This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/DuN1FxsH-lHCVLPZStKFfBKxbwQ.roa File: DuN1FxsH-lHCVLPZStKFfBKxbwQ.roa (raw, json) Hash identifier: kKKX72HBFEwm68oN45GHGePWHOJC9JK5lwTCTB/prdw= Subject key identifier: 0E:E3:75:17:1B:07:FA:51:C2:54:B3:D9:4A:D2:85:7C:12:B1:6F:04 Certificate issuer: /CN=dc3844500731d55f8988dde98559cfed0b309ab6 Certificate serial: 019B78A2799E0FA3372044B6BE0FC66460CD Authority key identifier: DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/DuN1FxsH-lHCVLPZStKFfBKxbwQ.roa Signing time: Thu 01 Jan 2026 08:17:52 +0000 ROA not before: Thu 01 Jan 2026 08:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209831 IP address blocks: 213.226.116.0/24 maxlen: 24 2a14:fd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:79:9e:0f:a3:37:20:44:b6:be:0f:c6:64:60:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3844500731d55f8988dde98559cfed0b309ab6 Validity Not Before: Jan 1 08:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ee375171b07fa51c254b3d94ad2857c12b16f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:56:55:86:6c:18:b6:c6:f3:25:f1:d0:a5: 6e:f4:70:4c:97:44:8f:ba:f7:33:16:76:ff:5a:4e: 1e:e8:f1:0e:e5:b9:19:b2:31:6a:15:30:d4:7c:84: f8:76:c6:88:6c:6a:7e:08:ac:66:7b:8f:f2:19:13: 7e:73:c8:1e:1b:f5:0f:03:5a:34:e2:57:43:e6:45: 20:6e:06:b0:97:f5:b8:85:be:6b:57:34:81:46:2d: 27:87:28:65:ed:e8:5c:d4:c9:69:75:3f:fd:cf:33: 5b:18:96:a8:40:ef:41:81:ab:7b:0f:64:0a:7a:ba: 94:fb:5b:42:b8:ff:a0:13:af:73:40:ed:d2:f9:3f: bd:ba:0b:02:64:2e:3e:1e:8f:04:3a:c6:bc:99:5f: 5f:93:fe:c3:5b:fb:0e:c4:f2:40:8a:05:56:2d:d8: 69:9c:cf:5b:7e:c7:56:bb:65:2e:8a:03:60:8f:70: 5f:83:77:6a:ef:d5:4c:6d:9e:c4:3d:17:17:61:4a: 2c:58:a8:33:57:90:06:c1:74:cb:96:fe:df:e8:a0: 75:cb:ab:dd:e0:57:50:00:bb:5b:c0:21:97:12:cf: 3f:3d:a1:71:d2:81:a0:d9:e4:99:da:01:e3:07:4a: 56:84:23:23:0c:8b:7f:bb:05:df:3d:d2:20:69:b9: 52:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E3:75:17:1B:07:FA:51:C2:54:B3:D9:4A:D2:85:7C:12:B1:6F:04 X509v3 Authority Key Identifier: keyid:DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/DuN1FxsH-lHCVLPZStKFfBKxbwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.226.116.0/24 IPv6: 2a14:fd80::/48 Signature Algorithm: sha256WithRSAEncryption 29:62:1a:7c:6a:c3:a1:26:69:e9:8a:83:95:e7:5a:2c:5b:54: e0:db:15:98:27:4e:af:be:64:fa:8e:7d:c2:b5:6f:ee:ad:ca: 50:ae:bc:e1:f6:79:36:3d:a1:d8:59:b9:e2:4f:bc:42:c2:c9: 