This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/dNKhuGOoBSmUX8gdSXBPbNyrIHI.roa File: dNKhuGOoBSmUX8gdSXBPbNyrIHI.roa (raw, json) Hash identifier: 7Y16xJEdb4Me5YuoYupB+Yr4hsFnykSVxLvgMaBpgUU= Subject key identifier: 74:D2:A1:B8:63:A8:05:29:94:5F:C8:1D:49:70:4F:6C:DC:AB:20:72 Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48 Certificate serial: 019B7A5AF60363BB1DFCC16FF14A4A7A63B8 Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/dNKhuGOoBSmUX8gdSXBPbNyrIHI.roa Signing time: Thu 01 Jan 2026 16:19:00 +0000 ROA not before: Thu 01 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43617 IP address blocks: 2a0f:3784::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f6:03:63:bb:1d:fc:c1:6f:f1:4a:4a:7a:63:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48 Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74d2a1b863a80529945fc81d49704f6cdcab2072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:42:d4:23:e3:ff:6e:7c:98:51:01:04:2b:22: 23:79:2b:a6:34:6e:b1:43:a6:f8:f9:30:a7:37:9c: 9d:1b:87:26:51:01:72:9b:ae:82:0b:6a:6c:3f:40: e7:f2:92:04:2d:c8:7e:f4:2e:5d:61:97:9d:38:24: 94:29:d5:d3:11:0a:ec:4e:c8:76:41:6e:d4:7c:ce: e3:3d:6c:1f:1f:fc:b3:fe:9f:9a:ae:06:e2:f9:76: 37:4c:ba:c4:40:15:39:39:04:52:50:b4:18:81:79: db:69:76:45:4f:94:f1:a6:20:96:8b:c2:9b:f1:ed: e4:11:da:60:d2:f6:1a:ea:4a:c4:51:7b:1b:ee:1c: fb:d5:b3:61:aa:03:6c:b1:4f:e3:cd:f1:56:d3:8e: 97:21:4f:b8:29:b1:c5:0b:4e:bc:f2:19:5c:d5:71: df:f5:e3:7b:7f:35:a5:0f:ef:75:8f:70:04:7b:d5: aa:10:13:0e:4b:4c:e9:58:7c:2b:ba:a1:54:b3:df: 29:ae:e2:5c:0e:3f:fb:c6:b1:4d:ea:83:8c:bc:bc: 3b:cd:46:f4:60:05:37:c9:d9:13:5a:31:0f:14:6e: d9:64:bc:28:4c:99:42:bd:41:7b:cf:1f:a5:56:26: b2:97:f9:8e:e5:ba:b2:03:cd:00:d5:0b:07:fa:ab: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D2:A1:B8:63:A8:05:29:94:5F:C8:1D:49:70:4F:6C:DC:AB:20:72 X509v3 Authority Key Identifier: keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/dNKhuGOoBSmUX8gdSXBPbNyrIHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:3784::/32 Signature Algorithm: sha256WithRSAEncryption 26:15:3c:1b:9e:66:b9:58:6e:9e:9a:38:51:9c:65:a2:d9:7d: 3e:cf:25:e7:69:5c:35:4f:cf:61:c1:b2:be:b8:0a:ed:25:c3: 13:4a:36:3b:c7:5a:f0:33:bf:6f:7d:f8:66:bc:a2:e3:92:40: 4d:74:4b:ef:fc:f1:78:49:53:31:5b:ef:81:b0:0a:35:cf:55: 44:55:18:a7:90:a8:b8:07:f4:f7:a4:64:8d:f5:f5:06:e3:cb: c1:3b:24:09:b4:27:3d:3f:c3:a9:8b:33:b9:7c:a1:36:de:0f: 02:16:35:cf:bf:87:4c:4b:6d:3d:27:28:fa:26:73:08:71:f3: 67:52:d4:6e:8f:cf:c2:2c:8f:24:58:d1:a0:34:18:fa:17:e5: 0f:07:4d:cb:18:d8:6b:55:8b:80:e3:b7:af:46:51:6f:90:33: 87:ba:16:11:e7:68:c8:f1:59:cb:4b:0b:33:d0:1c:26:55:c7: 25:2d:4c:84:d5:4d:9b:20:94:a2:35:a4:0f:f6:53:03:eb:af: a0:ff:b0:7a:d1:ec:8f:00:1e:b5:94:f2:ff:85:0c:01:2c:11: 2d:cc:0f:30:cf:26:92:b0:e6:6a:94:9d:93:a9:16:b3:d4:b3: 5a:42:b3:86:19:35:a1:51:cc:de:d5:d2:b0:83:ed:2a:b7:aa: 9e:8e:a2:4a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6WvYDY7sd/MFv8UpKemO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzNkODljMDZhOGExY2M5ZGJjMzYyMjAxZjdlYzU1OWQ3 ZmRkNDgwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGQyYTFiODYzYTgwNTI5OTQ1ZmM4MWQ0OTcwNGY2Y2RjYWIyMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ELUI+P/bnyYUQEEKyIjeSumNG6x Q6b4+TCnN5ydG4cmUQFym66CC2psP0Dn8pIELch+9C5dYZedOCSUKdXTEQrsTsh2 QW7UfM7jPWwfH/yz/p+argbi+XY3TLrEQBU5OQRSULQYgXnbaXZFT5TxpiCWi8Kb 8e3kEdpg0vYa6krEUXsb7hz71bNhqgNssU/jzfFW046XIU+4KbHFC0688hlc1XHf 9eN7fzWlD+91j3AEe9WqEBMOS0zpWHwruqFUs98pruJcDj/7xrFN6oOMvLw7zUb0 YAU3ydkTWjEPFG7ZZLwoTJlCvUF7zx+lViayl/mO5bqyA80A1QsH+quf3QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHTSobhjqAUplF/IHUlwT2zcqyByMB8GA1UdIwQY MBaAFIEz2JwGqKHMnbw2IgH37FWdf91IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEt YzVmZWJlNDg3YzQwLzEvZE5LaHVHT29CU21VWDhnZFNYQlBiTnlySUhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEtYzVmZWJlNDg3YzQw LzEvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg83hDAN BgkqhkiG9w0BAQsFAAOCAQEAJhU8G55muVhunpo4UZxlotl9Ps8l52lcNU/PYcGy vrgK7SXDE0o2O8da8DO/b334Zryi45JATXRL7/zxeElTMVvvgbAKNc9VRFUYp5Co uAf096RkjfX1BuPLwTskCbQnPT/DqYszuXyhNt4PAhY1z7+HTEttPSco+iZzCHHz Z1LUbo/PwiyPJFjRoDQY+hflDwdNyxjYa1WLgOO3r0ZRb5Azh7oWEedoyPFZy0sL M9AcJlXHJS1MhNVNmyCUojWkD/ZTA+uvoP+wetHsjwAetZTy/4UMASwRLcwPMM8m krDmapSdk6kWs9SzWkKzhhk1oVHM3tXSsIPtKreqno6iSg== -----END CERTIFICATE-----Generated at Mon Feb 2 08:01:48 2026 by rpki-client