This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/DhhEzrCSvtlaHslOfzFqY95aZ90.roa File: DhhEzrCSvtlaHslOfzFqY95aZ90.roa (raw, json) Hash identifier: VOvJoF9EWNuxMkJTKQzWpsIdU1FWWr51hxl56iJSfuY= Subject key identifier: 0E:18:44:CE:B0:92:BE:D9:5A:1E:C9:4E:7F:31:6A:63:DE:5A:67:DD Certificate issuer: /CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d Certificate serial: 019C0E4024B242E6ACE4840C4F94FBCD6299 Authority key identifier: 7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/DhhEzrCSvtlaHslOfzFqY95aZ90.roa Signing time: Fri 30 Jan 2026 09:33:30 +0000 ROA not before: Fri 30 Jan 2026 09:33:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203023 IP address blocks: 2a0b:71c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:40:24:b2:42:e6:ac:e4:84:0c:4f:94:fb:cd:62:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d Validity Not Before: Jan 30 09:33:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e1844ceb092bed95a1ec94e7f316a63de5a67dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:c8:35:98:6e:67:7e:74:3f:15:a7:c9:0c: 09:5c:2f:b0:d7:0d:5a:eb:ba:ca:b5:15:44:a2:09: 71:19:d6:0c:5d:62:7a:75:ca:98:57:26:67:6c:2b: 0b:03:eb:eb:28:48:42:db:55:84:4a:d7:3a:ab:db: 29:f9:2a:0d:ab:32:fa:86:db:d1:c1:2a:99:e2:21: 5d:87:dc:1c:8d:a9:de:92:5f:63:a4:cb:fd:9b:28: da:56:bc:ce:8c:99:e0:4e:81:50:7e:49:da:13:73: d4:07:01:4f:85:c4:06:3d:d1:c6:55:72:30:15:8a: 75:eb:c9:2b:ab:0b:81:59:23:0c:7b:fb:92:42:5d: 35:e3:9a:ae:8b:1e:91:fc:20:b6:ef:f1:8a:84:02: 67:6e:53:78:61:e4:ce:9e:be:e3:54:c7:a7:06:54: fc:89:0c:bb:97:65:48:79:3c:66:80:59:42:31:28: b2:63:c7:8c:7e:86:a0:cb:6f:d9:f8:6d:06:79:9a: 2f:b6:ca:80:c8:3e:96:89:ef:c3:2d:3a:0e:79:c3: 4a:5c:17:26:ee:3f:56:25:ae:d4:db:0a:1d:e7:f4: da:1a:88:09:7d:46:e6:57:b5:21:50:b9:5d:b2:22: d0:6b:9a:cc:15:a1:97:14:f9:9a:9d:15:0e:ff:0e: e2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:18:44:CE:B0:92:BE:D9:5A:1E:C9:4E:7F:31:6A:63:DE:5A:67:DD X509v3 Authority Key Identifier: keyid:7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/DhhEzrCSvtlaHslOfzFqY95aZ90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:71c0::/29 Signature Algorithm: sha256WithRSAEncryption 15:ea:f7:00:67:80:c1:85:66:5e:df:42:94:a0:57:0c:70:41: 50:34:3a:ed:5c:3e:5d:ef:a7:32:d8:d8:cc:9d:30:4e:de:b2: 26:44:6f:4d:88:41:94:9e:1b:81:44:ce:4f:53:f7:4a:1f:e2: e0:46:86:6d:29:8e:21:f1:db:15:09:5b:d8:9c:0f:d3:fc:9c: 42:56:84:62:4d:ce:33:cd:49:4e:c7:2f:df:4a:65:ef:06:06: 4e:c9:11:8d:8e:dc:fe:59:09:07:d2:fb:b2:a3:28:86:d1:97: 05:29:57:5c:e9:e2:8b:fa:23:0e:35:5e:14:c5:48:98:4e:e4: b5:43:f8:0a:ab:f0:89:e9:2e:69:fc:22:66:6d:49:a8:35:ee: 76:22:97:58:b6:17:56:16:2a:51:7c:51:d4:1c:fc:95:aa:23: 0f:44:0d:0f:6d:f5:00:0e:2c:83:b2:71:38:32:06:da:d3:5a: f8:c0:51:2b:71:f3:60:78:fd:eb:b9:59:85:1e:66:bb:c5:3e: 24:65:c6:09:16:84:7b:69:89:e7:ba:c3:51:d6:b1:e0:92:bf: 61:10:3e:fb:c9:28:4a:21:64:4f:de:42:8a:b2:20:39:10:9c: d3:9b:ec:46:dd:49:64:a3:53:f1:7b:3b:a4:04:3e:48:ef:f6: 67:01:64:a1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZwOQCSyQuas5IQMT5T7zWKZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNjllZmU2MDE2ZjcyZDQ1OTJmMWIwYmFiOTE4NjQ3NmZm M2EyOWQwHhcNMjYwMTMwMDkzMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTE4NDRjZWIwOTJiZWQ5NWExZWM5NGU3ZjMxNmE2M2RlNWE2N2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz3INZhuZ350PxWnyQwJXC+w1w1a 67rKtRVEoglxGdYMXWJ6dcqYVyZnbCsLA+vrKEhC21WEStc6q9sp+SoNqzL6htvR wSqZ4iFdh9wcjanekl9jpMv9myjaVrzOjJngToFQfknaE3PUBwFPhcQGPdHGVXIw FYp168krqwuBWSMMe/uSQl0145quix6R/CC27/GKhAJnblN4YeTOnr7jVMenBlT8 iQy7l2VIeTxmgFlCMSiyY8eMfoagy2/Z+G0GeZovtsqAyD6Wie/DLToOecNKXBcm 7j9WJa7U2wod5/TaGogJfUbmV7UhULldsiLQa5rMFaGXFPmanRUO/w7iuwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFA4YRM6wkr7ZWh7JTn8xamPeWmfdMB8GA1UdIwQY MBaAFHtp7+YBb3LUWS8bC6uRhkdv86KdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTJudjVnRnZjdFJaTHhzTHE1R0dSMl96b3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZjM0YmItMTBmOS00NTkzLTljYWYt MWQ4YjlhMWFhNGFkLzEvRGhoRXpyQ1N2dGxhSHNsT2Z6RnFZOTVhWjkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mZjM0YmItMTBmOS00NTkzLTljYWYtMWQ4YjlhMWFhNGFk LzEvZTJudjVnRnZjdFJaTHhzTHE1R0dSMl96b3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgtxwDAN BgkqhkiG9w0BAQsFAAOCAQEAFer3AGeAwYVmXt9ClKBXDHBBUDQ67Vw+Xe+nMtjY zJ0wTt6yJkRvTYhBlJ4bgUTOT1P3Sh/i4EaGbSmOIfHbFQlb2JwP0/ycQlaEYk3O M81JTscv30pl7wYGTskRjY7c/lkJB9L7sqMohtGXBSlXXOnii/ojDjVeFMVImE7k tUP4CqvwiekuafwiZm1JqDXudiKXWLYXVhYqUXxR1Bz8laojD0QND231AA4sg7Jx ODIG2tNa+MBRK3HzYHj967lZhR5mu8U+JGXGCRaEe2mJ57rDUdax4JK/YRA++8ko SiFkT95CirIgORCc05vsRt1JZKNT8Xs7pAQ+SO/2ZwFkoQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:32 2026 by rpki-client