:07:94:dc:76:97:17:
56:06:35:d7:af:25:ac:cf:ad:6b:66:f4:8e:35:ba:
26:f5:bb:2e:eb:f9:94:53:42:fc:71:18:8f:f5:8f:
12:75:60:d5:44:61:12:70:91:00:6d:93:8e:cf:bf:
a3:70:96:ef:ce:24:f1:48:8b:1f:52:ae:4e:1a:55:
fa:d7:ea:3b:83:ef:68:5c:03:1d:81:51:0d:d5:32:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0A:4F:91:10:A8:37:EE:14:AD:E9:70:9B:C6:F0:41:6D:6F:5F:DB
X509v3 Authority Key Identifier:
keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/dApPkRCoN-4Urelwm8bwQW1vX9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9600::/29
Signature Algorithm: sha256WithRSAEncryption
07:f7:b6:df:1a:5b:ff:4d:68:fb:26:1d:9a:96:8c:c1:ed:c8:
45:de:f2:2a:82:e8:2a:23:ae:f8:c5:d7:a5:e5:ec:65:0b:0c:
7b:b2:90:ff:af:bd:dd:fd:30:fe:07:1d:a4:f9:13:06:9c:c5:
32:81:19:d0:57:2b:4b:5d:ad:15:ff:b4:c8:15:f3:11:bf:4a:
f1:a3:ec:cf:e8:a4:6d:b1:18:76:e4:c9:15:9b:b8:61:b0:e7:
21:3f:01:e0:3c:bd:b0:7a:52:d5:00:75:8b:5d:e4:5c:4b:9d:
19:dc:cf:31:34:48:90:64:0b:e7:84:ff:9a:5b:96:c6:c6:0d:
ed:df:12:4f:8c:39:db:d1:b4:50:bf:fb:2c:02:e6:2e:90:c0:
4b:35:f9:21:da:80:43:c0:67:4f:83:53:81:33:15:dc:8c:63:
18:61:8f:0d:4d:7d:df:c9:71:1d:8c:10:f0:2a:bc:17:8a:12:
8b:8f:4f:68:81:68:3f:66:67:46:27:21:ff:61:f6:04:26:03:
d9:79:cc:76:d0:0e:ea:45:a8:91:e6:71:d4:1c:d4:01:d2:fc:
09:4c:ef:e8:c7:50:15:ef:e3:8c:dc:6c:07:b3:a6:a3:84:4b:
c2:36:2e:01:c7:1b:6e:35:23:f6:ff:77:bc:4c:d1:d2:d6:80:
97:15:08:72
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt7pSi4vjDUEXUAp4/A1UX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzBmMmQwNzc2ZjdlMWQzNDkwNzU4ODFjMzVlOWQzODc0
NjM0MDUwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDBhNGY5MTEwYTgzN2VlMTRhZGU5NzA5YmM2ZjA0MTZkNmY1ZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq3gH/70VNAQblg6YtLgDLTLw9Yx
uW0irqsoy1h5xaCWcB37XWO0cWQbilzRZL200SVFwrg0GY9eWIpvzmYIZkruNyoR
7VMRxpHYKlgVpQd8tnCzuBNtJVTuntDvOzA5VkPrIWTHGVN201Et6Er/xXEW7V+E
FCF7K37u0eQ8u4qd++2nGsgfH6137buEZlSdzSKZJ3nbTFINLB23HBFTJXHuA2U0
l5xdz/2TWoAHlNx2lxdWBjXXryWsz61rZvSONbom9bsu6/mUU0L8cRiP9Y8SdWDV
RGEScJEAbZOOz7+jcJbvziTxSIsfUq5OGlX61+o7g+9oXAMdgVEN1TI3wQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHQKT5EQqDfuFK3pcJvG8EFtb1/bMB8GA1UdIwQY
MBaAFGjA8tB3b34dNJB1iBw16dOHRjQFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgt
ZjlkOWMwM2Q0YjRjLzEvZEFwUGtSQ29OLTRVcmVsd204YndRVzF2WDlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgtZjlkOWMwM2Q0YjRj
LzEvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhOWADAN
BgkqhkiG9w0BAQsFAAOCAQEAB/e23xpb/01o+yYdmpaMwe3IRd7yKoLoKiOu+MXX
peXsZQsMe7KQ/6+93f0w/gcdpPkTBpzFMoEZ0FcrS12tFf+0yBXzEb9K8aPsz+ik
bbEYduTJFZu4YbDnIT8B4Dy9sHpS1QB1i13kXEudGdzPMTRIkGQL54T/mluWxsYN
7d8ST4w529G0UL/7LALmLpDASzX5IdqAQ8BnT4NTgTMV3IxjGGGPDU1938lxHYwQ
8Cq8F4oSi49PaIFoP2ZnRich/2H2BCYD2XnMdtAO6kWokeZx1BzUAdL8CUzv6MdQ
Fe/jjNxsB7Omo4RLwjYuAccbbjUj9v93vEzR0taAlxUIcg==
-----END CERTIFICATE-----
Generated at Tue Jan 27 02:50:17 2026 by rpki-client