This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/DCBLk0n_S_3M7k3-m4KCpcs-MRU.roa File: DCBLk0n_S_3M7k3-m4KCpcs-MRU.roa (raw, json) Hash identifier: L10rUFRjd+vql1vrjBU//Wrdo9Hdy6jFnS8l/52we0s= Subject key identifier: 0C:20:4B:93:49:FF:4B:FD:CC:EE:4D:FE:9B:82:82:A5:CB:3E:31:15 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C0690401F764CB084D245F04F26D Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/DCBLk0n_S_3M7k3-m4KCpcs-MRU.roa Signing time: Fri 02 Jan 2026 18:21:48 +0000 ROA not before: Fri 02 Jan 2026 18:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210717 IP address blocks: 2a03:5840:140::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c0:69:04:01:f7:64:cb:08:4d:24:5f:04:f2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c204b9349ff4bfdccee4dfe9b8282a5cb3e3115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:27:1d:04:72:af:96:54:8d:51:13:70:26: ef:76:ef:98:be:68:65:eb:c8:09:e1:a8:da:c6:c7: a2:cb:8c:2f:3f:d7:ab:8a:58:a8:c3:4f:f7:0b:d3: 67:ea:21:0f:4b:00:9c:8e:7b:d2:06:e1:1c:fb:1e: 8d:59:b3:af:0e:04:e5:fb:45:f4:72:bb:fa:da:c6: 2f:1e:8f:b7:b3:f4:1a:3a:62:db:3f:be:b1:2c:e3: 62:da:85:a6:ea:28:37:a4:a3:a4:bc:55:ec:6f:07: db:42:02:95:9f:d2:e9:b5:85:ef:40:89:00:c5:a9: 8d:9d:c2:29:aa:52:2a:6c:fc:d7:52:56:63:59:06: 74:13:4f:55:d4:0f:e9:7d:9d:d2:be:fa:d5:8e:c7: 73:31:de:e5:bd:91:09:79:2e:a0:a5:d6:47:e9:74: 64:de:c6:6b:f3:30:3a:f4:69:70:0c:7f:75:bb:8e: 55:cf:02:86:9e:27:a1:85:87:56:5f:0e:af:c2:b4: 0f:6d:6f:2c:5c:77:03:ab:92:48:4c:cd:bd:5f:da: 59:83:4f:b6:41:d1:c2:50:5e:78:fd:fd:68:47:a7: 49:78:31:39:86:78:70:04:b5:d5:54:50:be:ac:ea: f3:97:e7:00:55:39:6a:30:81:4a:74:f4:da:ef:fa: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:20:4B:93:49:FF:4B:FD:CC:EE:4D:FE:9B:82:82:A5:CB:3E:31:15 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/DCBLk0n_S_3M7k3-m4KCpcs-MRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:140::/44 Signature Algorithm: sha256WithRSAEncryption 20:66:24:61:e4:13:ff:ee:a9:f1:eb:1b:78:76:22:7e:ef:1b: 8b:4e:4f:44:cf:2f:86:22:72:25:b8:b9:24:64:93:95:c6:ca: b2:dc:9a:c7:80:53:3a:ed:ce:b8:3f:de:92:26:17:bb:74:6f: f4:2f:bb:62:b2:65:12:f3:62:60:8f:f5:44:59:71:71:81:66: 80:10:7a:25:01:12:7d:2c:34:dc:e9:36:ee:df:40:f8:98:4b: f7:33:cc:03:2f:fa:8c:14:da:68:23:9e:2d:2f:49:76:86:36: d6:a3:a7:eb:c8:86:5b:c9:b7:ba:06:64:5f:a1:cf:1e:65:e1: 58:fa:a5:c1:05:2e:42:30:b4:8e:16:f5:e5:43:c6:12:80:1b: 59:d0:f8:b8:b3:0d:01:94:81:0e:94:70:14:e2:74:0f:b5:d8: 1d:30:98:4a:36:78:34:03:aa:db:f6:f8:28:fc:8e:c3:6d:01: 60:73:f4:f0:d4:8b:6c:83:71:d2:eb:09:f4:40:86:e9:19:81: 47:b0:db:76:88:8a:38:1b:2d:4d:49:7c:0d:f7:21:f7:d8:46: c1:d9:1d:53:61:5b:4b:d6:c4:38:f8:fa:f1:29:5e:ea:1e:35: 24:50:77:45:4d:85:7c:fa:36:f1:65:16:7b:73:53:68:03:67: 4c:54:c0:e1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8cBpBAH3ZMsITSRfBPJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzIwNGI5MzQ5ZmY0YmZkY2NlZTRkZmU5YjgyODJhNWNiM2UzMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXAnHQRyr5ZUjVETcCbvdu+Yvmhl 68gJ4ajaxseiy4wvP9eriliow0/3C9Nn6iEPSwCcjnvSBuEc+x6NWbOvDgTl+0X0 crv62sYvHo+3s/QaOmLbP76xLONi2oWm6ig3pKOkvFXsbwfbQgKVn9LptYXvQIkA xamNncIpqlIqbPzXUlZjWQZ0E09V1A/pfZ3SvvrVjsdzMd7lvZEJeS6gpdZH6XRk 3sZr8zA69GlwDH91u45VzwKGniehhYdWXw6vwrQPbW8sXHcDq5JITM29X9pZg0+2 QdHCUF54/f1oR6dJeDE5hnhwBLXVVFC+rOrzl+cAVTlqMIFKdPTa7/qgKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAwgS5NJ/0v9zO5N/puCgqXLPjEVMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvRENCTGswbl9TXzNNN2szLW00S0NwY3MtTVJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgNYQAFA MA0GCSqGSIb3DQEBCwUAA4IBAQAgZiRh5BP/7qnx6xt4diJ+7xuLTk9Ezy+GInIl uLkkZJOVxsqy3JrHgFM67c64P96SJhe7dG/0L7tismUS82Jgj/VEWXFxgWaAEHol ARJ9LDTc6Tbu30D4mEv3M8wDL/qMFNpoI54tL0l2hjbWo6fryIZbybe6BmRfoc8e ZeFY+qXBBS5CMLSOFvXlQ8YSgBtZ0Pi4sw0BlIEOlHAU4nQPtdgdMJhKNng0A6rb 9vgo/I7DbQFgc/Tw1Itsg3HS6wn0QIbpGYFHsNt2iIo4Gy1NSXwN9yH32EbB2R1T YVtL1sQ4+PrxKV7qHjUkUHdFTYV8+jbxZRZ7c1NoA2dMVMDh -----END CERTIFICATE-----Generated at Fri Jan 23 15:21:24 2026 by rpki-client