This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dk8Ap7n64yuKuZrcjegee6DKRJc.roa File: dk8Ap7n64yuKuZrcjegee6DKRJc.roa (raw, json) Hash identifier: Ncf8fLKWHEoIINt9zRBpSPESJpqYPyjSYWSGx76uRZA= Subject key identifier: 76:4F:00:A7:B9:FA:E3:2B:8A:B9:9A:DC:8D:E8:1E:7B:A0:CA:44:97 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D48866838E2F182A68A69894F72F1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dk8Ap7n64yuKuZrcjegee6DKRJc.roa Signing time: Fri 02 Jan 2026 06:20:23 +0000 ROA not before: Fri 02 Jan 2026 06:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212057 IP address blocks: 2a10:ccc0:8860::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:48:86:68:38:e2:f1:82:a6:8a:69:89:4f:72:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=764f00a7b9fae32b8ab99adc8de81e7ba0ca4497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:21:cb:cc:f0:5d:17:0b:40:98:39:42:b8: 59:c9:a6:09:b2:d2:2a:9f:ce:37:31:e5:b9:ae:6d: f9:ef:1c:89:a2:5f:4e:da:a4:56:f8:78:d0:bd:8a: 5c:c4:65:d5:9a:bc:83:5a:66:ba:96:6d:a1:46:99: da:ab:ac:5b:7d:30:de:f3:e2:36:8a:d2:a3:25:75: f6:71:e7:b0:b4:3a:95:6a:20:3e:5e:49:8a:3f:56: a8:ac:28:39:e0:4f:02:c5:a3:68:e4:4d:52:89:a8: 07:d0:f8:a0:4a:69:53:da:d7:40:28:01:a8:99:93: 66:07:4a:a4:c8:da:75:97:fc:40:69:19:5c:b4:ee: df:3a:47:b4:bf:3e:7d:94:9a:38:21:90:1c:46:74: 27:b5:49:ee:81:9b:91:d6:ef:e1:69:75:77:b9:bc: b8:4d:df:eb:58:dd:a9:2d:62:b9:49:06:33:20:b4: 0c:5f:77:ca:42:a2:f2:e0:da:4d:e3:55:50:16:57: ec:dd:e8:1b:00:9d:44:1d:26:e7:51:40:c5:82:64: 6c:71:4b:53:27:66:63:a3:82:83:40:16:81:84:95: 78:d0:2d:89:21:1e:17:9e:9e:f4:18:d6:0f:1f:24: 1f:60:9b:e0:91:ca:8b:53:8c:bb:5b:33:8b:81:b5: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4F:00:A7:B9:FA:E3:2B:8A:B9:9A:DC:8D:E8:1E:7B:A0:CA:44:97 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dk8Ap7n64yuKuZrcjegee6DKRJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ccc0:8860::/44 Signature Algorithm: sha256WithRSAEncryption a1:06:54:cd:f3:2b:58:ad:32:d0:86:2e:aa:11:9e:83:a6:6a: 34:54:47:07:0c:60:b7:76:2f:58:7d:df:6b:74:1f:03:3f:2c: d1:3b:29:47:8f:c1:c9:f6:93:75:be:fd:d1:0a:97:0c:1d:7a: c6:62:d5:00:ac:ca:a5:8f:0c:4a:c9:03:24:6a:53:cf:06:3f: a2:17:74:23:5e:a5:99:a4:b5:62:ba:0f:1e:97:e1:88:f5:22: 30:bc:a9:2f:f9:d7:b7:d7:be:81:38:61:c5:53:f4:89:1a:8c: 13:c5:a4:b4:a1:95:ef:3f:74:77:7c:5c:f6:72:b8:ec:80:23: e2:24:8d:77:a7:f7:a7:50:2d:c2:f8:92:dd:17:8a:ea:ce:35: fe:88:8e:68:16:c9:15:06:76:e2:9e:63:6c:10:80:b7:01:68: 4d:55:f6:be:f1:14:e0:2f:75:a2:9f:44:9e:96:7d:99:c5:a6: 73:a5:0a:6c:5c:16:4b:11:f2:0f:c0:e5:ce:36:37:b5:85:8b: 96:87:03:f0:43:86:94:1e:37:7c:98:c7:6a:22:9c:af:84:bd: 09:4b:8c:69:c5:07:1e:84:56:38:3f:5e:00:b7:15:4f:fc:59: 60:d0:22:e5:c0:50:24:85:75:d1:fe:45:da:1b:37:43:bd:b8: ee:89:a2:5b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XUiGaDji8YKmimmJT3LxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjRmMDBhN2I5ZmFlMzJiOGFiOTlhZGM4ZGU4MWU3YmEwY2E0NDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHshy8zwXRcLQJg5QrhZyaYJstIq n843MeW5rm357xyJol9O2qRW+HjQvYpcxGXVmryDWma6lm2hRpnaq6xbfTDe8+I2 itKjJXX2ceewtDqVaiA+XkmKP1aorCg54E8CxaNo5E1SiagH0PigSmlT2tdAKAGo mZNmB0qkyNp1l/xAaRlctO7fOke0vz59lJo4IZAcRnQntUnugZuR1u/haXV3uby4 Td/rWN2pLWK5SQYzILQMX3fKQqLy4NpN41VQFlfs3egbAJ1EHSbnUUDFgmRscUtT J2Zjo4KDQBaBhJV40C2JIR4Xnp70GNYPHyQfYJvgkcqLU4y7WzOLgbVuvwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHZPAKe5+uMrirma3I3oHnugykSXMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZGs4QXA3bjY0eXVLdVpyY2plZ2VlNkRLUkpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMwIhg MA0GCSqGSIb3DQEBCwUAA4IBAQChBlTN8ytYrTLQhi6qEZ6Dpmo0VEcHDGC3di9Y fd9rdB8DPyzROylHj8HJ9pN1vv3RCpcMHXrGYtUArMqljwxKyQMkalPPBj+iF3Qj XqWZpLViug8el+GI9SIwvKkv+de3176BOGHFU/SJGowTxaS0oZXvP3R3fFz2crjs gCPiJI13p/enUC3C+JLdF4rqzjX+iI5oFskVBnbinmNsEIC3AWhNVfa+8RTgL3Wi n0Seln2ZxaZzpQpsXBZLEfIPwOXONje1hYuWhwPwQ4aUHjd8mMdqIpyvhL0JS4xp xQcehFY4P14AtxVP/Flg0CLlwFAkhXXR/kXaGzdDvbjuiaJb -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:10 2026 by rpki-client