This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa File: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (raw, json) Hash identifier: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc= Subject key identifier: 0C:0D:65:A6:26:E0:16:AE:7E:CB:F6:37:67:15:20:71:7E:D1:81:3A Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019B7D5C79704EDA5CB2BC96760CB1A8C73A Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139317 IP address blocks: 2a13:b487:4200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:79:70:4e:da:5c:b2:bc:96:76:0c:b1:a8:c7:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c0d65a626e016ae7ecbf637671520717ed1813a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:5d:fc:e0:d8:75:90:e2:eb:75:84:ce:b5: ef:4b:36:5e:59:3b:80:0b:a1:e1:49:e6:fe:78:e0: 95:e7:16:78:f2:21:a9:b3:ed:2d:7b:a6:c4:a2:28: da:c6:90:7e:a6:49:dc:1e:94:3e:c4:9f:ee:41:b4: 53:8e:fd:a1:ff:54:e9:62:db:49:0a:25:59:78:24: ed:e8:20:41:37:44:4e:8f:56:cd:ab:10:42:50:2d: 13:b6:70:52:58:2a:e3:6b:27:ac:30:f0:c8:8c:9a: 27:38:46:d3:b2:84:eb:36:26:ac:64:52:98:dd:d7: d6:d7:e2:62:3f:4b:92:29:10:28:23:db:5c:df:d7: c6:41:30:6b:42:5e:fa:e5:c1:1c:b6:f7:c2:b6:a5: a9:d4:d3:53:5f:71:e9:3b:f2:43:62:de:71:bc:41: c9:9c:88:99:0d:38:9c:d3:a1:a1:f8:60:d6:1b:9a: 58:52:de:b2:f6:72:d1:1a:9c:7e:7f:a8:b8:43:fc: be:2a:7f:88:a2:0e:66:48:2c:ab:3b:a4:2e:70:0d: 7c:a3:57:23:9a:10:a5:30:30:a1:4f:3f:69:e0:a4: be:25:6e:b3:ad:4d:c9:06:4e:c0:18:6b:83:9c:fe: 55:b0:16:ed:4c:ae:18:37:a3:b7:0f:5c:55:20:ef: 03:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0D:65:A6:26:E0:16:AE:7E:CB:F6:37:67:15:20:71:7E:D1:81:3A X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b487:4200::/40 Signature Algorithm: sha256WithRSAEncryption bb:94:75:3b:24:6e:52:7d:d5:ef:ed:19:87:de:fb:02:88:66: 77:eb:9c:78:8e:46:35:ed:0b:8f:47:2a:05:af:6d:f0:b0:4c: bf:80:6a:47:9e:cf:ab:d3:85:84:08:ff:c1:ad:5f:eb:7d:33: 74:41:54:69:83:61:59:7a:b0:38:c4:c0:a6:0c:25:51:dc:d3: 48:16:11:b6:a2:80:a1:94:9e:90:20:4f:d2:5a:92:0f:16:9e: 35:be:c6:70:ae:fb:1d:50:10:2d:85:d0:13:c2:b8:e6:51:c2: 72:b4:f1:5a:43:53:22:ed:e6:df:db:a4:5c:dd:5f:ea:20:b1: 0c:08:76:de:81:1f:aa:4d:14:25:9d:aa:e5:33:13:23:65:62: fb:4e:8f:68:84:b1:93:c9:7a:7c:57:09:ea:fc:e3:9a:76:51: 9d:2b:35:7e:c4:d0:5e:0b:e3:be:39:d3:ad:8f:5f:89:d7:68: 07:c4:15:ad:be:ad:99:7b:38:d8:2d:5a:e9:f4:7b:d4:cc:99: d6:d6:6b:17:1b:dc:4c:76:1f:63:04:d1:ca:e9:53:50:79:4f: 97:35:3d:f6:d4:bc:b5:34:b2:99:79:e8:08:4c:f6:75:fb:a6: bb:f5:b3:7f:6d:e1:a1:7b:d2:98:b8:33:08:a6:c5:d1:7f:d3: 84:67:73:69 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XHlwTtpcsryWdgyxqMc6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzBkNjVhNjI2ZTAxNmFlN2VjYmY2Mzc2NzE1MjA3MTdlZDE4MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvxd/ODYdZDi63WEzrXvSzZeWTuA C6HhSeb+eOCV5xZ48iGps+0te6bEoijaxpB+pkncHpQ+xJ/uQbRTjv2h/1TpYttJ CiVZeCTt6CBBN0ROj1bNqxBCUC0TtnBSWCrjayesMPDIjJonOEbTsoTrNiasZFKY 3dfW1+JiP0uSKRAoI9tc39fGQTBrQl765cEctvfCtqWp1NNTX3HpO/JDYt5xvEHJ nIiZDTic06Gh+GDWG5pYUt6y9nLRGpx+f6i4Q/y+Kn+Iog5mSCyrO6QucA18o1cj mhClMDChTz9p4KS+JW6zrU3JBk7AGGuDnP5VsBbtTK4YN6O3D1xVIO8DtwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAwNZaYm4Baufsv2N2cVIHF+0YE6MB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvREExbHBpYmdGcTUteV9ZM1p4VWdjWDdSZ1RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0h0Iw DQYJKoZIhvcNAQELBQADggEBALuUdTskblJ91e/tGYfe+wKIZnfrnHiORjXtC49H KgWvbfCwTL+Aakeez6vThYQI/8GtX+t9M3RBVGmDYVl6sDjEwKYMJVHc00gWEbai gKGUnpAgT9Jakg8WnjW+xnCu+x1QEC2F0BPCuOZRwnK08VpDUyLt5t/bpFzdX+og sQwIdt6BH6pNFCWdquUzEyNlYvtOj2iEsZPJenxXCer845p2UZ0rNX7E0F4L4745 062PX4nXaAfEFa2+rZl7ONgtWun0e9TMmdbWaxcb3Ex2H2ME0crpU1B5T5c1PfbU vLU0spl56AhM9nX7prv1s39t4aF70pi4MwimxdF/04Rnc2k= -----END CERTIFICATE-----Generated at Thu Jan 22 06:17:29 2026 by rpki-client