21:68:47:00:9a:a0:2a:d2:84:3b:f9:b1:6b:3f:1c:4e:40:f8: 34:6b:ef:29:17:40:68:f9:e7:b6:22:be:09:2d:f2:50:03:14: d7:d5:9b:17:df:cd:2a:16:66:bc:17:32:94:af:7b:d9:af:a7: 47:3d:32:af:cf:87:fc:a4:b4:a9:25:9c:66:37:01:ae:dd:31: 92:b9:62:2e:9c:57:c5:41:8e:de:30:65:b2:78:5a:b3:8a:f5: 41:2c:d3:d3:9c:8e:e9:d9:3d:f0:54:3b:ff:f3:30:fd:47:96: ce:ed:ee:b0:c5:74:14:a2:2e:4b:98:6a:f9:36:b7:4a:ea:c9: 76:a2:77:50:bf:2c:52:ad:79:af:f0:87:f1:0d:2b:91:53:76: fa:81:1f:d5:54:80:df:b8:b8:ff:bd:7f:89:3a:d4:60:b5:c6: cd:82:d5:55:c1:7c:54:0c:21:18:85:31:4e:b6:df:ec:63:90: 4f:12:6b:72:df:8b:0b:e3:a2:7c:18:93:bb:fc:7a:6b:d8:87: da:07:5b:5e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4onmeD6M3IES2vg/GZGDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzg0NDUwMDczMWQ1NWY4OTg4ZGRlOTg1NTljZmVkMGIz MDlhYjYwHhcNMjYwMTAxMDgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWUzNzUxNzFiMDdmYTUxYzI1NGIzZDk0YWQyODU3YzEyYjE2ZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsURWVYZsGLbG8yXx0KVu9HBMl0SP uvczFnb/Wk4e6PEO5bkZsjFqFTDUfIT4dsaIbGp+CKxme4/yGRN+c8geG/UPA1o0 4ldD5kUgbgawl/W4hb5rVzSBRi0nhyhl7ehc1MlpdT/9zzNbGJaoQO9Bgat7D2QK erqU+1tCuP+gE69zQO3S+T+9ugsCZC4+Ho8EOsa8mV9fk/7DW/sOxPJAigVWLdhp nM9bfsdWu2UuigNgj3Bfg3dq79VMbZ7EPRcXYUosWKgzV5AGwXTLlv7f6KB1y6vd 4FdQALtbwCGXEs8/PaFx0oGg2eSZ2gHjB0pWhCMjDIt/uwXfPdIgablSDQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA7jdRcbB/pRwlSz2UrShXwSsW8EMB8GA1UdIwQY MBaAFNw4RFAHMdVfiYjd6YVZz+0LMJq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RoRVVBY3gxVi1KaU4zcGhWblA3UXN3bXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iZmZjNzItYmI2ZC00OTk4LWExMGIt NmZmOGMzN2RiMWE4LzEvRHVOMUZ4c0gtbEhDVkxQWlN0S0ZmQkt4YndRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iZmZjNzItYmI2ZC00OTk4LWExMGItNmZmOGMzN2RiMWE4 LzEvM0RoRVVBY3gxVi1KaU4zcGhWblA3UXN3bXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1eJ0MA8E AgACMAkDBwAqFP2AAAAwDQYJKoZIhvcNAQELBQADggEBACliGnxqw6EmaemKg5Xn WixbVODbFZgnTq++ZPqOfcK1b+6tylCuvOH2eTY9odhZueJPvELCySFoRwCaoCrS hDv5sWs/HE5A+DRr7ykXQGj557Yivgkt8lADFNfVmxffzSoWZrwXMpSve9mvp0c9 Mq/Ph/yktKklnGY3Aa7dMZK5Yi6cV8VBjt4wZbJ4WrOK9UEs09OcjunZPfBUO//z MP1Hls7t7rDFdBSiLkuYavk2t0rqyXaid1C/LFKtea/wh/ENK5FTdvqBH9VUgN+4 uP+9f4k61GC1xs2C1VXBfFQMIRiFMU623+xjkE8Sa3LfiwvjonwYk7v8emvYh9oH W14= -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:08 2026 by rpki-client