This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/DzWx2gyMMaK-okfSi6J968z8WxM.roa File: DzWx2gyMMaK-okfSi6J968z8WxM.roa (raw, json) Hash identifier: 9wYI/LNVqmTI0TVKSd1WqvRq51yAySZOehdqPlUwDu4= Subject key identifier: 0F:35:B1:DA:0C:8C:31:A2:BE:A2:47:D2:8B:A2:7D:EB:CC:FC:5B:13 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758E875025AD58A5F7B6704FAD58EE2 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/DzWx2gyMMaK-okfSi6J968z8WxM.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207622 IP address blocks: 2a0f:5707:aa20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e8:75:02:5a:d5:8a:5f:7b:67:04:fa:d5:8e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f35b1da0c8c31a2bea247d28ba27debccfc5b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:dc:fd:7d:07:69:b5:9a:e3:46:eb:c0:2b: 69:a2:7d:1a:e8:8b:a4:8f:8f:a1:a1:31:fa:e0:8b: 80:6a:17:68:8c:b8:4f:51:a1:e7:bf:ca:2d:cd:d6: 29:28:bf:d8:e3:76:52:e7:2c:66:58:74:59:c8:66: 33:b8:5c:73:f4:99:32:d6:94:67:b1:dc:e6:12:00: c2:8c:89:d4:7c:40:49:48:33:05:30:4c:d2:db:f9: 46:ca:48:d2:b3:1d:af:87:e7:f3:a0:bd:32:82:87: 0d:2a:c9:02:fa:f3:22:05:8c:4d:1d:dd:63:16:66: 74:79:6a:48:ef:50:54:7a:16:ca:1e:7b:61:5b:4a: 90:ae:59:ec:fe:4f:46:fe:b2:72:35:13:fe:f1:b7: 10:ef:7e:b5:cb:f6:80:7a:fa:59:3a:86:3e:d5:f4: d7:44:7a:28:bb:11:a1:48:7f:dc:30:5d:38:63:2b: dd:af:7e:c9:6f:be:97:f0:60:7b:3e:83:b2:ae:be: a9:9b:18:6d:f6:45:6d:ca:d5:51:42:26:25:6f:e7: 38:19:25:f1:52:89:8c:31:a7:fa:d2:bb:e8:b5:f3: d4:51:2a:f5:c0:44:f6:a3:dc:8c:a1:e7:09:54:8e: 7a:30:0c:3d:17:98:3e:2d:9b:c0:5f:e2:39:50:8f: 4f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:35:B1:DA:0C:8C:31:A2:BE:A2:47:D2:8B:A2:7D:EB:CC:FC:5B:13 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/DzWx2gyMMaK-okfSi6J968z8WxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:aa20::/44 Signature Algorithm: sha256WithRSAEncryption 39:ad:db:35:4a:09:74:a3:8a:5c:4e:98:31:84:e8:3f:a5:7e: 1d:02:ba:5e:b8:6f:86:3e:74:67:97:ad:73:b6:a7:07:3c:c4: 6e:ac:3c:fc:8f:04:48:1c:8a:c7:00:02:08:3f:f1:ab:ad:33: 36:33:81:65:09:96:87:4f:29:53:c8:52:2e:c6:9f:e1:d6:e5: 0c:f5:a7:97:2f:1c:d8:e6:9a:6e:6e:79:19:37:04:7f:09:97: ba:7f:dd:83:6c:4b:f3:75:5d:94:99:db:41:dc:88:8e:9f:e0: 15:ab:d0:9b:30:f7:ac:95:3d:3f:10:a7:14:4e:6b:a4:4a:51: 33:1b:85:95:9a:ff:bc:44:f3:4e:df:c5:36:23:a8:38:81:6e: 70:f0:e9:02:27:77:6c:94:24:20:da:95:d6:94:d1:7f:f5:4e: 40:cd:2d:92:7f:f0:e2:c9:4e:78:db:e7:d2:d4:b1:d3:91:f6: cb:d3:b6:f9:e9:c1:33:6a:32:38:16:85:4d:9b:1b:c1:48:30: 5d:f0:b9:b7:82:ab:49:cf:d5:97:30:04:81:1a:66:51:3f:2e: 22:92:9d:22:50:d2:ce:e7:5d:d6:3b:71:06:f5:02:6b:6a:7f: d1:47:0c:71:e5:e0:9d:11:8d:e0:e0:f8:6a:c0:86:e9:6a:22: d9:84:03:5c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WOh1AlrVil97ZwT61Y7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjM1YjFkYTBjOGMzMWEyYmVhMjQ3ZDI4YmEyN2RlYmNjZmM1YjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF3c/X0HabWa40brwCtpon0a6Iuk j4+hoTH64IuAahdojLhPUaHnv8otzdYpKL/Y43ZS5yxmWHRZyGYzuFxz9Jky1pRn sdzmEgDCjInUfEBJSDMFMEzS2/lGykjSsx2vh+fzoL0ygocNKskC+vMiBYxNHd1j FmZ0eWpI71BUehbKHnthW0qQrlns/k9G/rJyNRP+8bcQ7361y/aAevpZOoY+1fTX RHoouxGhSH/cMF04Yyvdr37Jb76X8GB7PoOyrr6pmxht9kVtytVRQiYlb+c4GSXx UomMMaf60rvotfPUUSr1wET2o9yMoecJVI56MAw9F5g+LZvAX+I5UI9P1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA81sdoMjDGivqJH0ouifevM/FsTMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvRHpXeDJneU1NYUstb2tmU2k2Sjk2OHo4V3hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6og MA0GCSqGSIb3DQEBCwUAA4IBAQA5rds1Sgl0o4pcTpgxhOg/pX4dArpeuG+GPnRn l61ztqcHPMRurDz8jwRIHIrHAAIIP/GrrTM2M4FlCZaHTylTyFIuxp/h1uUM9aeX LxzY5ppubnkZNwR/CZe6f92DbEvzdV2UmdtB3IiOn+AVq9CbMPeslT0/EKcUTmuk SlEzG4WVmv+8RPNO38U2I6g4gW5w8OkCJ3dslCQg2pXWlNF/9U5AzS2Sf/DiyU54 2+fS1LHTkfbL07b56cEzajI4FoVNmxvBSDBd8Lm3gqtJz9WXMASBGmZRPy4ikp0i UNLO513WO3EG9QJran/RRwxx5eCdEY3g4PhqwIbpaiLZhANc -----END CERTIFICATE-----Generated at Mon Jan 26 12:32:29 2026 by rpki-client