This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/DPFop1VRWflc2dwO-UaKsnysNA0.roa File: DPFop1VRWflc2dwO-UaKsnysNA0.roa (raw, json) Hash identifier: TxO2MJ8nHORjvCPU/MK/XDRpBmX4mMRcY4M/4fMMMyw= Subject key identifier: 0C:F1:68:A7:55:51:59:F9:5C:D9:DC:0E:F9:46:8A:B2:7C:AC:34:0D Certificate issuer: /CN=52ee489f36de04219cd2192e04a7bdb13914648f Certificate serial: 019B7D5AAD994A6979E272774C3032B6D11F Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/DPFop1VRWflc2dwO-UaKsnysNA0.roa Signing time: Fri 02 Jan 2026 06:17:33 +0000 ROA not before: Fri 02 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61074 IP address blocks: 45.135.144.0/22 maxlen: 24 2a0e:8bc0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ad:99:4a:69:79:e2:72:77:4c:30:32:b6:d1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f Validity Not Before: Jan 2 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cf168a7555159f95cd9dc0ef9468ab27cac340d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:7e:0e:e2:45:5b:9e:d6:0a:6f:d1:9b:f1: 8f:40:8c:9a:99:50:29:e5:b9:5a:87:d6:7a:f9:37: b5:c7:28:6f:d6:f2:3b:64:60:f9:00:05:69:3c:47: ef:90:02:f4:a0:81:5f:ae:8f:c2:94:cb:4e:62:6d: 1a:0f:9d:52:39:bb:b3:c1:56:a0:d7:8d:98:5a:43: bc:ea:73:6b:7f:ec:82:74:ef:c0:40:0c:32:88:d4: 10:c6:2c:b6:35:92:1e:1f:76:3a:3d:6f:b6:f4:ef: bf:26:ac:0b:bc:42:5d:03:e0:c5:f3:ad:bb:10:51: 37:09:4f:31:5a:0c:41:21:53:4f:2d:38:b2:99:bf: 8c:48:9c:43:83:34:6b:f9:4d:d8:45:5f:7d:78:cc: b2:0f:10:a5:8c:2f:64:34:d7:2c:1e:9f:19:b9:38: 1d:9d:35:c4:10:bb:38:ca:91:8d:d0:a1:48:32:01: f3:1b:d6:15:27:73:cf:d8:01:ab:26:ce:af:9c:91: 9c:37:59:3e:bd:f2:3f:b0:ce:6b:fb:2f:fe:e4:46: fb:81:24:0e:35:9d:90:e8:6a:79:86:01:64:1b:d4: 6c:ca:82:dc:34:92:c5:8e:d8:71:a6:ab:e6:de:13: 92:63:1c:7d:90:fd:98:4a:eb:20:a6:cb:e3:29:b5: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F1:68:A7:55:51:59:F9:5C:D9:DC:0E:F9:46:8A:B2:7C:AC:34:0D X509v3 Authority Key Identifier: keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/DPFop1VRWflc2dwO-UaKsnysNA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.144.0/22 IPv6: 2a0e:8bc0::/29 Signature Algorithm: sha256WithRSAEncryption 7a:02:b3:a3:9d:01:2a:40:96:3f:12:a5:9a:22:96:b8:8e:d7: 4e:6c:e9:a3:78:a4:41:2f:90:f0:45:e0:68:bb:74:6c:17:a3: 7f:33:ff:5c:92:1a:bb:d7:58:28:be:3c:ac:6f:92:d4:bf:24: 8b:42:30:5e:43:ab:99:d8:6c:66:e3:7e:eb:37:b4:7e:a9:d4: 08:bb:cd:ea:76:68:c2:cd:ce:87:ec:76:df:6c:95:25:5c:4f: b8:3c:b5:d7:b9:87:23:dd:0a:54:ad:a0:fe:67:30:b4:1f:21: 0a:0e:a1:38:55:37:19:f3:d1:a1:1f:5d:75:47:62:53:0c:f7: ea:44:7e:44:52:6e:d5:98:0b:b3:68:a3:e5:af:4d:e5:55:b3: 68:ac:46:53:85:b8:fa:d4:a4:9f:e8:7b:bf:43:36:23:fe:ba: 76:96:47:ec:3a:1d:41:a4:a6:81:65:c1:dd:b8:d7:4e:a7:c2: f9:71:1b:a3:0f:f9:1b:61:da:7d:43:95:87:81:d8:d5:d3:bb: 49:05:54:4e:a5:fa:7b:0e:2c:58:2a:61:28:34:65:6e:a9:07: cc:de:17:50:0d:fa:2d:16:9d:e3:47:5b:a0:ab:ca:20:35:9c: ac:89:23:a2:ba:43:de:37:32:38:6c:39:d8:89:c3:5d:f9:94: 6e:2b:05:a9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9Wq2ZSml54nJ3TDAyttEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZWU0ODlmMzZkZTA0MjE5Y2QyMTkyZTA0YTdiZGIxMzkx NDY0OGYwHhcNMjYwMTAyMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2YxNjhhNzU1NTE1OWY5NWNkOWRjMGVmOTQ2OGFiMjdjYWMzNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0J+DuJFW57WCm/Rm/GPQIyamVAp 5blah9Z6+Te1xyhv1vI7ZGD5AAVpPEfvkAL0oIFfro/ClMtOYm0aD51SObuzwVag 142YWkO86nNrf+yCdO/AQAwyiNQQxiy2NZIeH3Y6PW+29O+/JqwLvEJdA+DF8627 EFE3CU8xWgxBIVNPLTiymb+MSJxDgzRr+U3YRV99eMyyDxCljC9kNNcsHp8ZuTgd nTXEELs4ypGN0KFIMgHzG9YVJ3PP2AGrJs6vnJGcN1k+vfI/sM5r+y/+5Eb7gSQO NZ2Q6Gp5hgFkG9RsyoLcNJLFjthxpqvm3hOSYxx9kP2YSusgpsvjKbUM4QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAzxaKdVUVn5XNncDvlGirJ8rDQNMB8GA1UdIwQY MBaAFFLuSJ823gQhnNIZLgSnvbE5FGSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXU1SW56YmVCQ0djMGhrdUJLZTlzVGtVWkk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iMDA0NWQtM2ZmNy00M2FiLWE2NGQt YzRjZjE2ZjIwODNmLzEvRFBGb3AxVlJXZmxjMmR3Ty1VYUtzbnlzTkEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9iMDA0NWQtM2ZmNy00M2FiLWE2NGQtYzRjZjE2ZjIwODNm LzEvVXU1SW56YmVCQ0djMGhrdUJLZTlzVGtVWkk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYeQMA0E AgACMAcDBQMqDovAMA0GCSqGSIb3DQEBCwUAA4IBAQB6ArOjnQEqQJY/EqWaIpa4 jtdObOmjeKRBL5DwReBou3RsF6N/M/9ckhq711govjysb5LUvySLQjBeQ6uZ2Gxm 437rN7R+qdQIu83qdmjCzc6H7HbfbJUlXE+4PLXXuYcj3QpUraD+ZzC0HyEKDqE4 VTcZ89GhH111R2JTDPfqRH5EUm7VmAuzaKPlr03lVbNorEZThbj61KSf6Hu/QzYj /rp2lkfsOh1BpKaBZcHduNdOp8L5cRujD/kbYdp9Q5WHgdjV07tJBVROpfp7DixY KmEoNGVuqQfM3hdQDfotFp3jR1ugq8ogNZysiSOiukPeNzI4bDnYicNd+ZRuKwWp -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:34 2026 by rpki-client