This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/dxP5s46cfdGtCEKUTwZwMAVD5-o.roa File: dxP5s46cfdGtCEKUTwZwMAVD5-o.roa (raw, json) Hash identifier: bdBmbDABGKMk3f6j5ouSrfAperYeR4KSkhr2BdJOd/4= Subject key identifier: 77:13:F9:B3:8E:9C:7D:D1:AD:08:42:94:4F:06:70:30:05:43:E7:EA Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48 Certificate serial: 019B7DCA343B963428F0737B4BAD9DE997C0 Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/dxP5s46cfdGtCEKUTwZwMAVD5-o.roa Signing time: Fri 02 Jan 2026 08:19:22 +0000 ROA not before: Fri 02 Jan 2026 08:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57964 IP address blocks: 2001:67c:830::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:34:3b:96:34:28:f0:73:7b:4b:ad:9d:e9:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48 Validity Not Before: Jan 2 08:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7713f9b38e9c7dd1ad0842944f0670300543e7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:5e:68:a5:68:88:99:2c:52:bc:44:a3:36: b6:57:17:53:77:60:71:79:48:0b:cb:dc:f4:9c:fd: 1a:d7:bd:c8:27:72:4f:12:3e:08:55:e4:00:07:c4: 1d:33:71:5c:74:29:77:f2:83:b5:63:d7:ee:45:81: 98:57:ad:92:de:76:1d:1a:27:19:86:db:32:cd:60: 82:ad:5d:bc:e0:4e:a1:a9:f6:36:0d:d2:2e:80:ce: 9e:fb:77:72:17:8b:e5:c7:bf:c8:89:dd:72:00:45: bf:72:8e:f8:7b:ba:20:f2:e7:18:75:cd:82:8d:f3: 8a:06:8e:05:25:c7:07:0c:ad:cf:fd:38:95:55:26: c9:ce:61:53:c2:7a:9c:93:98:ad:96:47:8b:22:f6: d0:d2:f6:6c:38:13:31:f0:5f:fc:93:00:b8:6f:8a: 69:f4:6d:a8:c9:7d:d6:07:45:0e:c8:57:95:be:1b: 8f:28:79:62:df:e1:6e:ce:2f:9b:63:5d:aa:29:84: 76:5f:a8:0d:a2:bf:aa:8e:37:cb:3d:56:d0:43:39: e3:f1:eb:ce:2e:c3:53:3c:df:07:7d:a0:8e:18:65: a7:4a:85:85:e9:0a:43:c3:16:85:9a:73:a0:c7:ee: b5:b0:7d:a5:77:31:37:c4:4c:90:81:9d:9a:2a:93: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:13:F9:B3:8E:9C:7D:D1:AD:08:42:94:4F:06:70:30:05:43:E7:EA X509v3 Authority Key Identifier: keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/dxP5s46cfdGtCEKUTwZwMAVD5-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:830::/48 Signature Algorithm: sha256WithRSAEncryption 97:a8:42:91:67:b9:86:30:61:68:f6:d9:3b:33:0f:a1:fd:67: 46:d0:92:34:fb:96:32:f7:fc:63:be:3f:ac:62:5e:f6:2b:98: 49:5c:3f:61:07:98:f1:4d:ec:be:a2:20:74:9f:42:6a:ec:84: ff:59:3a:07:6b:08:7b:9e:29:e4:94:1a:39:db:93:b2:f5:bd: c4:51:a9:4d:ef:dd:be:c9:11:cb:82:ad:92:53:2d:3d:ca:fd: 79:23:3b:34:3d:e9:a0:68:8c:29:b8:80:3f:c8:4b:32:52:47: f7:a8:b5:ff:99:e9:fc:8c:2c:0d:c9:5e:a5:c4:51:bc:f8:f2: 7e:0b:9f:c1:a3:b8:95:e1:2e:fb:b2:86:55:41:a7:bb:4f:12: 0c:cd:7a:f8:81:82:6a:82:ee:22:17:44:d5:b0:c0:5a:4a:c1: 29:21:04:09:eb:5b:9b:90:c2:54:72:4a:ec:2e:86:18:b2:0e: 99:fc:20:d6:95:02:82:bb:64:bf:9a:12:28:5e:d4:14:99:4b: b7:91:df:16:e1:e2:12:48:86:5b:a2:45:8a:ea:98:01:c6:c4: 0a:02:85:c3:48:ad:ed:c4:2e:5b:41:ca:75:96:97:7c:4a:f4: 76:6f:2b:49:c6:2a:71:db:68:3b:23:c2:9a:b8:5c:23:70:b7: b8:d4:97:e4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yjQ7ljQo8HN7S62d6ZfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNWUzMzBjZmEyNmZkNDRkNDI5NGZjZGJkZGZiZDg5NTEw YzZhNDgwHhcNMjYwMTAyMDgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzEzZjliMzhlOWM3ZGQxYWQwODQyOTQ0ZjA2NzAzMDA1NDNlN2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquBeaKVoiJksUrxEoza2VxdTd2Bx eUgLy9z0nP0a173IJ3JPEj4IVeQAB8QdM3FcdCl38oO1Y9fuRYGYV62S3nYdGicZ htsyzWCCrV284E6hqfY2DdIugM6e+3dyF4vlx7/Iid1yAEW/co74e7og8ucYdc2C jfOKBo4FJccHDK3P/TiVVSbJzmFTwnqck5itlkeLIvbQ0vZsOBMx8F/8kwC4b4pp 9G2oyX3WB0UOyFeVvhuPKHli3+Fuzi+bY12qKYR2X6gNor+qjjfLPVbQQznj8evO LsNTPN8HfaCOGGWnSoWF6QpDwxaFmnOgx+61sH2ldzE3xEyQgZ2aKpNYkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHcT+bOOnH3RrQhClE8GcDAFQ+fqMB8GA1UdIwQY MBaAFGxeMwz6Jv1E1ClPzb3fvYlRDGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84ZWFiY2QtZTZlOS00ZjQzLWJhNmMt ZGEyMzEyYjY1YTUwLzEvZHhQNXM0NmNmZEd0Q0VLVVR3WndNQVZENS1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84ZWFiY2QtZTZlOS00ZjQzLWJhNmMtZGEyMzEyYjY1YTUw LzEvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAgw MA0GCSqGSIb3DQEBCwUAA4IBAQCXqEKRZ7mGMGFo9tk7Mw+h/WdG0JI0+5Yy9/xj vj+sYl72K5hJXD9hB5jxTey+oiB0n0Jq7IT/WToHawh7ninklBo525Oy9b3EUalN 792+yRHLgq2SUy09yv15Izs0PemgaIwpuIA/yEsyUkf3qLX/men8jCwNyV6lxFG8 +PJ+C5/Bo7iV4S77soZVQae7TxIMzXr4gYJqgu4iF0TVsMBaSsEpIQQJ61ubkMJU ckrsLoYYsg6Z/CDWlQKCu2S/mhIoXtQUmUu3kd8W4eISSIZbokWK6pgBxsQKAoXD SK3txC5bQcp1lpd8SvR2bytJxipx22g7I8KauFwjcLe41Jfk -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:38 2026 by rpki-client