This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DD3HfFrw4SdVtZIcq7NkW1EiydA.roa File: DD3HfFrw4SdVtZIcq7NkW1EiydA.roa (raw, json) Hash identifier: L7hepvt0H/xatCP0cHNRdQtp98awl+Zmxg65vKGagxI= Subject key identifier: 0C:3D:C7:7C:5A:F0:E1:27:55:B5:92:1C:AB:B3:64:5B:51:22:C9:D0 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D1DB470C6E03D897485617A0F45F9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DD3HfFrw4SdVtZIcq7NkW1EiydA.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209552 IP address blocks: 2a06:de01:c0::/44 maxlen: 48 2a06:de01:c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1d:b4:70:c6:e0:3d:89:74:85:61:7a:0f:45:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c3dc77c5af0e12755b5921cabb3645b5122c9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:7e:69:ce:9b:f7:01:78:d3:c9:1a:d9:75: 70:83:ad:b7:b1:df:b1:71:e7:12:22:c4:dc:d0:36: 91:ce:41:4a:3a:39:18:d5:67:a3:fd:80:49:45:3c: 92:0c:49:28:0a:e9:39:c3:90:f7:c0:b5:1e:47:8f: d2:41:fd:d7:01:84:69:82:38:f1:2c:39:50:d4:67: 60:c6:cb:03:59:43:f2:4f:c5:0f:49:63:25:20:9a: b5:a8:74:33:17:c1:99:c2:79:b6:20:ea:b3:52:65: 77:ac:b4:30:5a:2f:32:0c:74:14:d1:65:4e:a0:d5: 59:1f:e7:38:8a:4d:49:c3:91:3b:c3:58:d5:3b:43: ff:b7:9b:eb:ae:b9:23:6a:7f:68:dc:c5:15:08:38: 23:23:15:ab:37:6e:60:08:e9:8f:3f:75:e2:3c:21: b1:35:76:22:eb:71:a9:11:f9:33:c5:ab:03:b3:83: 12:d3:6a:ce:b9:bf:14:88:66:48:31:cc:1a:e1:e2: 42:13:47:95:bb:37:3e:7c:ad:ff:6d:c1:70:6a:e0: f6:37:46:c3:28:71:1c:d6:a5:ab:fe:ae:25:51:39: 43:f4:c0:d2:0d:b5:7b:ba:9f:21:91:07:a6:11:ac: 5d:77:96:d9:c0:bf:f3:75:ec:22:3c:dd:8d:2f:01: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3D:C7:7C:5A:F0:E1:27:55:B5:92:1C:AB:B3:64:5B:51:22:C9:D0 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DD3HfFrw4SdVtZIcq7NkW1EiydA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de01:c0::/44 Signature Algorithm: sha256WithRSAEncryption 19:81:70:0c:9f:4f:81:77:69:16:05:a2:cc:db:e6:76:59:e9: a1:7f:7b:e3:05:44:85:01:7a:38:bb:74:f4:95:b7:f5:04:0c: a6:9d:43:31:ec:22:74:b3:1b:59:51:cb:95:15:62:78:4e:b8: 90:0b:69:a9:73:38:3d:f0:8b:e4:6e:8d:04:ca:63:19:dd:2d: b4:3c:26:43:a7:36:94:c3:88:6f:99:69:13:ff:c6:1a:64:85: 1b:62:eb:20:93:37:c8:db:89:de:81:90:f0:26:13:09:20:ef: 35:8c:cb:f3:9b:bd:6e:d4:a6:ca:da:4b:9b:67:50:14:5f:05: e9:b9:4f:03:3f:a4:4f:30:44:79:b1:53:8a:ad:cc:e8:d3:56: 00:82:b0:78:bb:90:1f:d4:5e:3f:f9:b4:09:bd:5a:3b:01:19: 1b:f2:b7:c3:0d:82:b2:11:19:f3:b6:e3:cb:29:0a:01:6c:38: 87:f7:b5:29:ef:ae:5f:d9:e1:e6:3e:5c:b6:71:d8:4b:32:2e: 5e:7d:d9:b4:48:b5:50:dc:27:30:0f:17:7c:d3:e0:0b:3e:ae: 21:5d:ca:f5:d1:eb:63:d3:8f:b2:fc:bd:aa:44:75:fe:29:f2: 68:1d:92:16:8e:9b:d3:46:41:7e:b2:02:56:e7:ea:ec:e0:e0: 0f:8a:70:a8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XR20cMbgPYl0hWF6D0X5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzNkYzc3YzVhZjBlMTI3NTViNTkyMWNhYmIzNjQ1YjUxMjJjOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw9+ac6b9wF408ka2XVwg623sd+x cecSIsTc0DaRzkFKOjkY1Wej/YBJRTySDEkoCuk5w5D3wLUeR4/SQf3XAYRpgjjx LDlQ1GdgxssDWUPyT8UPSWMlIJq1qHQzF8GZwnm2IOqzUmV3rLQwWi8yDHQU0WVO oNVZH+c4ik1Jw5E7w1jVO0P/t5vrrrkjan9o3MUVCDgjIxWrN25gCOmPP3XiPCGx NXYi63GpEfkzxasDs4MS02rOub8UiGZIMcwa4eJCE0eVuzc+fK3/bcFwauD2N0bD KHEc1qWr/q4lUTlD9MDSDbV7up8hkQemEaxdd5bZwL/zdewiPN2NLwGPawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAw9x3xa8OEnVbWSHKuzZFtRIsnQMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvREQzSGZGcnc0U2RWdFpJY3E3TmtXMUVpeWRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeAQDA MA0GCSqGSIb3DQEBCwUAA4IBAQAZgXAMn0+Bd2kWBaLM2+Z2Wemhf3vjBUSFAXo4 u3T0lbf1BAymnUMx7CJ0sxtZUcuVFWJ4TriQC2mpczg98Ivkbo0EymMZ3S20PCZD pzaUw4hvmWkT/8YaZIUbYusgkzfI24negZDwJhMJIO81jMvzm71u1KbK2kubZ1AU XwXpuU8DP6RPMER5sVOKrczo01YAgrB4u5Af1F4/+bQJvVo7ARkb8rfDDYKyERnz tuPLKQoBbDiH97Up765f2eHmPly2cdhLMi5efdm0SLVQ3CcwDxd80+ALPq4hXcr1 0etj04+y/L2qRHX+KfJoHZIWjpvTRkF+sgJW5+rs4OAPinCo -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:10 2026 by rpki-client