This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/wdOcXKO_nHug7XQx40TtUWzLUsM.roa File: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (raw, json) Hash identifier: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk= Subject key identifier: C1:D3:9C:5C:A3:BF:9C:7B:A0:ED:74:31:E3:44:ED:51:6C:CB:52:C3 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B79ED44B613089AB9DDEBC298910EF4B3 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/wdOcXKO_nHug7XQx40TtUWzLUsM.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7603 IP address blocks: 2a0f:607:1300::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:44:b6:13:08:9a:b9:dd:eb:c2:98:91:0e:f4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1d39c5ca3bf9c7ba0ed7431e344ed516ccb52c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:d7:2e:7e:0d:eb:8a:4b:69:89:7a:e0:bc: 94:1a:7c:cc:c3:40:b3:00:78:7f:81:9e:e4:85:27: 10:2d:1f:ad:17:11:34:18:22:de:14:f4:b2:73:e8: 9d:68:2f:35:54:96:d4:09:bb:30:55:64:ef:09:9e: da:39:74:fe:95:b1:bd:4f:75:1b:35:db:dd:c3:f2: b5:37:4a:5e:fb:9f:06:54:15:11:73:22:e1:29:ab: 03:2b:5a:ed:0a:6d:2c:8f:2d:09:44:d6:a0:29:e4: a0:6f:4d:cd:f8:8f:3d:8c:d4:09:1a:44:be:9f:78: c1:ca:d0:c9:1d:fb:7a:2c:32:34:5e:f8:9b:8b:a7: 07:cc:91:29:3a:0c:53:db:b1:6b:f8:33:18:55:ca: e5:d3:eb:a3:07:1a:ec:ee:7a:38:86:b5:11:21:0f: 7f:8f:5b:c4:16:7f:bd:cd:a3:0a:7d:0a:a6:83:b2: 49:1f:56:03:0a:25:3b:14:64:35:b8:b4:27:88:8b: 83:5f:71:60:23:06:b5:5e:57:0e:5f:4e:2c:4f:1b: a1:a6:86:39:bc:c4:e6:76:d8:cd:b2:85:aa:06:4a: 77:ae:6f:c9:d1:87:1e:c9:33:39:55:a2:48:b6:32: f0:7b:1c:62:e9:a6:c7:12:61:ad:b7:29:8b:e8:cb: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D3:9C:5C:A3:BF:9C:7B:A0:ED:74:31:E3:44:ED:51:6C:CB:52:C3 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/wdOcXKO_nHug7XQx40TtUWzLUsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:607:1300::/44 Signature Algorithm: sha256WithRSAEncryption 98:18:f5:99:c9:ce:e8:2b:99:f4:0c:c0:57:b2:4c:e7:bd:13: b4:53:0a:a9:9b:15:43:91:02:8f:80:73:f4:d5:06:88:31:d3: c2:a1:5c:c7:75:71:09:bb:7d:c8:e8:bc:39:ae:63:23:87:f7: 02:ad:d8:19:2d:b8:b8:73:18:2d:f2:be:02:dc:10:bd:57:03: e5:e0:8e:6d:df:04:82:09:55:d5:fa:6a:66:f0:d1:c9:38:c4: b0:fe:d6:fa:47:d9:78:04:a5:bb:24:29:7f:3a:53:d7:ad:19: a6:20:c0:ef:89:1a:43:5c:03:e4:38:60:fd:19:56:e2:6b:45: 59:32:6d:11:e1:42:1f:92:70:f9:c5:df:7a:a6:7a:c6:ae:dc: 32:ed:3e:03:43:62:46:50:c7:74:b9:2d:30:b4:05:b5:ad:6a: 21:27:29:be:1d:16:02:a5:b6:65:50:1b:68:15:db:3c:79:43: 38:c1:ee:69:b2:0f:3d:2b:fc:75:25:a0:d6:fc:b4:14:15:fc: 65:f9:48:e1:76:00:5e:5b:b4:42:91:fe:9b:d9:c5:ee:ce:2e: a9:53:26:af:c1:fa:eb:2d:e2:c8:d7:0a:cd:b9:5f:34:66:60: 2e:83:f5:90:e8:ce:71:4d:fd:80:2f:87:94:9b:8b:65:59:60: ca:7c:ad:bd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57US2Ewiaud3rwpiRDvSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWQzOWM1Y2EzYmY5YzdiYTBlZDc0MzFlMzQ0ZWQ1MTZjY2I1MmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw/XLn4N64pLaYl64LyUGnzMw0Cz AHh/gZ7khScQLR+tFxE0GCLeFPSyc+idaC81VJbUCbswVWTvCZ7aOXT+lbG9T3Ub Ndvdw/K1N0pe+58GVBURcyLhKasDK1rtCm0sjy0JRNagKeSgb03N+I89jNQJGkS+ n3jBytDJHft6LDI0Xvibi6cHzJEpOgxT27Fr+DMYVcrl0+ujBxrs7no4hrURIQ9/ j1vEFn+9zaMKfQqmg7JJH1YDCiU7FGQ1uLQniIuDX3FgIwa1XlcOX04sTxuhpoY5 vMTmdtjNsoWqBkp3rm/J0YceyTM5VaJItjLwexxi6abHEmGttymL6Mv3ZwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMHTnFyjv5x7oO10MeNE7VFsy1LDMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvd2RPY1hLT19uSHVnN1hReDQwVHRVV3pMVXNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg8GBxMA MA0GCSqGSIb3DQEBCwUAA4IBAQCYGPWZyc7oK5n0DMBXskznvRO0UwqpmxVDkQKP gHP01QaIMdPCoVzHdXEJu33I6Lw5rmMjh/cCrdgZLbi4cxgt8r4C3BC9VwPl4I5t 3wSCCVXV+mpm8NHJOMSw/tb6R9l4BKW7JCl/OlPXrRmmIMDviRpDXAPkOGD9GVbi a0VZMm0R4UIfknD5xd96pnrGrtwy7T4DQ2JGUMd0uS0wtAW1rWohJym+HRYCpbZl UBtoFds8eUM4we5psg89K/x1JaDW/LQUFfxl+UjhdgBeW7RCkf6b2cXuzi6pUyav wfrrLeLI1wrNuV80ZmAug/WQ6M5xTf2AL4eUm4tlWWDKfK29 -----END CERTIFICATE-----Generated at Thu Jan 8 00:40:55 2026 by rpki-client