This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/DC-2va12O2p4wJaztsxQYqxlteI.roa File: DC-2va12O2p4wJaztsxQYqxlteI.roa (raw, json) Hash identifier: 8DuSeuFCejqmMZ/sp4dL3rLoQsC1vmmd0qUYceaaN1Y= Subject key identifier: 0C:2F:B6:BD:AD:76:3B:6A:78:C0:96:B3:B6:CC:50:62:AC:65:B5:E2 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019BBB39154A071E018FF34B5B34A66086DE Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/DC-2va12O2p4wJaztsxQYqxlteI.roa Signing time: Wed 14 Jan 2026 06:37:18 +0000 ROA not before: Wed 14 Jan 2026 06:37:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.129.240.0/23 maxlen: 24 45.129.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:39:15:4a:07:1e:01:8f:f3:4b:5b:34:a6:60:86:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jan 14 06:37:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c2fb6bdad763b6a78c096b3b6cc5062ac65b5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6d:a7:20:e7:7c:5b:ae:32:9c:81:40:22:84: db:6b:ac:b7:0a:71:bb:29:d6:36:af:9c:c2:60:dc: a3:9b:a5:49:52:aa:3a:fd:ac:86:91:64:3d:8d:38: e3:b8:de:08:5b:7c:02:8e:80:d3:f4:c3:7b:96:65: a2:b2:60:fa:a7:fb:da:41:06:01:cb:e0:ad:12:ca: 5b:fd:c7:3e:03:b5:fe:55:10:f4:9b:d0:dc:33:5a: 8c:08:c0:1f:c2:a7:94:a5:de:dc:3e:be:9d:13:31: 05:86:88:f8:b3:26:10:41:72:31:2a:12:e5:2d:f2: bd:20:1c:58:af:57:03:8a:2b:b9:75:d9:13:91:fd: e6:2e:f1:cd:a0:f4:36:54:ea:78:1e:b3:16:e7:83: 64:09:0a:ba:bd:2c:e8:50:bf:25:87:96:02:95:c4: 56:86:11:dd:bd:e2:b0:15:0e:8b:2a:62:58:f1:ea: 52:6c:4f:e8:63:a1:a9:ce:19:c6:f8:b3:59:75:b6: ff:86:cc:47:11:b6:83:48:03:bb:67:d9:84:91:f6: e5:05:7a:f7:6c:17:0f:75:3c:26:3f:27:3d:4b:db: 42:e8:70:b0:26:98:2c:d1:6e:b9:aa:7d:97:f1:d1: 34:9c:1c:b5:1e:a8:f9:81:ce:1c:90:6a:7e:1f:96: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2F:B6:BD:AD:76:3B:6A:78:C0:96:B3:B6:CC:50:62:AC:65:B5:E2 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/DC-2va12O2p4wJaztsxQYqxlteI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.240.0-45.129.242.255 Signature Algorithm: sha256WithRSAEncryption 65:4b:eb:48:0e:21:f9:03:31:67:e3:80:50:fc:3a:dc:89:91: d1:73:3d:ad:f7:fe:d3:eb:8a:97:3f:18:10:38:91:2e:5d:e0: a9:5f:1e:b9:a8:2a:76:1c:6c:12:80:33:32:72:7f:2d:aa:2d: 5c:9d:04:20:6c:60:b7:ef:7a:45:78:13:41:39:1d:e3:68:53: 3c:95:55:45:05:82:af:c5:78:44:f1:b3:96:1d:36:bb:fc:7c: ba:f7:22:81:6a:85:8e:2f:d1:04:70:35:94:ba:e3:29:da:9f: 6b:65:4d:e3:fb:d0:44:dd:08:df:32:61:15:b3:0f:a1:b8:d7: a9:a6:93:10:2f:34:45:f2:c8:c3:74:31:49:4b:df:6b:d7:71: 37:5f:ba:a3:b4:43:22:a4:73:12:62:a8:71:e0:98:5b:6c:26: 80:b8:36:fa:ee:07:e9:ca:b0:17:5e:01:a6:0a:9f:b1:f7:93: 8b:a6:b4:25:42:5d:a0:d0:3d:c3:ab:1d:7e:0f:8f:3a:40:29: fb:3b:09:22:eb:15:83:18:12:63:8f:13:32:96:7c:4a:8b:ff: 04:04:22:df:af:37:76:f7:7a:e8:aa:39:e7:43:e6:a1:04:93: a1:eb:a9:d0:9d:93:2c:8f:5e:83:0f:b7:9a:8e:15:dd:3c:b3: d9:56:22:5b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZu7ORVKBx4Bj/NLWzSmYIbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMTE0MDYzNzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzJmYjZiZGFkNzYzYjZhNzhjMDk2YjNiNmNjNTA2MmFjNjViNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx22nIOd8W64ynIFAIoTba6y3CnG7 KdY2r5zCYNyjm6VJUqo6/ayGkWQ9jTjjuN4IW3wCjoDT9MN7lmWismD6p/vaQQYB y+CtEspb/cc+A7X+VRD0m9DcM1qMCMAfwqeUpd7cPr6dEzEFhoj4syYQQXIxKhLl LfK9IBxYr1cDiiu5ddkTkf3mLvHNoPQ2VOp4HrMW54NkCQq6vSzoUL8lh5YClcRW hhHdveKwFQ6LKmJY8epSbE/oY6GpzhnG+LNZdbb/hsxHEbaDSAO7Z9mEkfblBXr3 bBcPdTwmPyc9S9tC6HCwJpgs0W65qn2X8dE0nBy1Hqj5gc4ckGp+H5a2VwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAwvtr2tdjtqeMCWs7bMUGKsZbXiMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvREMtMnZhMTJPMnA0d0phenRzeFFZcXhsdGVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQtgfAD BAAtgfIwDQYJKoZIhvcNAQELBQADggEBAGVL60gOIfkDMWfjgFD8OtyJkdFzPa33 /tPripc/GBA4kS5d4KlfHrmoKnYcbBKAMzJyfy2qLVydBCBsYLfvekV4E0E5HeNo UzyVVUUFgq/FeETxs5YdNrv8fLr3IoFqhY4v0QRwNZS64ynan2tlTeP70ETdCN8y YRWzD6G416mmkxAvNEXyyMN0MUlL32vXcTdfuqO0QyKkcxJiqHHgmFtsJoC4Nvru B+nKsBdeAaYKn7H3k4umtCVCXaDQPcOrHX4PjzpAKfs7CSLrFYMYEmOPEzKWfEqL /wQEIt+vN3b3euiqOedD5qEEk6HrqdCdkyyPXoMPt5qOFd08s9lWIls= -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:46 2026 by rpki-client