This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DwdXvjj6kjUkGqdNpZlI4jvNLJ4.roa File: DwdXvjj6kjUkGqdNpZlI4jvNLJ4.roa (raw, json) Hash identifier: aUOIolcWqR9WhW07egc10esYWNYtYaDf4zyLDLf00ro= Subject key identifier: 0F:07:57:BE:38:FA:92:35:24:1A:A7:4D:A5:99:48:E2:3B:CD:2C:9E Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C80250558F5949A23BBB7355B1526A7 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DwdXvjj6kjUkGqdNpZlI4jvNLJ4.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202402 IP address blocks: 2a0f:7803:ff90::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:25:05:58:f5:94:9a:23:bb:b7:35:5b:15:26:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f0757be38fa9235241aa74da59948e23bcd2c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fe:51:63:41:e5:a8:76:d1:a7:17:7d:50:f6: d5:42:55:79:ef:71:4a:b5:db:cf:a3:c2:92:01:1c: e1:bf:3a:f1:fa:81:e3:1f:ac:cc:18:e3:1b:49:54: e4:8d:e0:0a:17:b4:c0:7d:c8:2f:72:98:3d:07:f5: 1a:7c:bd:fc:bf:6c:19:61:0b:34:f8:f3:a8:8b:90: f2:f6:f8:97:18:32:08:41:d9:40:73:ad:ea:bb:44: 8f:6a:98:0f:36:06:38:df:07:bc:4a:79:f2:fb:13: 9b:dd:61:9a:a3:ce:94:7c:18:0c:a5:de:7a:1b:ce: 84:30:43:79:3b:6f:e5:d6:26:9c:17:11:85:bf:da: 52:cb:54:d4:3b:11:5f:a9:fe:7f:7b:16:3c:7e:4b: 28:55:d2:8b:a0:99:f1:2a:10:2c:cf:72:67:b3:7d: c7:b9:ce:ef:0d:62:39:14:d1:70:52:ef:f5:5e:85: 99:02:97:cc:1b:8f:1e:2b:45:12:ca:af:f0:11:1e: 24:56:43:19:d9:3c:8b:fa:cb:5b:a7:c2:71:22:ac: 32:0c:8f:f9:c2:fe:51:fb:3c:64:69:87:d6:42:51: 3c:68:c5:47:fe:67:64:81:e7:d7:25:28:c3:9f:bb: ba:d4:d5:12:e4:8f:a1:c6:f3:8a:32:8b:5d:67:e7: d3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:07:57:BE:38:FA:92:35:24:1A:A7:4D:A5:99:48:E2:3B:CD:2C:9E X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DwdXvjj6kjUkGqdNpZlI4jvNLJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:ff90::/44 Signature Algorithm: sha256WithRSAEncryption bd:a6:d9:78:07:b5:c7:20:a9:76:79:e2:59:93:be:fd:23:c5: 80:36:6f:ee:43:0b:d8:12:0a:e6:ca:0b:c1:36:ef:08:86:9d: b1:94:f3:b9:71:37:67:3b:07:35:f8:9b:1e:33:4c:37:32:1f: b9:6d:49:34:f9:18:e4:ec:6f:6f:53:53:db:e1:90:21:ad:84: 5a:4a:7a:70:8f:81:8e:4c:99:38:ae:e6:08:08:a3:37:29:16: 43:1e:b8:12:03:9d:c0:43:50:d8:fe:f4:3c:15:d1:f6:77:b5: be:34:97:2d:ce:b2:b5:b3:7c:43:a3:a2:87:13:03:cc:24:3a: f4:a7:da:2f:af:16:0a:b5:8a:b1:3e:30:59:c8:32:ec:6b:59: 9a:39:ae:7c:f9:54:0e:91:93:a3:10:4a:ce:6b:a4:1c:3b:55: 90:f5:ce:41:91:08:5c:3b:30:5b:9d:2b:06:88:a9:59:8c:dd: dd:b2:d3:19:32:38:84:71:c7:37:71:2c:b1:06:9f:af:67:b0: 4f:df:78:16:56:db:96:be:ce:16:10:21:c6:90:f7:13:8f:28: 12:f5:b8:1d:1a:04:26:1a:b2:9f:ec:57:79:35:6d:2c:ee:14: d7:c1:c2:dc:9d:a0:d0:e7:b5:1a:16:1f:17:60:96:dc:53:8b: c8:b8:71:1e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gCUFWPWUmiO7tzVbFSanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjA3NTdiZTM4ZmE5MjM1MjQxYWE3NGRhNTk5NDhlMjNiY2QyYzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv5RY0HlqHbRpxd9UPbVQlV573FK tdvPo8KSARzhvzrx+oHjH6zMGOMbSVTkjeAKF7TAfcgvcpg9B/UafL38v2wZYQs0 +POoi5Dy9viXGDIIQdlAc63qu0SPapgPNgY43we8Snny+xOb3WGao86UfBgMpd56 G86EMEN5O2/l1iacFxGFv9pSy1TUOxFfqf5/exY8fksoVdKLoJnxKhAsz3Jns33H uc7vDWI5FNFwUu/1XoWZApfMG48eK0USyq/wER4kVkMZ2TyL+stbp8JxIqwyDI/5 wv5R+zxkaYfWQlE8aMVH/mdkgefXJSjDn7u61NUS5I+hxvOKMotdZ+fTsQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA8HV744+pI1JBqnTaWZSOI7zSyeMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvRHdkWHZqajZralVrR3FkTnBabEk0anZOTEo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/+Q MA0GCSqGSIb3DQEBCwUAA4IBAQC9ptl4B7XHIKl2eeJZk779I8WANm/uQwvYEgrm ygvBNu8Ihp2xlPO5cTdnOwc1+JseM0w3Mh+5bUk0+Rjk7G9vU1Pb4ZAhrYRaSnpw j4GOTJk4ruYICKM3KRZDHrgSA53AQ1DY/vQ8FdH2d7W+NJctzrK1s3xDo6KHEwPM JDr0p9ovrxYKtYqxPjBZyDLsa1maOa58+VQOkZOjEErOa6QcO1WQ9c5BkQhcOzBb nSsGiKlZjN3dstMZMjiEccc3cSyxBp+vZ7BP33gWVtuWvs4WECHGkPcTjygS9bgd GgQmGrKf7Fd5NW0s7hTXwcLcnaDQ57UaFh8XYJbcU4vIuHEe -----END CERTIFICATE-----Generated at Wed Jan 21 17:01:10 2026 by rpki-client