This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/dIxRZVoK391SO4N57N0kDl39xT8.roa File: dIxRZVoK391SO4N57N0kDl39xT8.roa (raw, json) Hash identifier: svamFcAbrklGijDHK+E9cDfDGI1J3qNLX+B2lQjxTj0= Subject key identifier: 74:8C:51:65:5A:0A:DF:DD:52:3B:83:79:EC:DD:24:0E:5D:FD:C5:3F Certificate issuer: /CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d Certificate serial: 019B797E198F0D0ED52CF953D5890E09F9AA Authority key identifier: D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/dIxRZVoK391SO4N57N0kDl39xT8.roa Signing time: Thu 01 Jan 2026 12:17:45 +0000 ROA not before: Thu 01 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203903 IP address blocks: 2001:67c:22dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:19:8f:0d:0e:d5:2c:f9:53:d5:89:0e:09:f9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d Validity Not Before: Jan 1 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=748c51655a0adfdd523b8379ecdd240e5dfdc53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1a:18:64:a1:d9:44:e4:ad:70:54:3b:df:06: d4:d4:f8:0e:e0:63:a3:61:e9:77:5b:06:f6:4a:94: 23:ce:31:52:f5:fa:f2:c6:df:29:27:83:45:f2:f4: ab:11:03:1f:d8:c3:b9:cc:17:1d:51:e9:19:4a:cb: 72:7e:16:a0:c2:58:c5:42:24:dd:b9:49:8d:6e:01: fd:58:f7:9f:0e:f4:a9:5b:92:39:92:84:cb:b8:fd: 9a:13:dc:93:c3:41:52:91:a9:5e:1e:f8:0f:27:e0: f4:b0:42:0d:27:29:f7:0a:80:f5:6c:c0:1f:fe:f3: d2:81:0e:39:ae:61:6d:7e:83:c3:a2:de:aa:18:72: ce:0f:a7:77:be:4d:cb:84:a0:53:1a:bd:6e:7c:d2: 1e:5c:84:69:fd:ec:24:df:b5:4e:e6:a3:ff:6b:50: 46:9b:2f:b7:82:9b:6d:f4:90:d6:29:87:0f:d1:79: 9b:0b:86:39:4f:d2:5c:f1:97:bb:d8:e7:ef:2e:1b: 94:cd:d5:4c:b0:95:29:08:fe:7f:a1:ba:7d:d8:d9: 34:94:fc:98:a8:c3:d3:ec:ae:4a:39:89:46:cb:2a: 37:7c:f7:43:38:4c:4b:b1:22:a5:35:5b:98:f3:70: 58:da:57:7f:94:fc:c7:79:e0:5b:7f:71:b2:ae:18: 30:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8C:51:65:5A:0A:DF:DD:52:3B:83:79:EC:DD:24:0E:5D:FD:C5:3F X509v3 Authority Key Identifier: keyid:D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/dIxRZVoK391SO4N57N0kDl39xT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:22dc::/48 Signature Algorithm: sha256WithRSAEncryption 26:7c:07:a1:51:f9:46:d2:f8:c0:ff:44:b3:ef:a8:47:13:a9: ad:7f:a7:d9:43:ec:7a:ee:09:c4:f0:e0:75:3f:c0:10:1e:45: d8:bd:4d:4a:90:c4:04:ab:91:b8:23:1d:b8:f6:87:22:8f:66: e5:35:5c:61:f4:6e:80:08:34:96:73:be:27:5f:98:0a:40:2f: c9:15:66:3f:91:dc:b4:c5:f3:38:88:94:0d:21:56:39:34:0f: b6:cb:cf:5e:13:c8:b6:d8:25:1c:6f:38:fe:c8:d9:66:f4:85: 10:fc:ae:06:19:db:9c:0b:87:8c:e8:da:35:ad:94:bf:e5:6a: 05:e7:c8:97:d2:48:47:33:e1:50:08:f4:bc:94:8c:d0:85:45: 30:4e:e9:a0:3f:81:fe:f4:70:76:87:be:9d:60:98:aa:3b:08: 9e:c9:38:a4:79:17:24:c9:7f:55:51:21:d2:58:01:11:6a:2b: 54:51:81:3a:f2:65:70:eb:4e:d5:75:33:c5:c1:8e:6f:25:9a: 68:b1:c9:b0:0f:b7:4a:1c:1e:98:09:c4:0d:81:f7:69:69:98: 76:de:f3:60:2d:4a:16:a5:f3:7b:10:ef:bc:d5:5b:06:50:cf: 02:ea:0e:8b:93:77:5f:5d:d9:3a:9f:34:dd:56:1d:f3:df:6c: 24:8a:01:42 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fhmPDQ7VLPlT1YkOCfmqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNWY2Y2Y3YTk4NThiMDI4NzFjMWM3ZjEzZDFiMzM4ODBl OThhMmQwHhcNMjYwMTAxMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDhjNTE2NTVhMGFkZmRkNTIzYjgzNzllY2RkMjQwZTVkZmRjNTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRoYZKHZROStcFQ73wbU1PgO4GOj Yel3Wwb2SpQjzjFS9fryxt8pJ4NF8vSrEQMf2MO5zBcdUekZSstyfhagwljFQiTd uUmNbgH9WPefDvSpW5I5koTLuP2aE9yTw0FSkaleHvgPJ+D0sEINJyn3CoD1bMAf /vPSgQ45rmFtfoPDot6qGHLOD6d3vk3LhKBTGr1ufNIeXIRp/ewk37VO5qP/a1BG my+3gptt9JDWKYcP0XmbC4Y5T9Jc8Ze72OfvLhuUzdVMsJUpCP5/obp92Nk0lPyY qMPT7K5KOYlGyyo3fPdDOExLsSKlNVuY83BY2ld/lPzHeeBbf3GyrhgwMwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHSMUWVaCt/dUjuDeezdJA5d/cU/MB8GA1UdIwQY MBaAFNBfbPephYsChxwcfxPRsziA6YotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zNjRjNzgtYTlmNS00ZTg1LWJkY2Yt MWNhNGNlMDI0Y2UwLzEvZEl4UlpWb0szOTFTTzRONTdOMGtEbDM5eFQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zNjRjNzgtYTlmNS00ZTg1LWJkY2YtMWNhNGNlMDI0Y2Uw LzEvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCLc MA0GCSqGSIb3DQEBCwUAA4IBAQAmfAehUflG0vjA/0Sz76hHE6mtf6fZQ+x67gnE 8OB1P8AQHkXYvU1KkMQEq5G4Ix249ocij2blNVxh9G6ACDSWc74nX5gKQC/JFWY/ kdy0xfM4iJQNIVY5NA+2y89eE8i22CUcbzj+yNlm9IUQ/K4GGducC4eM6No1rZS/ 5WoF58iX0khHM+FQCPS8lIzQhUUwTumgP4H+9HB2h76dYJiqOwieyTikeRckyX9V USHSWAERaitUUYE68mVw607VdTPFwY5vJZposcmwD7dKHB6YCcQNgfdpaZh23vNg LUoWpfN7EO+81VsGUM8C6g6Lk3dfXdk6nzTdVh3z32wkigFC -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:32 2026 by rpki-client