This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/DyptUUOjRm_2m8zgbMvoHA1UrBI.roa
File: DyptUUOjRm_2m8zgbMvoHA1UrBI.roa (raw, json)
Hash identifier: K5rbZpcZwUPf7XJmogvvHN54DVEPkHI7+lgGEgRM/BA=
Subject key identifier: 0F:2A:6D:51:43:A3:46:6F:F6:9B:CC:E0:6C:CB:E8:1C:0D:54:AC:12
Certificate issuer: /CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Certificate serial: 019B7834D95A7AC8D012FDF1567392F2A7F3
Authority key identifier: 32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/DyptUUOjRm_2m8zgbMvoHA1UrBI.roa
Signing time: Thu 01 Jan 2026 06:18:08 +0000
ROA not before: Thu 01 Jan 2026 06:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204162
IP address blocks: 2001:678:1124::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:d9:5a:7a:c8:d0:12:fd:f1:56:73:92:f2:a7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Validity
Not Before: Jan 1 06:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f2a6d5143a3466ff69bcce06ccbe81c0d54ac12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:e0:34:3e:ad:e4:c4:a1:db:fc:4a:95:6a:
3b:6c:28:9c:38:8c:08:74:ce:f5:ab:72:38:08:f1:
ad:54:48:fd:f3:55:e1:75:77:92:24:ed:e2:71:4f:
3b:34:92:0c:03:49:f2:46:c9:29:c4:67:9c:bd:02:
f1:08:b2:64:3e:65:e8:7c:0b:fb:c5:94:91:47:fd:
88:e3:fd:1a:78:d0:32:30:bd:a0:bc:e2:d6:9c:0e:
7e:ae:93:79:e8:e4:37:ff:09:3e:b2:84:09:e4:d7:
61:12:d2:e1:28:95:04:29:f5:11:1b:18:6d:97:37:
6b:95:52:0a:cb:8c:1d:ce:3c:35:25:af:f8:2d:34:
20:87:c9:e9:98:ce:b2:0a:88:75:7c:07:5c:c2:69:
ef:52:23:d5:e8:71:1b:67:1c:98:04:c3:44:6e:a0:
aa:02:71:33:75:68:35:1c:79:85:bf:ec:d3:58:df:
97:58:f4:e6:25:14:07:cd:9c:2f:1b:1b:78:bf:81:
9c:86:f5:58:3e:58:a3:1c:3b:f3:3e:97:94:fa:10:
94:f4:58:18:e4:12:ed:ed:9a:9d:7f:f6:23:31:28:
c6:c2:ce:4b:dd:d0:2c:87:e1:cc:e9:a3:aa:25:69:
cd:8f:c8:99:2f:20:d8:f9:d9:e0:bb:35:78:39:d9:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2A:6D:51:43:A3:46:6F:F6:9B:CC:E0:6C:CB:E8:1C:0D:54:AC:12
X509v3 Authority Key Identifier:
keyid:32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/DyptUUOjRm_2m8zgbMvoHA1UrBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1124::/48
Signature Algorithm: sha256WithRSAEncryption
14:ac:c8:de:bc:e7:38:a6:d4:ec:8b:9f:f4:11:08:87:64:5f:
93:22:f6:4c:ba:c6:13:76:23:a1:4d:6f:73:1d:6f:69:db:ab:
5e:b6:f5:fd:6e:c6:f0:e6:d9:60:04:15:93:72:68:83:10:72:
11:d7:f3:9f:40:5f:78:87:7a:14:34:b8:da:fd:93:03:c3:75:
19:64:fd:f7:65:a3:60:ab:fa:fe:9d:48:ca:05:ac:a3:63:46:
ae:c5:3a:ba:32:5a:4d:8e:57:37:1f:0e:c7:ce:b5:ee:23:b2:
76:47:30:ce:b3:45:cd:89:00:d1:45:30:c2:b3:df:bd:db:13:
a2:6f:63:7f:62:78:19:23:c2:95:41:ef:cd:25:a6:c8:23:fe:
c4:56:a1:22:0e:ce:9a:c8:a9:3c:b7:5c:f1:b4:3f:a1:ec:19:
c0:12:03:5a:40:88:af:0d:71:c6:2e:dd:c5:23:01:1c:3d:93:
e4:f0:0d:ee:18:14:1b:fb:33:cf:f3:f7:66:bf:10:2a:e7:96:
06:29:6d:b5:e2:8e:59:bb:cf:85:66:7d:63:52:f3:5a:4b:a1:
dc:74:35:f7:23:ac:c6:84:09:1a:43:bc:2a:9c:44:02:8d:f5:
a0:93:5a:81:c1:df:37:5d:37:21:dd:51:91:77:f5:12:7c:ca:
14:2a:4a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:17 2026 by rpki-client